$ rpki-client -vvf rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft File: 31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft (raw, json) Hash identifier: j+eTZS80rGwR9jxbMNgqDexDjazUma/5YLs7+FUMAoI= Subject key identifier: 42:EC:99:C7:51:D9:BE:AD:38:E3:91:FE:95:61:FE:AA:55:51:B2:A5 Authority key identifier: 31:BA:D9:80:8D:E8:04:90:3A:A6:C6:5B:BE:33:CB:EE:1C:99:1D:9A Certificate issuer: /CN=31BAD9808DE804903AA6C65BBE33CBEE1C991D9A Certificate serial: 677D09A4A44605FE06AE0729357E235CCBB699E6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer Subject info access: rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft Manifest number: 03C1 Signing time: Thu 26 Mar 2026 12:01:28 +0000 Manifest this update: Thu 26 Mar 2026 11:56:28 +0000 Manifest next update: Fri 27 Mar 2026 12:58:28 +0000 Files and hashes: 1: 34352e342e3131362e302f32322d3232203d3e20323636303438.roa (hash: +txQ7D3V+53YM2P4+M24qGq3cqbf2iTB6O2ZGLdm+BM=) 2: 31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl (hash: fvhx3Db4pWbrBKC1gRdikXwtcVGEu350M5ZtNuYNqU8=) 3: 323830343a333963303a3a2f33322d3332203d3e20323636303438.roa (hash: akfvMDTEj0KlktSUjEZBnBnbLW8sTWugPEddB8txm/k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 12:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:7d:09:a4:a4:46:05:fe:06:ae:07:29:35:7e:23:5c:cb:b6:99:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31BAD9808DE804903AA6C65BBE33CBEE1C991D9A Validity Not Before: Mar 26 11:56:28 2026 GMT Not After : Mar 27 12:58:28 2026 GMT Subject: CN=42EC99C751D9BEAD38E391FE9561FEAA5551B2A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:05:f0:c5:fd:cd:fe:2a:af:fa:aa:a1:20:91: b9:1c:93:5b:8c:41:8e:24:74:59:df:bd:1e:0b:b7: 3b:fc:1d:85:e1:26:97:d5:e3:46:3b:33:ad:c2:33: 56:4d:32:fe:d8:2d:66:d0:bd:48:21:c9:14:0a:bb: be:8d:87:83:16:af:a2:30:3a:3e:fc:e8:40:8e:6e: 04:7e:44:02:22:80:9c:7a:a5:e4:43:09:18:ae:dd: 66:c9:92:90:5a:55:ac:d9:a7:f1:d9:f2:19:a8:90: 5d:2f:b2:8d:db:ee:c6:89:a2:53:c4:67:a3:f6:42: 25:6e:9b:57:fa:e8:f9:7b:f1:29:dd:51:c4:8a:b0: 87:26:e8:f1:21:eb:7b:0f:21:2a:4c:dc:56:44:36: f3:11:50:75:71:9a:ea:0d:9d:e1:60:c7:ad:0c:a6: dc:d5:c6:2a:dd:c1:c1:f3:1c:70:4e:f0:db:30:3a: 5c:98:da:09:66:a4:f1:8d:00:d1:28:c6:c4:12:43: b4:2b:0f:72:46:11:dc:de:f5:91:d1:21:8a:25:4b: 2f:5a:72:9e:99:8b:b7:de:09:b7:6b:23:d1:33:6a: 93:53:c0:60:85:7f:ff:80:7f:bf:c0:62:76:d1:19: a4:ad:91:09:2d:9e:76:ce:d1:ec:ab:e8:f1:e2:c0: 93:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EC:99:C7:51:D9:BE:AD:38:E3:91:FE:95:61:FE:AA:55:51:B2:A5 X509v3 Authority Key Identifier: keyid:31:BA:D9:80:8D:E8:04:90:3A:A6:C6:5B:BE:33:CB:EE:1C:99:1D:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:15:33:63:69:26:4c:6e:57:46:14:6e:bf:04:56:d0:ab:be: 26:94:e1:7f:05:de:99:16:cd:ce:9a:6f:1a:b0:86:f1:de:98: b0:7a:07:50:0f:1f:66:f7:ee:43:e9:9d:ee:5a:96:ef:80:2a: de:18:b9:ae:bd:0c:8c:ab:59:e5:0c:e1:b6:c3:89:37:d2:cb: 4d:bd:bc:32:c2:f2:dc:be:3a:a2:a4:fe:ef:d8:ae:73:03:d6: 47:14:47:bc:ee:2b:b6:50:b0:1f:8c:7f:f1:95:40:86:52:42: dd:9b:f2:ec:ff:bf:aa:9b:ec:af:ab:57:41:bd:0d:75:86:7f: dd:29:aa:bb:af:42:3c:88:4d:63:31:d1:2b:5e:f8:55:16:a6: 61:6a:f2:3e:3c:39:19:df:db:d3:70:b6:26:97:49:37:47:bd: 24:8c:d1:0d:23:5c:65:2b:c5:d8:3f:43:2f:26:48:3e:9c:da: 7e:7e:ed:12:c1:03:ce:f8:81:f6:57:0a:b9:6e:c3:e6:e4:28: 93:97:23:a0:7d:d6:c8:7b:f3:cf:ab:3c:c4:2e:15:ad:59:04: 98:7e:5c:5d:8e:30:ac:f9:0e:91:eb:26:63:9b:cc:9f:02:a3: 55:a9:57:16:cb:2d:9e:f1:c6:d4:f3:87:e0:50:01:c6:71:fe: d6:dc:a5:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZ30JpKRGBf4GrgcpNX4jXMu2meYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFCQUQ5ODA4REU4MDQ5MDNBQTZDNjVCQkUzM0NCRUUx Qzk5MUQ5QTAeFw0yNjAzMjYxMTU2MjhaFw0yNjAzMjcxMjU4MjhaMDMxMTAvBgNV BAMTKDQyRUM5OUM3NTFEOUJFQUQzOEUzOTFGRTk1NjFGRUFBNTU1MUIyQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDBfDF/c3+Kq/6qqEgkbkck1uM QY4kdFnfvR4Ltzv8HYXhJpfV40Y7M63CM1ZNMv7YLWbQvUghyRQKu76Nh4MWr6Iw Oj786ECObgR+RAIigJx6peRDCRiu3WbJkpBaVazZp/HZ8hmokF0vso3b7saJolPE Z6P2QiVum1f66Pl78SndUcSKsIcm6PEh63sPISpM3FZENvMRUHVxmuoNneFgx60M ptzVxirdwcHzHHBO8NswOlyY2glmpPGNANEoxsQSQ7QrD3JGEdze9ZHRIYolSy9a cp6Zi7feCbdrI9EzapNTwGCFf/+Af7/AYnbRGaStkQktnnbO0eyr6PHiwJOtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQuyZx1HZvq0445H+lWH+qlVRsqUwHwYDVR0j BBgwFoAUMbrZgI3oBJA6psZbvjPL7hyZHZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGlQeExDM2dXd2RqcnJRbVRMWmJzWnUxZVZXZkxxeXZYMVluR1c2TjRQ NTYvMS8zMUJBRDk4MDhERTgwNDkwM0FBNkM2NUJCRTMzQ0JFRTFDOTkxRDlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQkFEOTgwOERFODA0OTAz QUE2QzY1QkJFMzNDQkVFMUM5OTFEOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGlQeExDM2dXd2RqcnJRbVRMWmJzWnUxZVZXZkxxeXZYMVluR1c2TjRQNTYvMS8z MUJBRDk4MDhERTgwNDkwM0FBNkM2NUJCRTMzQ0JFRTFDOTkxRDlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFhUzY2kmTG5XRhRuvwRW0Ku+JpThfwXemRbNzppvGrCG8d6YsHoHUA8fZvfu Q+md7lqW74Aq3hi5rr0MjKtZ5QzhtsOJN9LLTb28MsLy3L46oqT+79iucwPWRxRH vO4rtlCwH4x/8ZVAhlJC3Zvy7P+/qpvsr6tXQb0NdYZ/3Smqu69CPIhNYzHRK174 VRamYWryPjw5Gd/b03C2JpdJN0e9JIzRDSNcZSvF2D9DLyZIPpzafn7tEsEDzviB 9lcKuW7D5uQok5cjoH3WyHvzz6s8xC4VrVkEmH5cXY4wrPkOkesmY5vMnwKjValX FsstnvHG1POH4FABxnH+1tyldg== -----END CERTIFICATE-----Generated at Thu Mar 26 21:42:04 2026 by rpki-client