$ rpki-client -vvf rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft File: 31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft (raw, json) Hash identifier: mOKNb/iMLgwe2AegJj9bLNUvBEpS+p6H2gE+qVJGKww= Subject key identifier: 1C:8A:B2:C0:75:00:8A:94:06:2C:70:26:F2:D0:45:44:E9:D9:BD:46 Authority key identifier: 31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1 Certificate issuer: /CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1 Certificate serial: 547655BA095D76A4F7577788252F52E932847CC9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer Subject info access: rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft Manifest number: 025C Signing time: Sun 29 Jun 2025 16:47:35 +0000 Manifest this update: Sun 29 Jun 2025 16:42:35 +0000 Manifest next update: Mon 30 Jun 2025 18:51:35 +0000 Files and hashes: 1: 3137302e37392e3134382e302f32322d3332203d3e20323636323939.roa (hash: K7OCXntBYYWlJMIreulrBkSYMm1UKWdAl8lbZdhbPBM=) 2: 3137302e302e3139322e302f32322d3332203d3e20323636323939.roa (hash: 30DhOqm2M90Ds5s+OzTCD+5M9ukc+Ih0rydkINiYO4M=) 3: 323830343a333561383a3a2f33322d313238203d3e20323636323939.roa (hash: IsVLxgwYDi8pNm8S0DzwD9QJhFe0QyknmCg1ewqOeJQ=) 4: 31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl (hash: UnCQYQsYo3VMcEqTduhyxL+8YZFNaEPqUoLrehANkPo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Jun 2025 18:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:76:55:ba:09:5d:76:a4:f7:57:77:88:25:2f:52:e9:32:84:7c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1 Validity Not Before: Jun 29 16:42:35 2025 GMT Not After : Jun 30 18:51:35 2025 GMT Subject: CN=1C8AB2C075008A94062C7026F2D04544E9D9BD46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:1e:69:a5:21:e6:49:cd:fb:eb:9b:47:ae: 97:f7:39:5c:e7:63:66:56:5d:23:81:84:32:8c:a7: 77:61:1d:64:f1:04:0c:6d:35:49:4b:6c:39:bb:ad: 9a:7b:fb:ef:d3:91:c5:0b:ee:44:87:f4:3f:ab:8c: 97:3c:95:d7:b5:c9:e5:6f:7f:db:6b:02:09:90:f7: 00:cd:4a:a2:ae:4e:dd:0f:81:23:ec:b1:45:6f:ba: 95:d8:3e:6d:14:61:fb:fb:8a:c4:6f:aa:9a:b3:c2: ba:b4:a2:18:ca:20:df:c5:74:c2:a8:7a:d1:05:4b: 29:60:37:da:d1:8f:ee:94:1c:a7:da:78:2c:c1:c2: 93:e2:0f:2e:fa:dd:b7:29:30:35:8c:ae:cb:0f:24: 86:c7:04:a4:12:04:82:5f:56:b5:2e:2c:56:8d:48: fb:86:39:db:9c:67:15:da:e8:80:f0:72:52:ed:33: e2:1f:9e:16:22:2a:bf:11:71:29:3c:ce:06:ec:bc: 6b:41:59:b3:ff:9f:18:bb:94:26:3b:a9:3c:33:7b: 6e:27:d4:03:31:a8:03:93:14:fd:e3:e5:a2:2c:f6: 9c:a4:fa:2a:e8:31:80:8b:8a:01:00:cc:7c:40:39: 7c:a1:8f:c5:36:3e:ce:55:d1:be:1a:30:f9:b6:80: ee:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8A:B2:C0:75:00:8A:94:06:2C:70:26:F2:D0:45:44:E9:D9:BD:46 X509v3 Authority Key Identifier: keyid:31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:cf:37:1f:e3:ec:e2:3e:29:c7:f9:9c:b6:9e:86:f4:e4:2e: f5:a8:81:a7:7e:ed:1a:fb:67:cd:cf:31:e0:be:83:72:a8:80: ff:fa:f4:b9:f7:3a:87:59:9d:72:ba:b0:6a:42:a4:a5:cc:45: 7b:85:28:33:48:f6:5e:3e:35:b8:68:a1:66:f9:a2:e7:ec:0f: 01:29:00:a0:c7:59:3d:b3:88:5e:05:e3:83:d0:bb:bf:d4:84: 93:74:48:80:93:ae:3b:0b:d4:49:4d:2d:44:90:4b:ed:6b:a7: 02:45:7a:ea:7a:36:be:2a:67:36:03:fb:2f:81:b7:f4:4e:07: 8b:2e:9d:a0:bb:0b:e3:45:3a:09:56:55:ff:5e:81:88:cb:5f: 13:02:a1:56:3f:49:59:84:d4:f2:f1:c0:7d:af:df:b6:0a:2f: d4:69:47:86:bb:82:62:7a:d0:f1:86:59:a2:a4:a1:6c:07:63: 85:4c:17:4b:50:dd:a7:1a:3d:e2:9f:b1:6c:49:61:6d:86:ec: dd:23:d1:ea:a4:d0:74:36:ee:29:f0:91:98:f7:19:d8:1f:bb: 6d:11:90:27:6b:d4:9f:a6:78:a5:da:f8:4f:0a:63:bf:9b:45: 6b:55:96:9f:ac:a7:e1:ef:2e:d0:24:d2:40:b4:7f:78:11:39: 23:34:cb:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVHZVuglddqT3V3eIJS9S6TKEfMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDRjEyNTUyQzAyNzJDNDUxRTFFRTEyMjQ0RTAzQkRE RDZCMkNBMTAeFw0yNTA2MjkxNjQyMzVaFw0yNTA2MzAxODUxMzVaMDMxMTAvBgNV BAMTKDFDOEFCMkMwNzUwMDhBOTQwNjJDNzAyNkYyRDA0NTQ0RTlEOUJENDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34B5ppSHmSc3765tHrpf3OVzn Y2ZWXSOBhDKMp3dhHWTxBAxtNUlLbDm7rZp7++/TkcUL7kSH9D+rjJc8lde1yeVv f9trAgmQ9wDNSqKuTt0PgSPssUVvupXYPm0UYfv7isRvqpqzwrq0ohjKIN/FdMKo etEFSylgN9rRj+6UHKfaeCzBwpPiDy763bcpMDWMrssPJIbHBKQSBIJfVrUuLFaN SPuGOducZxXa6IDwclLtM+IfnhYiKr8RcSk8zgbsvGtBWbP/nxi7lCY7qTwze24n 1AMxqAOTFP3j5aIs9pyk+iroMYCLigEAzHxAOXyhj8U2Ps5V0b4aMPm2gO6/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHIqywHUAipQGLHAm8tBFROnZvUYwHwYDVR0j BBgwFoAUMc8SVSwCcsRR4e4SJE4Dvd1rLKEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUNtakI4UXlWVGZRZDlCWEJTd25Na3JYaHI0UHV5RG5kWEpoeXB2TG9L aU0vMS8zMUNGMTI1NTJDMDI3MkM0NTFFMUVFMTIyNDRFMDNCRERENkIyQ0ExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQ0YxMjU1MkMwMjcyQzQ1 MUUxRUUxMjI0NEUwM0JEREQ2QjJDQTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUNtakI4UXlWVGZRZDlCWEJTd25Na3JYaHI0UHV5RG5kWEpoeXB2TG9LaU0vMS8z MUNGMTI1NTJDMDI3MkM0NTFFMUVFMTIyNDRFMDNCRERENkIyQ0ExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo883H+Ps4j4px/mctp6G9OQu9aiBp37tGvtnzc8x4L6DcqiA//r0ufc6h1md crqwakKkpcxFe4UoM0j2Xj41uGihZvmi5+wPASkAoMdZPbOIXgXjg9C7v9SEk3RI gJOuOwvUSU0tRJBL7WunAkV66no2vipnNgP7L4G39E4Hiy6doLsL40U6CVZV/16B iMtfEwKhVj9JWYTU8vHAfa/ftgov1GlHhruCYnrQ8YZZoqShbAdjhUwXS1Ddpxo9 4p+xbElhbYbs3SPR6qTQdDbuKfCRmPcZ2B+7bRGQJ2vUn6Z4pdr4Twpjv5tFa1WW n6yn4e8u0CTSQLR/eBE5IzTLWA== -----END CERTIFICATE-----Generated at Mon Jun 30 07:25:51 2025 by rpki-client