$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft File: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft (raw, json) Hash identifier: kmxX5AvAwQFukZiLVN9psCjQG6IQ75SMVLUCCoLgUFo= Subject key identifier: CD:6F:4D:2A:C8:67:48:5F:6A:7F:B8:42:EA:54:F8:E5:D0:B7:C0:DE Authority key identifier: CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB Certificate issuer: /CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB Certificate serial: 429166B8A7C0F4EC3FDE2A795E61F4A270815DF9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft Manifest number: 01BC Signing time: Wed 29 Jul 2026 10:10:12 +0000 Manifest this update: Wed 29 Jul 2026 10:05:12 +0000 Manifest next update: Tue 04 Aug 2026 07:28:12 +0000 Files and hashes: 1: 323830313a31313a383830303a3a2f34382d3438203d3e203134303830.roa (hash: CVHvV0zQdszIsq+sAy9n9bPkAjdiiM2y6gNsHge04cA=) 2: 323830313a31313a383830303a3a2f34382d3438203d3e203139343239.roa (hash: TZcaKNFut/dhLqBs3dmqk2hLPmqrOndrVgvyix/pd4s=) 3: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl (hash: okUwM9KaOwLaTZlEu4MW6VgamEkeHB1JiPeSIkzs6Hs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Aug 2026 21:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:91:66:b8:a7:c0:f4:ec:3f:de:2a:79:5e:61:f4:a2:70:81:5d:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB Validity Not Before: Jul 29 10:05:12 2026 GMT Not After : Aug 4 07:28:12 2026 GMT Subject: CN=CD6F4D2AC867485F6A7FB842EA54F8E5D0B7C0DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cb:b4:a4:df:f7:77:fc:d5:aa:2f:b4:e8:66: 26:0e:b8:7f:41:44:dc:17:ea:68:83:fe:8e:0a:75: 53:6b:19:09:e7:e7:81:d3:72:0d:de:19:7c:24:6c: 16:11:24:a7:a3:45:04:75:a9:24:60:d9:41:b1:f7: 64:fe:29:9c:7d:4b:cc:35:df:c5:44:32:7f:99:d5: 3d:b9:98:5b:d1:7f:33:d2:38:d6:4d:67:91:12:88: 43:0a:a2:d1:23:e0:2c:34:94:a7:32:3d:8c:06:a4: 92:de:fe:34:8c:ec:20:8e:c3:90:7f:57:dc:f9:cf: 5f:d2:e8:d6:16:2d:a3:3d:87:3e:19:29:07:05:19: 7a:6b:4d:cb:fe:f5:82:e5:6a:ea:0d:83:8c:05:77: c4:e4:e1:c7:f9:be:13:20:bc:d7:e7:97:4c:9f:33: 4a:6f:80:9a:09:50:e5:1e:be:e6:45:bd:56:2b:ea: 6f:06:9d:8e:3b:05:b9:40:fd:1a:2d:4c:2b:19:1c: 99:8d:1f:48:09:17:2a:fc:8f:9f:9a:58:ea:7d:52: 22:c5:12:34:31:0c:b4:6a:e9:04:cc:5e:e9:9f:0a: b1:c5:96:10:73:99:7f:41:50:f8:c4:a5:26:59:77: a2:9d:96:1c:b2:a3:1c:24:e9:72:91:61:46:bf:87: 2e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:6F:4D:2A:C8:67:48:5F:6A:7F:B8:42:EA:54:F8:E5:D0:B7:C0:DE X509v3 Authority Key Identifier: keyid:CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e0:e2:f1:a8:f7:84:79:89:96:ee:30:7f:8b:49:cc:81:ec: 01:3f:ea:24:fc:3f:e8:a2:6c:7b:b8:2c:87:fe:ee:e7:78:c6: 2c:51:e9:d3:6f:6f:4e:2e:1f:66:08:2f:14:38:34:b2:e5:49: 33:3e:eb:59:bd:eb:58:49:08:70:7d:05:04:98:09:51:c6:61: 41:9d:33:ce:89:e6:40:d4:dd:d4:2a:b4:3a:df:c5:e8:d2:b7: 45:27:6e:31:84:31:72:54:e1:ab:5f:6a:f3:d8:f2:03:36:55: 9b:fb:66:4e:3d:27:21:c0:77:6e:0c:b2:4a:7c:af:fb:c3:a1: 54:df:9a:96:f4:6a:e0:ef:d9:e7:7f:51:fb:bb:cc:46:f6:51: cb:97:24:8e:f4:38:cb:55:80:1c:11:cd:2e:18:24:42:63:e7: 3e:1e:28:f5:29:7d:16:a7:e1:9c:87:36:dd:c9:94:7a:71:1e: 8c:95:64:62:60:93:1a:18:78:18:70:7c:80:ec:0e:e9:8c:f1: 83:60:8f:af:e4:ad:53:9e:02:31:41:c6:74:ad:c7:cf:7f:62: d5:bd:1d:55:54:0b:e7:07:33:9e:9c:95:4d:40:9f:b4:5b:47: 55:8f:59:6d:9d:6b:8a:c1:ae:0c:3e:e3:79:5f:b8:41:4d:f8: 2d:a1:25:00 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQpFmuKfA9Ow/3ip5XmH0onCBXfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NjhGQzBFRkU5NUZFRjFENjM5NkJBMjUwMjM2N0I2 QjkzRTFFQjAeFw0yNjA3MjkxMDA1MTJaFw0yNjA4MDQwNzI4MTJaMDMxMTAvBgNV BAMTKENENkY0RDJBQzg2NzQ4NUY2QTdGQjg0MkVBNTRGOEU1RDBCN0MwREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGy7Sk3/d3/NWqL7ToZiYOuH9B RNwX6miD/o4KdVNrGQnn54HTcg3eGXwkbBYRJKejRQR1qSRg2UGx92T+KZx9S8w1 38VEMn+Z1T25mFvRfzPSONZNZ5ESiEMKotEj4Cw0lKcyPYwGpJLe/jSM7CCOw5B/ V9z5z1/S6NYWLaM9hz4ZKQcFGXprTcv+9YLlauoNg4wFd8Tk4cf5vhMgvNfnl0yf M0pvgJoJUOUevuZFvVYr6m8GnY47BblA/RotTCsZHJmNH0gJFyr8j5+aWOp9UiLF EjQxDLRq6QTMXumfCrHFlhBzmX9BUPjEpSZZd6Kdlhyyoxwk6XKRYUa/hy4RAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUzW9NKshnSF9qf7hC6lT45dC3wN4wHwYDVR0j BBgwFoAUy1aPwO/pX+8dY5a6JQI2e2uT4eswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMzQ4OEFFMTU2OEY0MDNDMTc2MjQ5NzI4MDI0OEVCOEE2 ODU5NkM5M0E5NkU3N0E0QzcwNTNFNEY3QUMyREIzLzAvQ0I1NjhGQzBFRkU5NUZF RjFENjM5NkJBMjUwMjM2N0I2QjkzRTFFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjU2OEZDMEVGRTk1RkVGMUQ2 Mzk2QkEyNTAyMzY3QjZCOTNFMUVCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDM0ODhBRTE1NjhGNDAzQzE3NjI0OTcyODAyNDhFQjhBNjg1OTZDOTNB OTZFNzdBNEM3MDUzRTRGN0FDMkRCMy8wL0NCNTY4RkMwRUZFOTVGRUYxRDYzOTZC QTI1MDIzNjdCNkI5M0UxRUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAi4OLxqPeEeYmW7jB/i0nMgewB P+ok/D/oomx7uCyH/u7neMYsUenTb29OLh9mCC8UODSy5UkzPutZvetYSQhwfQUE mAlRxmFBnTPOieZA1N3UKrQ638Xo0rdFJ24xhDFyVOGrX2rz2PIDNlWb+2ZOPSch wHduDLJKfK/7w6FU35qW9Grg79nnf1H7u8xG9lHLlySO9DjLVYAcEc0uGCRCY+c+ Hij1KX0Wp+GchzbdyZR6cR6MlWRiYJMaGHgYcHyA7A7pjPGDYI+v5K1TngIxQcZ0 rcfPf2LVvR1VVAvnBzOenJVNQJ+0W0dVj1ltnWuKwa4MPuN5X7hBTfgtoSUA -----END CERTIFICATE-----Generated at Wed Jul 29 12:52:57 2026 by rpki-client