$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft File: CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft (raw, json) Hash identifier: 6QkoND43+fetTQ5PZmyx3RuDxlK7NMCdBoybbFZMS00= Subject key identifier: 3D:81:9B:99:4E:1B:C9:FA:81:DB:5C:48:A9:44:E1:C1:0B:3D:2D:A7 Authority key identifier: CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F Certificate issuer: /CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F Certificate serial: 0A52ADCDD6E33401C5A8E2C53689CEA53B1818BF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft Manifest number: 018F Signing time: Wed 29 Apr 2026 12:45:28 +0000 Manifest this update: Wed 29 Apr 2026 12:40:27 +0000 Manifest next update: Mon 04 May 2026 15:41:27 +0000 Files and hashes: 1: CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl (hash: csolZkr9ww+da6XA4DszPRw/P8JnOvZKXn9X0TmIWs4=) 2: 3137302e302e31322e302f32322d3234203d3e20323633313537.roa (hash: f9SrUyZYA550SEyHV5RyaH3qPYLG41cfmER7A4eSG78=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 04 May 2026 15:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:52:ad:cd:d6:e3:34:01:c5:a8:e2:c5:36:89:ce:a5:3b:18:18:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F Validity Not Before: Apr 29 12:40:27 2026 GMT Not After : May 4 15:41:27 2026 GMT Subject: CN=3D819B994E1BC9FA81DB5C48A944E1C10B3D2DA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bf:4e:cb:e8:f4:50:54:27:e0:bb:5d:4d:7d: 87:08:07:3e:a8:eb:6c:7d:07:55:21:89:c9:47:75: 05:1f:0b:c2:ee:df:14:87:84:22:5d:dc:9c:a1:c6: 12:56:67:60:d2:cb:08:18:c4:62:10:48:5a:3a:16: 1c:38:51:2d:cb:33:d4:cc:3b:a2:88:fd:99:fe:b3: f5:9e:5a:98:1f:fa:fa:7c:f9:6b:d7:f2:0b:41:de: 71:7b:eb:62:6e:50:b6:6e:49:e8:ed:d7:2d:29:dd: 2b:41:dd:40:f7:71:18:5d:ba:98:03:25:f7:cc:c1: 33:57:53:db:fd:24:1f:b4:66:35:28:ed:97:af:7f: 5b:c2:55:77:1a:12:f1:1e:bc:22:e7:23:c7:c9:f0: 0d:52:d6:44:91:7e:11:75:8b:c6:dc:5c:05:99:91: ba:89:ac:39:2a:c2:b6:32:00:af:c2:43:6b:59:0c: 3a:cc:06:81:97:3d:76:00:81:ab:d6:37:6d:5e:bb: d7:fb:fa:df:d4:02:a3:03:69:5d:1b:56:73:62:74: ab:50:08:a4:3e:9c:fb:eb:d2:bc:5e:15:e4:00:a3: a6:b2:b0:3a:6f:16:b8:0d:74:80:c7:be:6b:e9:b3: 01:97:5e:4e:91:bf:70:f8:2a:5f:db:cc:cb:43:9f: c3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:81:9B:99:4E:1B:C9:FA:81:DB:5C:48:A9:44:E1:C1:0B:3D:2D:A7 X509v3 Authority Key Identifier: keyid:CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:4e:51:d8:bd:21:0c:e3:80:11:63:f9:9d:bf:f5:06:71:66: 6d:cb:55:ee:c4:99:a9:de:9e:82:55:41:f3:2d:3e:44:ef:33: 46:6d:60:c5:0e:ff:0c:63:bf:30:a7:ea:d4:5b:ce:6e:e7:54: 3b:90:02:14:2e:c1:1a:cb:52:87:db:3c:9e:89:35:5b:06:7e: 46:0c:98:38:33:c3:cd:9a:6d:af:f0:59:b2:83:57:b2:60:f2: 80:95:cf:c0:e9:82:6e:b2:a4:62:f1:44:3f:82:7b:1f:8d:0b: cb:a1:52:c8:c5:5b:d2:e1:3a:98:a1:14:69:37:46:90:be:ba: cd:a3:8f:f8:92:47:33:f3:4c:a9:19:32:8b:0b:fe:24:ca:72: 7a:43:5d:ad:a0:14:84:66:8f:7f:8e:f5:ff:69:28:0a:bc:c4: 30:39:2d:81:fd:c7:04:59:d2:d9:6d:65:51:33:6d:c2:15:cf: 90:94:1f:57:f6:5c:ea:50:9a:9f:d8:49:40:72:49:36:18:d4: 8d:bf:83:15:6d:81:0b:e4:34:bc:55:70:2e:b3:1a:53:82:65: 86:83:e9:91:9a:8d:d7:11:6a:8e:49:13:ec:d1:29:1c:4a:fd: d2:2e:5d:21:06:44:28:b9:6a:6e:f7:43:d4:b9:1c:73:f2:d5: 69:0f:46:db -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUClKtzdbjNAHFqOLFNonOpTsYGL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NDFEQjczRDk5NUFFNTVDODA4QTBFNzdDQkZGODcz Q0NBRTQ0RjAeFw0yNjA0MjkxMjQwMjdaFw0yNjA1MDQxNTQxMjdaMDMxMTAvBgNV BAMTKDNEODE5Qjk5NEUxQkM5RkE4MURCNUM0OEE5NDRFMUMxMEIzRDJEQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtv07L6PRQVCfgu11NfYcIBz6o 62x9B1UhiclHdQUfC8Lu3xSHhCJd3JyhxhJWZ2DSywgYxGIQSFo6Fhw4US3LM9TM O6KI/Zn+s/WeWpgf+vp8+WvX8gtB3nF762JuULZuSejt1y0p3StB3UD3cRhdupgD JffMwTNXU9v9JB+0ZjUo7Zevf1vCVXcaEvEevCLnI8fJ8A1S1kSRfhF1i8bcXAWZ kbqJrDkqwrYyAK/CQ2tZDDrMBoGXPXYAgavWN21eu9f7+t/UAqMDaV0bVnNidKtQ CKQ+nPvr0rxeFeQAo6aysDpvFrgNdIDHvmvpswGXXk6Rv3D4Kl/bzMtDn8PPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUPYGbmU4byfqB21xIqUThwQs9LacwHwYDVR0j BBgwFoAUy1Qdtz2ZWuVcgIoOd8v/hzzK5E8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80M0IwQkI3NkQ4NURBMTY5MjUxNThENUU3NjE4MDkyOUJG REQwM0RDQjFCNDZBRkQzQjE1NjFFQjMxRDgyOTc2LzAvQ0I1NDFEQjczRDk5NUFF NTVDODA4QTBFNzdDQkZGODczQ0NBRTQ0Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjU0MURCNzNEOTk1QUU1NUM4 MDhBMEU3N0NCRkY4NzNDQ0FFNDRGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDNCMEJCNzZEODVEQTE2OTI1MTU4RDVFNzYxODA5MjlCRkREMDNEQ0Ix QjQ2QUZEM0IxNTYxRUIzMUQ4Mjk3Ni8wL0NCNTQxREI3M0Q5OTVBRTU1QzgwOEEw RTc3Q0JGRjg3M0NDQUU0NEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCjTlHYvSEM44ARY/mdv/UGcWZt y1XuxJmp3p6CVUHzLT5E7zNGbWDFDv8MY78wp+rUW85u51Q7kAIULsEay1KH2zye iTVbBn5GDJg4M8PNmm2v8Fmyg1eyYPKAlc/A6YJusqRi8UQ/gnsfjQvLoVLIxVvS 4TqYoRRpN0aQvrrNo4/4kkcz80ypGTKLC/4kynJ6Q12toBSEZo9/jvX/aSgKvMQw OS2B/ccEWdLZbWVRM23CFc+QlB9X9lzqUJqf2ElAckk2GNSNv4MVbYEL5DS8VXAu sxpTgmWGg+mRmo3XEWqOSRPs0SkcSv3SLl0hBkQouWpu90PUuRxz8tVpD0bb -----END CERTIFICATE-----Generated at Wed Apr 29 16:04:20 2026 by rpki-client