
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C099513957AE2B75AA42FEC589B6D8BD6F08F21BDFF8CEA75F8779D709E9BD2E/0/406BF322AA49354B9138E9130466FFCB514E58B0.mft
File: 406BF322AA49354B9138E9130466FFCB514E58B0.mft (raw, json)
Hash identifier: /nEgPoPHGsGXKXd1KmwqehuJ+4KZxSmyWHgwnRZwRUU=
Subject key identifier: 52:5A:F4:D0:F1:E7:35:E4:57:46:85:56:94:BB:30:34:B0:6F:5A:E4
Authority key identifier: 40:6B:F3:22:AA:49:35:4B:91:38:E9:13:04:66:FF:CB:51:4E:58:B0
Certificate issuer: /CN=406BF322AA49354B9138E9130466FFCB514E58B0
Certificate serial: 218782D695C139B8B1F6EB68ACDD57A8B44ACFD0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/406BF322AA49354B9138E9130466FFCB514E58B0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C099513957AE2B75AA42FEC589B6D8BD6F08F21BDFF8CEA75F8779D709E9BD2E/0/406BF322AA49354B9138E9130466FFCB514E58B0.mft
Manifest number: 34
Signing time: Wed 13 May 2026 03:28:08 +0000
Manifest this update: Wed 13 May 2026 03:23:08 +0000
Manifest next update: Sun 17 May 2026 12:14:08 +0000
Files and hashes: 1: 34352e3138332e3137382e302f32342d3234203d3e20323730313432.roa (hash: c25VlJX9lhi3pwPC0tPD752718rgxl6Xo0zwhIv8dVI=)
2: 323830363a3364363a3a2f33322d3332203d3e20323730313432.roa (hash: ekKOAkZorG6cZLwZojBS39vPJR8Z/pHB1Bp8w7/ypCY=)
3: 406BF322AA49354B9138E9130466FFCB514E58B0.crl (hash: 9++ahIkjsmsvyT3ZUD1Y7X1FFpJxO7zwOSaT3SaA71o=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C099513957AE2B75AA42FEC589B6D8BD6F08F21BDFF8CEA75F8779D709E9BD2E/0/406BF322AA49354B9138E9130466FFCB514E58B0.crl
rsync://repository.lacnic.net/rpki/lacnic/C099513957AE2B75AA42FEC589B6D8BD6F08F21BDFF8CEA75F8779D709E9BD2E/0/406BF322AA49354B9138E9130466FFCB514E58B0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/406BF322AA49354B9138E9130466FFCB514E58B0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 17 May 2026 12:14:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:87:82:d6:95:c1:39:b8:b1:f6:eb:68:ac:dd:57:a8:b4:4a:cf:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406BF322AA49354B9138E9130466FFCB514E58B0
Validity
Not Before: May 13 03:23:08 2026 GMT
Not After : May 17 12:14:08 2026 GMT
Subject: CN=525AF4D0F1E735E45746855694BB3034B06F5AE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:ed:c2:d5:0c:14:93:ae:09:97:7c:da:13:
4f:6c:65:89:55:4f:ff:8b:7d:44:d6:8e:d4:b8:c8:
ab:d6:7e:4a:d2:83:cd:53:0c:30:3a:0d:79:1c:11:
b7:cf:b1:e6:82:f6:bb:cb:d5:ac:ad:e1:0a:a0:75:
bc:46:70:c8:45:ef:5c:6d:e0:8f:5b:86:f4:2b:4c:
3a:53:54:ca:f6:6a:3c:94:49:d7:20:33:26:bc:c3:
6a:35:19:13:f4:41:44:8f:0f:22:17:8a:57:d8:b1:
46:24:10:30:fd:4d:c9:ee:94:79:a9:c5:33:4f:9f:
e4:a6:54:f1:99:4c:2f:df:b1:ee:b4:1a:eb:5e:44:
51:37:23:01:23:57:2e:c1:46:7f:df:ec:8f:a3:6b:
43:e0:ee:77:e6:e9:e1:a5:5e:dd:58:aa:81:82:de:
c6:97:f9:44:ec:7b:d7:8d:ae:df:1f:f9:df:32:22:
cc:88:a5:eb:77:75:df:1c:83:87:7b:38:c8:77:70:
ff:31:f3:c1:93:ca:c0:10:58:10:58:e7:c5:b1:c1:
8a:b7:d9:19:6b:5b:a5:f8:5c:2c:7c:a2:49:df:1e:
57:a1:2f:65:5f:4a:8a:6a:84:e8:61:65:e1:bd:e3:
c0:55:c1:9f:1f:6f:41:ea:f2:ff:ca:98:4c:64:9a:
40:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5A:F4:D0:F1:E7:35:E4:57:46:85:56:94:BB:30:34:B0:6F:5A:E4
X509v3 Authority Key Identifier:
keyid:40:6B:F3:22:AA:49:35:4B:91:38:E9:13:04:66:FF:CB:51:4E:58:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C099513957AE2B75AA42FEC589B6D8BD6F08F21BDFF8CEA75F8779D709E9BD2E/0/406BF322AA49354B9138E9130466FFCB514E58B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/406BF322AA49354B9138E9130466FFCB514E58B0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C099513957AE2B75AA42FEC589B6D8BD6F08F21BDFF8CEA75F8779D709E9BD2E/0/406BF322AA49354B9138E9130466FFCB514E58B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:41:dc:bc:7a:04:35:a1:19:80:2d:cf:db:bf:72:d6:cb:a6:
7d:5a:34:f3:fb:3c:89:7c:f3:ab:42:7a:77:7a:aa:b1:d5:7a:
20:e4:6f:ca:d1:1d:75:4b:c1:c3:25:36:d4:9f:54:25:26:a3:
72:90:d5:6e:fd:15:85:49:d9:85:89:0e:a5:6d:24:a6:49:2a:
0e:3b:0b:64:9c:16:8d:01:7b:81:c1:41:56:60:78:bf:71:8e:
44:91:63:99:71:3d:3a:e0:00:fd:06:61:fd:25:b8:8f:51:59:
41:77:26:a6:7e:c0:67:20:13:0d:4c:e9:3d:27:37:68:f5:7a:
09:eb:5f:1c:fd:f0:11:aa:21:4a:28:68:57:77:78:ba:d7:e5:
6c:d0:7e:ce:d9:89:85:5c:71:0f:14:28:ff:d7:e9:f3:b2:be:
ba:f8:99:fe:de:e3:61:ff:f5:b2:1b:29:ba:68:bd:20:b9:67:
90:23:3e:32:2e:6b:18:02:84:dc:87:2d:0e:95:5c:d5:3f:78:
5d:ec:df:41:df:c6:a6:e1:a7:0d:4e:c8:97:03:d4:31:6a:ea:
85:67:99:00:9b:be:73:bb:53:ee:9a:2a:97:35:aa:de:51:af:
1e:d9:f2:14:48:1b:52:e6:51:a0:d0:62:bc:4d:40:18:a9:48:
4f:11:09:9a
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUIYeC1pXBObix9utorN1XqLRKz9AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA2QkYzMjJBQTQ5MzU0QjkxMzhFOTEzMDQ2NkZGQ0I1
MTRFNThCMDAeFw0yNjA1MTMwMzIzMDhaFw0yNjA1MTcxMjE0MDhaMDMxMTAvBgNV
BAMTKDUyNUFGNEQwRjFFNzM1RTQ1NzQ2ODU1Njk0QkIzMDM0QjA2RjVBRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoLu3C1QwUk64Jl3zaE09sZYlV
T/+LfUTWjtS4yKvWfkrSg81TDDA6DXkcEbfPseaC9rvL1ayt4QqgdbxGcMhF71xt
4I9bhvQrTDpTVMr2ajyUSdcgMya8w2o1GRP0QUSPDyIXilfYsUYkEDD9TcnulHmp
xTNPn+SmVPGZTC/fse60GuteRFE3IwEjVy7BRn/f7I+ja0Pg7nfm6eGlXt1YqoGC
3saX+UTse9eNrt8f+d8yIsyIpet3dd8cg4d7OMh3cP8x88GTysAQWBBY58WxwYq3
2RlrW6X4XCx8oknfHlehL2VfSopqhOhhZeG948BVwZ8fb0Hq8v/KmExkmkCZAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUUlr00PHnNeRXRoVWlLswNLBvWuQwHwYDVR0j
BBgwFoAUQGvzIqpJNUuROOkTBGb/y1FOWLAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMDk5NTEzOTU3QUUyQjc1QUE0MkZFQzU4OUI2RDhCRDZG
MDhGMjFCREZGOENFQTc1Rjg3NzlENzA5RTlCRDJFLzAvNDA2QkYzMjJBQTQ5MzU0
QjkxMzhFOTEzMDQ2NkZGQ0I1MTRFNThCMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MDZCRjMyMkFBNDkzNTRCOTEz
OEU5MTMwNDY2RkZDQjUxNEU1OEIwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzA5OTUxMzk1N0FFMkI3NUFBNDJGRUM1ODlCNkQ4QkQ2RjA4RjIxQkRG
RjhDRUE3NUY4Nzc5RDcwOUU5QkQyRS8wLzQwNkJGMzIyQUE0OTM1NEI5MTM4RTkx
MzA0NjZGRkNCNTE0RTU4QjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvQdy8egQ1oRmALc/bv3LWy6Z9
WjTz+zyJfPOrQnp3eqqx1Xog5G/K0R11S8HDJTbUn1QlJqNykNVu/RWFSdmFiQ6l
bSSmSSoOOwtknBaNAXuBwUFWYHi/cY5EkWOZcT064AD9BmH9JbiPUVlBdyamfsBn
IBMNTOk9Jzdo9XoJ618c/fARqiFKKGhXd3i61+Vs0H7O2YmFXHEPFCj/1+nzsr66
+Jn+3uNh//WyGym6aL0guWeQIz4yLmsYAoTchy0OlVzVP3hd7N9B38am4acNTsiX
A9QxauqFZ5kAm75zu1PumiqXNareUa8e2fIUSBtS5lGg0GK8TUAYqUhPEQma
-----END CERTIFICATE-----
Generated at Wed May 13 20:24:56 2026 by rpki-client