$ rpki-client -vvf rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft File: 31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft (raw, json) Hash identifier: anBJEh/nmI4+k53qgbg3BEvICCuJXAK/GhMgtaKDCA4= Subject key identifier: 23:99:AF:91:F6:B6:D5:53:6D:D5:FF:C4:2F:BE:E5:3D:EE:8C:F7:57 Authority key identifier: 31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1 Certificate issuer: /CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1 Certificate serial: 4BF977CA74F281177000810EC6CDDE92B9841C33 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer Subject info access: rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft Manifest number: 0240 Signing time: Sun 08 Jun 2025 22:49:17 +0000 Manifest this update: Sun 08 Jun 2025 22:44:17 +0000 Manifest next update: Mon 09 Jun 2025 22:58:17 +0000 Files and hashes: 1: 3137302e302e3139322e302f32322d3332203d3e20323636323939.roa (hash: 30DhOqm2M90Ds5s+OzTCD+5M9ukc+Ih0rydkINiYO4M=) 2: 323830343a333561383a3a2f33322d313238203d3e20323636323939.roa (hash: IsVLxgwYDi8pNm8S0DzwD9QJhFe0QyknmCg1ewqOeJQ=) 3: 31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl (hash: mYlCjSy9/YAIOPbHQFTekDPUYbP9eKhiiek7pRvol7g=) 4: 3137302e37392e3134382e302f32322d3332203d3e20323636323939.roa (hash: K7OCXntBYYWlJMIreulrBkSYMm1UKWdAl8lbZdhbPBM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Jun 2025 22:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f9:77:ca:74:f2:81:17:70:00:81:0e:c6:cd:de:92:b9:84:1c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1 Validity Not Before: Jun 8 22:44:17 2025 GMT Not After : Jun 9 22:58:17 2025 GMT Subject: CN=2399AF91F6B6D5536DD5FFC42FBEE53DEE8CF757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0a:b1:d2:2a:3a:12:ce:f7:af:76:fb:1e:02: ef:22:4e:7c:15:77:72:68:83:04:cf:1e:5e:56:2d: d5:90:37:66:e1:34:ca:f2:cf:9f:77:4f:61:4c:80: 00:66:ef:4c:a9:fa:1a:f1:03:13:cb:4b:12:4a:b0: 75:7d:b3:92:70:2a:be:5b:35:83:84:ee:6e:10:d0: d1:57:24:e4:7c:c0:f9:3e:c5:54:03:d9:88:28:df: 92:26:74:84:c1:1d:a6:2f:e6:b8:e1:fb:df:7a:b1: 38:22:88:a0:38:e0:f0:63:84:d1:92:2c:b2:9e:52: c2:63:81:fe:75:69:fd:4e:12:68:39:09:ba:36:70: 2a:9a:16:69:a7:f3:25:af:bb:40:76:d3:81:1d:d2: 53:b9:3a:5b:ba:80:1e:7c:31:d3:33:71:dd:21:5a: 49:24:f4:f2:c2:7d:ab:37:10:6a:0a:f4:74:1b:15: d3:89:42:87:5a:8a:c5:0e:3c:d2:14:50:0e:c8:9f: 4a:9e:c4:f5:28:ab:6a:48:be:39:0a:01:a4:04:69: 8a:56:c1:5f:43:1a:b5:8b:ba:13:e5:7a:cf:54:4f: a7:62:ae:74:ca:19:4d:7b:fc:60:e1:f3:11:45:33: d8:a2:7d:6c:bd:19:03:ac:8c:fb:40:28:4e:6f:4d: 86:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:99:AF:91:F6:B6:D5:53:6D:D5:FF:C4:2F:BE:E5:3D:EE:8C:F7:57 X509v3 Authority Key Identifier: keyid:31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:80:fe:9e:f8:d7:63:e6:6a:e9:0d:da:ea:ce:c8:3c:7c:fb: 52:bf:e7:b4:68:5d:1b:2d:04:75:04:8c:7e:09:a6:c6:2b:6f: c7:66:ff:af:a5:4b:c0:bc:5b:5a:32:4a:9e:57:4d:50:e2:d6: 18:c0:05:d4:0d:56:42:24:af:d1:a1:d1:c3:45:15:21:81:55: 97:7f:81:6b:b0:9f:29:2d:05:c2:79:01:e4:36:9e:bc:b9:af: 5b:d3:05:92:2d:ac:5e:32:83:8a:59:22:ce:c5:c4:e3:98:f0: 2a:12:99:9e:2c:eb:1b:0e:c5:48:77:78:e4:a3:de:e4:b0:74: 3d:09:bd:f3:d3:62:bf:4e:97:bb:69:c4:d0:c8:4e:41:63:00: 00:c7:2f:28:94:12:4a:64:28:18:03:4c:1e:16:78:95:c0:8f: 15:d9:30:7d:37:96:4b:a7:13:22:16:11:cc:ea:a0:f8:19:ab: ef:2e:c3:94:13:fe:e3:f9:8f:7f:de:d9:fc:7c:34:2b:b6:47: 4e:3b:3d:a7:b9:a3:48:62:20:e8:09:69:79:18:2f:67:bc:b5: 4a:1d:b1:a8:10:8d:6f:03:61:d4:cc:b8:21:f1:df:67:ec:37: 03:db:75:74:67:7d:b8:70:dd:38:fc:8a:20:49:f9:42:71:fa: 23:d5:a7:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS/l3ynTygRdwAIEOxs3ekrmEHDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDRjEyNTUyQzAyNzJDNDUxRTFFRTEyMjQ0RTAzQkRE RDZCMkNBMTAeFw0yNTA2MDgyMjQ0MTdaFw0yNTA2MDkyMjU4MTdaMDMxMTAvBgNV BAMTKDIzOTlBRjkxRjZCNkQ1NTM2REQ1RkZDNDJGQkVFNTNERUU4Q0Y3NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQCrHSKjoSzvevdvseAu8iTnwV d3JogwTPHl5WLdWQN2bhNMryz593T2FMgABm70yp+hrxAxPLSxJKsHV9s5JwKr5b NYOE7m4Q0NFXJOR8wPk+xVQD2Ygo35ImdITBHaYv5rjh+996sTgiiKA44PBjhNGS LLKeUsJjgf51af1OEmg5Cbo2cCqaFmmn8yWvu0B204Ed0lO5Olu6gB58MdMzcd0h Wkkk9PLCfas3EGoK9HQbFdOJQodaisUOPNIUUA7In0qexPUoq2pIvjkKAaQEaYpW wV9DGrWLuhPles9UT6dirnTKGU17/GDh8xFFM9iifWy9GQOsjPtAKE5vTYaVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUI5mvkfa21VNt1f/EL77lPe6M91cwHwYDVR0j BBgwFoAUMc8SVSwCcsRR4e4SJE4Dvd1rLKEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUNtakI4UXlWVGZRZDlCWEJTd25Na3JYaHI0UHV5RG5kWEpoeXB2TG9L aU0vMS8zMUNGMTI1NTJDMDI3MkM0NTFFMUVFMTIyNDRFMDNCRERENkIyQ0ExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQ0YxMjU1MkMwMjcyQzQ1 MUUxRUUxMjI0NEUwM0JEREQ2QjJDQTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUNtakI4UXlWVGZRZDlCWEJTd25Na3JYaHI0UHV5RG5kWEpoeXB2TG9LaU0vMS8z MUNGMTI1NTJDMDI3MkM0NTFFMUVFMTIyNDRFMDNCRERENkIyQ0ExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmoD+nvjXY+Zq6Q3a6s7IPHz7Ur/ntGhdGy0EdQSMfgmmxitvx2b/r6VLwLxb WjJKnldNUOLWGMAF1A1WQiSv0aHRw0UVIYFVl3+Ba7CfKS0FwnkB5DaevLmvW9MF ki2sXjKDilkizsXE45jwKhKZnizrGw7FSHd45KPe5LB0PQm989Niv06Xu2nE0MhO QWMAAMcvKJQSSmQoGANMHhZ4lcCPFdkwfTeWS6cTIhYRzOqg+Bmr7y7DlBP+4/mP f97Z/Hw0K7ZHTjs9p7mjSGIg6AlpeRgvZ7y1Sh2xqBCNbwNh1My4IfHfZ+w3A9t1 dGd9uHDdOPyKIEn5QnH6I9WntA== -----END CERTIFICATE-----Generated at Mon Jun 9 14:26:35 2025 by rpki-client