$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAF2CD54D9F02C644333775CEC5E33041C81E7A6C0863FA98B1CB6ABD85633F5/0/31F68B49343FE18C99A4C312FCEA2C54B701CE74.mft File: 31F68B49343FE18C99A4C312FCEA2C54B701CE74.mft (raw, json) Hash identifier: kYzRcqjd/mREGQuX4hux1E7F2wFky2cf3si2Y/b5HFU= Subject key identifier: E3:C6:C7:15:CF:FD:CC:2B:E4:C5:96:B3:B7:E9:A0:55:A5:9F:C8:89 Authority key identifier: 31:F6:8B:49:34:3F:E1:8C:99:A4:C3:12:FC:EA:2C:54:B7:01:CE:74 Certificate issuer: /CN=31F68B49343FE18C99A4C312FCEA2C54B701CE74 Certificate serial: 5DC33D4978CC236EAC5FF4F3B4521B8C9FB0D387 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31F68B49343FE18C99A4C312FCEA2C54B701CE74.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DAF2CD54D9F02C644333775CEC5E33041C81E7A6C0863FA98B1CB6ABD85633F5/0/31F68B49343FE18C99A4C312FCEA2C54B701CE74.mft Manifest number: 0131 Signing time: Tue 21 Oct 2025 22:06:18 +0000 Manifest this update: Tue 21 Oct 2025 22:01:18 +0000 Manifest next update: Mon 27 Oct 2025 10:43:18 +0000 Files and hashes: 1: 31F68B49343FE18C99A4C312FCEA2C54B701CE74.crl (hash: JJOSp+PNwtKX9TEoTTN9d4EXzSyaavtw0k2GTSudcDU=) 2: 34352e3233392e3131342e302f32342d3234203d3e203532333939.roa (hash: 5+G/u49IwJNltTLiWbpZeffdGiiA4C6m1ryLy4j1GeM=) 3: 323830333a653261303a3a2f33322d3438203d3e203532333939.roa (hash: 96/1cC59pFsT1OBV562pX5EWU+w2PBpSYynTCnBDLAw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DAF2CD54D9F02C644333775CEC5E33041C81E7A6C0863FA98B1CB6ABD85633F5/0/31F68B49343FE18C99A4C312FCEA2C54B701CE74.crl rsync://repository.lacnic.net/rpki/lacnic/DAF2CD54D9F02C644333775CEC5E33041C81E7A6C0863FA98B1CB6ABD85633F5/0/31F68B49343FE18C99A4C312FCEA2C54B701CE74.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31F68B49343FE18C99A4C312FCEA2C54B701CE74.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Oct 2025 08:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c3:3d:49:78:cc:23:6e:ac:5f:f4:f3:b4:52:1b:8c:9f:b0:d3:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F68B49343FE18C99A4C312FCEA2C54B701CE74 Validity Not Before: Oct 21 22:01:18 2025 GMT Not After : Oct 27 10:43:18 2025 GMT Subject: CN=E3C6C715CFFDCC2BE4C596B3B7E9A055A59FC889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:37:9f:fb:92:10:b2:4c:b3:34:a5:90:53:03: f2:e3:6a:ef:14:13:f9:b2:38:70:8b:7d:30:fa:f1: bf:95:4f:d8:34:a1:15:68:e4:7b:cb:58:57:5f:97: 13:8c:fa:de:df:2c:10:77:32:13:68:b3:ed:d9:78: 41:96:ef:59:a5:54:0e:71:65:75:91:d4:6d:88:b7: 4f:ea:96:fc:4a:7b:31:37:c6:aa:f2:7e:a7:60:60: e9:7c:da:ac:20:34:ff:a8:7d:14:d3:0f:2a:c8:42: 26:d1:2b:2a:9d:5f:27:73:d1:98:ea:6e:c5:ae:a8: 7e:f8:69:ed:52:a3:10:3b:fe:d7:aa:5d:cd:20:40: c7:a2:93:f0:69:a1:82:db:94:ae:07:b0:1f:94:7e: e5:2d:fe:6e:93:aa:62:00:b7:87:44:51:e9:d9:d8: f2:0c:ea:e9:83:ce:39:70:7e:e3:bf:49:cf:cd:c9: 96:98:39:8c:6d:e4:0d:38:14:c3:00:27:32:ba:bd: b1:8b:96:0b:69:6f:8c:3f:aa:60:da:64:50:3f:2c: c7:6d:21:1b:d5:10:db:32:4a:d1:46:d2:20:b8:24: 2e:b0:f5:27:42:8b:7f:ac:c0:9f:27:2c:36:b8:5a: b9:c7:33:cc:6e:86:73:fd:f8:43:18:20:49:cf:f7: 71:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C6:C7:15:CF:FD:CC:2B:E4:C5:96:B3:B7:E9:A0:55:A5:9F:C8:89 X509v3 Authority Key Identifier: keyid:31:F6:8B:49:34:3F:E1:8C:99:A4:C3:12:FC:EA:2C:54:B7:01:CE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DAF2CD54D9F02C644333775CEC5E33041C81E7A6C0863FA98B1CB6ABD85633F5/0/31F68B49343FE18C99A4C312FCEA2C54B701CE74.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31F68B49343FE18C99A4C312FCEA2C54B701CE74.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAF2CD54D9F02C644333775CEC5E33041C81E7A6C0863FA98B1CB6ABD85633F5/0/31F68B49343FE18C99A4C312FCEA2C54B701CE74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a2:ab:85:bc:95:2f:9c:5f:55:ce:27:7a:b5:7f:a8:74:17: bd:b0:19:93:7b:88:9e:c9:64:57:c3:97:9b:2f:a1:0d:d3:87: 8c:4b:05:2b:84:d2:69:83:83:6b:48:70:97:d2:cd:8f:2b:b6: 1d:97:9a:44:1f:8c:1b:24:31:1e:51:bf:6a:ba:a7:94:da:a0: fd:4a:16:3b:78:3a:43:f1:34:61:09:d1:df:12:9f:8e:d2:d7: bc:f1:59:38:e0:46:96:72:1a:06:40:82:e5:f4:37:ce:fe:e6: 04:74:1f:49:0e:bc:42:a9:73:67:40:40:bf:9a:c6:f6:ef:84: 5a:4c:5e:2b:ae:0b:b1:83:72:c7:39:a5:e1:08:b0:49:77:a2: 76:ba:15:00:73:85:94:49:2d:84:ca:22:17:6d:64:69:d0:fe: e6:a6:93:fc:7c:1e:ce:c6:f5:dc:93:97:65:8d:03:ff:bb:04: d6:be:9f:b9:cd:9f:ae:69:ba:5d:4b:64:b7:60:94:93:69:96: 13:5c:f7:cb:57:44:7a:a4:d2:5e:2f:d6:9a:dc:4c:a4:88:53: 33:d1:9d:55:5b:cc:ba:c2:b3:2b:15:90:98:da:c3:0f:09:8b: 43:b6:8d:98:f5:e0:d4:a5:7e:f3:5c:50:d2:0d:ac:cb:82:f6: a8:1b:9b:20 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXcM9SXjMI26sX/TztFIbjJ+w04cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNjhCNDkzNDNGRTE4Qzk5QTRDMzEyRkNFQTJDNTRC NzAxQ0U3NDAeFw0yNTEwMjEyMjAxMThaFw0yNTEwMjcxMDQzMThaMDMxMTAvBgNV BAMTKEUzQzZDNzE1Q0ZGRENDMkJFNEM1OTZCM0I3RTlBMDU1QTU5RkM4ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhN5/7khCyTLM0pZBTA/Ljau8U E/myOHCLfTD68b+VT9g0oRVo5HvLWFdflxOM+t7fLBB3MhNos+3ZeEGW71mlVA5x ZXWR1G2It0/qlvxKezE3xqryfqdgYOl82qwgNP+ofRTTDyrIQibRKyqdXydz0Zjq bsWuqH74ae1SoxA7/teqXc0gQMeik/BpoYLblK4HsB+UfuUt/m6TqmIAt4dEUenZ 2PIM6umDzjlwfuO/Sc/NyZaYOYxt5A04FMMAJzK6vbGLlgtpb4w/qmDaZFA/LMdt IRvVENsyStFG0iC4JC6w9SdCi3+swJ8nLDa4WrnHM8xuhnP9+EMYIEnP93F7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU48bHFc/9zCvkxZazt+mgVaWfyIkwHwYDVR0j BBgwFoAUMfaLSTQ/4YyZpMMS/OosVLcBznQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EQUYyQ0Q1NEQ5RjAyQzY0NDMzMzc3NUNFQzVFMzMwNDFD ODFFN0E2QzA4NjNGQTk4QjFDQjZBQkQ4NTYzM0Y1LzAvMzFGNjhCNDkzNDNGRTE4 Qzk5QTRDMzEyRkNFQTJDNTRCNzAxQ0U3NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMUY2OEI0OTM0M0ZFMThDOTlB NEMzMTJGQ0VBMkM1NEI3MDFDRTc0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREFGMkNENTREOUYwMkM2NDQzMzM3NzVDRUM1RTMzMDQxQzgxRTdBNkMw ODYzRkE5OEIxQ0I2QUJEODU2MzNGNS8wLzMxRjY4QjQ5MzQzRkUxOEM5OUE0QzMx MkZDRUEyQzU0QjcwMUNFNzQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB8oquFvJUvnF9Vzid6tX+odBe9 sBmTe4ieyWRXw5ebL6EN04eMSwUrhNJpg4NrSHCX0s2PK7Ydl5pEH4wbJDEeUb9q uqeU2qD9ShY7eDpD8TRhCdHfEp+O0te88Vk44EaWchoGQILl9DfO/uYEdB9JDrxC qXNnQEC/msb274RaTF4rrguxg3LHOaXhCLBJd6J2uhUAc4WUSS2EyiIXbWRp0P7m ppP8fB7OxvXck5dljQP/uwTWvp+5zZ+uabpdS2S3YJSTaZYTXPfLV0R6pNJeL9aa 3EykiFMz0Z1VW8y6wrMrFZCY2sMPCYtDto2Y9eDUpX7zXFDSDazLgvaoG5sg -----END CERTIFICATE-----Generated at Wed Oct 22 07:35:30 2025 by rpki-client