$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft File: 409F816F9F6076FF99779C7733845FD803FA035A.mft (raw, json) Hash identifier: wyXEyQDc0z7Q8fuaw1ZuHm3zEAaXUHk2xSxnUWaC8FU= Subject key identifier: 28:B5:50:C8:22:E9:09:68:6A:0E:3D:9D:7C:52:46:C1:6C:3F:89:CF Authority key identifier: 40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A Certificate issuer: /CN=409F816F9F6076FF99779C7733845FD803FA035A Certificate serial: 4E5FC02ABEFB7728B79CD92477FB1563AE26E206 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft Manifest number: 48 Signing time: Tue 16 Sep 2025 14:19:23 +0000 Manifest this update: Tue 16 Sep 2025 14:14:23 +0000 Manifest next update: Sun 21 Sep 2025 20:01:23 +0000 Files and hashes: 1: 409F816F9F6076FF99779C7733845FD803FA035A.crl (hash: iZWYYIrsDEs+JKTcauZ9eR7mUWgHdkp9FDV9vrNbC4E=) 2: 3139302e3131312e3132342e302f32322d3235203d3e203532323931.roa (hash: thEPwiArK3TsQ/dQnkYHJ4u9ceV03PLElIG9YtbZdKU=) 3: 323830333a333935303a3a2f33322d3334203d3e203532323931.roa (hash: sQl+Jdk75TC8rTilvhDyi/LCaGx2bc4XbEcdHfeET5k=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 20:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5f:c0:2a:be:fb:77:28:b7:9c:d9:24:77:fb:15:63:ae:26:e2:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=409F816F9F6076FF99779C7733845FD803FA035A Validity Not Before: Sep 16 14:14:23 2025 GMT Not After : Sep 21 20:01:23 2025 GMT Subject: CN=28B550C822E909686A0E3D9D7C5246C16C3F89CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d3:34:84:67:0e:a4:79:92:dd:2f:e9:34:4b: 3c:32:b5:de:e6:fe:9e:71:2a:02:34:93:1d:19:38: 23:82:79:df:59:0a:23:a2:c2:89:d6:1e:b7:55:50: f5:95:d3:76:a1:40:2e:fb:5d:5b:94:0f:f1:34:83: d5:e3:30:24:a8:56:34:3f:2b:8b:e8:86:6a:60:20: ee:95:b1:00:df:37:f2:42:68:9f:ab:bd:95:48:b5: 50:23:9a:f9:d8:eb:35:c6:b9:a5:aa:c7:ed:f2:31: e6:17:91:91:a3:a2:69:3b:d6:8b:64:b4:63:46:3b: 69:45:25:b2:02:3d:44:6b:91:01:5c:31:8e:48:ea: aa:90:ab:db:a4:b4:9f:93:09:13:92:21:01:20:62: 5e:15:2e:5f:cf:c7:93:5b:79:a4:a0:1f:97:5b:c6: 7e:da:a1:4e:24:25:db:ed:20:f4:38:e3:44:c1:b7: 9b:83:ba:d3:89:1e:84:6e:4e:49:5d:ab:ce:03:d8: 50:a0:10:d5:59:b7:26:ea:89:1a:33:d4:e2:af:ac: 93:27:b8:c7:aa:88:c0:b3:8b:13:36:3e:33:7e:c7: 20:cf:88:f9:b2:ce:53:c1:1d:be:9a:df:f5:67:44: 5f:d5:76:b8:5a:92:1e:a7:76:9e:63:b8:ff:47:fc: f4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B5:50:C8:22:E9:09:68:6A:0E:3D:9D:7C:52:46:C1:6C:3F:89:CF X509v3 Authority Key Identifier: keyid:40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:3c:47:3d:be:d9:41:42:fe:19:37:2e:73:76:4e:fc:73:82: 01:d6:55:bd:f0:ab:77:42:c6:db:ec:9a:1a:4c:98:29:87:82: ac:73:5e:fa:ec:2c:55:e7:de:d1:13:25:ce:83:78:c2:ad:9b: 59:76:01:cc:a5:e6:04:9e:89:b2:71:13:58:4e:3a:aa:40:e2: ea:83:fb:49:0e:a5:e4:db:90:ba:8a:90:12:4d:05:b3:75:6a: 94:58:c3:54:43:50:99:2e:16:2b:6c:9b:1c:93:07:91:88:ba: 29:db:89:9d:e2:27:33:7e:80:b1:62:d4:3e:20:31:16:bf:cd: e1:5a:20:fa:c9:ea:eb:d7:35:da:21:4f:a6:b3:33:aa:b2:97: b2:e8:55:89:8c:14:25:f8:7a:e2:35:ac:01:66:68:a8:0c:e7: b4:50:72:8e:04:f8:4c:dd:b7:60:b9:95:fa:e2:c4:03:78:96: 73:c9:c0:af:b2:4f:b0:c6:c6:51:bf:50:32:2a:ae:6b:16:1f: f1:8b:05:4d:d1:6c:e5:b3:94:39:f7:47:05:e2:a2:5c:9c:58: 8d:07:30:e5:01:90:35:e0:9c:e6:2c:5f:47:c6:29:90:4c:fa: ed:b6:43:ab:4f:f8:f6:fd:7a:8e:80:ac:12:c7:e7:39:09:11: 5e:2b:79:aa -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTl/AKr77dyi3nNkkd/sVY64m4gYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5RjgxNkY5RjYwNzZGRjk5Nzc5Qzc3MzM4NDVGRDgw M0ZBMDM1QTAeFw0yNTA5MTYxNDE0MjNaFw0yNTA5MjEyMDAxMjNaMDMxMTAvBgNV BAMTKDI4QjU1MEM4MjJFOTA5Njg2QTBFM0Q5RDdDNTI0NkMxNkMzRjg5Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu0zSEZw6keZLdL+k0Szwytd7m /p5xKgI0kx0ZOCOCed9ZCiOiwonWHrdVUPWV03ahQC77XVuUD/E0g9XjMCSoVjQ/ K4vohmpgIO6VsQDfN/JCaJ+rvZVItVAjmvnY6zXGuaWqx+3yMeYXkZGjomk71otk tGNGO2lFJbICPURrkQFcMY5I6qqQq9uktJ+TCROSIQEgYl4VLl/Px5NbeaSgH5db xn7aoU4kJdvtIPQ440TBt5uDutOJHoRuTkldq84D2FCgENVZtybqiRoz1OKvrJMn uMeqiMCzixM2PjN+xyDPiPmyzlPBHb6a3/VnRF/Vdrhakh6ndp5juP9H/PTlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKLVQyCLpCWhqDj2dfFJGwWw/ic8wHwYDVR0j BBgwFoAUQJ+Bb59gdv+Zd5x3M4Rf2AP6A1owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MEQ2NjE0MDQxMzVDQkM0QzlBMjZBN0UwQTQxMzk2RDQ0 NUUxRDEwMzk3QTE1RjUzN0Q4MjI4QzlBNzhFRUMzLzAvNDA5RjgxNkY5RjYwNzZG Rjk5Nzc5Qzc3MzM4NDVGRDgwM0ZBMDM1QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MDlGODE2RjlGNjA3NkZGOTk3 NzlDNzczMzg0NUZEODAzRkEwMzVBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzBENjYxNDA0MTM1Q0JDNEM5QTI2QTdFMEE0MTM5NkQ0NDVFMUQxMDM5 N0ExNUY1MzdEODIyOEM5QTc4RUVDMy8wLzQwOUY4MTZGOUY2MDc2RkY5OTc3OUM3 NzMzODQ1RkQ4MDNGQTAzNUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCFPEc9vtlBQv4ZNy5zdk78c4IB 1lW98Kt3Qsbb7JoaTJgph4Ksc1767CxV597REyXOg3jCrZtZdgHMpeYEnomycRNY TjqqQOLqg/tJDqXk25C6ipASTQWzdWqUWMNUQ1CZLhYrbJsckweRiLop24md4icz foCxYtQ+IDEWv83hWiD6yerr1zXaIU+mszOqspey6FWJjBQl+HriNawBZmioDOe0 UHKOBPhM3bdguZX64sQDeJZzycCvsk+wxsZRv1AyKq5rFh/xiwVN0Wzls5Q590cF 4qJcnFiNBzDlAZA14JzmLF9HximQTPrttkOrT/j2/XqOgKwSx+c5CRFeK3mq -----END CERTIFICATE-----Generated at Thu Sep 18 18:44:10 2025 by rpki-client