
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.mft
File: CBB45D33487A8DB542673C021B1C2ACEBA2704C2.mft (raw, json)
Hash identifier: figRktc9n8hrzaYZGseHQatGi8T9BJtG/14nh2Mju0w=
Subject key identifier: 2C:36:10:76:37:76:A8:1D:67:73:CF:ED:34:AB:92:C5:79:48:7F:9E
Authority key identifier: CB:B4:5D:33:48:7A:8D:B5:42:67:3C:02:1B:1C:2A:CE:BA:27:04:C2
Certificate issuer: /CN=CBB45D33487A8DB542673C021B1C2ACEBA2704C2
Certificate serial: 47DB4BDA9F5EFBBB3899643BE7B450EF277F5CEF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.mft
Manifest number: 012D
Signing time: Mon 12 Oct 2026 21:20:00 +0000
Manifest this update: Mon 12 Oct 2026 21:15:00 +0000
Manifest next update: Sat 17 Oct 2026 08:25:00 +0000
Files and hashes: 1: 323830333a626139303a3a2f33322d3438203d3e20323732383834.roa (hash: PpTAnGJaKQKat/ImjZkznWcM0CraMRv9rIP+OlEbwz0=)
2: 3138312e3232342e39322e302f32332d3234203d3e20323732383834.roa (hash: PHGEFBNxQuVhYSW5k8NaZv1RBaI0fU/c5WfNHGGnnoE=)
3: CBB45D33487A8DB542673C021B1C2ACEBA2704C2.crl (hash: Fj5ozfs/qC90Yeh9oYvETCDcI0tVRMbHGyTkTWoeBHE=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.crl
rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Oct 2026 08:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:db:4b:da:9f:5e:fb:bb:38:99:64:3b:e7:b4:50:ef:27:7f:5c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBB45D33487A8DB542673C021B1C2ACEBA2704C2
Validity
Not Before: Oct 12 21:15:00 2026 GMT
Not After : Oct 17 08:25:00 2026 GMT
Subject: CN=2C3610763776A81D6773CFED34AB92C579487F9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:87:33:a8:62:0a:7f:ba:5c:17:f7:15:5f:
fe:80:b4:45:ff:dc:d8:a2:3e:54:3c:78:19:6a:1f:
2d:12:63:fb:b1:ae:61:76:9b:64:ca:41:10:d7:0f:
d4:bb:37:fa:51:70:dc:99:1d:0a:30:69:06:f9:53:
6f:f5:cb:c1:72:7f:fe:ab:be:50:06:b4:fa:e1:a2:
9d:15:9b:2e:87:6c:7b:52:0f:5c:4d:b1:6d:c8:00:
71:d2:e7:40:0c:c0:42:d7:71:0d:a9:f8:24:5c:4d:
f4:42:33:63:2b:d3:1b:e5:d3:58:78:da:58:5c:01:
14:c0:b5:eb:65:6f:b1:15:92:ba:ba:18:ce:d7:9a:
bb:91:0a:17:9f:c2:ad:99:34:f3:79:97:3c:e9:e4:
44:67:79:84:03:ea:ae:de:90:81:19:e9:7b:e5:c2:
e0:50:fe:23:a8:99:a4:44:e3:78:11:31:a9:ca:9e:
4d:b8:f7:9b:27:9d:68:c8:9c:3a:50:76:5e:95:50:
74:5d:1b:87:6a:61:9a:46:ac:f4:67:59:0b:0c:eb:
17:98:0c:fd:bd:b9:9d:06:85:1c:b2:66:a3:aa:dd:
cb:f5:63:d5:67:0f:ef:a4:53:89:b5:fb:17:72:80:
2b:a6:c3:95:94:14:22:37:ce:8b:c0:3e:54:46:e8:
9c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:36:10:76:37:76:A8:1D:67:73:CF:ED:34:AB:92:C5:79:48:7F:9E
X509v3 Authority Key Identifier:
keyid:CB:B4:5D:33:48:7A:8D:B5:42:67:3C:02:1B:1C:2A:CE:BA:27:04:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:aa:15:56:70:d2:42:8f:50:51:7b:40:d2:c5:3a:04:6b:b9:
6b:d5:1a:2e:a1:27:60:7e:cf:52:98:08:68:79:24:97:59:d6:
2b:b4:f6:4c:cd:30:dc:e6:e0:c0:96:a8:db:14:92:7e:8f:ce:
9c:57:f5:95:e2:7b:f2:4a:58:05:2f:22:4e:79:10:83:fa:cd:
93:ca:99:e5:a0:63:35:a0:5c:b0:b8:97:24:56:3d:1d:72:7b:
ea:ec:22:3a:48:88:38:f4:19:29:73:a4:db:b1:76:71:8d:fd:
ee:4f:84:6a:11:92:be:2b:01:a3:da:ee:48:9d:f2:e2:06:84:
a7:61:9a:73:a3:46:4a:e0:d3:57:ca:66:85:31:44:f1:2f:bb:
ec:1a:f8:ff:86:b4:67:de:68:38:6b:8a:09:86:c0:c6:45:4b:
3b:08:95:12:a0:c3:c8:9d:fc:fa:01:09:a8:e7:cb:97:33:68:
d4:48:38:af:ae:69:6d:15:93:38:51:03:b3:20:be:81:ed:e3:
50:14:0f:5d:96:eb:20:8d:87:f3:6a:78:19:b2:be:91:ef:b1:
a3:71:6d:4b:34:49:72:a8:45:ad:51:ce:65:9e:38:58:5a:8a:
bd:25:ce:fd:e9:04:2f:a0:16:85:cb:0b:cd:b0:79:05:e7:b1:
d4:c3:29:73
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUR9tL2p9e+7s4mWQ757RQ7yd/XO8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JCNDVEMzM0ODdBOERCNTQyNjczQzAyMUIxQzJBQ0VC
QTI3MDRDMjAeFw0yNjEwMTIyMTE1MDBaFw0yNjEwMTcwODI1MDBaMDMxMTAvBgNV
BAMTKDJDMzYxMDc2Mzc3NkE4MUQ2NzczQ0ZFRDM0QUI5MkM1Nzk0ODdGOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxtIczqGIKf7pcF/cVX/6AtEX/
3NiiPlQ8eBlqHy0SY/uxrmF2m2TKQRDXD9S7N/pRcNyZHQowaQb5U2/1y8Fyf/6r
vlAGtPrhop0Vmy6HbHtSD1xNsW3IAHHS50AMwELXcQ2p+CRcTfRCM2Mr0xvl01h4
2lhcARTAtetlb7EVkrq6GM7XmruRChefwq2ZNPN5lzzp5ERneYQD6q7ekIEZ6Xvl
wuBQ/iOomaRE43gRManKnk2495snnWjInDpQdl6VUHRdG4dqYZpGrPRnWQsM6xeY
DP29uZ0GhRyyZqOq3cv1Y9VnD++kU4m1+xdygCumw5WUFCI3zovAPlRG6Jz/AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQULDYQdjd2qB1nc8/tNKuSxXlIf54wHwYDVR0j
BBgwFoAUy7RdM0h6jbVCZzwCGxwqzronBMIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85QkY4OTkyNzgwRDc3RjA2QzQwQUI2ODQ3QjM2RkY3QTdD
QzE2NEY3RTQ2MzhBNjc0ODhGQUEzNDAzMEJFRjJBLzAvQ0JCNDVEMzM0ODdBOERC
NTQyNjczQzAyMUIxQzJBQ0VCQTI3MDRDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkI0NUQzMzQ4N0E4REI1NDI2
NzNDMDIxQjFDMkFDRUJBMjcwNEMyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUJGODk5Mjc4MEQ3N0YwNkM0MEFCNjg0N0IzNkZGN0E3Q0MxNjRGN0U0
NjM4QTY3NDg4RkFBMzQwMzBCRUYyQS8wL0NCQjQ1RDMzNDg3QThEQjU0MjY3M0Mw
MjFCMUMyQUNFQkEyNzA0QzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBKqhVWcNJCj1BRe0DSxToEa7lr
1RouoSdgfs9SmAhoeSSXWdYrtPZMzTDc5uDAlqjbFJJ+j86cV/WV4nvySlgFLyJO
eRCD+s2TypnloGM1oFywuJckVj0dcnvq7CI6SIg49Bkpc6TbsXZxjf3uT4RqEZK+
KwGj2u5InfLiBoSnYZpzo0ZK4NNXymaFMUTxL7vsGvj/hrRn3mg4a4oJhsDGRUs7
CJUSoMPInfz6AQmo58uXM2jUSDivrmltFZM4UQOzIL6B7eNQFA9dlusgjYfzangZ
sr6R77GjcW1LNElyqEWtUc5lnjhYWoq9Jc796QQvoBaFywvNsHkF57HUwylz
-----END CERTIFICATE-----
Generated at Wed Oct 14 00:47:08 2026 by rpki-client