$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft File: 409F816F9F6076FF99779C7733845FD803FA035A.mft (raw, json) Hash identifier: LgEet9V/9kHTzYM7mpR19TmdqNoGlhcropz5KbGcGUY= Subject key identifier: CD:23:6E:F9:D1:7B:C8:20:0A:5C:FD:11:0A:1D:06:57:0C:C8:0A:5C Authority key identifier: 40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A Certificate issuer: /CN=409F816F9F6076FF99779C7733845FD803FA035A Certificate serial: 1D3561BD64A8D5C6369411A98404449413B333D6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft Manifest number: 1E Signing time: Fri 20 Jun 2025 11:52:43 +0000 Manifest this update: Fri 20 Jun 2025 11:47:43 +0000 Manifest next update: Thu 26 Jun 2025 09:33:43 +0000 Files and hashes: 1: 409F816F9F6076FF99779C7733845FD803FA035A.crl (hash: IQ33Cjx2pjzXiEst+Gg2mXqfPtAwzTNE1I+BlwWlkPI=) 2: 323830333a333935303a3a2f33322d3334203d3e203532323931.roa (hash: sQl+Jdk75TC8rTilvhDyi/LCaGx2bc4XbEcdHfeET5k=) 3: 3139302e3131312e3132342e302f32322d3235203d3e203532323931.roa (hash: thEPwiArK3TsQ/dQnkYHJ4u9ceV03PLElIG9YtbZdKU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Jun 2025 11:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:35:61:bd:64:a8:d5:c6:36:94:11:a9:84:04:44:94:13:b3:33:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=409F816F9F6076FF99779C7733845FD803FA035A Validity Not Before: Jun 20 11:47:43 2025 GMT Not After : Jun 26 09:33:43 2025 GMT Subject: CN=CD236EF9D17BC8200A5CFD110A1D06570CC80A5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:53:72:87:0e:b0:ac:93:19:c7:fd:26:21:7f: 60:87:1f:19:b0:c4:6c:98:98:c8:ad:d7:5a:e7:56: 92:7b:09:7b:95:6c:de:c0:e7:0a:59:28:bb:ef:93: 33:98:95:7d:df:0e:d0:eb:df:af:99:c2:f2:ce:81: d5:ae:dd:ec:0f:f0:0c:30:12:58:ce:81:a6:0a:d5: 3c:0c:93:6c:35:e0:39:9f:c0:96:4c:9f:eb:30:31: 41:8e:82:1f:77:76:8a:66:f8:20:6f:cf:55:48:f2: 67:71:a0:94:ef:d4:34:d1:5d:6d:41:96:67:01:b9: 16:ed:48:03:f2:48:49:22:be:19:50:72:57:9e:9a: d8:86:92:d2:cf:46:e4:0c:c4:34:3d:be:12:b8:88: 60:6b:4d:b8:c1:1f:44:67:65:33:14:2b:9c:77:c2: 15:f7:38:1f:d9:c2:84:76:79:2d:0e:df:da:83:3e: 93:3b:a1:72:fc:f6:76:ec:1f:75:46:c2:c6:ff:46: 08:50:b1:de:0e:e7:66:5b:51:92:47:4f:1f:54:1d: 81:d9:3d:dd:2c:42:13:9b:53:eb:b7:57:75:01:3b: 73:2b:1f:fe:11:41:84:c4:3a:8d:4e:c8:a6:fe:3b: fc:50:21:f5:46:93:b1:a7:7e:4e:ec:d2:03:ce:a5: 55:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:23:6E:F9:D1:7B:C8:20:0A:5C:FD:11:0A:1D:06:57:0C:C8:0A:5C X509v3 Authority Key Identifier: keyid:40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:a4:35:47:2f:c9:05:5f:6b:4e:f8:d2:0c:a0:26:60:c6:93: 24:0b:c4:b1:93:ca:43:fe:88:40:31:12:ba:21:a9:ac:cb:71: 59:87:e4:21:13:bc:08:41:6b:70:28:38:5a:16:de:71:ae:ac: b9:45:9f:91:b0:cf:32:51:79:5f:3c:67:9e:5e:0c:91:c2:c9: a8:43:62:03:40:7f:74:c5:77:52:f4:4c:b3:15:b1:38:81:95: 52:73:fe:42:07:3d:94:6d:39:76:a8:6e:15:a8:cb:e8:8a:c8: 2e:ac:58:76:81:8d:71:5e:6f:4c:3e:49:e1:8b:11:b9:df:9f: d8:0c:70:39:20:81:45:ae:99:e7:07:5b:7e:90:6e:5f:62:e6: 0d:97:d8:06:ea:6a:b7:a5:70:2f:7e:7c:06:46:f6:c6:1d:46: 80:d4:8d:3d:02:eb:5f:1a:1d:69:f4:27:43:18:c3:24:66:91: 69:6b:e1:0e:7d:e9:59:0c:04:4e:ce:41:33:4f:97:33:77:2e: 08:6a:c2:70:ac:50:5a:4e:09:e5:df:b4:5d:61:9c:0e:8d:ce: a2:85:25:ab:9b:88:23:35:d8:61:71:30:de:bf:83:3b:ee:b7: f8:36:7d:05:ef:20:0c:52:5c:08:8b:14:c2:01:8f:64:e0:4d: cb:37:c3:fb -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHTVhvWSo1cY2lBGphARElBOzM9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5RjgxNkY5RjYwNzZGRjk5Nzc5Qzc3MzM4NDVGRDgw M0ZBMDM1QTAeFw0yNTA2MjAxMTQ3NDNaFw0yNTA2MjYwOTMzNDNaMDMxMTAvBgNV BAMTKENEMjM2RUY5RDE3QkM4MjAwQTVDRkQxMTBBMUQwNjU3MENDODBBNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRU3KHDrCskxnH/SYhf2CHHxmw xGyYmMit11rnVpJ7CXuVbN7A5wpZKLvvkzOYlX3fDtDr36+ZwvLOgdWu3ewP8Aww EljOgaYK1TwMk2w14DmfwJZMn+swMUGOgh93dopm+CBvz1VI8mdxoJTv1DTRXW1B lmcBuRbtSAPySEkivhlQcleemtiGktLPRuQMxDQ9vhK4iGBrTbjBH0RnZTMUK5x3 whX3OB/ZwoR2eS0O39qDPpM7oXL89nbsH3VGwsb/RghQsd4O52ZbUZJHTx9UHYHZ Pd0sQhObU+u3V3UBO3MrH/4RQYTEOo1OyKb+O/xQIfVGk7Gnfk7s0gPOpVWpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUzSNu+dF7yCAKXP0RCh0GVwzIClwwHwYDVR0j BBgwFoAUQJ+Bb59gdv+Zd5x3M4Rf2AP6A1owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MEQ2NjE0MDQxMzVDQkM0QzlBMjZBN0UwQTQxMzk2RDQ0 NUUxRDEwMzk3QTE1RjUzN0Q4MjI4QzlBNzhFRUMzLzAvNDA5RjgxNkY5RjYwNzZG Rjk5Nzc5Qzc3MzM4NDVGRDgwM0ZBMDM1QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MDlGODE2RjlGNjA3NkZGOTk3 NzlDNzczMzg0NUZEODAzRkEwMzVBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzBENjYxNDA0MTM1Q0JDNEM5QTI2QTdFMEE0MTM5NkQ0NDVFMUQxMDM5 N0ExNUY1MzdEODIyOEM5QTc4RUVDMy8wLzQwOUY4MTZGOUY2MDc2RkY5OTc3OUM3 NzMzODQ1RkQ4MDNGQTAzNUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJpDVHL8kFX2tO+NIMoCZgxpMk C8Sxk8pD/ohAMRK6Iamsy3FZh+QhE7wIQWtwKDhaFt5xrqy5RZ+RsM8yUXlfPGee XgyRwsmoQ2IDQH90xXdS9EyzFbE4gZVSc/5CBz2UbTl2qG4VqMvoisgurFh2gY1x Xm9MPknhixG535/YDHA5IIFFrpnnB1t+kG5fYuYNl9gG6mq3pXAvfnwGRvbGHUaA 1I09AutfGh1p9CdDGMMkZpFpa+EOfelZDAROzkEzT5czdy4IasJwrFBaTgnl37Rd YZwOjc6ihSWrm4gjNdhhcTDev4M77rf4Nn0F7yAMUlwIixTCAY9k4E3LN8P7 -----END CERTIFICATE-----Generated at Sun Jun 22 08:22:23 2025 by rpki-client