
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.mft
File: CBB7CEC6B251591295CC04EA4274140F6FB652E0.mft (raw, json)
Hash identifier: 0UmfFC2XeMPMKYHe0xRrAvXFDIqXRHBHY01y1kxT4Ug=
Subject key identifier: 1A:9A:3A:66:53:85:C1:EA:20:3F:06:B6:50:B2:58:9F:83:E7:FA:1D
Authority key identifier: CB:B7:CE:C6:B2:51:59:12:95:CC:04:EA:42:74:14:0F:6F:B6:52:E0
Certificate issuer: /CN=CBB7CEC6B251591295CC04EA4274140F6FB652E0
Certificate serial: 3E8A55F82E6D7C67A411A7B26FE28BCFC2621B97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.mft
Manifest number: 016B
Signing time: Mon 02 Mar 2026 14:43:47 +0000
Manifest this update: Mon 02 Mar 2026 14:38:47 +0000
Manifest next update: Fri 06 Mar 2026 23:01:47 +0000
Files and hashes: 1: 323830333a653034303a3a2f33322d3332203d3e203238313030.roa (hash: 51jcUkuMqnl5w9/ki0Cprsz7W81iyUTRggFnsigyh2k=)
2: CBB7CEC6B251591295CC04EA4274140F6FB652E0.crl (hash: iAlumqurDOHCy+xWKCxXfDJKu4FD1cIloXoorwK4cLo=)
3: 3133382e39372e3233362e302f32322d3234203d3e203238313030.roa (hash: 79hjIhPYMwHmFK8TVaaFNGWVzk8tJI9kqbCsGK8qYOY=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.crl
rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 06 Mar 2026 23:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:8a:55:f8:2e:6d:7c:67:a4:11:a7:b2:6f:e2:8b:cf:c2:62:1b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBB7CEC6B251591295CC04EA4274140F6FB652E0
Validity
Not Before: Mar 2 14:38:47 2026 GMT
Not After : Mar 6 23:01:47 2026 GMT
Subject: CN=1A9A3A665385C1EA203F06B650B2589F83E7FA1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:fe:9d:f2:8a:90:47:6d:9e:3e:98:1d:c6:
af:f8:8f:80:cd:62:28:ec:72:30:34:aa:e6:31:75:
70:8c:f0:08:1b:72:ed:41:94:10:2f:18:f0:0c:b0:
33:22:ae:1d:3c:ac:89:1b:15:9a:a6:c3:df:a1:48:
b9:57:ce:1b:c4:d5:e8:4c:0d:a4:13:d2:aa:98:c0:
66:6d:27:b8:53:e9:95:c6:9d:49:b9:61:b4:a1:6f:
9e:32:1a:8c:59:0b:3d:ae:64:07:97:5a:53:85:d4:
c1:8e:7e:a3:56:3f:32:ad:6a:d4:d7:bf:a3:ef:89:
35:bf:b8:e2:a3:0f:66:7e:ca:86:b4:cc:d3:f5:c4:
81:71:54:fd:f6:c8:1c:31:f8:4e:ac:71:ce:74:e5:
36:03:21:71:bc:d8:65:1f:c8:ce:c5:c3:7a:93:c8:
9f:41:f5:9d:d1:66:d7:17:3e:57:ba:36:bb:cf:13:
d6:0b:22:fe:e9:4a:1a:0f:f5:75:18:40:b3:fa:9a:
42:2f:8f:7d:52:88:9d:51:ae:5c:ba:cf:4c:1e:7c:
f2:27:39:56:6f:88:66:8a:aa:06:5c:8b:6f:47:07:
f7:b4:db:1a:99:c6:1f:6c:18:f6:17:60:9a:ff:7b:
71:dd:68:4a:f0:f0:78:d1:8c:99:2a:88:2f:ef:75:
d3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9A:3A:66:53:85:C1:EA:20:3F:06:B6:50:B2:58:9F:83:E7:FA:1D
X509v3 Authority Key Identifier:
keyid:CB:B7:CE:C6:B2:51:59:12:95:CC:04:EA:42:74:14:0F:6F:B6:52:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:42:7e:bf:5d:90:f7:96:b8:17:c8:a4:d1:a3:0e:23:67:4a:
f6:6a:44:c3:15:33:41:b5:e4:2f:2e:10:5f:60:66:ec:e4:8a:
61:c5:f9:c3:d2:81:35:01:e7:df:de:76:52:d5:e3:f7:90:5f:
a7:cb:1f:7b:05:b0:6d:20:64:69:32:a9:77:37:91:5c:a8:2e:
86:c1:dc:d4:44:00:05:df:5f:2b:de:f3:60:f0:14:37:2e:b9:
1e:9f:15:d5:15:be:12:ff:bb:87:01:26:ca:67:85:8d:50:c2:
4a:bc:96:42:e8:3c:0d:dc:d3:fb:27:a5:27:bb:9b:33:0b:66:
fe:3d:53:b5:0a:a1:c4:93:c6:db:87:c4:6b:e0:3e:87:7e:ea:
f3:3b:fd:0c:ee:d8:35:0a:26:69:02:f1:20:bd:cd:97:0d:42:
78:a0:b8:f7:b7:76:5f:79:ad:10:1e:15:ac:11:45:73:8d:43:
a1:ac:4a:5f:00:a9:a7:ed:de:7b:81:29:3e:c0:68:33:43:58:
94:c5:d6:28:e3:9f:ea:92:84:e9:96:f3:29:43:3b:eb:c2:df:
cb:e1:03:39:ec:27:70:75:24:1a:d7:c4:9e:c0:27:33:e1:19:
6d:5f:fc:b2:8c:1d:e3:7c:4f:e4:6a:bf:43:63:82:22:ac:ca:
77:d2:41:9d
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUPopV+C5tfGekEaeyb+KLz8JiG5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JCN0NFQzZCMjUxNTkxMjk1Q0MwNEVBNDI3NDE0MEY2
RkI2NTJFMDAeFw0yNjAzMDIxNDM4NDdaFw0yNjAzMDYyMzAxNDdaMDMxMTAvBgNV
BAMTKDFBOUEzQTY2NTM4NUMxRUEyMDNGMDZCNjUwQjI1ODlGODNFN0ZBMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpw/6d8oqQR22ePpgdxq/4j4DN
YijscjA0quYxdXCM8Agbcu1BlBAvGPAMsDMirh08rIkbFZqmw9+hSLlXzhvE1ehM
DaQT0qqYwGZtJ7hT6ZXGnUm5YbShb54yGoxZCz2uZAeXWlOF1MGOfqNWPzKtatTX
v6PviTW/uOKjD2Z+yoa0zNP1xIFxVP32yBwx+E6scc505TYDIXG82GUfyM7Fw3qT
yJ9B9Z3RZtcXPle6NrvPE9YLIv7pShoP9XUYQLP6mkIvj31SiJ1Rrly6z0wefPIn
OVZviGaKqgZci29HB/e02xqZxh9sGPYXYJr/e3HdaErw8HjRjJkqiC/vddOXAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUGpo6ZlOFweogPwa2ULJYn4Pn+h0wHwYDVR0j
BBgwFoAUy7fOxrJRWRKVzATqQnQUD2+2UuAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzM0MTNFNjUwNUJEMjJERUEwMTQzMEVDMkQ5NjVBMjlB
Q0ExRDZCRkVGMjQ0OTM0MUM0OEE3MkJENEVCNEYxLzAvQ0JCN0NFQzZCMjUxNTkx
Mjk1Q0MwNEVBNDI3NDE0MEY2RkI2NTJFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkI3Q0VDNkIyNTE1OTEyOTVD
QzA0RUE0Mjc0MTQwRjZGQjY1MkUwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUMzNDEzRTY1MDVCRDIyREVBMDE0MzBFQzJEOTY1QTI5QUNBMUQ2QkZF
RjI0NDkzNDFDNDhBNzJCRDRFQjRGMS8wL0NCQjdDRUM2QjI1MTU5MTI5NUNDMDRF
QTQyNzQxNDBGNkZCNjUyRTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAeQn6/XZD3lrgXyKTRow4jZ0r2
akTDFTNBteQvLhBfYGbs5IphxfnD0oE1Aeff3nZS1eP3kF+nyx97BbBtIGRpMql3
N5FcqC6GwdzURAAF318r3vNg8BQ3LrkenxXVFb4S/7uHASbKZ4WNUMJKvJZC6DwN
3NP7J6Unu5szC2b+PVO1CqHEk8bbh8Rr4D6HfurzO/0M7tg1CiZpAvEgvc2XDUJ4
oLj3t3Zfea0QHhWsEUVzjUOhrEpfAKmn7d57gSk+wGgzQ1iUxdYo45/qkoTplvMp
Qzvrwt/L4QM57CdwdSQa18SewCcz4RltX/yyjB3jfE/kar9DY4IirMp30kGd
-----END CERTIFICATE-----
Generated at Tue Mar 3 05:10:26 2026 by rpki-client