$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3AFD6CAD263EDDD91A18FB7FAD053A7707CFD10DC19CB5C2128B5F9089791E95/0/3D231E14A658422E6C228D7F5D07188E2FED88C5.mft File: 3D231E14A658422E6C228D7F5D07188E2FED88C5.mft (raw, json) Hash identifier: pKRLP5dos8HBiYG65ra3qUmt27pO+UtGUDXZEPTE55M= Subject key identifier: 6C:34:9D:91:BA:BC:A9:3C:DE:1D:EF:FB:00:A7:AC:09:1D:4B:98:CC Authority key identifier: 3D:23:1E:14:A6:58:42:2E:6C:22:8D:7F:5D:07:18:8E:2F:ED:88:C5 Certificate issuer: /CN=3D231E14A658422E6C228D7F5D07188E2FED88C5 Certificate serial: 31FF709644CC6825A532B9BE7D201DE04D08E958 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D231E14A658422E6C228D7F5D07188E2FED88C5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3AFD6CAD263EDDD91A18FB7FAD053A7707CFD10DC19CB5C2128B5F9089791E95/0/3D231E14A658422E6C228D7F5D07188E2FED88C5.mft Manifest number: 01E3 Signing time: Mon 02 Nov 2026 13:35:00 +0000 Manifest this update: Mon 02 Nov 2026 13:30:00 +0000 Manifest next update: Sat 07 Nov 2026 01:13:00 +0000 Files and hashes: 1: 323830313a31303a333830303a3a2f34382d3438203d3e203237393531.roa (hash: EdIzzvnIRs59OwNGnRIyf1bPzzmuqZf09TX13/tT7Rk=) 2: 3D231E14A658422E6C228D7F5D07188E2FED88C5.crl (hash: EEVQTaLr/CboUQfcncNT/T1JMWvAeMiCMNuBHdbQ2io=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3AFD6CAD263EDDD91A18FB7FAD053A7707CFD10DC19CB5C2128B5F9089791E95/0/3D231E14A658422E6C228D7F5D07188E2FED88C5.crl rsync://repository.lacnic.net/rpki/lacnic/3AFD6CAD263EDDD91A18FB7FAD053A7707CFD10DC19CB5C2128B5F9089791E95/0/3D231E14A658422E6C228D7F5D07188E2FED88C5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D231E14A658422E6C228D7F5D07188E2FED88C5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Nov 2026 23:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ff:70:96:44:cc:68:25:a5:32:b9:be:7d:20:1d:e0:4d:08:e9:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D231E14A658422E6C228D7F5D07188E2FED88C5 Validity Not Before: Nov 2 13:30:00 2026 GMT Not After : Nov 7 01:13:00 2026 GMT Subject: CN=6C349D91BABCA93CDE1DEFFB00A7AC091D4B98CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:40:09:77:78:51:56:82:df:b3:c7:ab:e9:e4: bd:f3:b6:18:7d:bb:c1:77:90:88:54:5a:6e:6a:c4: 66:92:92:75:76:af:1e:9b:ac:23:e5:f6:bb:82:b9: 78:6d:a4:22:ca:26:b1:a6:d9:75:b6:74:ac:1c:77: 65:04:e5:8d:ca:c8:fa:21:32:36:8b:00:32:2e:d7: 68:a9:6c:81:05:e6:e8:6f:e1:fe:62:c5:b8:59:03: 34:c9:5d:14:80:4c:53:1b:10:b0:93:0a:df:0f:21: 00:f4:6a:2d:a0:f0:77:7b:53:0c:03:7a:72:51:1b: 9b:19:3f:12:a4:ad:ba:c6:de:34:18:48:d6:ea:62: bb:cf:d7:f1:b9:a3:04:1a:2c:95:2b:83:c5:55:bf: 0f:4c:b5:f1:b7:03:d3:06:01:24:6b:0b:01:ed:4e: 9b:fd:db:5d:0b:13:ce:b6:80:fe:5b:e4:67:d8:25: f3:9e:21:78:04:fd:8b:c2:91:87:8b:40:a3:40:3d: a0:6b:cc:34:3e:70:e8:72:ad:ba:2e:07:81:ea:41: 8f:c5:89:d2:07:39:05:6f:ec:f9:9f:f7:3f:4d:fc: 92:02:27:7b:69:67:ec:d9:3d:ec:6e:03:a4:4e:85: a4:43:da:df:59:8b:e7:d7:f4:48:01:1c:5e:50:58: bb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:34:9D:91:BA:BC:A9:3C:DE:1D:EF:FB:00:A7:AC:09:1D:4B:98:CC X509v3 Authority Key Identifier: keyid:3D:23:1E:14:A6:58:42:2E:6C:22:8D:7F:5D:07:18:8E:2F:ED:88:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3AFD6CAD263EDDD91A18FB7FAD053A7707CFD10DC19CB5C2128B5F9089791E95/0/3D231E14A658422E6C228D7F5D07188E2FED88C5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D231E14A658422E6C228D7F5D07188E2FED88C5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3AFD6CAD263EDDD91A18FB7FAD053A7707CFD10DC19CB5C2128B5F9089791E95/0/3D231E14A658422E6C228D7F5D07188E2FED88C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:db:11:63:84:72:08:d1:47:d8:21:11:fe:c6:42:63:43:25: 64:7a:40:c6:a9:54:03:b2:3f:4a:8d:a8:c8:d5:bf:18:fa:55: f2:58:8f:c5:b9:92:bc:54:2c:1e:2c:3d:9a:2e:f6:dd:90:82: 84:e1:77:6b:e7:8e:d1:45:2d:a9:0f:d9:b3:15:26:9c:a9:24: 5f:56:9f:9b:f7:4d:e7:b5:03:a1:b5:13:4b:3b:d8:15:9e:53: be:fe:30:20:c7:3a:ec:51:48:4a:b5:0f:93:eb:2d:b6:c4:a2: 27:7f:16:67:fa:0c:f7:7e:04:d8:5a:57:d0:e7:4b:10:f9:1e: e1:3c:56:d3:30:e8:c7:53:ac:7b:f8:d8:e7:ff:b1:22:d3:46: 7d:b7:89:54:62:3c:46:ce:24:8d:e1:f2:fd:45:3b:a4:03:25: b1:b6:06:35:4f:03:c8:4f:0d:88:a8:7c:b7:56:52:68:11:8b: 3c:01:54:17:61:eb:1e:2c:3d:63:f8:b1:ee:9e:41:89:16:09: e0:1a:66:95:3a:5a:28:fd:a7:0b:3f:68:f2:19:48:f1:05:45: d7:17:53:f5:bc:0b:bc:39:fa:52:ea:d7:75:a2:c3:e4:1f:1c: f2:49:21:94:fa:50:16:5e:fe:6a:ca:a6:81:75:f6:29:3a:64: 45:b6:12:17 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMf9wlkTMaCWlMrm+fSAd4E0I6VgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QyMzFFMTRBNjU4NDIyRTZDMjI4RDdGNUQwNzE4OEUy RkVEODhDNTAeFw0yNjExMDIxMzMwMDBaFw0yNjExMDcwMTEzMDBaMDMxMTAvBgNV BAMTKDZDMzQ5RDkxQkFCQ0E5M0NERTFERUZGQjAwQTdBQzA5MUQ0Qjk4Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQAl3eFFWgt+zx6vp5L3zthh9 u8F3kIhUWm5qxGaSknV2rx6brCPl9ruCuXhtpCLKJrGm2XW2dKwcd2UE5Y3KyPoh MjaLADIu12ipbIEF5uhv4f5ixbhZAzTJXRSATFMbELCTCt8PIQD0ai2g8Hd7UwwD enJRG5sZPxKkrbrG3jQYSNbqYrvP1/G5owQaLJUrg8VVvw9MtfG3A9MGASRrCwHt Tpv9210LE862gP5b5GfYJfOeIXgE/YvCkYeLQKNAPaBrzDQ+cOhyrbouB4HqQY/F idIHOQVv7Pmf9z9N/JICJ3tpZ+zZPexuA6ROhaRD2t9Zi+fX9EgBHF5QWLuvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUbDSdkbq8qTzeHe/7AKesCR1LmMwwHwYDVR0j BBgwFoAUPSMeFKZYQi5sIo1/XQcYji/tiMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zQUZENkNBRDI2M0VEREQ5MUExOEZCN0ZBRDA1M0E3NzA3 Q0ZEMTBEQzE5Q0I1QzIxMjhCNUY5MDg5NzkxRTk1LzAvM0QyMzFFMTRBNjU4NDIy RTZDMjI4RDdGNUQwNzE4OEUyRkVEODhDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDIzMUUxNEE2NTg0MjJFNkMy MjhEN0Y1RDA3MTg4RTJGRUQ4OEM1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0FGRDZDQUQyNjNFREREOTFBMThGQjdGQUQwNTNBNzcwN0NGRDEwREMx OUNCNUMyMTI4QjVGOTA4OTc5MUU5NS8wLzNEMjMxRTE0QTY1ODQyMkU2QzIyOEQ3 RjVEMDcxODhFMkZFRDg4QzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAh2xFjhHII0UfYIRH+xkJjQyVk ekDGqVQDsj9KjajI1b8Y+lXyWI/FuZK8VCweLD2aLvbdkIKE4Xdr547RRS2pD9mz FSacqSRfVp+b903ntQOhtRNLO9gVnlO+/jAgxzrsUUhKtQ+T6y22xKInfxZn+gz3 fgTYWlfQ50sQ+R7hPFbTMOjHU6x7+Njn/7Ei00Z9t4lUYjxGziSN4fL9RTukAyWx tgY1TwPITw2IqHy3VlJoEYs8AVQXYeseLD1j+LHunkGJFgngGmaVOloo/acLP2jy GUjxBUXXF1P1vAu8OfpS6td1osPkHxzySSGU+lAWXv5qyqaBdfYpOmRFthIX -----END CERTIFICATE-----Generated at Mon Nov 2 21:16:57 2026 by rpki-client