$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft File: 31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft (raw, json) Hash identifier: HLm/wUOqMxw5U9+T+rEnedIj7UVuai9/zXO0EY/XfLk= Subject key identifier: 9B:57:70:83:56:BE:D5:20:C1:A8:FF:09:5F:E3:77:2E:8A:6D:D4:45 Authority key identifier: 31:DB:F2:C4:90:8B:5E:E6:D3:D3:4A:E4:DE:B8:17:0B:E6:2F:23:A9 Certificate issuer: /CN=31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9 Certificate serial: 0D75895D6D66E9F6891BDF5D2FB79FFCF0EF2DDF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft Manifest number: 0138 Signing time: Tue 04 Nov 2025 08:07:18 +0000 Manifest this update: Tue 04 Nov 2025 08:02:18 +0000 Manifest next update: Sun 09 Nov 2025 12:16:18 +0000 Files and hashes: 1: 323830333a633339303a3a2f33322d3438203d3e20323733303133.roa (hash: lDnjpbO7/tGbG8jh0+fryDKYSvl34wfFaaYjg+KmMs0=) 2: 31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl (hash: rv9ACPI0yE9TAgsNnN4nFvcKj0C82rMGd/z+ut4oUoc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:75:89:5d:6d:66:e9:f6:89:1b:df:5d:2f:b7:9f:fc:f0:ef:2d:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9 Validity Not Before: Nov 4 08:02:18 2025 GMT Not After : Nov 9 12:16:18 2025 GMT Subject: CN=9B57708356BED520C1A8FF095FE3772E8A6DD445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c5:b0:d9:5e:12:16:33:f8:c4:79:45:51:88: 31:dd:1d:60:36:5d:6c:ff:c4:aa:8c:0f:b5:73:06: b8:8d:ea:e6:62:ff:66:98:e5:79:7b:c0:f1:f9:15: 86:bf:52:2c:82:4d:4e:82:02:40:54:4e:68:98:47: e6:15:5a:a9:26:00:e9:b5:5c:22:69:f2:c2:4f:77: e8:dd:34:1c:c7:25:e7:56:88:bd:e0:b3:ed:12:11: 1f:0f:54:43:c2:d5:c1:98:f6:b5:44:ef:e0:92:a1: bf:e2:66:66:80:c9:43:ca:6c:48:65:98:ec:ff:12: 2f:e2:5d:55:ca:ca:19:16:b7:4c:5a:ee:b8:a8:07: 98:1a:ab:27:e3:44:5e:fb:57:dc:f1:6b:89:38:f9: 68:f4:8d:42:6f:7b:29:d2:6d:ae:33:f7:a2:0f:b4: 72:1b:ce:7c:fe:93:36:e4:a7:62:a2:19:99:b1:e1: d2:a8:7c:65:b4:7b:47:f4:7b:79:53:27:f6:6a:9c: 84:d3:42:b1:22:cd:0d:5f:fc:a4:8b:b9:b8:46:34: 66:c5:a9:c3:82:5b:3f:7e:3b:f9:a4:c6:65:8e:dd: 1a:2a:c9:d3:19:0b:59:6f:64:ed:3e:22:3c:64:e4: 8d:9b:53:b5:62:39:e1:f5:cb:a0:cc:01:6e:9d:63: cf:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:57:70:83:56:BE:D5:20:C1:A8:FF:09:5F:E3:77:2E:8A:6D:D4:45 X509v3 Authority Key Identifier: keyid:31:DB:F2:C4:90:8B:5E:E6:D3:D3:4A:E4:DE:B8:17:0B:E6:2F:23:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:38:c0:2c:55:d7:25:5d:75:02:6b:bd:c9:b2:e9:20:18:8b: c3:7e:c2:77:dc:1a:d5:6f:fb:de:01:d9:e6:ad:8f:53:b3:15: d7:9b:da:75:cf:9c:90:c0:9d:9d:9b:5f:2f:ce:96:57:d4:44: 64:67:a1:a8:1f:5c:7d:56:32:1d:d2:ee:62:20:20:30:36:b1: a7:e1:4c:ff:3e:c7:76:dd:44:db:fd:63:5e:d0:42:a9:bb:f6: bf:fd:fe:d0:b7:7b:05:84:ce:f7:7f:7a:7a:30:6e:51:53:7b: bd:eb:37:b7:4f:71:b0:32:3f:c7:8d:d4:ac:9b:52:77:5d:1b: 90:06:47:11:da:79:20:af:0b:11:0c:08:e5:93:dd:49:67:70: 18:64:07:04:81:bf:b0:86:a6:3c:43:85:40:42:45:0d:d6:dd: 17:33:18:b1:85:5b:cf:d6:90:78:57:4b:57:95:d0:ce:14:7a: 7a:1e:8d:db:82:d9:a2:54:d7:5b:c6:b4:a6:da:56:6c:06:0e: d1:09:9a:a0:22:fa:c0:79:0b:1d:89:78:d8:85:15:2d:74:8e: 4b:05:fc:df:dc:2e:c7:9d:cf:d7:b5:86:9d:33:11:50:d0:8c: 47:41:b1:b0:20:cd:4e:08:e9:3a:a3:aa:5f:4b:2c:f9:0c:73: 70:98:cd:b0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDXWJXW1m6faJG99dL7ef/PDvLd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFEQkYyQzQ5MDhCNUVFNkQzRDM0QUU0REVCODE3MEJF NjJGMjNBOTAeFw0yNTExMDQwODAyMThaFw0yNTExMDkxMjE2MThaMDMxMTAvBgNV BAMTKDlCNTc3MDgzNTZCRUQ1MjBDMUE4RkYwOTVGRTM3NzJFOEE2REQ0NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2xbDZXhIWM/jEeUVRiDHdHWA2 XWz/xKqMD7VzBriN6uZi/2aY5Xl7wPH5FYa/UiyCTU6CAkBUTmiYR+YVWqkmAOm1 XCJp8sJPd+jdNBzHJedWiL3gs+0SER8PVEPC1cGY9rVE7+CSob/iZmaAyUPKbEhl mOz/Ei/iXVXKyhkWt0xa7rioB5gaqyfjRF77V9zxa4k4+Wj0jUJveynSba4z96IP tHIbznz+kzbkp2KiGZmx4dKofGW0e0f0e3lTJ/ZqnITTQrEizQ1f/KSLubhGNGbF qcOCWz9+O/mkxmWO3RoqydMZC1lvZO0+Ijxk5I2bU7ViOeH1y6DMAW6dY88JAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUm1dwg1a+1SDBqP8JX+N3Lopt1EUwHwYDVR0j BBgwFoAUMdvyxJCLXubT00rk3rgXC+YvI6kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84QUIzMzNCM0IzMjA5MTc0NzZBOTkxNEJGRkU5RjNFRkE0 QTI3M0UyQ0Y1NDgzN0UwRjdGMjU0MjY5OUM1OEFCLzAvMzFEQkYyQzQ5MDhCNUVF NkQzRDM0QUU0REVCODE3MEJFNjJGMjNBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMURCRjJDNDkwOEI1RUU2RDNE MzRBRTRERUI4MTcwQkU2MkYyM0E5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEFCMzMzQjNCMzIwOTE3NDc2QTk5MTRCRkZFOUYzRUZBNEEyNzNFMkNG NTQ4MzdFMEY3RjI1NDI2OTlDNThBQi8wLzMxREJGMkM0OTA4QjVFRTZEM0QzNEFF NERFQjgxNzBCRTYyRjIzQTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAnOMAsVdclXXUCa73JsukgGIvD fsJ33BrVb/veAdnmrY9TsxXXm9p1z5yQwJ2dm18vzpZX1ERkZ6GoH1x9VjId0u5i ICAwNrGn4Uz/Psd23UTb/WNe0EKpu/a//f7Qt3sFhM73f3p6MG5RU3u96ze3T3Gw Mj/HjdSsm1J3XRuQBkcR2nkgrwsRDAjlk91JZ3AYZAcEgb+whqY8Q4VAQkUN1t0X MxixhVvP1pB4V0tXldDOFHp6Ho3bgtmiVNdbxrSm2lZsBg7RCZqgIvrAeQsdiXjY hRUtdI5LBfzf3C7Hnc/XtYadMxFQ0IxHQbGwIM1OCOk6o6pfSyz5DHNwmM2w -----END CERTIFICATE-----Generated at Wed Nov 5 20:10:47 2025 by rpki-client