This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft
File: 31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft (raw, json)
Hash identifier: qeTx9/iZjLSjojbEsEA4wcaZDgROQ7MYw7umkmpdY4o=
Subject key identifier: 35:C4:DD:57:36:53:F6:FF:DF:26:6B:67:F6:F8:32:40:CA:76:0B:FE
Authority key identifier: 31:DB:F2:C4:90:8B:5E:E6:D3:D3:4A:E4:DE:B8:17:0B:E6:2F:23:A9
Certificate issuer: /CN=31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9
Certificate serial: 2D68B78E11DE61AA46784E4FF99E702EF5F15F3E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft
Manifest number: 015D
Signing time: Mon 12 Jan 2026 14:46:32 +0000
Manifest this update: Mon 12 Jan 2026 14:41:32 +0000
Manifest next update: Fri 16 Jan 2026 23:22:32 +0000
Files and hashes: 1: 323830333a633339303a3a2f33322d3438203d3e20323733303133.roa (hash: YRSInHlH4G9DV97Bw7N1KGcbjql/YDvbX1aaGvB0s1Y=)
2: 31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl (hash: Hbpf4G9cBtumiRTW94p1L18HPX4PihIoxL/8DhJ7slI=)
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl
rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 23:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:68:b7:8e:11:de:61:aa:46:78:4e:4f:f9:9e:70:2e:f5:f1:5f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9
Validity
Not Before: Jan 12 14:41:32 2026 GMT
Not After : Jan 16 23:22:32 2026 GMT
Subject: CN=35C4DD573653F6FFDF266B67F6F83240CA760BFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:8d:e5:d4:6d:7b:5f:c5:ce:10:55:12:60:
3a:57:c8:7b:e4:0a:85:34:e6:33:fe:59:8f:c3:22:
d5:9b:65:81:78:9f:89:39:4e:26:99:06:43:0c:d2:
ac:57:ce:a3:30:a6:f5:db:77:51:07:9d:db:fb:ea:
ab:14:6d:08:ca:c8:f5:af:47:db:14:ce:ab:de:e8:
2d:cc:3a:76:ab:c2:63:63:b8:c4:ea:d2:db:d3:02:
52:c1:55:b6:98:f3:62:ab:a2:ff:34:c6:a6:9e:71:
ba:a9:fe:96:17:df:04:ad:11:c9:6c:cc:02:27:31:
0a:3e:ac:27:a7:02:05:bc:00:40:d7:37:47:86:55:
63:28:9e:29:ab:dd:f3:14:33:af:80:07:50:44:b8:
55:2e:49:89:d2:f6:1e:5f:bb:fe:a1:5d:cd:4b:89:
3e:2a:d9:5f:13:b4:f6:1b:21:ed:ec:45:79:ea:d5:
7e:25:f3:86:94:67:75:7e:0c:23:0a:b2:73:ed:b8:
52:76:18:95:f4:90:2f:90:f0:f7:a7:29:3f:01:76:
58:81:82:1f:fe:c5:bb:55:e5:2f:17:97:80:fc:06:
0a:88:a7:85:69:27:6f:e3:5f:9f:2b:6e:20:a6:d9:
e4:2b:75:2e:b1:e6:bc:fa:71:fb:9b:5a:c7:e9:63:
b1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C4:DD:57:36:53:F6:FF:DF:26:6B:67:F6:F8:32:40:CA:76:0B:FE
X509v3 Authority Key Identifier:
keyid:31:DB:F2:C4:90:8B:5E:E6:D3:D3:4A:E4:DE:B8:17:0B:E6:2F:23:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5e:89:c2:39:fe:e6:00:28:f4:ea:b5:fb:0b:7b:b4:78:a0:
6a:c2:25:70:c7:eb:11:38:fe:77:c4:18:a4:2e:27:a3:aa:d2:
f8:03:a0:b2:aa:d4:ed:60:12:fb:15:fd:a5:60:1c:50:0e:0d:
99:63:dc:15:03:82:6b:43:2e:0b:1b:77:2c:59:c9:fa:fc:32:
31:57:e6:a5:bd:48:c5:f6:a8:0b:4a:8b:0f:12:bd:eb:d5:66:
0e:d7:d9:49:ec:ff:5d:61:46:80:86:b2:9d:71:e2:a7:e8:db:
9a:3f:4b:30:e9:ea:67:72:80:68:cc:5b:fd:57:a0:ef:79:97:
93:dc:34:e2:10:d3:ba:b6:c3:62:a4:5e:9c:5d:7e:10:f9:e9:
2e:60:40:d9:a2:32:86:1e:9f:6e:91:65:44:ba:42:1b:1b:1c:
74:be:15:17:b7:ed:6d:04:dc:bf:81:f3:f5:94:db:40:82:41:
21:ad:51:34:2e:3c:51:01:8f:c9:0a:1e:7f:ee:80:90:80:37:
32:49:01:5e:b4:78:a4:4c:b8:88:41:c0:24:08:c5:72:d6:02:
db:56:21:a6:56:2d:e4:53:aa:68:9f:e3:5c:90:19:8f:e4:e7:
01:51:6e:5a:d7:d2:91:39:be:ef:ba:d7:61:a1:a9:cf:b0:d4:
10:e8:7d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 13:32:07 2026 by rpki-client