$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft File: 409F816F9F6076FF99779C7733845FD803FA035A.mft (raw, json) Hash identifier: 3Oh8AR/g+xVScKSaZixjNG0LNzhYmHxps3RjdEFrBTE= Subject key identifier: B8:80:D8:F9:48:F9:CA:83:68:55:0C:81:8E:39:AC:B4:32:77:19:30 Authority key identifier: 40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A Certificate issuer: /CN=409F816F9F6076FF99779C7733845FD803FA035A Certificate serial: 73B83C2903EAE239A25852A22D28DEF8FCE35CE6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft Manifest number: 0116 Signing time: Wed 28 Oct 2026 23:37:35 +0000 Manifest this update: Wed 28 Oct 2026 23:32:35 +0000 Manifest next update: Mon 02 Nov 2026 16:15:35 +0000 Files and hashes: 1: 3139302e3131312e3132342e302f32322d3235203d3e203532323931.roa (hash: /uoHvgXY1Vh2UFLq9AMfFybxONK8loaTpCVgZw9xfFs=) 2: 323830333a333935303a3a2f33322d3334203d3e203532323931.roa (hash: SfsePFXZjg5fB/jn+2H/UuuZjjNG1TCifwx3qKsGC0E=) 3: 409F816F9F6076FF99779C7733845FD803FA035A.crl (hash: eD/C99vL+72WkEUs8bVkIhyDd8EFvnWL8x1Mk9a1YFs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 15:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:b8:3c:29:03:ea:e2:39:a2:58:52:a2:2d:28:de:f8:fc:e3:5c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=409F816F9F6076FF99779C7733845FD803FA035A Validity Not Before: Oct 28 23:32:35 2026 GMT Not After : Nov 2 16:15:35 2026 GMT Subject: CN=B880D8F948F9CA8368550C818E39ACB432771930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3e:43:c4:9c:78:fa:3a:76:10:be:c2:8c:db: e2:16:c3:2b:1d:29:9b:e9:e8:b3:67:30:7c:cf:90: 57:f5:77:6e:f3:9c:21:0d:ac:f4:e2:b6:4c:8a:0c: e8:f3:58:5f:ca:fd:9c:06:16:26:de:12:76:22:cd: d6:36:3f:9c:26:2d:e0:67:b4:ac:09:3a:c1:c4:79: ba:53:d6:13:ca:21:d4:2f:ac:ac:57:a3:01:b2:ca: 27:26:d3:03:2d:1d:6e:e2:a1:05:10:e8:37:80:38: 9d:af:d9:0f:a8:40:1f:e1:6b:25:4e:09:9f:4a:0a: 50:e7:48:9a:58:2c:2c:33:07:cd:4a:18:22:bb:62: e4:0b:b6:82:2a:72:06:2c:67:6e:71:97:30:c4:00: 4e:2a:47:78:7b:d1:99:78:71:8e:15:78:20:d4:cc: 10:02:00:07:32:d6:9d:d6:b2:3d:60:4c:b3:e6:4f: 80:04:18:4a:ed:35:68:c5:c8:1c:d2:5e:97:ea:8e: 59:7f:f1:62:79:ee:df:da:c4:46:99:16:f7:02:45: 62:5c:05:4d:6d:6a:2f:7d:23:5b:d8:25:f4:97:45: 62:fa:02:2d:ea:9f:b8:82:f7:3d:09:49:19:61:53: 02:9b:b9:8a:3d:c2:ce:6a:53:62:c3:a9:b9:45:52: 99:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:80:D8:F9:48:F9:CA:83:68:55:0C:81:8E:39:AC:B4:32:77:19:30 X509v3 Authority Key Identifier: keyid:40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:77:f8:f5:5f:7d:19:3e:07:45:69:71:74:c8:eb:5c:24:31: c8:c7:21:1f:10:53:53:00:d1:fa:1b:32:a0:bb:5e:b1:e8:03: 25:d6:1f:10:48:94:d3:98:1c:13:f8:4a:ad:ab:60:49:d0:8d: 4d:6f:4f:e3:4d:0c:7d:07:ef:09:3d:48:7a:72:8a:25:3f:92: 1a:35:94:c7:7d:e0:52:95:67:56:68:79:ad:b8:07:be:e2:53: d1:2a:91:65:73:76:d8:12:18:4b:6b:1a:f4:64:05:77:c0:7f: cf:64:1d:4f:fa:26:26:f2:cd:99:ad:15:19:e7:3c:1b:fe:54: 21:63:23:5d:5e:ba:a9:34:14:6d:b2:60:39:32:61:54:70:d5: c3:11:8f:d8:66:be:7c:68:44:31:90:db:cc:9b:74:c7:ae:9a: 3a:e7:68:2a:3a:8b:02:5f:9a:45:0f:9f:9c:65:b2:eb:9c:6b: 25:11:24:81:32:55:b6:11:51:56:8a:3a:22:80:da:97:68:de: 34:88:ff:0f:c9:0c:a5:95:ac:5a:43:24:25:12:70:70:be:da: cd:d2:7e:6b:98:3a:8c:1f:43:48:b8:25:a8:12:47:fd:15:7a: 42:31:82:fa:69:bf:f3:3b:95:13:1a:39:f6:ab:bc:5b:ff:cc: cf:f1:fd:97 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUc7g8KQPq4jmiWFKiLSje+PzjXOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5RjgxNkY5RjYwNzZGRjk5Nzc5Qzc3MzM4NDVGRDgw M0ZBMDM1QTAeFw0yNjEwMjgyMzMyMzVaFw0yNjExMDIxNjE1MzVaMDMxMTAvBgNV BAMTKEI4ODBEOEY5NDhGOUNBODM2ODU1MEM4MThFMzlBQ0I0MzI3NzE5MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8PkPEnHj6OnYQvsKM2+IWwysd KZvp6LNnMHzPkFf1d27znCENrPTitkyKDOjzWF/K/ZwGFibeEnYizdY2P5wmLeBn tKwJOsHEebpT1hPKIdQvrKxXowGyyicm0wMtHW7ioQUQ6DeAOJ2v2Q+oQB/hayVO CZ9KClDnSJpYLCwzB81KGCK7YuQLtoIqcgYsZ25xlzDEAE4qR3h70Zl4cY4VeCDU zBACAAcy1p3Wsj1gTLPmT4AEGErtNWjFyBzSXpfqjll/8WJ57t/axEaZFvcCRWJc BU1tai99I1vYJfSXRWL6Ai3qn7iC9z0JSRlhUwKbuYo9ws5qU2LDqblFUpmzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUuIDY+Uj5yoNoVQyBjjmstDJ3GTAwHwYDVR0j BBgwFoAUQJ+Bb59gdv+Zd5x3M4Rf2AP6A1owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MEQ2NjE0MDQxMzVDQkM0QzlBMjZBN0UwQTQxMzk2RDQ0 NUUxRDEwMzk3QTE1RjUzN0Q4MjI4QzlBNzhFRUMzLzAvNDA5RjgxNkY5RjYwNzZG Rjk5Nzc5Qzc3MzM4NDVGRDgwM0ZBMDM1QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MDlGODE2RjlGNjA3NkZGOTk3 NzlDNzczMzg0NUZEODAzRkEwMzVBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzBENjYxNDA0MTM1Q0JDNEM5QTI2QTdFMEE0MTM5NkQ0NDVFMUQxMDM5 N0ExNUY1MzdEODIyOEM5QTc4RUVDMy8wLzQwOUY4MTZGOUY2MDc2RkY5OTc3OUM3 NzMzODQ1RkQ4MDNGQTAzNUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAd/j1X30ZPgdFaXF0yOtcJDHI xyEfEFNTANH6GzKgu16x6AMl1h8QSJTTmBwT+Eqtq2BJ0I1Nb0/jTQx9B+8JPUh6 coolP5IaNZTHfeBSlWdWaHmtuAe+4lPRKpFlc3bYEhhLaxr0ZAV3wH/PZB1P+iYm 8s2ZrRUZ5zwb/lQhYyNdXrqpNBRtsmA5MmFUcNXDEY/YZr58aEQxkNvMm3THrpo6 52gqOosCX5pFD5+cZbLrnGslESSBMlW2EVFWijoigNqXaN40iP8PyQyllaxaQyQl EnBwvtrN0n5rmDqMH0NIuCWoEkf9FXpCMYL6ab/zO5UTGjn2q7xb/8zP8f2X -----END CERTIFICATE-----Generated at Thu Oct 29 08:20:44 2026 by rpki-client