$ rpki-client -vvf rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft File: 31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft (raw, json) Hash identifier: Y3VotazAqRNnTMvsNOrIyJb4HupNKNDvxKqWFUQVoI8= Subject key identifier: 1D:E5:7F:25:D3:8D:F0:84:98:58:6B:B8:D2:43:23:48:8D:80:8A:48 Authority key identifier: 31:AE:EE:52:73:A3:1C:20:77:C2:F9:57:CF:5A:2C:2D:24:07:50:E3 Certificate issuer: /CN=31AEEE5273A31C2077C2F957CF5A2C2D240750E3 Certificate serial: 75A2E06B95B725557791D1228044025146E9163F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer Subject info access: rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft Manifest number: 02A5 Signing time: Sat 23 Aug 2025 10:09:45 +0000 Manifest this update: Sat 23 Aug 2025 10:04:45 +0000 Manifest next update: Sun 24 Aug 2025 12:52:45 +0000 Files and hashes: 1: 3230312e3231362e3132342e302f32322d3332203d3e20323730333034.roa (hash: sfnLaTHDQS9Ygt/qvSr8vquvrC5x88RVTot0u1y0wjs=) 2: 3230312e3231362e3132372e302f32342d3332203d3e20323733343538.roa (hash: Mh6mp2NI59RQVoXN3aFVokMT6fJWu85UdtTFNII0mpc=) 3: 31AEEE5273A31C2077C2F957CF5A2C2D240750E3.crl (hash: 0knPVwFHmewZV59Wkgc4Sh+VIP/VpMRn5GyQq9T/gNM=) 4: 323830343a363966633a3a2f33322d313238203d3e20323730333034.roa (hash: mCWseisLBFmCaMIAICO1RASOUVqA8VtzNh9BsMwSD1Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.crl rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 12:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:a2:e0:6b:95:b7:25:55:77:91:d1:22:80:44:02:51:46:e9:16:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31AEEE5273A31C2077C2F957CF5A2C2D240750E3 Validity Not Before: Aug 23 10:04:45 2025 GMT Not After : Aug 24 12:52:45 2025 GMT Subject: CN=1DE57F25D38DF08498586BB8D24323488D808A48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c3:ca:65:ce:3f:6d:1a:f9:b5:c2:f1:2e:29: b9:86:7e:bf:b7:e3:64:17:1c:d5:e5:87:b4:37:34: aa:6c:e8:9e:bb:9b:e8:d0:66:84:f3:01:0f:69:75: 89:01:42:e8:eb:db:27:57:61:b9:1a:17:ab:29:9f: 67:ab:a6:09:7a:6d:25:0d:df:a4:ce:cf:c9:bb:53: 79:75:b2:33:53:2c:3a:1a:f1:5b:30:e9:76:ef:c0: c6:4b:cf:c7:65:6c:cb:ac:30:f3:af:44:a0:eb:e4: 4c:7b:98:79:f7:ac:91:4f:7d:1e:37:d2:e6:35:2b: e0:10:4e:6f:62:52:81:5c:91:1a:92:fa:80:d5:e0: d5:f3:85:a3:61:0d:86:06:d7:11:e3:30:07:9b:ec: be:14:27:e1:a4:10:12:7b:56:02:c0:14:19:e4:ca: 52:3f:f9:3f:ae:da:39:d8:d7:19:82:a2:3d:a9:1b: 97:52:b5:33:34:69:b8:ae:9c:d9:ed:22:00:dc:45: c2:ab:75:d7:77:90:87:13:ea:55:57:57:f2:67:bd: a8:10:86:00:ee:9f:19:94:a4:8d:eb:1a:d2:cd:15: e9:fe:1b:78:50:15:57:f4:3c:c6:7e:41:8a:5b:c1: 0a:b7:c7:94:cc:69:06:c7:c1:8b:6a:63:9c:5a:1e: f4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E5:7F:25:D3:8D:F0:84:98:58:6B:B8:D2:43:23:48:8D:80:8A:48 X509v3 Authority Key Identifier: keyid:31:AE:EE:52:73:A3:1C:20:77:C2:F9:57:CF:5A:2C:2D:24:07:50:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:76:d6:dc:e5:77:b8:c1:36:36:9d:80:fa:86:55:e1:b9:dc: d5:a5:e8:4f:3e:3b:39:73:33:ff:e6:e5:d5:2d:40:7e:21:be: 08:d1:7c:fb:73:ab:9c:b4:f9:e1:11:4d:d1:f7:a8:c6:2e:bc: e2:b1:4a:bd:63:5a:3a:9b:76:d0:20:3f:ff:cd:89:1a:b9:42: 37:64:ee:c8:f2:cc:34:50:88:14:08:ee:49:96:df:b3:96:ee: 82:04:21:2f:ab:c0:eb:62:5f:2b:48:db:42:20:84:e3:b6:86: 2e:a9:80:85:b3:48:57:bd:f4:d3:fd:bb:a9:99:3b:db:7d:e2: 40:1b:35:f8:87:73:14:b9:5f:c8:0a:04:bc:a5:73:f8:73:8c: 3c:2e:25:5a:7f:c1:94:2d:4b:6f:2b:df:d4:a7:9d:1c:46:2a: f7:8c:78:ae:c6:6b:9c:d8:0a:ee:60:50:e3:96:50:a4:91:93: e0:5e:68:14:17:b9:d2:41:76:af:80:0c:f7:ca:81:9a:79:30: ba:25:60:6c:6c:51:8d:7f:53:d5:75:05:3c:b7:12:96:01:31: 6a:eb:b2:4b:b9:3f:88:3a:2a:ee:58:6b:cf:0b:00:7b:dd:48: a6:70:c2:dc:02:dd:f1:a3:ef:8b:db:ae:d0:84:06:5c:a5:4f: 5b:e5:a8:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdaLga5W3JVV3kdEigEQCUUbpFj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFBRUVFNTI3M0EzMUMyMDc3QzJGOTU3Q0Y1QTJDMkQy NDA3NTBFMzAeFw0yNTA4MjMxMDA0NDVaFw0yNTA4MjQxMjUyNDVaMDMxMTAvBgNV BAMTKDFERTU3RjI1RDM4REYwODQ5ODU4NkJCOEQyNDMyMzQ4OEQ4MDhBNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEw8plzj9tGvm1wvEuKbmGfr+3 42QXHNXlh7Q3NKps6J67m+jQZoTzAQ9pdYkBQujr2ydXYbkaF6spn2erpgl6bSUN 36TOz8m7U3l1sjNTLDoa8Vsw6XbvwMZLz8dlbMusMPOvRKDr5Ex7mHn3rJFPfR43 0uY1K+AQTm9iUoFckRqS+oDV4NXzhaNhDYYG1xHjMAeb7L4UJ+GkEBJ7VgLAFBnk ylI/+T+u2jnY1xmCoj2pG5dStTM0abiunNntIgDcRcKrddd3kIcT6lVXV/JnvagQ hgDunxmUpI3rGtLNFen+G3hQFVf0PMZ+QYpbwQq3x5TMaQbHwYtqY5xaHvRtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHeV/JdON8ISYWGu40kMjSI2AikgwHwYDVR0j BBgwFoAUMa7uUnOjHCB3wvlXz1osLSQHUOMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTdKb0pZRVFFdFcxZjVlS2paRVpnTDE5YjRnTnBwdzRZcktTOXNkeDg3 S0wvMS8zMUFFRUU1MjczQTMxQzIwNzdDMkY5NTdDRjVBMkMyRDI0MDc1MEUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQUVFRTUyNzNBMzFDMjA3 N0MyRjk1N0NGNUEyQzJEMjQwNzUwRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTdKb0pZRVFFdFcxZjVlS2paRVpnTDE5YjRnTnBwdzRZcktTOXNkeDg3S0wvMS8z MUFFRUU1MjczQTMxQzIwNzdDMkY5NTdDRjVBMkMyRDI0MDc1MEUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT3bW3OV3uME2Np2A+oZV4bnc1aXoTz47OXMz/+bl1S1AfiG+CNF8+3OrnLT5 4RFN0feoxi684rFKvWNaOpt20CA//82JGrlCN2TuyPLMNFCIFAjuSZbfs5buggQh L6vA62JfK0jbQiCE47aGLqmAhbNIV7300/27qZk7233iQBs1+IdzFLlfyAoEvKVz +HOMPC4lWn/BlC1Lbyvf1KedHEYq94x4rsZrnNgK7mBQ45ZQpJGT4F5oFBe50kF2 r4AM98qBmnkwuiVgbGxRjX9T1XUFPLcSlgExauuyS7k/iDoq7lhrzwsAe91IpnDC 3ALd8aPvi9uu0IQGXKVPW+WoeA== -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:52 2025 by rpki-client