$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft File: 31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft (raw, json) Hash identifier: zy1cLeZCxC9VyLYFvyC7Tp3NruKpUNS0tg6u1BL8MIA= Subject key identifier: 09:C1:80:5C:E9:4A:A5:71:14:97:C2:53:3C:3F:ED:5C:9E:1B:0C:59 Authority key identifier: 31:DB:F2:C4:90:8B:5E:E6:D3:D3:4A:E4:DE:B8:17:0B:E6:2F:23:A9 Certificate issuer: /CN=31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9 Certificate serial: 437B0A4321BF5A53157DD75B3AE40A7CAD99B1B6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft Manifest number: 0130 Signing time: Sun 19 Oct 2025 18:17:48 +0000 Manifest this update: Sun 19 Oct 2025 18:12:48 +0000 Manifest next update: Sat 25 Oct 2025 16:19:48 +0000 Files and hashes: 1: 31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl (hash: hdBZDXEcehrOWpzpntWS70ZE5HWTzZFwEccesecHt7M=) 2: 323830333a633339303a3a2f33322d3438203d3e20323733303133.roa (hash: lDnjpbO7/tGbG8jh0+fryDKYSvl34wfFaaYjg+KmMs0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7b:0a:43:21:bf:5a:53:15:7d:d7:5b:3a:e4:0a:7c:ad:99:b1:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9 Validity Not Before: Oct 19 18:12:48 2025 GMT Not After : Oct 25 16:19:48 2025 GMT Subject: CN=09C1805CE94AA5711497C2533C3FED5C9E1B0C59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:32:af:26:36:f3:78:58:77:a3:90:37:86:1c: 47:49:1d:1f:44:cc:42:de:1f:e4:f6:4f:40:e4:57: 09:30:4a:16:03:e8:b6:d5:b6:56:07:a3:fe:49:8d: 40:27:9a:a4:82:59:58:58:72:b8:aa:c8:9c:89:e8: ca:50:82:00:b4:0a:6f:39:30:9c:cc:04:04:62:ba: 66:ef:9c:33:cc:77:6a:72:34:98:4f:d6:96:90:68: cd:4f:f0:7d:f3:13:3a:b3:66:0f:40:85:c3:05:21: 5a:b7:01:05:d5:d6:21:03:85:31:79:9b:ee:83:c8: fc:85:95:9c:26:5a:4c:67:26:d6:85:85:4c:4d:c4: e1:ed:ff:3f:4c:fa:db:ee:6d:f2:84:c1:d3:a8:3e: fb:5b:b6:85:09:21:70:6c:13:0e:6f:d6:e0:b7:d5: eb:ef:89:31:d4:4c:9d:b2:82:cd:1b:dd:65:f6:a8: 59:7a:24:a5:c1:5f:49:8a:c2:4e:0d:0b:1d:4e:c5: a6:63:e2:75:ed:8a:3e:51:69:d8:b1:c3:0a:b6:71: 5d:cf:54:e6:aa:0d:cc:02:c8:8f:33:ed:ed:d6:38: 4e:2f:4a:c0:3d:1c:3e:93:66:6d:5e:a8:70:69:ed: 1e:0a:db:7b:98:4b:53:02:d3:8f:ec:56:97:b8:75: dc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C1:80:5C:E9:4A:A5:71:14:97:C2:53:3C:3F:ED:5C:9E:1B:0C:59 X509v3 Authority Key Identifier: keyid:31:DB:F2:C4:90:8B:5E:E6:D3:D3:4A:E4:DE:B8:17:0B:E6:2F:23:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:53:aa:12:a7:a5:ed:47:4f:ef:69:5e:a2:b3:2c:00:37:c3: 79:d7:6b:2a:ac:e3:3a:3d:a6:d0:82:48:78:fe:99:96:0d:b4: ad:24:99:0b:1b:8b:22:0d:8c:f6:9d:91:69:3b:d6:cf:65:1e: 68:6c:7d:cf:b1:21:cb:99:14:22:41:60:2b:e2:91:eb:16:46: da:99:6e:a5:75:a3:a1:d8:c8:df:f4:1f:59:fe:80:45:ef:36: 57:8d:99:f7:d4:4c:d6:b5:1b:61:5c:37:b7:2f:ec:66:8e:0e: 6a:b8:9e:3a:aa:64:f0:fd:dc:90:87:bf:5f:62:ad:59:44:64: 40:f4:6d:cb:8a:95:1e:7d:78:82:2b:54:4f:b4:ad:e9:1c:e6: b9:84:6e:c4:10:16:e0:f8:6d:7a:b9:a6:2e:6a:72:a6:9f:23: f8:88:60:01:00:11:90:16:4a:96:57:fa:4f:e7:d5:53:7b:a1: b0:9c:29:78:a6:04:52:82:7e:ba:6f:ed:0e:ef:4b:25:16:72: 19:cb:48:51:57:c8:8b:38:8b:1e:b6:09:62:74:45:d7:9a:63: e1:85:4f:7f:ab:c2:50:d2:9c:d3:c3:96:02:fa:1d:65:c0:73: 0f:f1:c5:d3:50:78:dd:78:c8:be:08:99:50:cc:63:ad:1d:e2: 22:04:98:0e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQ3sKQyG/WlMVfddbOuQKfK2ZsbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFEQkYyQzQ5MDhCNUVFNkQzRDM0QUU0REVCODE3MEJF NjJGMjNBOTAeFw0yNTEwMTkxODEyNDhaFw0yNTEwMjUxNjE5NDhaMDMxMTAvBgNV BAMTKDA5QzE4MDVDRTk0QUE1NzExNDk3QzI1MzNDM0ZFRDVDOUUxQjBDNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTMq8mNvN4WHejkDeGHEdJHR9E zELeH+T2T0DkVwkwShYD6LbVtlYHo/5JjUAnmqSCWVhYcriqyJyJ6MpQggC0Cm85 MJzMBARiumbvnDPMd2pyNJhP1paQaM1P8H3zEzqzZg9AhcMFIVq3AQXV1iEDhTF5 m+6DyPyFlZwmWkxnJtaFhUxNxOHt/z9M+tvubfKEwdOoPvtbtoUJIXBsEw5v1uC3 1evviTHUTJ2ygs0b3WX2qFl6JKXBX0mKwk4NCx1OxaZj4nXtij5Radixwwq2cV3P VOaqDcwCyI8z7e3WOE4vSsA9HD6TZm1eqHBp7R4K23uYS1MC04/sVpe4ddynAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUCcGAXOlKpXEUl8JTPD/tXJ4bDFkwHwYDVR0j BBgwFoAUMdvyxJCLXubT00rk3rgXC+YvI6kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84QUIzMzNCM0IzMjA5MTc0NzZBOTkxNEJGRkU5RjNFRkE0 QTI3M0UyQ0Y1NDgzN0UwRjdGMjU0MjY5OUM1OEFCLzAvMzFEQkYyQzQ5MDhCNUVF NkQzRDM0QUU0REVCODE3MEJFNjJGMjNBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMURCRjJDNDkwOEI1RUU2RDNE MzRBRTRERUI4MTcwQkU2MkYyM0E5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEFCMzMzQjNCMzIwOTE3NDc2QTk5MTRCRkZFOUYzRUZBNEEyNzNFMkNG NTQ4MzdFMEY3RjI1NDI2OTlDNThBQi8wLzMxREJGMkM0OTA4QjVFRTZEM0QzNEFF NERFQjgxNzBCRTYyRjIzQTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYU6oSp6XtR0/vaV6isywAN8N5 12sqrOM6PabQgkh4/pmWDbStJJkLG4siDYz2nZFpO9bPZR5obH3PsSHLmRQiQWAr 4pHrFkbamW6ldaOh2Mjf9B9Z/oBF7zZXjZn31EzWtRthXDe3L+xmjg5quJ46qmTw /dyQh79fYq1ZRGRA9G3LipUefXiCK1RPtK3pHOa5hG7EEBbg+G16uaYuanKmnyP4 iGABABGQFkqWV/pP59VTe6GwnCl4pgRSgn66b+0O70slFnIZy0hRV8iLOIsetgli dEXXmmPhhU9/q8JQ0pzTw5YC+h1lwHMP8cXTUHjdeMi+CJlQzGOtHeIiBJgO -----END CERTIFICATE-----Generated at Mon Oct 20 00:35:58 2025 by rpki-client