$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.mft File: CBB45D33487A8DB542673C021B1C2ACEBA2704C2.mft (raw, json) Hash identifier: hr/GrkhfMy9H/EZUMv7SoOqp5AuQVlCKzP/HRVJEuxQ= Subject key identifier: E5:B1:7C:EA:43:59:AE:02:DB:A3:CF:25:A0:CC:A8:CB:02:07:D5:7B Authority key identifier: CB:B4:5D:33:48:7A:8D:B5:42:67:3C:02:1B:1C:2A:CE:BA:27:04:C2 Certificate issuer: /CN=CBB45D33487A8DB542673C021B1C2ACEBA2704C2 Certificate serial: 381ED25CD51F4AA4BE1F7F7479EFFDD24CA25CE7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.mft Manifest number: CA Signing time: Wed 25 Mar 2026 17:07:34 +0000 Manifest this update: Wed 25 Mar 2026 17:02:34 +0000 Manifest next update: Mon 30 Mar 2026 20:05:34 +0000 Files and hashes: 1: CBB45D33487A8DB542673C021B1C2ACEBA2704C2.crl (hash: BGZ4+vjRlw7X1W86Hj431WAeTjiY0Q6pbbotWRJorQ8=) 2: 323830333a626139303a3a2f33322d3438203d3e20323732383834.roa (hash: PpTAnGJaKQKat/ImjZkznWcM0CraMRv9rIP+OlEbwz0=) 3: 3138312e3232342e39322e302f32332d3234203d3e20323732383834.roa (hash: PHGEFBNxQuVhYSW5k8NaZv1RBaI0fU/c5WfNHGGnnoE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.crl rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Mar 2026 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1e:d2:5c:d5:1f:4a:a4:be:1f:7f:74:79:ef:fd:d2:4c:a2:5c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB45D33487A8DB542673C021B1C2ACEBA2704C2 Validity Not Before: Mar 25 17:02:34 2026 GMT Not After : Mar 30 20:05:34 2026 GMT Subject: CN=E5B17CEA4359AE02DBA3CF25A0CCA8CB0207D57B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cd:c8:98:53:cf:37:8a:8f:6b:ca:3b:a8:5b: a7:05:ac:ef:4e:8d:17:cf:39:cf:bb:7f:55:17:93: e6:16:b0:31:7c:53:ed:94:f7:e5:11:9a:43:da:e1: 24:7e:7f:51:cd:37:59:4d:03:e8:ff:dd:df:31:7a: 4e:ed:4c:75:5b:a4:78:77:07:12:6b:7e:0b:c6:ab: b2:24:86:a5:70:e4:84:c6:0b:bd:65:a6:0f:db:d5: 41:e8:83:5e:ad:fb:34:44:bd:88:a9:4d:31:2e:b3: f8:ea:4a:fb:e7:2b:da:07:47:01:cd:de:bd:2a:08: 09:45:0a:35:f1:1e:c1:d6:7f:d1:f2:73:ab:d9:25: e6:46:93:5c:9b:c9:55:28:01:04:57:fe:9c:f9:2d: c1:fd:45:0b:42:88:34:b9:64:dd:04:aa:1b:90:bb: ca:f4:57:5d:a2:bd:3b:f0:44:09:2d:92:7a:4d:75: 19:0f:84:b3:1d:81:4f:9c:38:a5:ec:0f:49:24:70: ff:fc:eb:b9:7b:f6:6e:a7:f5:8d:73:01:e5:32:66: 14:df:63:91:e6:85:bd:a4:86:8f:5a:62:d9:b8:a4: 64:20:3a:46:f2:f5:25:55:98:45:d9:0f:5d:ad:10: 2b:81:6c:87:36:23:9a:f7:a7:b4:c6:1f:d5:b3:d1: df:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B1:7C:EA:43:59:AE:02:DB:A3:CF:25:A0:CC:A8:CB:02:07:D5:7B X509v3 Authority Key Identifier: keyid:CB:B4:5D:33:48:7A:8D:B5:42:67:3C:02:1B:1C:2A:CE:BA:27:04:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:0c:75:1b:21:76:cd:88:12:65:81:0a:03:5b:a5:04:ac:1e: 78:04:dc:0f:76:c0:e0:80:a4:5b:15:90:a5:d8:3d:dc:1e:f5: 2d:6e:6c:39:b7:58:fa:38:97:67:31:80:60:06:0e:6b:bd:bb: 29:96:ec:87:40:2a:d7:31:90:b4:8b:f0:52:64:e1:22:3e:84: c9:11:f0:e3:a0:a8:8d:fd:3b:c5:09:37:97:90:7e:f5:9e:51: 9d:f9:3a:d0:17:a1:49:55:d5:3c:94:47:51:f3:29:04:23:c0: c1:21:0b:54:2e:4f:59:79:9e:63:3e:b9:8b:95:4e:be:c5:07: 26:8c:d0:48:68:e7:9d:00:85:f2:b3:10:49:df:c2:0c:49:86: 29:76:f0:1c:95:8f:8e:88:d5:5d:00:b6:2a:df:f9:8f:3e:b4: c3:a1:87:ba:e4:fb:c3:4d:42:e1:12:f9:ab:c0:bc:a3:07:bb: 38:4f:ae:07:e2:17:19:6c:85:a9:2c:42:33:30:71:2e:62:30: 87:4d:2c:63:7c:a6:0b:26:a0:89:03:87:1b:62:d5:b3:b7:31: 4c:bd:00:0c:75:bb:00:4e:4e:db:46:ad:22:60:f1:51:50:1c: ed:dc:51:bb:c6:37:c2:0d:46:b0:a4:5a:70:da:78:0c:bc:14: a5:02:d2:f4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOB7SXNUfSqS+H390ee/90kyiXOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCNDVEMzM0ODdBOERCNTQyNjczQzAyMUIxQzJBQ0VC QTI3MDRDMjAeFw0yNjAzMjUxNzAyMzRaFw0yNjAzMzAyMDA1MzRaMDMxMTAvBgNV BAMTKEU1QjE3Q0VBNDM1OUFFMDJEQkEzQ0YyNUEwQ0NBOENCMDIwN0Q1N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUzciYU883io9ryjuoW6cFrO9O jRfPOc+7f1UXk+YWsDF8U+2U9+URmkPa4SR+f1HNN1lNA+j/3d8xek7tTHVbpHh3 BxJrfgvGq7IkhqVw5ITGC71lpg/b1UHog16t+zREvYipTTEus/jqSvvnK9oHRwHN 3r0qCAlFCjXxHsHWf9Hyc6vZJeZGk1ybyVUoAQRX/pz5LcH9RQtCiDS5ZN0EqhuQ u8r0V12ivTvwRAktknpNdRkPhLMdgU+cOKXsD0kkcP/867l79m6n9Y1zAeUyZhTf Y5Hmhb2kho9aYtm4pGQgOkby9SVVmEXZD12tECuBbIc2I5r3p7TGH9Wz0d9pAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU5bF86kNZrgLbo88loMyoywIH1XswHwYDVR0j BBgwFoAUy7RdM0h6jbVCZzwCGxwqzronBMIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85QkY4OTkyNzgwRDc3RjA2QzQwQUI2ODQ3QjM2RkY3QTdD QzE2NEY3RTQ2MzhBNjc0ODhGQUEzNDAzMEJFRjJBLzAvQ0JCNDVEMzM0ODdBOERC NTQyNjczQzAyMUIxQzJBQ0VCQTI3MDRDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkI0NUQzMzQ4N0E4REI1NDI2 NzNDMDIxQjFDMkFDRUJBMjcwNEMyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOUJGODk5Mjc4MEQ3N0YwNkM0MEFCNjg0N0IzNkZGN0E3Q0MxNjRGN0U0 NjM4QTY3NDg4RkFBMzQwMzBCRUYyQS8wL0NCQjQ1RDMzNDg3QThEQjU0MjY3M0Mw MjFCMUMyQUNFQkEyNzA0QzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwDHUbIXbNiBJlgQoDW6UErB54 BNwPdsDggKRbFZCl2D3cHvUtbmw5t1j6OJdnMYBgBg5rvbspluyHQCrXMZC0i/BS ZOEiPoTJEfDjoKiN/TvFCTeXkH71nlGd+TrQF6FJVdU8lEdR8ykEI8DBIQtULk9Z eZ5jPrmLlU6+xQcmjNBIaOedAIXysxBJ38IMSYYpdvAclY+OiNVdALYq3/mPPrTD oYe65PvDTULhEvmrwLyjB7s4T64H4hcZbIWpLEIzMHEuYjCHTSxjfKYLJqCJA4cb YtWztzFMvQAMdbsATk7bRq0iYPFRUBzt3FG7xjfCDUawpFpw2ngMvBSlAtL0 -----END CERTIFICATE-----Generated at Thu Mar 26 20:44:00 2026 by rpki-client