$ rpki-client -vvf rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft File: 31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft (raw, json) Hash identifier: 5OFxMHqqUn7Z0mm2MoXfQCYACd5F+vKR3G9L6SMgcyU= Subject key identifier: 2C:C8:D5:35:A3:14:8A:E1:36:27:36:84:D6:1A:78:F8:46:0D:86:ED Authority key identifier: 31:AE:EE:52:73:A3:1C:20:77:C2:F9:57:CF:5A:2C:2D:24:07:50:E3 Certificate issuer: /CN=31AEEE5273A31C2077C2F957CF5A2C2D240750E3 Certificate serial: 34817A6AA7F95CB43DFB4C1EC4F624F1A65BC0F6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer Subject info access: rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft Manifest number: 0308 Signing time: Wed 05 Nov 2025 09:06:01 +0000 Manifest this update: Wed 05 Nov 2025 09:01:01 +0000 Manifest next update: Thu 06 Nov 2025 09:54:01 +0000 Files and hashes: 1: 31AEEE5273A31C2077C2F957CF5A2C2D240750E3.crl (hash: u1VUs20cwTTGwUbikY5exX/S7LFT+wemrzX2QV9oW84=) 2: 3230312e3231362e3132372e302f32342d3332203d3e20323733343538.roa (hash: Mh6mp2NI59RQVoXN3aFVokMT6fJWu85UdtTFNII0mpc=) 3: 3230312e3231362e3132342e302f32322d3332203d3e20323730333034.roa (hash: sfnLaTHDQS9Ygt/qvSr8vquvrC5x88RVTot0u1y0wjs=) 4: 323830343a363966633a3a2f33322d313238203d3e20323730333034.roa (hash: mCWseisLBFmCaMIAICO1RASOUVqA8VtzNh9BsMwSD1Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.crl rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 09:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:81:7a:6a:a7:f9:5c:b4:3d:fb:4c:1e:c4:f6:24:f1:a6:5b:c0:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31AEEE5273A31C2077C2F957CF5A2C2D240750E3 Validity Not Before: Nov 5 09:01:01 2025 GMT Not After : Nov 6 09:54:01 2025 GMT Subject: CN=2CC8D535A3148AE136273684D61A78F8460D86ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:77:9a:ac:e6:6d:61:ee:5c:ac:74:f6:eb:6c: 7d:f6:26:da:2f:14:7d:79:30:e8:08:bd:06:97:ec: 3d:f6:0f:1f:7d:e4:9d:47:ad:37:54:9a:de:00:2b: a2:44:b3:77:02:14:82:77:b4:8c:00:e7:87:d7:a9: 68:04:ea:ea:88:91:ef:31:29:af:59:4a:15:e7:34: 6b:8f:7f:b9:92:58:6a:f0:48:54:7d:74:03:83:e9: 1d:8e:e5:c9:37:be:7d:75:2d:3b:6e:58:6c:b8:2e: 8f:a7:3d:11:d8:80:81:68:1b:23:7b:06:13:42:29: 72:dd:a4:81:e0:a2:84:e9:3a:44:fe:e8:ea:cd:69: ba:5d:62:5c:de:b1:50:03:d4:be:41:52:9c:18:0d: 8b:b5:34:f0:86:44:8a:fc:26:e5:70:89:20:64:8b: 64:ac:3c:7e:a0:dd:83:55:49:bc:45:4f:df:0e:d0: f4:77:98:14:35:88:97:e9:2b:50:54:ea:3d:dc:5b: c6:21:63:f9:8b:c5:2e:86:9f:04:96:3a:ea:7d:e8: 06:03:26:32:da:4f:a8:20:79:c0:20:67:a9:b1:68: 36:35:f7:64:f4:b6:15:96:21:bc:dd:c6:b2:1f:dc: 05:df:8e:e5:98:de:b9:16:7a:b5:2f:fa:32:7e:51: dc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C8:D5:35:A3:14:8A:E1:36:27:36:84:D6:1A:78:F8:46:0D:86:ED X509v3 Authority Key Identifier: keyid:31:AE:EE:52:73:A3:1C:20:77:C2:F9:57:CF:5A:2C:2D:24:07:50:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a7:85:e0:ea:f0:b5:17:64:6a:e4:1a:4e:89:bd:e9:58:56: 58:ee:74:8e:08:aa:75:8f:eb:1c:76:44:af:17:ad:9b:9d:70: 53:49:a6:e0:63:fa:3b:3b:2a:83:1d:d5:b7:c3:a2:2e:53:66: 7a:19:8e:cd:14:7b:23:92:c8:4d:44:1a:50:24:6c:b2:07:47: 0c:d8:28:6e:6e:85:55:eb:ab:6d:62:5a:8a:dd:77:3c:a3:3e: e0:6e:69:7f:9f:0a:ce:1c:a3:7a:98:55:c1:46:ff:78:0c:f1: 63:af:94:09:02:22:fd:f0:c6:75:b0:e4:b5:7e:2d:16:1f:04: 34:cf:56:b7:c1:9a:ed:82:06:b0:df:40:b7:f9:b4:9f:cd:0f: 3b:1a:2f:2f:60:62:e4:17:4c:59:3a:db:5c:6a:82:45:13:1a: bf:7b:94:32:0e:af:e0:68:b5:75:21:7c:09:33:6f:2a:bb:5a: 6e:c7:cf:29:9a:dc:ca:4b:a5:f1:88:17:8d:7b:07:01:3e:fa: 0f:e9:3f:d7:99:f0:8f:4e:df:38:80:e6:97:3f:a6:36:1a:b0: d3:f4:94:8e:6b:38:16:b2:84:b7:ba:a9:3a:de:7d:b5:b4:80: 2d:09:63:25:c0:e5:93:dd:b1:62:6f:3c:87:98:0b:bf:8a:cc: 06:0e:07:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNIF6aqf5XLQ9+0wexPYk8aZbwPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFBRUVFNTI3M0EzMUMyMDc3QzJGOTU3Q0Y1QTJDMkQy NDA3NTBFMzAeFw0yNTExMDUwOTAxMDFaFw0yNTExMDYwOTU0MDFaMDMxMTAvBgNV BAMTKDJDQzhENTM1QTMxNDhBRTEzNjI3MzY4NEQ2MUE3OEY4NDYwRDg2RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/d5qs5m1h7lysdPbrbH32Jtov FH15MOgIvQaX7D32Dx995J1HrTdUmt4AK6JEs3cCFIJ3tIwA54fXqWgE6uqIke8x Ka9ZShXnNGuPf7mSWGrwSFR9dAOD6R2O5ck3vn11LTtuWGy4Lo+nPRHYgIFoGyN7 BhNCKXLdpIHgooTpOkT+6OrNabpdYlzesVAD1L5BUpwYDYu1NPCGRIr8JuVwiSBk i2SsPH6g3YNVSbxFT98O0PR3mBQ1iJfpK1BU6j3cW8YhY/mLxS6GnwSWOup96AYD JjLaT6ggecAgZ6mxaDY192T0thWWIbzdxrIf3AXfjuWY3rkWerUv+jJ+Udx9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULMjVNaMUiuE2JzaE1hp4+EYNhu0wHwYDVR0j BBgwFoAUMa7uUnOjHCB3wvlXz1osLSQHUOMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTdKb0pZRVFFdFcxZjVlS2paRVpnTDE5YjRnTnBwdzRZcktTOXNkeDg3 S0wvMS8zMUFFRUU1MjczQTMxQzIwNzdDMkY5NTdDRjVBMkMyRDI0MDc1MEUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQUVFRTUyNzNBMzFDMjA3 N0MyRjk1N0NGNUEyQzJEMjQwNzUwRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTdKb0pZRVFFdFcxZjVlS2paRVpnTDE5YjRnTnBwdzRZcktTOXNkeDg3S0wvMS8z MUFFRUU1MjczQTMxQzIwNzdDMkY5NTdDRjVBMkMyRDI0MDc1MEUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY6eF4OrwtRdkauQaTom96VhWWO50jgiqdY/rHHZErxetm51wU0mm4GP6Ozsq gx3Vt8OiLlNmehmOzRR7I5LITUQaUCRssgdHDNgobm6FVeurbWJait13PKM+4G5p f58KzhyjephVwUb/eAzxY6+UCQIi/fDGdbDktX4tFh8ENM9Wt8Ga7YIGsN9At/m0 n80POxovL2Bi5BdMWTrbXGqCRRMav3uUMg6v4Gi1dSF8CTNvKrtabsfPKZrcykul 8YgXjXsHAT76D+k/15nwj07fOIDmlz+mNhqw0/SUjms4FrKEt7qpOt59tbSALQlj JcDlk92xYm88h5gLv4rMBg4HnA== -----END CERTIFICATE-----Generated at Wed Nov 5 15:34:02 2025 by rpki-client