$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.mft File: 31913C696443B8596EC7722D368B4749C287A025.mft (raw, json) Hash identifier: Pja6XKGtePhA/u/riYeEJoaiTbBxt371GPSqdb/Eo/s= Subject key identifier: 8F:64:61:22:FD:FE:05:AD:AA:80:F5:71:9C:C7:77:D7:C2:37:B6:E0 Authority key identifier: 31:91:3C:69:64:43:B8:59:6E:C7:72:2D:36:8B:47:49:C2:87:A0:25 Certificate issuer: /CN=31913C696443B8596EC7722D368B4749C287A025 Certificate serial: 48E5EF678C790D87A35D381580DAAA3AE5B912B1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer Subject info access: rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.mft Manifest number: 021A Signing time: Fri 25 Jul 2025 05:56:48 +0000 Manifest this update: Fri 25 Jul 2025 05:51:48 +0000 Manifest next update: Sat 26 Jul 2025 07:29:48 +0000 Files and hashes: 1: 323830343a316236383a3a2f33322d3438203d3e203631373236.roa (hash: pfn35jhaqmmVavRIG/aoZzZSN1xJuEgSVB+lmLR7HBw=) 2: 3133312e37322e39362e302f32322d3234203d3e203631373236.roa (hash: T4l1Rdp+if5x2GwVENwJ5EG4S5U5hpq/S6oNIsW4FsY=) 3: 3138362e3232372e36342e302f32322d3234203d3e203631373236.roa (hash: tQtO6upZn/pp5ZgaAHSVlMXZc9ybBbe/+0pkP3gDHBw=) 4: 31913C696443B8596EC7722D368B4749C287A025.crl (hash: sVnJSRJ+SQEIE3j0x60NIxOzQQJmw6dyNdnpPTbiBM0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.crl rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Jul 2025 07:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e5:ef:67:8c:79:0d:87:a3:5d:38:15:80:da:aa:3a:e5:b9:12:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31913C696443B8596EC7722D368B4749C287A025 Validity Not Before: Jul 25 05:51:48 2025 GMT Not After : Jul 26 07:29:48 2025 GMT Subject: CN=8F646122FDFE05ADAA80F5719CC777D7C237B6E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3c:25:4a:e5:3a:b4:b3:8c:ea:87:e7:6d:f4: ca:3e:e4:10:df:83:04:c3:30:da:68:d4:43:df:b0: a6:de:00:a2:ca:6d:38:a5:af:53:2c:07:02:57:57: 43:3f:cb:c5:97:1d:57:96:19:17:ab:f8:06:d3:c8: 58:07:02:94:31:7b:22:2a:8d:cc:0c:ca:cc:ba:6c: 67:f9:3b:ca:49:c1:e8:94:96:d2:e7:0e:ba:4f:74: c5:74:17:60:a1:b4:82:e9:7a:41:7a:e9:6d:26:32: d8:c6:85:5f:79:7f:7b:e1:bb:0f:27:be:dd:7e:1e: 65:29:71:7f:2e:dd:0a:c8:82:a2:a0:99:7e:6e:18: 64:b7:30:ed:e3:16:65:13:44:b7:68:f0:52:4c:a6: 34:b4:8e:dd:3a:9c:95:84:16:e8:8a:06:34:4f:f1: f7:8b:82:e7:f8:ec:9d:10:d5:9d:19:3a:80:75:c3: b1:ee:b1:fe:35:a5:e4:4a:dc:9a:1f:d7:43:17:1c: 9f:b9:5f:8a:8c:c9:1d:d9:f4:62:59:d5:b6:bf:2d: 7f:b7:0f:61:d0:70:4e:bb:9a:97:95:9f:69:40:bf: 37:80:af:5e:a6:2c:0a:6b:4d:df:5b:49:fb:15:5e: 61:e6:95:d7:29:92:44:4e:ae:e4:09:62:73:00:b0: 91:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:64:61:22:FD:FE:05:AD:AA:80:F5:71:9C:C7:77:D7:C2:37:B6:E0 X509v3 Authority Key Identifier: keyid:31:91:3C:69:64:43:B8:59:6E:C7:72:2D:36:8B:47:49:C2:87:A0:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ba:a3:3d:0a:19:7e:59:6c:0d:58:a1:7e:83:7d:55:1e:c7: 51:b0:b4:34:83:4d:e7:8a:86:fe:57:06:bc:59:97:a1:83:c6: 1d:50:22:24:d5:af:0e:6f:62:d8:b7:3a:e2:66:ca:7d:93:d6: 4e:69:be:24:f3:79:9f:5c:55:f8:72:2f:18:e1:14:6b:47:f3: c0:bc:61:73:0b:91:7f:2b:96:3a:0f:06:4c:2e:86:b9:b6:eb: 96:bd:3f:39:75:43:53:0c:5b:1d:af:f7:b8:b1:8f:c7:e8:48: 92:6c:af:b5:05:19:fc:2e:0b:ae:05:34:d5:b9:83:6d:7e:7e: d4:f4:7f:65:36:0e:bd:dd:69:74:a9:0a:de:80:fc:79:b9:bf: f2:8d:fe:3d:30:29:84:99:f0:39:f3:98:dd:28:35:f7:47:44: 65:65:86:b3:1f:e1:f5:53:0c:ff:a2:f1:00:16:b8:3e:c6:c4: 86:ff:8b:dc:6f:ba:a8:5a:e7:d7:19:16:53:d1:a8:b9:50:a0: cf:f1:01:5b:fb:4d:77:01:8e:36:84:ba:da:6d:cc:9c:f1:fa: 78:92:76:53:84:35:80:bf:e2:9a:fc:76:57:e9:0d:9a:d1:1c: 43:05:80:41:43:c8:db:c5:f6:73:d2:ad:b9:68:f5:e3:df:bd: cd:7b:43:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSOXvZ4x5DYejXTgVgNqqOuW5ErEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5MTNDNjk2NDQzQjg1OTZFQzc3MjJEMzY4QjQ3NDlD Mjg3QTAyNTAeFw0yNTA3MjUwNTUxNDhaFw0yNTA3MjYwNzI5NDhaMDMxMTAvBgNV BAMTKDhGNjQ2MTIyRkRGRTA1QURBQTgwRjU3MTlDQzc3N0Q3QzIzN0I2RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUPCVK5Tq0s4zqh+dt9Mo+5BDf gwTDMNpo1EPfsKbeAKLKbTilr1MsBwJXV0M/y8WXHVeWGRer+AbTyFgHApQxeyIq jcwMysy6bGf5O8pJweiUltLnDrpPdMV0F2ChtILpekF66W0mMtjGhV95f3vhuw8n vt1+HmUpcX8u3QrIgqKgmX5uGGS3MO3jFmUTRLdo8FJMpjS0jt06nJWEFuiKBjRP 8feLguf47J0Q1Z0ZOoB1w7Husf41peRK3Jof10MXHJ+5X4qMyR3Z9GJZ1ba/LX+3 D2HQcE67mpeVn2lAvzeAr16mLAprTd9bSfsVXmHmldcpkkROruQJYnMAsJFrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUj2RhIv3+Ba2qgPVxnMd318I3tuAwHwYDVR0j BBgwFoAUMZE8aWRDuFlux3ItNotHScKHoCUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGh3QlkycHdVRVV6cDJhWnVMQ1doNUNQV0NxOHI0WGZZZTM0OXZnWTFp NWgvMS8zMTkxM0M2OTY0NDNCODU5NkVDNzcyMkQzNjhCNDc0OUMyODdBMDI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOTEzQzY5NjQ0M0I4NTk2 RUM3NzIyRDM2OEI0NzQ5QzI4N0EwMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGh3QlkycHdVRVV6cDJhWnVMQ1doNUNQV0NxOHI0WGZZZTM0OXZnWTFpNWgvMS8z MTkxM0M2OTY0NDNCODU5NkVDNzcyMkQzNjhCNDc0OUMyODdBMDI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF7qjPQoZfllsDVihfoN9VR7HUbC0NINN54qG/lcGvFmXoYPGHVAiJNWvDm9i 2Lc64mbKfZPWTmm+JPN5n1xV+HIvGOEUa0fzwLxhcwuRfyuWOg8GTC6Gubbrlr0/ OXVDUwxbHa/3uLGPx+hIkmyvtQUZ/C4LrgU01bmDbX5+1PR/ZTYOvd1pdKkK3oD8 ebm/8o3+PTAphJnwOfOY3Sg190dEZWWGsx/h9VMM/6LxABa4PsbEhv+L3G+6qFrn 1xkWU9GouVCgz/EBW/tNdwGONoS62m3MnPH6eJJ2U4Q1gL/imvx2V+kNmtEcQwWA QUPI28X2c9KtuWj149+9zXtDBA== -----END CERTIFICATE-----Generated at Sat Jul 26 00:17:37 2025 by rpki-client