
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft
File: 409F816F9F6076FF99779C7733845FD803FA035A.mft (raw, json)
Hash identifier: LopZxPzmlGIp/+VH2dqkVWsYbxV+Gs0+8Agv+mmRIW4=
Subject key identifier: 90:53:4A:B8:90:B2:1C:ED:36:AF:D2:87:6D:A3:64:8F:7E:1A:1D:58
Authority key identifier: 40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A
Certificate issuer: /CN=409F816F9F6076FF99779C7733845FD803FA035A
Certificate serial: 1964FA6FECE0C2FC5F893EF31ECC716C3BF1BA74
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft
Manifest number: A6
Signing time: Wed 25 Mar 2026 18:58:37 +0000
Manifest this update: Wed 25 Mar 2026 18:53:37 +0000
Manifest next update: Sun 29 Mar 2026 20:30:37 +0000
Files and hashes: 1: 3139302e3131312e3132342e302f32322d3235203d3e203532323931.roa (hash: thEPwiArK3TsQ/dQnkYHJ4u9ceV03PLElIG9YtbZdKU=)
2: 323830333a333935303a3a2f33322d3334203d3e203532323931.roa (hash: sQl+Jdk75TC8rTilvhDyi/LCaGx2bc4XbEcdHfeET5k=)
3: 409F816F9F6076FF99779C7733845FD803FA035A.crl (hash: t4yYiHx8I9M4Rd3J4/cWLbpcWEMZubdoZTZ4keF/Vh4=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl
rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 29 Mar 2026 20:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:64:fa:6f:ec:e0:c2:fc:5f:89:3e:f3:1e:cc:71:6c:3b:f1:ba:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409F816F9F6076FF99779C7733845FD803FA035A
Validity
Not Before: Mar 25 18:53:37 2026 GMT
Not After : Mar 29 20:30:37 2026 GMT
Subject: CN=90534AB890B21CED36AFD2876DA3648F7E1A1D58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:42:52:f3:f6:18:6a:42:37:a1:0d:b8:95:bb:
69:ae:be:21:98:ee:40:ca:65:3b:fc:1c:2f:a9:2b:
87:9d:47:ac:ca:2e:4b:5c:80:71:84:29:87:15:6b:
a9:d5:a3:31:bf:d6:46:96:5b:d2:3e:72:d3:03:ba:
56:32:4b:c7:d9:5f:e2:2c:1a:9f:e2:cf:5c:09:33:
a6:2f:7e:a5:d8:c6:83:bb:5d:91:91:92:5d:ec:b8:
21:ae:84:d2:32:8d:bc:1e:86:2b:0e:a3:22:2b:18:
f2:16:82:eb:28:90:77:94:49:43:71:de:cd:82:88:
3f:1d:4f:e1:ee:95:d3:32:66:a5:c8:78:c2:ea:1e:
23:83:3b:84:9a:a5:40:36:20:73:5c:d2:73:5c:c5:
08:f7:3a:d2:53:d5:4d:2b:b0:d3:92:28:1b:0d:07:
99:0a:c7:52:cd:69:86:07:de:ec:de:5c:c0:d1:f8:
d2:a6:ea:0c:d3:05:31:2b:ca:91:62:03:6c:72:df:
a2:2f:03:b2:c1:37:32:01:2b:65:d8:03:59:fc:6e:
a9:91:23:c6:22:5f:ad:47:ca:3f:f1:5e:94:c5:46:
ef:2d:09:45:9d:ce:ff:b4:53:46:97:40:06:d2:c2:
7a:20:cb:54:34:36:ea:b3:91:e9:c1:7d:33:b5:c3:
1c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:53:4A:B8:90:B2:1C:ED:36:AF:D2:87:6D:A3:64:8F:7E:1A:1D:58
X509v3 Authority Key Identifier:
keyid:40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d6:1d:92:d8:3d:9d:45:5a:40:58:01:c0:1f:23:09:8e:da:
9e:9e:ff:6c:d4:ce:ef:ac:b2:86:b2:c6:3b:6d:aa:03:1c:12:
be:3d:5d:9c:dd:9e:df:9e:95:44:7a:33:3d:cf:c9:f9:94:a5:
d4:26:be:d1:46:6f:04:46:ba:ec:2e:c0:e4:61:e6:1a:f6:64:
9a:10:eb:6d:ad:bc:29:ab:4b:01:00:f0:46:80:2f:fe:66:87:
b6:df:6e:45:cf:7e:58:f7:78:30:32:69:7f:05:67:29:d3:30:
a0:10:6c:bd:9f:e3:67:41:23:74:c9:f0:9b:e9:f6:ed:79:f0:
0f:87:b6:53:1f:2c:e4:65:a7:ea:0e:ea:12:fd:68:57:b6:ca:
3f:11:53:fc:b8:63:9b:5a:b8:0f:93:4c:65:5b:b7:1c:01:a7:
2f:a2:9e:82:57:87:1f:32:b2:d2:2c:da:3c:53:a2:8b:fa:d7:
b7:7d:9d:b1:39:8f:69:34:ce:1f:26:18:b9:00:f8:35:ae:ec:
6a:c5:74:4c:f1:0d:01:f8:93:dd:d4:ce:d9:40:78:51:ea:da:
e8:ce:9a:18:62:86:11:ea:5d:e3:ea:2f:12:1e:60:0e:02:a9:
d1:0a:db:fe:dd:0b:98:2f:38:74:a3:96:fa:6e:05:7e:8a:85:
87:43:40:2f
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUGWT6b+zgwvxfiT7zHsxxbDvxunQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA5RjgxNkY5RjYwNzZGRjk5Nzc5Qzc3MzM4NDVGRDgw
M0ZBMDM1QTAeFw0yNjAzMjUxODUzMzdaFw0yNjAzMjkyMDMwMzdaMDMxMTAvBgNV
BAMTKDkwNTM0QUI4OTBCMjFDRUQzNkFGRDI4NzZEQTM2NDhGN0UxQTFENTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMQlLz9hhqQjehDbiVu2muviGY
7kDKZTv8HC+pK4edR6zKLktcgHGEKYcVa6nVozG/1kaWW9I+ctMDulYyS8fZX+Is
Gp/iz1wJM6YvfqXYxoO7XZGRkl3suCGuhNIyjbwehisOoyIrGPIWgusokHeUSUNx
3s2CiD8dT+HuldMyZqXIeMLqHiODO4SapUA2IHNc0nNcxQj3OtJT1U0rsNOSKBsN
B5kKx1LNaYYH3uzeXMDR+NKm6gzTBTErypFiA2xy36IvA7LBNzIBK2XYA1n8bqmR
I8YiX61Hyj/xXpTFRu8tCUWdzv+0U0aXQAbSwnogy1Q0NuqzkenBfTO1wxz7AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUkFNKuJCyHO02r9KHbaNkj34aHVgwHwYDVR0j
BBgwFoAUQJ+Bb59gdv+Zd5x3M4Rf2AP6A1owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MEQ2NjE0MDQxMzVDQkM0QzlBMjZBN0UwQTQxMzk2RDQ0
NUUxRDEwMzk3QTE1RjUzN0Q4MjI4QzlBNzhFRUMzLzAvNDA5RjgxNkY5RjYwNzZG
Rjk5Nzc5Qzc3MzM4NDVGRDgwM0ZBMDM1QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MDlGODE2RjlGNjA3NkZGOTk3
NzlDNzczMzg0NUZEODAzRkEwMzVBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzBENjYxNDA0MTM1Q0JDNEM5QTI2QTdFMEE0MTM5NkQ0NDVFMUQxMDM5
N0ExNUY1MzdEODIyOEM5QTc4RUVDMy8wLzQwOUY4MTZGOUY2MDc2RkY5OTc3OUM3
NzMzODQ1RkQ4MDNGQTAzNUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAY1h2S2D2dRVpAWAHAHyMJjtqe
nv9s1M7vrLKGssY7baoDHBK+PV2c3Z7fnpVEejM9z8n5lKXUJr7RRm8ERrrsLsDk
YeYa9mSaEOttrbwpq0sBAPBGgC/+Zoe2325Fz35Y93gwMml/BWcp0zCgEGy9n+Nn
QSN0yfCb6fbtefAPh7ZTHyzkZafqDuoS/WhXtso/EVP8uGObWrgPk0xlW7ccAacv
op6CV4cfMrLSLNo8U6KL+te3fZ2xOY9pNM4fJhi5APg1ruxqxXRM8Q0B+JPd1M7Z
QHhR6trozpoYYoYR6l3j6i8SHmAOAqnRCtv+3QuYLzh0o5b6bgV+ioWHQ0Av
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:05:35 2026 by rpki-client