
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft
File: 409F816F9F6076FF99779C7733845FD803FA035A.mft (raw, json)
Hash identifier: Xx+P0yUs872jD6ipupFhD1B1PPKwpPpKp2cJWz3xckk=
Subject key identifier: 9F:F2:65:39:08:8A:FA:5D:65:BE:42:A3:41:8C:6E:68:2C:F9:7B:08
Authority key identifier: 40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A
Certificate issuer: /CN=409F816F9F6076FF99779C7733845FD803FA035A
Certificate serial: 220E572CA14F93C45F334A63B8A441EE86F43FB9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft
Manifest number: B3
Signing time: Sat 18 Apr 2026 02:54:34 +0000
Manifest this update: Sat 18 Apr 2026 02:49:34 +0000
Manifest next update: Thu 23 Apr 2026 05:57:34 +0000
Files and hashes: 1: 323830333a333935303a3a2f33322d3334203d3e203532323931.roa (hash: SfsePFXZjg5fB/jn+2H/UuuZjjNG1TCifwx3qKsGC0E=)
2: 409F816F9F6076FF99779C7733845FD803FA035A.crl (hash: rtmFZOCbZZehar5oDBeDPDd8NDLZClXED5PUa+/xgRM=)
3: 3139302e3131312e3132342e302f32322d3235203d3e203532323931.roa (hash: /uoHvgXY1Vh2UFLq9AMfFybxONK8loaTpCVgZw9xfFs=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl
rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 22 Apr 2026 04:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:0e:57:2c:a1:4f:93:c4:5f:33:4a:63:b8:a4:41:ee:86:f4:3f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409F816F9F6076FF99779C7733845FD803FA035A
Validity
Not Before: Apr 18 02:49:34 2026 GMT
Not After : Apr 23 05:57:34 2026 GMT
Subject: CN=9FF26539088AFA5D65BE42A3418C6E682CF97B08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:80:08:30:0f:1e:59:5d:88:05:6f:91:53:
66:8b:70:66:25:8e:48:12:20:85:f3:0e:0f:91:2f:
5e:1d:93:e9:23:4c:25:af:7f:94:87:a4:30:13:ae:
44:8e:79:a8:55:70:4a:51:a6:a0:8d:01:16:14:95:
2a:74:e9:22:ca:92:97:58:4b:f6:39:24:69:ad:61:
a8:0e:95:48:da:92:b1:6a:1d:88:d6:81:1d:d6:b2:
82:23:c7:67:82:03:7d:8a:4b:e9:cf:36:d9:e2:de:
21:29:c7:f9:88:ee:c2:42:1e:b7:e8:f0:b6:0e:d4:
25:ac:e5:e8:77:79:e6:87:70:a2:61:10:4f:9d:0b:
bc:63:da:47:64:2d:37:fb:aa:40:a7:64:db:6b:24:
20:d3:1c:80:0f:28:85:48:59:6b:b8:72:47:8f:9e:
25:48:35:11:8b:9b:09:15:cd:6c:a8:cd:5f:aa:1e:
74:1c:95:01:90:9e:2f:ab:b5:fb:e0:8f:da:ce:8c:
50:3c:03:18:33:d0:58:e5:c9:e9:13:73:1c:33:a0:
1c:09:a2:22:f7:28:4c:5c:e9:eb:4e:37:81:fe:79:
ad:7d:d4:58:df:66:31:1c:0a:a7:e0:62:0e:b3:e9:
d4:a8:55:58:11:36:12:b6:4a:db:a3:c6:6a:47:38:
ea:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F2:65:39:08:8A:FA:5D:65:BE:42:A3:41:8C:6E:68:2C:F9:7B:08
X509v3 Authority Key Identifier:
keyid:40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:81:71:1e:9b:3e:fe:fd:13:66:46:a2:c6:cc:32:76:99:89:
2c:a2:db:1c:43:71:41:96:48:8d:e3:2d:82:5a:44:42:84:d6:
21:bd:f2:26:37:45:49:78:c5:1f:c7:99:27:18:5e:53:b7:91:
9c:64:5d:ad:fa:29:4c:f2:1e:a6:37:ab:26:59:67:8b:f5:80:
04:a1:00:12:68:88:c4:b9:21:9e:98:ce:5a:f2:d2:2f:48:49:
36:b7:ad:37:27:3d:30:50:01:14:19:08:f8:a9:fb:29:e6:3a:
7f:4c:60:92:38:df:f6:4b:94:74:34:e9:39:04:93:03:b7:34:
67:f6:b4:22:05:a1:31:61:16:fa:be:58:e5:b6:4e:2b:d2:23:
b8:cb:2a:cf:23:35:68:de:2d:8b:dd:1c:f1:31:90:e4:42:ea:
85:5d:98:01:1a:a4:9e:7c:ef:af:6a:42:c3:45:9d:6e:bb:89:
b6:b6:5e:28:4c:6f:0e:61:cc:5d:c7:3f:c7:17:f0:10:fc:b6:
05:06:9d:94:65:0b:f2:16:5c:5a:d6:7d:e6:e6:f0:db:e8:e8:
68:33:45:4b:dc:57:22:51:48:be:41:12:21:29:7e:e2:b4:b0:
19:9e:fb:ab:47:8a:1c:31:c7:68:b4:49:92:e0:7d:77:c2:dc:
79:32:d7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:38:45 2026 by rpki-client