$ rpki-client -vvf rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft File: 31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft (raw, json) Hash identifier: egchTsbJyId1vXa5CEGSg0hj7/q7O1f6NkeZ4BZWueY= Subject key identifier: 04:E7:46:84:7A:2D:F0:AC:2D:BF:37:2D:72:F1:F9:53:17:47:46:D0 Authority key identifier: 31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1 Certificate issuer: /CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1 Certificate serial: 6244C5A4BD8F19F0B07C8C1902A6CC493E5447E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer Subject info access: rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft Manifest number: 021C Signing time: Thu 08 May 2025 13:14:02 +0000 Manifest this update: Thu 08 May 2025 13:09:02 +0000 Manifest next update: Fri 09 May 2025 13:31:02 +0000 Files and hashes: 1: 3137302e37392e3134382e302f32322d3332203d3e20323636323939.roa (hash: K7OCXntBYYWlJMIreulrBkSYMm1UKWdAl8lbZdhbPBM=) 2: 31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl (hash: aVgSSTJlAobWQGGRR6VEYw0UhAmH4yuRUf9Gt2pEiqg=) 3: 3137302e302e3139322e302f32322d3332203d3e20323636323939.roa (hash: ZHS86h1PqASQZtMDUbjSTdL+kx8jsevUN91wERnwtto=) 4: 323830343a333561383a3a2f33322d313238203d3e20323636323939.roa (hash: IsVLxgwYDi8pNm8S0DzwD9QJhFe0QyknmCg1ewqOeJQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 13:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:44:c5:a4:bd:8f:19:f0:b0:7c:8c:19:02:a6:cc:49:3e:54:47:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1 Validity Not Before: May 8 13:09:02 2025 GMT Not After : May 9 13:31:02 2025 GMT Subject: CN=04E746847A2DF0AC2DBF372D72F1F953174746D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d0:d5:8e:08:e5:c2:d0:a4:05:95:9e:3d:d1: bf:7e:06:ef:dd:60:58:e1:a2:4b:09:09:27:34:a3: a6:07:d2:2f:7e:18:c4:7b:1a:74:e7:0e:9d:9b:b0: 08:b6:40:94:95:e2:f0:9f:d2:03:ae:dd:a6:ca:d5: 3e:98:e5:4f:8b:bd:b7:8d:4b:2f:ce:ea:52:9b:9f: 9c:b0:6a:41:ce:e4:c3:7b:43:7d:39:c9:39:14:92: f1:c1:85:74:d5:80:e5:39:be:87:53:89:29:3c:60: 2d:69:e7:10:ec:d8:9b:a3:d6:b7:de:6b:e4:bc:0e: 19:d3:bf:f7:2f:55:32:2c:fd:d7:58:ee:2a:9e:6e: 74:93:d5:2d:c8:6d:c0:38:2e:99:a4:c1:6a:4b:e6: 40:66:ac:ba:5d:58:2a:e7:c6:f0:56:f2:6c:ae:8b: 13:f9:1c:85:36:14:06:a6:c3:22:40:e3:79:be:7d: d9:75:c9:a4:d5:79:b7:0d:e0:7a:ea:2b:6c:a6:de: 1e:9b:18:ac:57:fb:38:3c:03:22:08:3c:34:2b:99: e0:03:72:cb:6c:9b:9f:b6:40:11:88:35:60:bf:e8: 1f:ed:d0:40:fd:ef:81:07:7e:3d:b6:68:17:0c:cf: 0f:ce:85:8c:7f:b5:f6:ce:73:42:5d:79:5b:15:45: 33:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E7:46:84:7A:2D:F0:AC:2D:BF:37:2D:72:F1:F9:53:17:47:46:D0 X509v3 Authority Key Identifier: keyid:31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:38:97:a7:9f:0c:1a:b3:4a:26:30:0f:2f:d8:6f:7d:10:b7: 7c:78:7a:ff:5a:21:5c:89:21:6b:45:0a:f5:33:c0:bf:bf:5c: d6:94:2a:43:8c:87:b8:1b:05:5e:12:79:0d:0e:a0:1f:e6:87: f2:30:5b:b4:cf:14:7d:27:21:18:8e:7b:91:bc:0a:ed:23:43: e8:e4:b0:a1:f6:2f:34:3d:85:b5:9f:d7:6b:2e:53:f9:5d:74: cf:fb:99:4c:a0:89:73:f0:f7:4f:9c:dc:44:20:d0:80:b1:b9: de:b1:79:9b:32:eb:f9:df:78:4a:ca:4a:b8:a2:7a:b3:ae:c7: 0a:75:50:62:8d:08:d4:fd:ea:4a:92:c5:a9:7f:ca:a2:c7:bf: b3:e9:f5:e8:7e:bd:29:19:71:d7:51:1f:80:bf:b6:25:97:7e: 49:fa:ae:bc:1b:42:2e:a3:6e:d7:d1:79:cd:d0:b3:a5:1f:70: 33:9c:a4:2b:d3:d9:c3:46:01:6a:88:0e:81:07:43:39:5c:40: d3:25:0e:16:c0:30:f3:34:1c:2b:0a:a5:39:0f:23:ad:47:ce: 35:6d:b8:7d:0f:d1:6d:1d:71:c9:68:f5:5e:be:0a:72:07:33: f1:eb:77:59:18:d9:2c:a5:89:8a:19:17:9e:b5:a5:fb:33:91: a7:36:2a:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYkTFpL2PGfCwfIwZAqbMST5UR+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDRjEyNTUyQzAyNzJDNDUxRTFFRTEyMjQ0RTAzQkRE RDZCMkNBMTAeFw0yNTA1MDgxMzA5MDJaFw0yNTA1MDkxMzMxMDJaMDMxMTAvBgNV BAMTKDA0RTc0Njg0N0EyREYwQUMyREJGMzcyRDcyRjFGOTUzMTc0NzQ2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC0NWOCOXC0KQFlZ490b9+Bu/d YFjhoksJCSc0o6YH0i9+GMR7GnTnDp2bsAi2QJSV4vCf0gOu3abK1T6Y5U+LvbeN Sy/O6lKbn5ywakHO5MN7Q305yTkUkvHBhXTVgOU5vodTiSk8YC1p5xDs2Juj1rfe a+S8DhnTv/cvVTIs/ddY7iqebnST1S3IbcA4LpmkwWpL5kBmrLpdWCrnxvBW8myu ixP5HIU2FAamwyJA43m+fdl1yaTVebcN4HrqK2ym3h6bGKxX+zg8AyIIPDQrmeAD cstsm5+2QBGINWC/6B/t0ED974EHfj22aBcMzw/OhYx/tfbOc0JdeVsVRTP3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBOdGhHot8KwtvzctcvH5UxdHRtAwHwYDVR0j BBgwFoAUMc8SVSwCcsRR4e4SJE4Dvd1rLKEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUNtakI4UXlWVGZRZDlCWEJTd25Na3JYaHI0UHV5RG5kWEpoeXB2TG9L aU0vMS8zMUNGMTI1NTJDMDI3MkM0NTFFMUVFMTIyNDRFMDNCRERENkIyQ0ExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQ0YxMjU1MkMwMjcyQzQ1 MUUxRUUxMjI0NEUwM0JEREQ2QjJDQTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUNtakI4UXlWVGZRZDlCWEJTd25Na3JYaHI0UHV5RG5kWEpoeXB2TG9LaU0vMS8z MUNGMTI1NTJDMDI3MkM0NTFFMUVFMTIyNDRFMDNCRERENkIyQ0ExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAADiXp58MGrNKJjAPL9hvfRC3fHh6/1ohXIkha0UK9TPAv79c1pQqQ4yHuBsF XhJ5DQ6gH+aH8jBbtM8UfSchGI57kbwK7SND6OSwofYvND2FtZ/Xay5T+V10z/uZ TKCJc/D3T5zcRCDQgLG53rF5mzLr+d94SspKuKJ6s67HCnVQYo0I1P3qSpLFqX/K ose/s+n16H69KRlx11EfgL+2JZd+SfquvBtCLqNu19F5zdCzpR9wM5ykK9PZw0YB aogOgQdDOVxA0yUOFsAw8zQcKwqlOQ8jrUfONW24fQ/RbR1xyWj1Xr4Kcgcz8et3 WRjZLKWJihkXnrWl+zORpzYqDg== -----END CERTIFICATE-----Generated at Fri May 9 03:33:55 2025 by rpki-client