$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft File: CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft (raw, json) Hash identifier: Xo/WjCOZahpFmsqimQPKi/6RJYPad6p1t+8gnDqaRtI= Subject key identifier: BD:F4:8B:BD:E8:61:C4:0C:D4:8A:AF:86:87:86:BA:89:82:81:2F:47 Authority key identifier: CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F Certificate issuer: /CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F Certificate serial: 289E43BA3D12C4A2AD346EEF9D871641BFFB7C39 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft Manifest number: 01EB Signing time: Tue 03 Nov 2026 04:58:20 +0000 Manifest this update: Tue 03 Nov 2026 04:53:20 +0000 Manifest next update: Mon 09 Nov 2026 04:30:20 +0000 Files and hashes: 1: 3137302e302e31322e302f32322d3234203d3e20323633313537.roa (hash: f9SrUyZYA550SEyHV5RyaH3qPYLG41cfmER7A4eSG78=) 2: CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl (hash: ztODYO5UxsfEpz3QMgEaolkrmDSl3pubKb8BuRc3MGU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Nov 2026 04:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:9e:43:ba:3d:12:c4:a2:ad:34:6e:ef:9d:87:16:41:bf:fb:7c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F Validity Not Before: Nov 3 04:53:20 2026 GMT Not After : Nov 9 04:30:20 2026 GMT Subject: CN=BDF48BBDE861C40CD48AAF868786BA8982812F47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:98:d5:94:8a:1f:a6:cc:a3:b8:5e:58:dd:4a: d8:29:65:3e:32:b7:02:a5:36:88:b2:4a:ea:65:72: 57:13:9e:84:1f:de:77:d1:9f:cd:bd:6f:01:14:3f: 1f:5d:44:c9:da:56:30:e3:84:ea:c1:68:da:8c:49: 0e:ba:21:98:61:fe:9c:6d:62:3e:d6:b5:39:de:0e: 23:28:ae:33:64:c3:b2:9e:b4:f8:15:6f:b1:56:71: a7:e3:7a:8f:65:53:d7:06:20:89:4d:c4:9f:49:fb: 5e:39:5f:6e:c2:78:fe:d2:21:62:9d:e6:4a:80:50: fc:82:0d:6a:e9:6a:99:98:a1:5e:a2:4e:b6:8e:64: 17:45:2a:88:48:a1:bf:86:10:4d:45:ae:04:da:06: 4c:49:b3:2d:c3:9a:52:2b:ed:fa:af:04:bd:1b:c5: fd:9b:26:39:63:97:89:b0:72:96:75:09:60:50:fa: fc:92:b4:a6:b7:0b:52:7b:55:4d:ba:b9:a5:a5:2f: d5:02:e1:9b:40:48:59:d6:5b:ed:5f:62:da:59:3d: 29:33:93:69:8e:6d:3f:88:e8:6a:c3:35:2d:de:91: 76:6c:6d:58:0e:c3:17:44:26:88:88:44:22:80:4e: 39:42:55:4e:8d:e6:66:c8:f8:52:4c:83:66:4a:06: b8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F4:8B:BD:E8:61:C4:0C:D4:8A:AF:86:87:86:BA:89:82:81:2F:47 X509v3 Authority Key Identifier: keyid:CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:5c:c5:48:ca:bd:ef:97:d9:2b:3c:5d:f1:d9:a6:6e:b9:b0: c9:34:58:5a:02:94:67:b3:41:83:5b:f5:04:fb:1f:49:e6:e3: 3e:28:a8:66:1e:87:82:f9:10:50:e0:e2:3e:d5:98:85:bc:79: 82:ee:ec:3d:31:6c:fb:a9:85:fe:8e:8a:dd:45:53:dc:b3:ae: c9:e8:7d:c7:21:9e:62:fb:7c:0f:08:35:48:25:d1:e7:9d:fa: 1c:9d:0d:b7:10:7d:1d:3e:0e:1a:71:ae:0f:5c:d4:a8:a0:aa: d9:82:27:d2:8b:dc:58:a9:92:12:6d:2f:2d:b8:b3:2a:a5:78: 6d:8a:0a:b6:5b:5c:4b:7f:5c:2c:24:a6:88:77:06:85:18:04: df:c9:57:cd:0b:28:ec:2c:72:b3:8c:3c:b2:4b:97:9a:f4:20: e6:01:6a:a3:65:b5:fb:7d:56:43:80:47:91:49:af:c8:f4:2b: e9:28:d2:d7:90:a2:27:08:03:4d:6c:49:2c:8c:04:ca:a7:b0: f0:f7:84:5b:bf:af:c0:21:46:50:c7:ac:a7:8e:4a:93:85:50: d9:e9:89:13:7b:e7:5b:a9:41:66:a8:07:a8:fc:ae:50:a1:99: 2d:78:d0:d8:fa:ab:8b:19:9e:00:38:f0:d9:e4:a2:0d:a9:e7: 62:d8:d1:c4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKJ5Duj0SxKKtNG7vnYcWQb/7fDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NDFEQjczRDk5NUFFNTVDODA4QTBFNzdDQkZGODcz Q0NBRTQ0RjAeFw0yNjExMDMwNDUzMjBaFw0yNjExMDkwNDMwMjBaMDMxMTAvBgNV BAMTKEJERjQ4QkJERTg2MUM0MENENDhBQUY4Njg3ODZCQTg5ODI4MTJGNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mNWUih+mzKO4XljdStgpZT4y twKlNoiySuplclcTnoQf3nfRn829bwEUPx9dRMnaVjDjhOrBaNqMSQ66IZhh/pxt Yj7WtTneDiMorjNkw7KetPgVb7FWcafjeo9lU9cGIIlNxJ9J+145X27CeP7SIWKd 5kqAUPyCDWrpapmYoV6iTraOZBdFKohIob+GEE1FrgTaBkxJsy3DmlIr7fqvBL0b xf2bJjljl4mwcpZ1CWBQ+vyStKa3C1J7VU26uaWlL9UC4ZtASFnWW+1fYtpZPSkz k2mObT+I6GrDNS3ekXZsbVgOwxdEJoiIRCKATjlCVU6N5mbI+FJMg2ZKBrgrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUvfSLvehhxAzUiq+Gh4a6iYKBL0cwHwYDVR0j BBgwFoAUy1Qdtz2ZWuVcgIoOd8v/hzzK5E8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80M0IwQkI3NkQ4NURBMTY5MjUxNThENUU3NjE4MDkyOUJG REQwM0RDQjFCNDZBRkQzQjE1NjFFQjMxRDgyOTc2LzAvQ0I1NDFEQjczRDk5NUFF NTVDODA4QTBFNzdDQkZGODczQ0NBRTQ0Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjU0MURCNzNEOTk1QUU1NUM4 MDhBMEU3N0NCRkY4NzNDQ0FFNDRGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDNCMEJCNzZEODVEQTE2OTI1MTU4RDVFNzYxODA5MjlCRkREMDNEQ0Ix QjQ2QUZEM0IxNTYxRUIzMUQ4Mjk3Ni8wL0NCNTQxREI3M0Q5OTVBRTU1QzgwOEEw RTc3Q0JGRjg3M0NDQUU0NEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJXMVIyr3vl9krPF3x2aZuubDJ NFhaApRns0GDW/UE+x9J5uM+KKhmHoeC+RBQ4OI+1ZiFvHmC7uw9MWz7qYX+jord RVPcs67J6H3HIZ5i+3wPCDVIJdHnnfocnQ23EH0dPg4aca4PXNSooKrZgifSi9xY qZISbS8tuLMqpXhtigq2W1xLf1wsJKaIdwaFGATfyVfNCyjsLHKzjDyyS5ea9CDm AWqjZbX7fVZDgEeRSa/I9CvpKNLXkKInCANNbEksjATKp7Dw94Rbv6/AIUZQx6yn jkqThVDZ6YkTe+dbqUFmqAeo/K5QoZkteNDY+quLGZ4AOPDZ5KINqedi2NHE -----END CERTIFICATE-----Generated at Tue Nov 3 12:11:22 2026 by rpki-client