$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft File: 409F816F9F6076FF99779C7733845FD803FA035A.mft (raw, json) Hash identifier: vjraxB+LBKiDze8gcukgZjcD1d0qS7cgI+1Q6mvfcCw= Subject key identifier: A4:B3:7E:FB:36:A1:C9:0B:20:DA:AC:02:A4:BA:73:30:78:D6:B0:EF Authority key identifier: 40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A Certificate issuer: /CN=409F816F9F6076FF99779C7733845FD803FA035A Certificate serial: 0AFFC2E3F477D048F80D6854283FCE94C2C8518F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft Manifest number: C1 Signing time: Tue 12 May 2026 22:10:03 +0000 Manifest this update: Tue 12 May 2026 22:05:03 +0000 Manifest next update: Sun 17 May 2026 00:31:03 +0000 Files and hashes: 1: 3139302e3131312e3132342e302f32322d3235203d3e203532323931.roa (hash: /uoHvgXY1Vh2UFLq9AMfFybxONK8loaTpCVgZw9xfFs=) 2: 323830333a333935303a3a2f33322d3334203d3e203532323931.roa (hash: SfsePFXZjg5fB/jn+2H/UuuZjjNG1TCifwx3qKsGC0E=) 3: 409F816F9F6076FF99779C7733845FD803FA035A.crl (hash: v1vXlXyHa3C2Lofyec2GtXvtZUSXOVx4XGHpz6PTA6Q=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 17 May 2026 00:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ff:c2:e3:f4:77:d0:48:f8:0d:68:54:28:3f:ce:94:c2:c8:51:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=409F816F9F6076FF99779C7733845FD803FA035A Validity Not Before: May 12 22:05:03 2026 GMT Not After : May 17 00:31:03 2026 GMT Subject: CN=A4B37EFB36A1C90B20DAAC02A4BA733078D6B0EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b5:a1:ec:ef:3a:be:f5:db:30:81:67:36:6c: 6d:2e:29:e2:59:29:da:f0:08:00:b1:1a:7c:90:6b: f1:ad:a1:57:e4:02:42:62:c4:a3:eb:37:01:81:f8: 8b:c3:e3:5b:79:4c:d3:aa:7f:8a:8f:8b:0e:4f:29: 00:d6:a7:0a:76:6d:1e:b2:bd:1d:a2:2a:f9:11:50: 86:bc:d6:9f:b9:a8:04:54:c1:7a:71:d0:a7:5f:21: 3b:c6:6e:67:af:bd:97:1a:88:f6:35:22:90:7c:e1: d8:21:24:b5:9f:ec:9b:58:a9:69:ec:76:fe:62:f8: c1:8c:3c:0b:61:e9:72:9f:cd:f8:be:67:76:32:2c: 83:d5:21:8d:6f:49:0b:b8:38:ca:fe:66:69:52:29: 3f:8a:0b:78:7c:e0:e3:58:33:43:a4:2e:35:e9:dc: f6:3d:9c:9a:30:15:33:65:df:7b:a3:ce:df:84:d7: 48:91:74:a7:01:cd:40:e1:c3:e7:a1:0b:af:53:39: 7f:cb:78:85:8f:08:1b:f4:23:1c:56:00:22:f4:63: 9e:8c:a3:8e:0a:98:d8:fe:b3:c1:4b:84:4d:b8:f8: a3:58:2e:d5:80:d4:ae:57:ef:5a:51:0e:5b:fe:1e: 18:1e:bd:ec:c7:b8:be:aa:90:84:ca:d8:de:fe:e4: 7b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B3:7E:FB:36:A1:C9:0B:20:DA:AC:02:A4:BA:73:30:78:D6:B0:EF X509v3 Authority Key Identifier: keyid:40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:cf:4a:4d:36:36:1c:c5:39:6a:a6:2f:87:b8:7a:59:5f:65: 51:e0:d7:64:d4:0d:64:c8:03:cb:af:8e:cd:ce:40:c8:3e:f2: 3a:ce:43:dc:4a:71:b2:d2:b6:de:e2:f9:cb:ca:a6:55:68:6f: b5:7f:23:a0:23:5d:fa:e7:1b:69:0c:84:f7:d3:4e:92:1c:a4: b5:98:35:d5:2f:75:a2:a2:01:23:a6:14:18:ac:97:96:4d:ff: 43:6e:55:e8:31:e3:6a:2c:de:90:ff:8b:3a:ec:dc:43:af:c2: 03:7e:e9:d9:b0:ea:07:de:00:c5:08:e9:fa:e8:9c:ed:65:e2: e0:27:a0:ff:55:3f:a1:d1:c4:8e:61:5b:f3:50:7b:7d:0d:d0: af:1b:47:eb:41:1b:d9:15:97:dc:0b:5f:10:4e:ad:1f:85:c3: dc:f0:c9:8d:9d:2c:89:7a:f3:f6:bf:9d:42:f7:09:a8:71:81: f9:b9:a3:b1:62:45:24:05:e1:51:8f:97:9c:b3:82:99:56:24: aa:46:8c:df:49:f8:f7:42:0e:da:85:d3:5a:4a:1a:cd:4d:1c: e9:a3:5a:dd:54:fe:85:5d:d3:70:b9:18:37:e6:25:f2:b3:29: ba:f9:f1:f0:ef:ca:0b:97:4e:1d:73:b3:4f:5d:ec:c6:38:45: 78:86:bf:a9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCv/C4/R30Ej4DWhUKD/OlMLIUY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5RjgxNkY5RjYwNzZGRjk5Nzc5Qzc3MzM4NDVGRDgw M0ZBMDM1QTAeFw0yNjA1MTIyMjA1MDNaFw0yNjA1MTcwMDMxMDNaMDMxMTAvBgNV BAMTKEE0QjM3RUZCMzZBMUM5MEIyMERBQUMwMkE0QkE3MzMwNzhENkIwRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbtaHs7zq+9dswgWc2bG0uKeJZ KdrwCACxGnyQa/GtoVfkAkJixKPrNwGB+IvD41t5TNOqf4qPiw5PKQDWpwp2bR6y vR2iKvkRUIa81p+5qARUwXpx0KdfITvGbmevvZcaiPY1IpB84dghJLWf7JtYqWns dv5i+MGMPAth6XKfzfi+Z3YyLIPVIY1vSQu4OMr+ZmlSKT+KC3h84ONYM0OkLjXp 3PY9nJowFTNl33ujzt+E10iRdKcBzUDhw+ehC69TOX/LeIWPCBv0IxxWACL0Y56M o44KmNj+s8FLhE24+KNYLtWA1K5X71pRDlv+HhgevezHuL6qkITK2N7+5Hu1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUpLN++zahyQsg2qwCpLpzMHjWsO8wHwYDVR0j BBgwFoAUQJ+Bb59gdv+Zd5x3M4Rf2AP6A1owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MEQ2NjE0MDQxMzVDQkM0QzlBMjZBN0UwQTQxMzk2RDQ0 NUUxRDEwMzk3QTE1RjUzN0Q4MjI4QzlBNzhFRUMzLzAvNDA5RjgxNkY5RjYwNzZG Rjk5Nzc5Qzc3MzM4NDVGRDgwM0ZBMDM1QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MDlGODE2RjlGNjA3NkZGOTk3 NzlDNzczMzg0NUZEODAzRkEwMzVBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzBENjYxNDA0MTM1Q0JDNEM5QTI2QTdFMEE0MTM5NkQ0NDVFMUQxMDM5 N0ExNUY1MzdEODIyOEM5QTc4RUVDMy8wLzQwOUY4MTZGOUY2MDc2RkY5OTc3OUM3 NzMzODQ1RkQ4MDNGQTAzNUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcz0pNNjYcxTlqpi+HuHpZX2VR 4Ndk1A1kyAPLr47NzkDIPvI6zkPcSnGy0rbe4vnLyqZVaG+1fyOgI1365xtpDIT3 006SHKS1mDXVL3WiogEjphQYrJeWTf9DblXoMeNqLN6Q/4s67NxDr8IDfunZsOoH 3gDFCOn66JztZeLgJ6D/VT+h0cSOYVvzUHt9DdCvG0frQRvZFZfcC18QTq0fhcPc 8MmNnSyJevP2v51C9wmocYH5uaOxYkUkBeFRj5ecs4KZViSqRozfSfj3Qg7ahdNa ShrNTRzpo1rdVP6FXdNwuRg35iXysym6+fHw78oLl04dc7NPXezGOEV4hr+p -----END CERTIFICATE-----Generated at Wed May 13 18:32:21 2026 by rpki-client