$ rpki-client -vvf rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/3731A0590985DE6CB86AAB65AB2D705079C5420C.mft File: 3731A0590985DE6CB86AAB65AB2D705079C5420C.mft (raw, json) Hash identifier: XsRIxucmdxF7Ii8TkLJCVYPlcjDTwz8XSzHd/EQ6/SE= Subject key identifier: 23:2F:7C:A6:2E:DC:4C:D4:86:7E:F0:64:14:DE:A0:A1:4E:D5:EE:97 Authority key identifier: 37:31:A0:59:09:85:DE:6C:B8:6A:AB:65:AB:2D:70:50:79:C5:42:0C Certificate issuer: /CN=3731A0590985DE6CB86AAB65AB2D705079C5420C Certificate serial: 7AD5035167B17283027B0D0C173CDC998301759E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3731A0590985DE6CB86AAB65AB2D705079C5420C.cer Subject info access: rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/3731A0590985DE6CB86AAB65AB2D705079C5420C.mft Manifest number: 02E7 Signing time: Mon 20 Oct 2025 10:10:20 +0000 Manifest this update: Mon 20 Oct 2025 10:05:20 +0000 Manifest next update: Tue 21 Oct 2025 13:56:20 +0000 Files and hashes: 1: 3731A0590985DE6CB86AAB65AB2D705079C5420C.crl (hash: 2hNCCvi5CzZKb0kuEMPUq+yvQq1FnBt3arqSbPnzuaM=) 2: 34352e3137382e3234302e302f32332d3234203d3e20323639313135.roa (hash: M0rIjj/3nhm8bjyrCE2tWWThaRhXrjFBQMGRvTJYUnA=) 3: 323830343a356661383a3a2f33322d3438203d3e20323639313135.roa (hash: CmZdUNnbM1pyAR9q/RGIHjPzD3qEPMykpOIE8SAK/Q4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/3731A0590985DE6CB86AAB65AB2D705079C5420C.crl rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/3731A0590985DE6CB86AAB65AB2D705079C5420C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3731A0590985DE6CB86AAB65AB2D705079C5420C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d5:03:51:67:b1:72:83:02:7b:0d:0c:17:3c:dc:99:83:01:75:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3731A0590985DE6CB86AAB65AB2D705079C5420C Validity Not Before: Oct 20 10:05:20 2025 GMT Not After : Oct 21 13:56:20 2025 GMT Subject: CN=232F7CA62EDC4CD4867EF06414DEA0A14ED5EE97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f2:2b:0e:c4:b0:c0:70:39:a3:7d:0e:e3:5a: e4:f6:44:28:28:26:dc:df:1b:04:bc:6d:19:38:ea: 91:b6:73:22:20:70:54:b0:7f:c8:08:ac:ec:c5:07: dd:a2:93:81:fc:d2:eb:cd:78:62:81:8b:dd:9d:64: c3:e5:11:e1:b1:67:ec:38:37:7e:b8:e9:34:82:6d: 7f:5f:7e:8b:25:12:34:4a:3f:33:f7:59:a4:f7:d4: 23:5d:c3:53:55:ef:ec:a2:07:26:c8:47:72:33:46: db:72:9c:02:5d:04:43:c7:c3:ec:d9:ac:a9:67:6c: e2:90:8c:ec:6a:b7:06:f8:37:c5:4a:e2:ac:ec:0e: 7b:b8:be:a7:3b:16:61:c3:4b:f8:61:a1:ac:e6:7c: 3e:9e:78:48:c7:d3:44:37:f5:2a:b2:c8:c0:dc:f3: c1:9b:ac:42:fb:6a:4d:5b:3f:47:f8:6e:23:16:30: 32:fc:a6:0c:b6:5c:b2:64:f4:65:4e:eb:bd:b3:f5: 95:44:ed:34:4b:26:bf:92:0a:6d:e0:92:81:d6:74: 52:8a:c5:91:a0:07:c3:05:2d:bc:36:c9:f4:7f:be: a3:69:f2:b6:99:2b:bc:58:ef:8a:f5:e2:5f:74:e4: c5:18:db:32:71:cd:a2:4e:ec:ab:07:e0:ea:05:42: bb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2F:7C:A6:2E:DC:4C:D4:86:7E:F0:64:14:DE:A0:A1:4E:D5:EE:97 X509v3 Authority Key Identifier: keyid:37:31:A0:59:09:85:DE:6C:B8:6A:AB:65:AB:2D:70:50:79:C5:42:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/3731A0590985DE6CB86AAB65AB2D705079C5420C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3731A0590985DE6CB86AAB65AB2D705079C5420C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/3731A0590985DE6CB86AAB65AB2D705079C5420C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:29:38:96:db:4d:57:50:c9:f5:db:a1:26:70:c1:d3:21:bb: 5a:09:54:49:20:9c:80:a0:51:0d:1e:d3:38:53:fd:14:35:4b: 82:9b:fe:1b:f3:1f:24:17:b3:28:e2:f1:0e:92:56:b1:a5:a9: ae:37:5b:7f:92:20:fb:6e:23:73:f0:6c:5f:f3:f0:8f:f9:69: 0b:db:6e:7b:6e:9c:63:96:d8:a7:20:f2:c2:42:2d:ac:22:a7: d4:00:eb:38:a0:fe:bd:2b:ab:49:6b:7f:17:c6:a5:e7:de:62: 72:5f:da:1e:49:da:89:d3:d3:d4:b9:38:bd:ef:8d:31:fc:84: f6:b4:5c:99:21:02:22:5b:47:7f:68:87:2b:a6:eb:d2:ea:a8: 49:d2:74:66:ee:8e:99:be:2c:b7:0c:24:a2:60:f4:b8:63:ff: 21:2a:af:98:3d:22:0d:6b:79:1d:a7:fd:53:28:ee:dc:e3:a2: 79:f5:b7:11:79:b9:6c:97:5a:dc:f2:56:77:a6:cf:5e:82:46: e4:e0:55:a7:d1:c7:ad:1f:a5:e8:48:ee:ff:0d:1b:87:8e:a3: b1:32:c7:3f:4b:6b:38:cc:bc:2f:6b:fe:e3:94:d1:ab:7c:48: e2:96:3a:6f:dc:d9:ec:df:ac:64:68:a6:56:f3:90:d3:3b:ff: f6:c4:0b:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUetUDUWexcoMCew0MFzzcmYMBdZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzczMUEwNTkwOTg1REU2Q0I4NkFBQjY1QUIyRDcwNTA3 OUM1NDIwQzAeFw0yNTEwMjAxMDA1MjBaFw0yNTEwMjExMzU2MjBaMDMxMTAvBgNV BAMTKDIzMkY3Q0E2MkVEQzRDRDQ4NjdFRjA2NDE0REVBMEExNEVENUVFOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC28isOxLDAcDmjfQ7jWuT2RCgo JtzfGwS8bRk46pG2cyIgcFSwf8gIrOzFB92ik4H80uvNeGKBi92dZMPlEeGxZ+w4 N3646TSCbX9ffoslEjRKPzP3WaT31CNdw1NV7+yiBybIR3IzRttynAJdBEPHw+zZ rKlnbOKQjOxqtwb4N8VK4qzsDnu4vqc7FmHDS/hhoazmfD6eeEjH00Q39SqyyMDc 88GbrEL7ak1bP0f4biMWMDL8pgy2XLJk9GVO672z9ZVE7TRLJr+SCm3gkoHWdFKK xZGgB8MFLbw2yfR/vqNp8raZK7xY74r14l905MUY2zJxzaJO7KsH4OoFQrtRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIy98pi7cTNSGfvBkFN6goU7V7pcwHwYDVR0j BBgwFoAUNzGgWQmF3my4aqtlqy1wUHnFQgwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2hoakdBWmlhRmphMTJxTFpzZ1I5TkdMcUxaWWhQck1IcW9XUzlHNVRB UG4vMC8zNzMxQTA1OTA5ODVERTZDQjg2QUFCNjVBQjJENzA1MDc5QzU0MjBDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3MzFBMDU5MDk4NURFNkNC ODZBQUI2NUFCMkQ3MDUwNzlDNTQyMEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2hoakdBWmlhRmphMTJxTFpzZ1I5TkdMcUxaWWhQck1IcW9XUzlHNVRBUG4vMC8z NzMxQTA1OTA5ODVERTZDQjg2QUFCNjVBQjJENzA1MDc5QzU0MjBDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZSk4lttNV1DJ9duhJnDB0yG7WglUSSCcgKBRDR7TOFP9FDVLgpv+G/MfJBez KOLxDpJWsaWprjdbf5Ig+24jc/BsX/Pwj/lpC9tue26cY5bYpyDywkItrCKn1ADr OKD+vSurSWt/F8al595icl/aHknaidPT1Lk4ve+NMfyE9rRcmSECIltHf2iHK6br 0uqoSdJ0Zu6Omb4stwwkomD0uGP/ISqvmD0iDWt5Haf9Uyju3OOiefW3EXm5bJda 3PJWd6bPXoJG5OBVp9HHrR+l6Eju/w0bh46jsTLHP0trOMy8L2v+45TRq3xI4pY6 b9zZ7N+sZGimVvOQ0zv/9sQLMg== -----END CERTIFICATE-----Generated at Mon Oct 20 20:59:32 2025 by rpki-client