$ rpki-client -vvf rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft File: 31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft (raw, json) Hash identifier: 9vY3CAJocfIHC5lt9SUZhN6TG80FK5psuIYtPufpTvg= Subject key identifier: B6:42:AF:1D:6B:E0:62:C9:6B:97:35:10:61:DA:2A:80:B8:4B:AE:72 Authority key identifier: 31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1 Certificate issuer: /CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1 Certificate serial: 1CFB526058770EE5C8363C2C774C835ECF8F7D60 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer Subject info access: rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft Manifest number: 02A4 Signing time: Fri 22 Aug 2025 22:42:56 +0000 Manifest this update: Fri 22 Aug 2025 22:37:56 +0000 Manifest next update: Sun 24 Aug 2025 02:29:56 +0000 Files and hashes: 1: 31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl (hash: Txx2/z36/Lqweq7ngjLrkUsiKqsuzMkfIM00Iv+j7Ns=) 2: 3137302e302e3139322e302f32322d3332203d3e20323636323939.roa (hash: 30DhOqm2M90Ds5s+OzTCD+5M9ukc+Ih0rydkINiYO4M=) 3: 3137302e37392e3134382e302f32322d3332203d3e20323636323939.roa (hash: K7OCXntBYYWlJMIreulrBkSYMm1UKWdAl8lbZdhbPBM=) 4: 323830343a333561383a3a2f33322d313238203d3e20323636323939.roa (hash: IsVLxgwYDi8pNm8S0DzwD9QJhFe0QyknmCg1ewqOeJQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 02:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:fb:52:60:58:77:0e:e5:c8:36:3c:2c:77:4c:83:5e:cf:8f:7d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1 Validity Not Before: Aug 22 22:37:56 2025 GMT Not After : Aug 24 02:29:56 2025 GMT Subject: CN=B642AF1D6BE062C96B97351061DA2A80B84BAE72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:16:d3:7b:86:02:8e:ac:6f:ed:da:e3:6f:3c: 68:7d:3b:51:04:33:1c:1a:3c:d2:e1:ae:3e:55:55: 0b:4c:bb:e4:ce:29:6a:b6:99:90:a6:1f:e3:2d:ca: 61:41:fd:49:43:16:a3:46:8c:50:74:26:f6:d7:1f: f8:58:a0:3f:b7:fd:6c:44:c6:74:4d:ad:62:d1:51: 47:2b:40:0c:51:85:f3:1c:81:6a:e3:2e:c4:7d:64: a5:15:54:f6:08:39:58:d5:ee:45:87:ad:38:70:d3: 7b:c9:bc:3f:f8:ce:d8:0c:97:4b:be:47:43:b4:54: 0d:9e:88:35:d2:5a:7f:38:6b:28:58:5d:5f:7f:92: 02:9b:24:d4:71:d2:db:b2:f2:00:b3:41:7e:49:d1: 8c:21:d6:78:6b:8a:1a:c6:b9:85:a0:19:65:95:dc: 59:1b:e2:42:22:fa:6b:85:3f:06:69:72:76:3a:4c: df:64:1b:e7:1c:ed:bd:df:c7:36:fc:bf:a6:e6:b8: ca:14:59:fa:b7:63:22:aa:10:75:fe:1a:05:06:85: b6:af:8a:74:e2:85:e4:25:0e:67:83:6b:b9:45:af: c4:47:4d:39:da:27:b8:f4:cb:2f:49:38:9e:93:49: 1f:1a:79:97:92:49:5a:d3:7f:e4:c3:78:ba:24:98: e6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:42:AF:1D:6B:E0:62:C9:6B:97:35:10:61:DA:2A:80:B8:4B:AE:72 X509v3 Authority Key Identifier: keyid:31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:4f:1a:28:ff:1d:f5:14:67:cf:9a:eb:89:40:97:c7:56:34: 53:b8:da:29:4b:d5:a5:0d:97:af:6f:3e:6a:df:6c:28:0b:69: 9d:74:6f:87:40:d4:3d:bf:22:f3:8c:eb:4c:f6:8e:c4:42:09: fa:b5:33:c3:4d:ee:87:ca:79:b8:a1:8b:72:3c:c4:61:66:69: 6b:57:57:c8:00:e4:ac:67:af:b1:e1:8f:3a:4c:f7:05:e9:84: bb:6f:b0:3f:26:22:17:b4:0d:4e:cc:8d:42:1b:84:08:84:15: 09:04:d2:29:69:0e:39:5a:d6:1d:00:b2:34:5e:1a:c1:16:72: 8f:49:8a:82:ad:73:c7:38:1c:fa:50:8f:9b:66:3b:79:89:86: ae:5c:3d:15:d1:30:10:c3:21:bc:67:70:6d:94:90:59:2a:66: 9d:ad:fa:ea:26:8b:ad:b3:81:5e:f4:6f:15:d0:c7:2b:85:c6: e9:d7:90:ba:0f:e0:bd:8f:3c:cc:0a:b3:84:7f:79:cc:ba:c3: bd:de:b0:13:25:cb:8f:9a:3e:65:b1:fb:7f:74:dc:63:7e:55: 6b:cf:16:c1:c9:4c:c4:54:e5:6e:e2:59:e5:63:76:1b:3f:24: f9:64:d8:0f:7e:dc:e0:71:af:ad:38:ac:51:cf:4a:de:0a:3f: ed:31:64:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHPtSYFh3DuXINjwsd0yDXs+PfWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDRjEyNTUyQzAyNzJDNDUxRTFFRTEyMjQ0RTAzQkRE RDZCMkNBMTAeFw0yNTA4MjIyMjM3NTZaFw0yNTA4MjQwMjI5NTZaMDMxMTAvBgNV BAMTKEI2NDJBRjFENkJFMDYyQzk2Qjk3MzUxMDYxREEyQTgwQjg0QkFFNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuFtN7hgKOrG/t2uNvPGh9O1EE MxwaPNLhrj5VVQtMu+TOKWq2mZCmH+MtymFB/UlDFqNGjFB0JvbXH/hYoD+3/WxE xnRNrWLRUUcrQAxRhfMcgWrjLsR9ZKUVVPYIOVjV7kWHrThw03vJvD/4ztgMl0u+ R0O0VA2eiDXSWn84ayhYXV9/kgKbJNRx0tuy8gCzQX5J0Ywh1nhrihrGuYWgGWWV 3Fkb4kIi+muFPwZpcnY6TN9kG+cc7b3fxzb8v6bmuMoUWfq3YyKqEHX+GgUGhbav inTiheQlDmeDa7lFr8RHTTnaJ7j0yy9JOJ6TSR8aeZeSSVrTf+TDeLokmObfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtkKvHWvgYslrlzUQYdoqgLhLrnIwHwYDVR0j BBgwFoAUMc8SVSwCcsRR4e4SJE4Dvd1rLKEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUNtakI4UXlWVGZRZDlCWEJTd25Na3JYaHI0UHV5RG5kWEpoeXB2TG9L aU0vMS8zMUNGMTI1NTJDMDI3MkM0NTFFMUVFMTIyNDRFMDNCRERENkIyQ0ExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQ0YxMjU1MkMwMjcyQzQ1 MUUxRUUxMjI0NEUwM0JEREQ2QjJDQTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUNtakI4UXlWVGZRZDlCWEJTd25Na3JYaHI0UHV5RG5kWEpoeXB2TG9LaU0vMS8z MUNGMTI1NTJDMDI3MkM0NTFFMUVFMTIyNDRFMDNCRERENkIyQ0ExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkE8aKP8d9RRnz5rriUCXx1Y0U7jaKUvVpQ2Xr28+at9sKAtpnXRvh0DUPb8i 84zrTPaOxEIJ+rUzw03uh8p5uKGLcjzEYWZpa1dXyADkrGevseGPOkz3BemEu2+w PyYiF7QNTsyNQhuECIQVCQTSKWkOOVrWHQCyNF4awRZyj0mKgq1zxzgc+lCPm2Y7 eYmGrlw9FdEwEMMhvGdwbZSQWSpmna366iaLrbOBXvRvFdDHK4XG6deQug/gvY88 zAqzhH95zLrDvd6wEyXLj5o+ZbH7f3TcY35Va88WwclMxFTlbuJZ5WN2Gz8k+WTY D37c4HGvrTisUc9K3go/7TFkNg== -----END CERTIFICATE-----Generated at Sat Aug 23 13:30:59 2025 by rpki-client