
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft
File: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft (raw, json)
Hash identifier: AGzrSjpatJyZSwen5/ZQmHiJ7AveX/1aKecKT1GFfi8=
Subject key identifier: 4D:92:7A:2C:3A:98:B1:C0:C4:AF:AA:6B:55:E4:1C:08:92:53:4D:9C
Authority key identifier: CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB
Certificate issuer: /CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB
Certificate serial: 5EFA4B6D9AB8DF31853915FA9F96C1250C550EA2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft
Manifest number: 01D1
Signing time: Wed 16 Sep 2026 16:35:37 +0000
Manifest this update: Wed 16 Sep 2026 16:30:37 +0000
Manifest next update: Tue 22 Sep 2026 12:10:37 +0000
Files and hashes: 1: 323830313a31313a383830303a3a2f34382d3438203d3e203139343239.roa (hash: TZcaKNFut/dhLqBs3dmqk2hLPmqrOndrVgvyix/pd4s=)
2: 323830313a31313a383830303a3a2f34382d3438203d3e203134303830.roa (hash: CVHvV0zQdszIsq+sAy9n9bPkAjdiiM2y6gNsHge04cA=)
3: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl (hash: OqBaij066nTSnMnB13UD37kqoYEnKg1L6LqfxLH2SRQ=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl
rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 22 Sep 2026 04:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:fa:4b:6d:9a:b8:df:31:85:39:15:fa:9f:96:c1:25:0c:55:0e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB
Validity
Not Before: Sep 16 16:30:37 2026 GMT
Not After : Sep 22 12:10:37 2026 GMT
Subject: CN=4D927A2C3A98B1C0C4AFAA6B55E41C0892534D9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:65:58:e8:83:10:78:c0:5d:33:d2:c3:82:92:
de:04:6e:c9:62:c1:8c:a3:06:44:ff:f5:e8:59:5b:
00:ca:01:f3:53:a3:be:d4:ff:a4:53:8d:a1:19:0a:
d7:9c:6e:dd:9a:d0:b1:84:73:23:ed:61:92:ac:35:
32:85:db:43:b8:85:ff:fc:1f:65:e0:97:fa:dc:d5:
cd:5a:91:9c:b8:79:13:fd:d9:80:49:ee:7b:69:ee:
4a:f5:f3:0a:91:bb:09:27:38:3b:37:5c:0c:b7:2a:
23:27:41:f4:56:d3:98:c9:5e:e9:bb:d7:bb:a6:59:
22:75:0c:81:32:d6:72:f7:94:3b:70:74:d0:eb:b5:
6e:c1:51:86:30:a5:22:35:91:b0:03:0c:22:1b:3b:
09:c4:9f:7a:f1:bc:d4:53:dc:02:66:69:74:57:a6:
6d:79:62:bb:3a:81:38:a5:f1:1a:73:61:1f:30:e9:
61:ca:c4:14:eb:c7:1c:26:50:ee:67:a1:43:a2:0a:
ec:45:a1:8c:a8:58:6b:48:ec:3c:7c:73:12:4e:3c:
1a:a5:d4:53:2b:d0:8e:40:7b:9c:40:d4:0b:28:b8:
f6:19:40:a0:33:45:cd:16:76:e9:5f:34:9d:4c:5c:
cf:d5:0e:9d:1a:40:88:9d:5c:ed:97:7d:7b:a5:f5:
ee:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:92:7A:2C:3A:98:B1:C0:C4:AF:AA:6B:55:E4:1C:08:92:53:4D:9C
X509v3 Authority Key Identifier:
keyid:CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9e:8c:e8:97:76:38:62:24:4a:30:41:64:cb:79:41:71:95:
a8:13:6c:7a:e3:50:71:7d:b7:21:82:6c:ac:08:71:19:9e:29:
6c:79:2f:a0:74:5a:62:17:9e:3c:b0:89:f3:c8:4b:f8:dd:fa:
e3:3f:77:3a:cc:a9:de:4e:29:5c:55:49:f2:54:53:cd:14:87:
75:64:52:c7:97:05:78:2f:f7:52:28:34:69:34:8c:8f:24:28:
38:7c:92:5e:d6:a9:dd:0c:09:44:63:e3:04:39:79:26:e7:3a:
5d:95:ea:94:09:ac:23:0d:51:ac:19:9d:38:07:c3:66:de:01:
24:4c:9f:ce:62:34:02:09:89:21:00:e9:95:15:32:67:e2:e9:
79:a7:14:8c:2e:75:16:f9:a4:01:7b:27:c4:1e:42:9b:0e:1e:
b4:34:40:4e:b0:08:df:75:29:95:14:fb:db:1e:e9:3f:91:65:
8b:8b:ba:59:44:a4:e0:a5:98:3f:10:a1:ff:a9:2c:4d:57:dc:
d4:af:d8:91:18:f1:ce:5d:7f:9b:9b:c0:92:7f:71:ab:f8:fa:
aa:26:15:eb:9e:78:17:4e:8d:5e:0f:be:07:3b:f9:df:da:b0:
04:ef:d2:32:c5:64:65:8a:77:86:08:f2:d7:50:cd:41:6d:7f:
ef:a4:a2:9b
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUXvpLbZq43zGFORX6n5bBJQxVDqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I1NjhGQzBFRkU5NUZFRjFENjM5NkJBMjUwMjM2N0I2
QjkzRTFFQjAeFw0yNjA5MTYxNjMwMzdaFw0yNjA5MjIxMjEwMzdaMDMxMTAvBgNV
BAMTKDREOTI3QTJDM0E5OEIxQzBDNEFGQUE2QjU1RTQxQzA4OTI1MzREOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0ZVjogxB4wF0z0sOCkt4Ebsli
wYyjBkT/9ehZWwDKAfNTo77U/6RTjaEZCtecbt2a0LGEcyPtYZKsNTKF20O4hf/8
H2Xgl/rc1c1akZy4eRP92YBJ7ntp7kr18wqRuwknODs3XAy3KiMnQfRW05jJXum7
17umWSJ1DIEy1nL3lDtwdNDrtW7BUYYwpSI1kbADDCIbOwnEn3rxvNRT3AJmaXRX
pm15Yrs6gTil8RpzYR8w6WHKxBTrxxwmUO5noUOiCuxFoYyoWGtI7Dx8cxJOPBql
1FMr0I5Ae5xA1AsouPYZQKAzRc0WdulfNJ1MXM/VDp0aQIidXO2XfXul9e6DAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUTZJ6LDqYscDEr6prVeQcCJJTTZwwHwYDVR0j
BBgwFoAUy1aPwO/pX+8dY5a6JQI2e2uT4eswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMzQ4OEFFMTU2OEY0MDNDMTc2MjQ5NzI4MDI0OEVCOEE2
ODU5NkM5M0E5NkU3N0E0QzcwNTNFNEY3QUMyREIzLzAvQ0I1NjhGQzBFRkU5NUZF
RjFENjM5NkJBMjUwMjM2N0I2QjkzRTFFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjU2OEZDMEVGRTk1RkVGMUQ2
Mzk2QkEyNTAyMzY3QjZCOTNFMUVCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDM0ODhBRTE1NjhGNDAzQzE3NjI0OTcyODAyNDhFQjhBNjg1OTZDOTNB
OTZFNzdBNEM3MDUzRTRGN0FDMkRCMy8wL0NCNTY4RkMwRUZFOTVGRUYxRDYzOTZC
QTI1MDIzNjdCNkI5M0UxRUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgnozol3Y4YiRKMEFky3lBcZWo
E2x641BxfbchgmysCHEZnilseS+gdFpiF548sInzyEv43frjP3c6zKneTilcVUny
VFPNFId1ZFLHlwV4L/dSKDRpNIyPJCg4fJJe1qndDAlEY+MEOXkm5zpdleqUCawj
DVGsGZ04B8Nm3gEkTJ/OYjQCCYkhAOmVFTJn4ul5pxSMLnUW+aQBeyfEHkKbDh60
NEBOsAjfdSmVFPvbHuk/kWWLi7pZRKTgpZg/EKH/qSxNV9zUr9iRGPHOXX+bm8CS
f3Gr+PqqJhXrnngXTo1eD74HO/nf2rAE79IyxWRlineGCPLXUM1BbX/vpKKb
-----END CERTIFICATE-----
Generated at Fri Sep 18 14:13:22 2026 by rpki-client