$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft File: 409F816F9F6076FF99779C7733845FD803FA035A.mft (raw, json) Hash identifier: bUjeN3lATuSZNkuHADb10G4A22s7DiXNHtGBZzCshnc= Subject key identifier: 29:14:72:1D:68:F7:13:8F:EC:B6:6E:BC:33:0A:FE:61:66:65:C5:40 Authority key identifier: 40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A Certificate issuer: /CN=409F816F9F6076FF99779C7733845FD803FA035A Certificate serial: 4B716E447EAAF07CE5C941392863461D38FB1E64 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft Manifest number: 24 Signing time: Fri 04 Jul 2025 19:10:04 +0000 Manifest this update: Fri 04 Jul 2025 19:05:04 +0000 Manifest next update: Thu 10 Jul 2025 18:54:04 +0000 Files and hashes: 1: 409F816F9F6076FF99779C7733845FD803FA035A.crl (hash: 04HgGYQhSWBNrOqNI8rc0FVfyK7Lh4Utw0NHAFxg1ic=) 2: 3139302e3131312e3132342e302f32322d3235203d3e203532323931.roa (hash: thEPwiArK3TsQ/dQnkYHJ4u9ceV03PLElIG9YtbZdKU=) 3: 323830333a333935303a3a2f33322d3334203d3e203532323931.roa (hash: sQl+Jdk75TC8rTilvhDyi/LCaGx2bc4XbEcdHfeET5k=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Jul 2025 07:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:71:6e:44:7e:aa:f0:7c:e5:c9:41:39:28:63:46:1d:38:fb:1e:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=409F816F9F6076FF99779C7733845FD803FA035A Validity Not Before: Jul 4 19:05:04 2025 GMT Not After : Jul 10 18:54:04 2025 GMT Subject: CN=2914721D68F7138FECB66EBC330AFE616665C540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7a:69:a6:47:c2:ff:50:95:6f:53:e1:b9:4c: 87:b3:4d:fa:33:d0:30:4f:ca:1e:10:f8:51:2e:2b: 63:05:f3:c0:14:81:f8:99:b9:b2:96:9e:93:5b:e2: 3b:b9:12:3d:71:60:a2:05:10:02:b0:e2:3f:76:f8: e3:93:e2:8e:00:e7:c0:f8:61:a7:6a:8b:01:2e:b0: 29:f8:2d:62:29:35:ac:98:dd:3b:61:44:61:42:a3: 8c:0c:cc:65:b1:30:ff:9e:58:cc:33:1b:0a:67:c2: d0:0c:24:02:dd:bb:f7:77:0c:5c:38:db:1e:21:88: 2a:0f:82:b0:6e:e0:4b:97:10:36:dd:20:51:89:28: e1:f0:07:9f:cb:e1:f3:37:90:22:96:7d:a1:34:2a: 8a:bc:48:6f:a5:fc:19:29:87:f2:85:0e:ce:73:08: 2d:95:e8:13:2a:77:3d:bf:46:49:68:bf:fa:b5:c3: f0:7e:72:e8:7a:6e:7c:28:1b:0e:98:5b:13:6e:bb: fd:4d:66:b3:17:4e:6d:70:49:da:74:87:5d:5f:07: 0d:a1:cf:54:1b:47:70:38:6d:b7:62:88:8b:41:cb: ea:20:0e:22:d1:b4:71:72:1e:ba:92:9a:d1:ad:cf: 78:33:b9:c4:44:49:a0:b1:75:d4:0f:d8:36:15:17: f7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:14:72:1D:68:F7:13:8F:EC:B6:6E:BC:33:0A:FE:61:66:65:C5:40 X509v3 Authority Key Identifier: keyid:40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:bc:6b:a2:9b:14:62:91:ad:01:26:b3:10:98:5d:40:72:51: 3f:33:2e:8c:c5:bf:cc:f4:7f:50:d3:bb:ff:62:26:84:ec:55: c4:6f:93:c2:ff:fc:e5:f8:e8:bb:a3:94:34:eb:7b:6e:c5:b7: 7c:60:9d:6d:0b:f0:e8:36:25:84:7c:87:af:c9:9d:83:7d:c9: 87:2f:e3:4b:29:ec:74:c8:ca:bc:bf:14:2f:0f:d0:68:b3:ff: b7:a6:49:b3:b7:a4:22:83:4a:73:90:80:48:7f:e1:71:97:16: b5:02:06:ed:4c:f0:18:d9:d8:0c:e3:f5:da:ef:d2:29:cb:da: 4f:15:a7:4b:84:5c:1d:e1:e1:48:04:a2:93:4c:cb:1d:51:17: 22:24:74:91:cf:f0:37:f7:0c:6f:dd:20:da:36:88:3a:a9:27: 7c:e8:80:bc:8b:f1:8f:7c:e7:23:e0:f1:f2:db:fb:19:2a:5b: de:83:c5:bd:65:45:ef:9b:d2:7a:25:51:11:d1:72:6e:93:ac: 92:f4:ea:cc:2b:5f:e0:8f:88:d0:6c:16:5b:5f:c7:52:e4:d4: 79:bc:95:cb:77:8a:82:89:01:04:e9:a2:a3:ab:34:50:06:92: 91:d8:ff:92:53:28:b8:3a:bb:31:ff:bf:0b:bf:9a:62:f9:75: 0b:27:ff:7b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUS3FuRH6q8HzlyUE5KGNGHTj7HmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5RjgxNkY5RjYwNzZGRjk5Nzc5Qzc3MzM4NDVGRDgw M0ZBMDM1QTAeFw0yNTA3MDQxOTA1MDRaFw0yNTA3MTAxODU0MDRaMDMxMTAvBgNV BAMTKDI5MTQ3MjFENjhGNzEzOEZFQ0I2NkVCQzMzMEFGRTYxNjY2NUM1NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGemmmR8L/UJVvU+G5TIezTfoz 0DBPyh4Q+FEuK2MF88AUgfiZubKWnpNb4ju5Ej1xYKIFEAKw4j92+OOT4o4A58D4 YadqiwEusCn4LWIpNayY3TthRGFCo4wMzGWxMP+eWMwzGwpnwtAMJALdu/d3DFw4 2x4hiCoPgrBu4EuXEDbdIFGJKOHwB5/L4fM3kCKWfaE0Koq8SG+l/Bkph/KFDs5z CC2V6BMqdz2/Rklov/q1w/B+cuh6bnwoGw6YWxNuu/1NZrMXTm1wSdp0h11fBw2h z1QbR3A4bbdiiItBy+ogDiLRtHFyHrqSmtGtz3gzucRESaCxddQP2DYVF/dJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKRRyHWj3E4/stm68Mwr+YWZlxUAwHwYDVR0j BBgwFoAUQJ+Bb59gdv+Zd5x3M4Rf2AP6A1owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MEQ2NjE0MDQxMzVDQkM0QzlBMjZBN0UwQTQxMzk2RDQ0 NUUxRDEwMzk3QTE1RjUzN0Q4MjI4QzlBNzhFRUMzLzAvNDA5RjgxNkY5RjYwNzZG Rjk5Nzc5Qzc3MzM4NDVGRDgwM0ZBMDM1QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MDlGODE2RjlGNjA3NkZGOTk3 NzlDNzczMzg0NUZEODAzRkEwMzVBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzBENjYxNDA0MTM1Q0JDNEM5QTI2QTdFMEE0MTM5NkQ0NDVFMUQxMDM5 N0ExNUY1MzdEODIyOEM5QTc4RUVDMy8wLzQwOUY4MTZGOUY2MDc2RkY5OTc3OUM3 NzMzODQ1RkQ4MDNGQTAzNUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjvGuimxRika0BJrMQmF1AclE/ My6Mxb/M9H9Q07v/YiaE7FXEb5PC//zl+Oi7o5Q063tuxbd8YJ1tC/DoNiWEfIev yZ2DfcmHL+NLKex0yMq8vxQvD9Bos/+3pkmzt6Qig0pzkIBIf+Fxlxa1AgbtTPAY 2dgM4/Xa79Ipy9pPFadLhFwd4eFIBKKTTMsdURciJHSRz/A39wxv3SDaNog6qSd8 6IC8i/GPfOcj4PHy2/sZKlveg8W9ZUXvm9J6JVER0XJuk6yS9OrMK1/gj4jQbBZb X8dS5NR5vJXLd4qCiQEE6aKjqzRQBpKR2P+SUyi4Orsx/78Lv5pi+XULJ/97 -----END CERTIFICATE-----Generated at Sat Jul 5 09:43:22 2025 by rpki-client