$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft File: 409F816F9F6076FF99779C7733845FD803FA035A.mft (raw, json) Hash identifier: tOfxCkjo7vfvDPNBszIgXcZqH/HunEQ/NlJ2AgHIZuU= Subject key identifier: 37:DE:D0:5B:E2:B4:02:CE:93:D6:57:9B:30:D3:38:76:D2:65:3C:F5 Authority key identifier: 40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A Certificate issuer: /CN=409F816F9F6076FF99779C7733845FD803FA035A Certificate serial: 487F35548CA9C5CD89092F74520EF717B7AA435D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft Manifest number: B9 Signing time: Tue 28 Apr 2026 02:19:10 +0000 Manifest this update: Tue 28 Apr 2026 02:14:10 +0000 Manifest next update: Sun 03 May 2026 08:06:10 +0000 Files and hashes: 1: 323830333a333935303a3a2f33322d3334203d3e203532323931.roa (hash: SfsePFXZjg5fB/jn+2H/UuuZjjNG1TCifwx3qKsGC0E=) 2: 409F816F9F6076FF99779C7733845FD803FA035A.crl (hash: 85vnzNF4MLaholBdHkP3R4yt/kyC6/X4rW0Jq6sbrkc=) 3: 3139302e3131312e3132342e302f32322d3235203d3e203532323931.roa (hash: /uoHvgXY1Vh2UFLq9AMfFybxONK8loaTpCVgZw9xfFs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 03 May 2026 08:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:7f:35:54:8c:a9:c5:cd:89:09:2f:74:52:0e:f7:17:b7:aa:43:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=409F816F9F6076FF99779C7733845FD803FA035A Validity Not Before: Apr 28 02:14:10 2026 GMT Not After : May 3 08:06:10 2026 GMT Subject: CN=37DED05BE2B402CE93D6579B30D33876D2653CF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f4:fa:4f:41:73:68:2d:92:23:dd:3a:a5:f5: a7:8a:4a:24:3b:18:a5:71:1c:b8:13:75:5a:9c:90: e3:ab:3e:e8:7c:8e:28:bb:52:1b:c8:cb:e9:c2:35: 4d:4f:bf:34:b5:6c:f1:fe:b6:cb:b9:10:11:ec:96: 01:a6:3e:31:5d:3a:75:66:b0:54:c7:13:1c:2d:9a: 59:52:b9:a8:c4:f7:72:6e:c3:9e:5e:bc:1f:f1:78: 8f:ea:fa:29:0a:fd:c3:5d:f9:14:18:e7:74:66:2f: 8c:c0:2b:a1:d7:00:31:44:e7:e4:eb:af:4c:4c:5c: a6:b3:58:5a:9c:b5:92:fb:73:16:e7:f1:64:04:2b: c3:96:bd:79:18:a0:9a:ea:ff:4a:e4:87:71:18:c2: 13:4a:46:f5:28:4f:1b:1d:49:88:ce:cb:29:a1:0c: 78:2c:68:0a:ad:98:7f:b3:b5:f5:81:4a:08:be:68: 0d:4e:22:78:74:45:5e:33:2a:eb:aa:a2:45:22:56: a5:16:dc:32:3e:fb:12:3a:fb:ed:4d:7d:e5:04:b5: 83:60:13:f2:ba:ec:d5:1a:af:53:64:dd:ca:41:57: 0e:14:8e:d5:7e:3e:2a:65:51:37:fd:2e:be:86:ff: e7:0d:df:ae:a8:27:9b:4a:8d:a0:0c:51:f6:9b:86: 4b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DE:D0:5B:E2:B4:02:CE:93:D6:57:9B:30:D3:38:76:D2:65:3C:F5 X509v3 Authority Key Identifier: keyid:40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:94:12:85:9f:c4:21:3d:0b:7a:0f:07:31:da:52:e7:9b:d4: 4e:e7:27:89:0e:b3:82:32:aa:9a:27:31:98:70:1d:3e:e7:7e: 5f:33:26:eb:e2:46:79:e5:fa:a1:a3:6c:f8:6e:57:96:6a:2c: 95:a6:24:aa:22:a4:4e:20:89:cb:b0:0e:fc:c1:80:70:9d:50: 14:8f:29:d0:e4:cf:d4:4e:53:2a:36:38:66:ec:8c:2d:da:4d: c3:68:43:25:5a:1a:7c:6d:e8:95:a6:8f:6c:fa:57:26:8d:64: fa:9e:02:90:33:b1:85:75:94:e3:81:26:e4:02:fb:38:89:45: 2c:af:50:42:db:2d:95:0f:e0:92:0d:04:2c:16:21:12:58:dc: 45:1e:ce:03:dd:80:0a:3f:f2:c1:aa:f2:56:3e:37:96:4a:47: 1e:44:c9:e4:bb:5f:2f:18:e1:bb:bc:66:f8:8d:a9:e6:10:9b: 64:eb:4d:d2:31:ba:db:ff:85:59:f2:a4:47:e9:17:f3:9b:6f: b6:df:fb:21:72:ee:8c:79:88:80:36:6e:ce:6f:51:3d:7e:76: e4:11:c2:46:3a:78:db:70:aa:26:81:53:2d:79:f9:b1:c7:3b: 01:28:77:bf:64:39:c3:f1:e3:cc:f5:8b:50:68:53:44:00:e6: 17:e5:26:a0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSH81VIypxc2JCS90Ug73F7eqQ10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5RjgxNkY5RjYwNzZGRjk5Nzc5Qzc3MzM4NDVGRDgw M0ZBMDM1QTAeFw0yNjA0MjgwMjE0MTBaFw0yNjA1MDMwODA2MTBaMDMxMTAvBgNV BAMTKDM3REVEMDVCRTJCNDAyQ0U5M0Q2NTc5QjMwRDMzODc2RDI2NTNDRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU9PpPQXNoLZIj3Tql9aeKSiQ7 GKVxHLgTdVqckOOrPuh8jii7UhvIy+nCNU1PvzS1bPH+tsu5EBHslgGmPjFdOnVm sFTHExwtmllSuajE93Juw55evB/xeI/q+ikK/cNd+RQY53RmL4zAK6HXADFE5+Tr r0xMXKazWFqctZL7cxbn8WQEK8OWvXkYoJrq/0rkh3EYwhNKRvUoTxsdSYjOyymh DHgsaAqtmH+ztfWBSgi+aA1OInh0RV4zKuuqokUiVqUW3DI++xI6++1NfeUEtYNg E/K67NUar1Nk3cpBVw4UjtV+PiplUTf9Lr6G/+cN366oJ5tKjaAMUfabhkt/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUN97QW+K0As6T1lebMNM4dtJlPPUwHwYDVR0j BBgwFoAUQJ+Bb59gdv+Zd5x3M4Rf2AP6A1owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MEQ2NjE0MDQxMzVDQkM0QzlBMjZBN0UwQTQxMzk2RDQ0 NUUxRDEwMzk3QTE1RjUzN0Q4MjI4QzlBNzhFRUMzLzAvNDA5RjgxNkY5RjYwNzZG Rjk5Nzc5Qzc3MzM4NDVGRDgwM0ZBMDM1QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MDlGODE2RjlGNjA3NkZGOTk3 NzlDNzczMzg0NUZEODAzRkEwMzVBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzBENjYxNDA0MTM1Q0JDNEM5QTI2QTdFMEE0MTM5NkQ0NDVFMUQxMDM5 N0ExNUY1MzdEODIyOEM5QTc4RUVDMy8wLzQwOUY4MTZGOUY2MDc2RkY5OTc3OUM3 NzMzODQ1RkQ4MDNGQTAzNUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBalBKFn8QhPQt6Dwcx2lLnm9RO 5yeJDrOCMqqaJzGYcB0+535fMybr4kZ55fqho2z4bleWaiyVpiSqIqROIInLsA78 wYBwnVAUjynQ5M/UTlMqNjhm7Iwt2k3DaEMlWhp8beiVpo9s+lcmjWT6ngKQM7GF dZTjgSbkAvs4iUUsr1BC2y2VD+CSDQQsFiESWNxFHs4D3YAKP/LBqvJWPjeWSkce RMnku18vGOG7vGb4janmEJtk603SMbrb/4VZ8qRH6Rfzm2+23/shcu6MeYiANm7O b1E9fnbkEcJGOnjbcKomgVMtefmxxzsBKHe/ZDnD8ePM9YtQaFNEAOYX5Sag -----END CERTIFICATE-----Generated at Thu Apr 30 05:52:12 2026 by rpki-client