$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft File: 409F816F9F6076FF99779C7733845FD803FA035A.mft (raw, json) Hash identifier: zHv7dTYYPfJZMTDS8IMHf9LOz4+yHd2XkqCvNWz6Kfc= Subject key identifier: 2A:28:5D:4D:AD:A0:5D:A3:E3:DC:8C:C7:9A:D3:41:5C:81:AF:A2:8B Authority key identifier: 40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A Certificate issuer: /CN=409F816F9F6076FF99779C7733845FD803FA035A Certificate serial: 7FDB1E59E9E87A9EF8AAF1FB77635B826416991B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft Manifest number: 3C Signing time: Fri 22 Aug 2025 03:05:54 +0000 Manifest this update: Fri 22 Aug 2025 03:00:54 +0000 Manifest next update: Wed 27 Aug 2025 05:35:54 +0000 Files and hashes: 1: 3139302e3131312e3132342e302f32322d3235203d3e203532323931.roa (hash: thEPwiArK3TsQ/dQnkYHJ4u9ceV03PLElIG9YtbZdKU=) 2: 409F816F9F6076FF99779C7733845FD803FA035A.crl (hash: /leJ2VC38myB/KHtFYmhxKD008vRG+3KAnelV7gHTek=) 3: 323830333a333935303a3a2f33322d3334203d3e203532323931.roa (hash: sQl+Jdk75TC8rTilvhDyi/LCaGx2bc4XbEcdHfeET5k=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 05:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:db:1e:59:e9:e8:7a:9e:f8:aa:f1:fb:77:63:5b:82:64:16:99:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=409F816F9F6076FF99779C7733845FD803FA035A Validity Not Before: Aug 22 03:00:54 2025 GMT Not After : Aug 27 05:35:54 2025 GMT Subject: CN=2A285D4DADA05DA3E3DC8CC79AD3415C81AFA28B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:39:b2:b6:4f:e0:eb:85:bc:a7:45:30:5a: 82:b2:3c:d7:03:d7:9c:b8:59:4e:e8:d2:76:4d:25: bc:11:c0:8c:ad:e9:53:9e:0f:08:94:dd:4c:1b:14: fc:c0:1d:a5:8e:82:b7:4d:5b:4d:15:8a:47:7f:6e: cc:25:8c:b3:d0:6e:85:fd:8b:99:84:a0:d4:b7:93: 09:24:c3:0b:e6:f6:60:e4:17:5d:58:8b:fc:70:6e: b6:4e:96:1a:cc:1b:c9:2f:12:d1:2b:5b:ee:4b:fc: c6:6f:52:11:70:38:c6:33:68:8f:e1:a4:55:21:e2: f9:f9:ca:ad:5f:a9:58:78:10:97:cc:73:13:6b:29: 20:32:4c:6f:29:4e:9f:66:c4:a5:77:97:ee:c8:5d: 80:fb:dc:f2:b7:07:1c:1e:bf:59:6e:29:34:58:4d: ca:82:ea:66:00:06:6e:5f:92:77:b6:1f:90:39:e5: 0c:14:15:dc:3c:78:b7:8d:62:01:f7:a7:0d:58:aa: ed:b9:58:09:96:25:3f:ff:10:2b:ed:4e:18:7c:07: 9d:79:7d:0a:12:4a:5d:a3:23:88:27:7f:fe:cd:db: 48:ac:e3:cd:a6:61:4d:96:d2:16:17:0c:30:8d:4e: 88:52:47:5a:f5:7b:f1:4e:da:e2:2e:41:a6:1c:ef: de:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:28:5D:4D:AD:A0:5D:A3:E3:DC:8C:C7:9A:D3:41:5C:81:AF:A2:8B X509v3 Authority Key Identifier: keyid:40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:76:db:8b:7d:7e:83:b8:bc:17:57:74:f7:b7:0d:12:e3:40: c6:00:0d:b9:f9:f9:0b:89:8e:14:1a:49:c5:18:76:e9:1d:fc: 9d:22:d9:22:9a:92:40:d9:43:b7:00:ba:a3:11:49:c8:f4:a6: 8f:24:cd:31:c0:a5:26:95:13:25:62:32:b4:f2:53:98:4f:d1: ed:27:ad:12:e8:7b:2c:be:61:8a:ac:f0:d4:6e:d3:5d:da:03: ef:b3:29:69:66:f5:e8:ec:38:a5:89:b9:0f:09:7f:1e:51:fb: 45:11:14:d1:15:b3:d0:12:82:cd:c4:69:76:32:dc:06:b9:6a: 17:e8:45:dc:a9:15:86:e9:77:cd:6d:03:d6:57:d0:26:a8:0e: 30:09:a0:df:64:7e:19:bb:fe:3b:8e:fb:3b:eb:28:ee:84:94: e1:fb:d8:1b:60:d4:dc:02:90:f5:96:31:5c:0a:a8:68:28:d0: 44:62:93:cd:ac:2f:0f:13:fa:9c:36:07:b0:5f:b1:79:22:cb: 5d:8a:9d:7b:cb:f6:d5:d6:69:83:19:e2:03:98:38:7a:31:e6: fd:c4:e0:46:c1:29:00:bd:f9:cb:67:7f:aa:10:92:9a:73:73: 4a:d2:33:12:48:32:8b:0d:55:5f:5b:85:1f:d1:d1:6d:3d:77: dd:8f:1a:52 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUf9seWenoep74qvH7d2NbgmQWmRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5RjgxNkY5RjYwNzZGRjk5Nzc5Qzc3MzM4NDVGRDgw M0ZBMDM1QTAeFw0yNTA4MjIwMzAwNTRaFw0yNTA4MjcwNTM1NTRaMDMxMTAvBgNV BAMTKDJBMjg1RDREQURBMDVEQTNFM0RDOENDNzlBRDM0MTVDODFBRkEyOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Qzmytk/g64W8p0UwWoKyPNcD 15y4WU7o0nZNJbwRwIyt6VOeDwiU3UwbFPzAHaWOgrdNW00Vikd/bswljLPQboX9 i5mEoNS3kwkkwwvm9mDkF11Yi/xwbrZOlhrMG8kvEtErW+5L/MZvUhFwOMYzaI/h pFUh4vn5yq1fqVh4EJfMcxNrKSAyTG8pTp9mxKV3l+7IXYD73PK3Bxwev1luKTRY TcqC6mYABm5fkne2H5A55QwUFdw8eLeNYgH3pw1Yqu25WAmWJT//ECvtThh8B515 fQoSSl2jI4gnf/7N20is482mYU2W0hYXDDCNTohSR1r1e/FO2uIuQaYc7943AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKihdTa2gXaPj3IzHmtNBXIGvooswHwYDVR0j BBgwFoAUQJ+Bb59gdv+Zd5x3M4Rf2AP6A1owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MEQ2NjE0MDQxMzVDQkM0QzlBMjZBN0UwQTQxMzk2RDQ0 NUUxRDEwMzk3QTE1RjUzN0Q4MjI4QzlBNzhFRUMzLzAvNDA5RjgxNkY5RjYwNzZG Rjk5Nzc5Qzc3MzM4NDVGRDgwM0ZBMDM1QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MDlGODE2RjlGNjA3NkZGOTk3 NzlDNzczMzg0NUZEODAzRkEwMzVBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzBENjYxNDA0MTM1Q0JDNEM5QTI2QTdFMEE0MTM5NkQ0NDVFMUQxMDM5 N0ExNUY1MzdEODIyOEM5QTc4RUVDMy8wLzQwOUY4MTZGOUY2MDc2RkY5OTc3OUM3 NzMzODQ1RkQ4MDNGQTAzNUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPdtuLfX6DuLwXV3T3tw0S40DG AA25+fkLiY4UGknFGHbpHfydItkimpJA2UO3ALqjEUnI9KaPJM0xwKUmlRMlYjK0 8lOYT9HtJ60S6HssvmGKrPDUbtNd2gPvsylpZvXo7DilibkPCX8eUftFERTRFbPQ EoLNxGl2MtwGuWoX6EXcqRWG6XfNbQPWV9AmqA4wCaDfZH4Zu/47jvs76yjuhJTh +9gbYNTcApD1ljFcCqhoKNBEYpPNrC8PE/qcNgewX7F5Istdip17y/bV1mmDGeID mDh6Meb9xOBGwSkAvfnLZ3+qEJKac3NK0jMSSDKLDVVfW4Uf0dFtPXfdjxpS -----END CERTIFICATE-----Generated at Sat Aug 23 11:05:49 2025 by rpki-client