
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft
File: CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft (raw, json)
Hash identifier: gB3PLn6BgFVmi4B7JBFiEXeu5+2kFMFDefwNIUeqj0E=
Subject key identifier: 2B:6B:F2:64:F9:80:FA:1C:56:DF:75:12:DF:F0:8F:98:CC:B4:44:70
Authority key identifier: CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F
Certificate issuer: /CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F
Certificate serial: 2CB0E70961BA1A442385C89BB872AB2AAE5EBF6C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft
Manifest number: 01E8
Signing time: Mon 26 Oct 2026 03:56:33 +0000
Manifest this update: Mon 26 Oct 2026 03:51:33 +0000
Manifest next update: Sun 01 Nov 2026 01:27:33 +0000
Files and hashes: 1: CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl (hash: s0uU9l5zvDvNxSfT/E69xJsdiHLXdUdKC1HdyqPban0=)
2: 3137302e302e31322e302f32322d3234203d3e20323633313537.roa (hash: f9SrUyZYA550SEyHV5RyaH3qPYLG41cfmER7A4eSG78=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl
rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 20:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:b0:e7:09:61:ba:1a:44:23:85:c8:9b:b8:72:ab:2a:ae:5e:bf:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F
Validity
Not Before: Oct 26 03:51:33 2026 GMT
Not After : Nov 1 01:27:33 2026 GMT
Subject: CN=2B6BF264F980FA1C56DF7512DFF08F98CCB44470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:cc:f9:9b:20:eb:bc:b3:12:95:6f:5d:9f:
c7:df:5f:9c:5f:51:e5:26:5c:e8:07:5e:d8:98:b4:
b6:2d:5f:74:09:ff:5f:3f:38:be:cb:77:6d:7e:d2:
9b:e4:02:ab:80:40:4f:91:d8:5b:f1:39:d9:96:8e:
fd:a6:0f:0d:45:b6:8a:b9:6d:f5:80:62:45:bb:33:
82:ad:8e:09:d7:0a:6f:bf:f0:92:75:d5:13:d2:4f:
b6:b4:e5:f1:53:e6:5e:e2:90:b5:ff:91:83:ca:c1:
5d:0d:9c:33:03:8a:66:17:9a:cc:0f:27:5f:97:82:
f0:9e:46:2b:33:87:46:a7:75:a0:f3:2f:6c:a9:ab:
4c:f0:9e:29:1d:28:b2:89:64:91:cf:82:e6:9e:db:
19:d1:f4:02:83:c7:a8:1a:02:78:36:65:d7:c1:5b:
fd:3d:69:5c:b3:66:00:1d:05:6e:87:12:9c:ce:d8:
3e:98:66:ca:d9:32:6c:78:2f:ed:00:be:9b:34:60:
f6:e5:31:54:67:56:b8:d2:56:f3:db:57:a0:50:59:
60:8a:cb:81:3a:64:87:81:df:a3:01:0e:ed:60:03:
ec:37:d4:cb:a7:84:91:48:f0:3b:5b:d3:12:79:14:
21:ef:cb:e6:10:35:06:7e:df:d0:5d:9b:bd:a6:b9:
12:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6B:F2:64:F9:80:FA:1C:56:DF:75:12:DF:F0:8F:98:CC:B4:44:70
X509v3 Authority Key Identifier:
keyid:CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9c:48:6c:f1:69:0a:d0:8a:5c:38:4c:5a:35:b5:91:94:82:
b8:62:b2:80:de:c7:f3:b6:4e:07:07:44:8d:d9:df:cc:89:31:
15:3d:93:26:dc:4d:19:2c:78:9f:9e:25:6f:7e:f5:47:ca:2b:
a8:17:b8:ac:57:8d:2d:e3:fb:82:2a:75:92:c0:46:61:02:4a:
e2:98:ba:86:f2:42:83:75:e3:14:b5:4f:73:11:73:de:0e:ea:
70:bb:d0:fd:65:6b:0a:b6:32:b7:79:76:cd:ad:02:f3:36:0f:
2c:f8:9a:c8:fc:4d:76:94:ef:57:7c:d4:a2:2c:f8:5b:83:94:
57:12:8e:5d:87:c5:c3:b6:35:6d:d4:a1:a6:f5:1c:ed:1d:46:
84:ab:6a:b0:2b:26:59:8f:37:76:99:24:b6:c5:d8:d7:fa:9e:
51:d2:5d:30:8d:7d:58:9b:2b:76:14:62:17:52:c0:f3:e5:95:
11:6a:b1:ac:20:85:d3:ff:74:64:44:00:9c:4b:e7:fb:64:9e:
ad:f5:7d:fe:da:fa:7b:26:98:89:23:91:65:e2:12:43:49:ff:
11:a8:47:4e:49:e9:a5:4e:8c:07:8d:38:86:14:07:3e:ec:df:
ef:f3:e9:5b:4a:78:6b:cc:83:20:f9:5f:42:29:be:0e:ba:07:
61:81:6b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:04:16 2026 by rpki-client