$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.mft File: CBB45D33487A8DB542673C021B1C2ACEBA2704C2.mft (raw, json) Hash identifier: bSJk/EakdYPfcQ9RNVwDX4YeRxDKDQxfCJC6sP6xvcg= Subject key identifier: 3A:1F:24:D2:85:79:86:92:0E:83:05:6A:B7:3F:39:C4:CE:AD:B6:9C Authority key identifier: CB:B4:5D:33:48:7A:8D:B5:42:67:3C:02:1B:1C:2A:CE:BA:27:04:C2 Certificate issuer: /CN=CBB45D33487A8DB542673C021B1C2ACEBA2704C2 Certificate serial: 5A52D619648E26FC13CCAF68414A26FA4ADC863B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.mft Manifest number: D5 Signing time: Thu 16 Apr 2026 08:44:15 +0000 Manifest this update: Thu 16 Apr 2026 08:39:15 +0000 Manifest next update: Tue 21 Apr 2026 16:41:15 +0000 Files and hashes: 1: 3138312e3232342e39322e302f32332d3234203d3e20323732383834.roa (hash: PHGEFBNxQuVhYSW5k8NaZv1RBaI0fU/c5WfNHGGnnoE=) 2: CBB45D33487A8DB542673C021B1C2ACEBA2704C2.crl (hash: zmZvE9akcONLw+X7iDAIh8NVVO1w2lEPwDKkMXP2/Us=) 3: 323830333a626139303a3a2f33322d3438203d3e20323732383834.roa (hash: PpTAnGJaKQKat/ImjZkznWcM0CraMRv9rIP+OlEbwz0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.crl rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 16:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:52:d6:19:64:8e:26:fc:13:cc:af:68:41:4a:26:fa:4a:dc:86:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB45D33487A8DB542673C021B1C2ACEBA2704C2 Validity Not Before: Apr 16 08:39:15 2026 GMT Not After : Apr 21 16:41:15 2026 GMT Subject: CN=3A1F24D2857986920E83056AB73F39C4CEADB69C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:21:99:e1:52:27:86:17:58:f9:c5:5a:3b:61: 5e:8b:41:c2:4f:80:78:b2:41:8d:99:1a:7f:0a:81: f2:23:f7:49:0c:6c:b4:27:13:cc:48:15:a4:6f:9f: 80:83:2f:46:53:a6:b0:ca:a3:00:fd:47:bf:25:e0: 0b:84:d2:c1:0c:d5:81:8a:5e:60:c0:51:54:53:e9: 9c:af:83:ae:24:f2:27:11:32:7a:d3:dd:a4:1d:7a: 52:78:59:0a:c6:27:01:91:3c:5c:01:5b:ef:bb:84: 9a:da:2e:a1:26:b9:71:6f:d1:61:cf:c5:e1:2f:93: 93:da:97:2e:42:43:15:94:06:d5:04:05:f4:19:07: 81:5b:4f:b2:9f:ba:cb:e9:61:9f:ae:48:86:e5:aa: 41:f5:9e:e5:db:29:e5:e5:4a:e2:ac:19:41:13:7d: 65:12:7f:12:28:3e:03:80:d8:64:dd:24:36:f8:54: 8a:63:92:13:78:3f:d5:59:a7:71:46:04:9b:a1:ec: b7:79:ca:ee:24:72:5d:e1:59:22:40:49:27:f4:69: cb:ae:29:bc:d2:0a:01:6e:3d:62:2b:c7:62:51:05: 80:0c:eb:ff:5f:40:cd:8b:e6:77:17:30:cd:92:c1: ae:0f:12:4f:55:d8:8e:68:07:d4:96:2f:76:1e:f8: 19:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1F:24:D2:85:79:86:92:0E:83:05:6A:B7:3F:39:C4:CE:AD:B6:9C X509v3 Authority Key Identifier: keyid:CB:B4:5D:33:48:7A:8D:B5:42:67:3C:02:1B:1C:2A:CE:BA:27:04:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9BF8992780D77F06C40AB6847B36FF7A7CC164F7E4638A67488FAA34030BEF2A/0/CBB45D33487A8DB542673C021B1C2ACEBA2704C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:52:5a:80:b8:f0:70:a4:91:06:db:15:57:11:cb:ef:c4:ea: 09:0b:c0:b9:c2:23:dc:8f:c4:f7:20:e7:6d:88:af:19:a4:4a: 87:e0:1c:fa:06:f9:71:50:49:9e:3c:f0:be:97:12:7b:46:65: aa:bb:2c:49:c6:21:c0:46:27:bc:ff:cf:8d:76:be:cb:bf:25: 3a:7e:18:8a:69:9a:a2:a0:d5:d2:92:f6:9a:98:e8:ea:e6:bf: f6:7f:f1:b1:9b:c8:4b:7f:00:7a:dc:91:90:43:2f:d8:11:12: 65:e7:40:f2:f0:41:72:e2:2e:eb:0c:7c:4a:27:80:01:87:d9: b8:25:6f:09:e9:ae:2c:e2:20:60:7a:b3:70:29:3d:cb:66:32: bb:a7:c6:04:e9:41:aa:1c:d8:6e:d7:59:a8:41:3a:51:03:ee: a5:63:63:dc:e9:ee:98:de:91:d6:be:06:12:d1:43:9f:34:30: 24:d7:2a:31:52:c2:5e:c9:05:0a:6e:38:ba:3c:dd:ad:91:b3: 2c:93:e7:36:a3:ad:a1:1a:e3:c0:a1:3a:3c:4a:ee:0d:e5:d1: 4f:49:12:17:44:63:c8:de:16:23:a8:6d:87:9a:85:f2:a4:ef: 17:ca:85:26:ff:87:5f:38:d3:d6:b7:dd:f2:46:3d:0d:a3:9b: bf:f4:c7:8d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWlLWGWSOJvwTzK9oQUom+krchjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCNDVEMzM0ODdBOERCNTQyNjczQzAyMUIxQzJBQ0VC QTI3MDRDMjAeFw0yNjA0MTYwODM5MTVaFw0yNjA0MjExNjQxMTVaMDMxMTAvBgNV BAMTKDNBMUYyNEQyODU3OTg2OTIwRTgzMDU2QUI3M0YzOUM0Q0VBREI2OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcIZnhUieGF1j5xVo7YV6LQcJP gHiyQY2ZGn8KgfIj90kMbLQnE8xIFaRvn4CDL0ZTprDKowD9R78l4AuE0sEM1YGK XmDAUVRT6Zyvg64k8icRMnrT3aQdelJ4WQrGJwGRPFwBW++7hJraLqEmuXFv0WHP xeEvk5Paly5CQxWUBtUEBfQZB4FbT7KfusvpYZ+uSIblqkH1nuXbKeXlSuKsGUET fWUSfxIoPgOA2GTdJDb4VIpjkhN4P9VZp3FGBJuh7Ld5yu4kcl3hWSJASSf0acuu KbzSCgFuPWIrx2JRBYAM6/9fQM2L5ncXMM2Swa4PEk9V2I5oB9SWL3Ye+BlRAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUOh8k0oV5hpIOgwVqtz85xM6ttpwwHwYDVR0j BBgwFoAUy7RdM0h6jbVCZzwCGxwqzronBMIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85QkY4OTkyNzgwRDc3RjA2QzQwQUI2ODQ3QjM2RkY3QTdD QzE2NEY3RTQ2MzhBNjc0ODhGQUEzNDAzMEJFRjJBLzAvQ0JCNDVEMzM0ODdBOERC NTQyNjczQzAyMUIxQzJBQ0VCQTI3MDRDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkI0NUQzMzQ4N0E4REI1NDI2 NzNDMDIxQjFDMkFDRUJBMjcwNEMyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOUJGODk5Mjc4MEQ3N0YwNkM0MEFCNjg0N0IzNkZGN0E3Q0MxNjRGN0U0 NjM4QTY3NDg4RkFBMzQwMzBCRUYyQS8wL0NCQjQ1RDMzNDg3QThEQjU0MjY3M0Mw MjFCMUMyQUNFQkEyNzA0QzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBUUlqAuPBwpJEG2xVXEcvvxOoJ C8C5wiPcj8T3IOdtiK8ZpEqH4Bz6BvlxUEmePPC+lxJ7RmWquyxJxiHARie8/8+N dr7LvyU6fhiKaZqioNXSkvaamOjq5r/2f/Gxm8hLfwB63JGQQy/YERJl50Dy8EFy 4i7rDHxKJ4ABh9m4JW8J6a4s4iBgerNwKT3LZjK7p8YE6UGqHNhu11moQTpRA+6l Y2Pc6e6Y3pHWvgYS0UOfNDAk1yoxUsJeyQUKbji6PN2tkbMsk+c2o62hGuPAoTo8 Su4N5dFPSRIXRGPI3hYjqG2HmoXypO8XyoUm/4dfONPWt93yRj0No5u/9MeN -----END CERTIFICATE-----Generated at Fri Apr 17 20:38:10 2026 by rpki-client