$ rpki-client -vvf rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft File: 31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft (raw, json) Hash identifier: DSX7yCvd3AiUtqkOxEmI22qjq1m7CBs0hpnfrYHkWHo= Subject key identifier: 8E:55:82:11:C5:26:F3:A0:E3:86:20:8C:E0:F6:BB:86:C5:F6:15:C8 Authority key identifier: 31:AE:EE:52:73:A3:1C:20:77:C2:F9:57:CF:5A:2C:2D:24:07:50:E3 Certificate issuer: /CN=31AEEE5273A31C2077C2F957CF5A2C2D240750E3 Certificate serial: 4ED59A7CF67F47FAE3DAE420C0161AB439AE3790 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer Subject info access: rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft Manifest number: 02C9 Signing time: Fri 19 Sep 2025 01:33:22 +0000 Manifest this update: Fri 19 Sep 2025 01:28:22 +0000 Manifest next update: Sat 20 Sep 2025 02:30:22 +0000 Files and hashes: 1: 323830343a363966633a3a2f33322d313238203d3e20323730333034.roa (hash: mCWseisLBFmCaMIAICO1RASOUVqA8VtzNh9BsMwSD1Q=) 2: 3230312e3231362e3132372e302f32342d3332203d3e20323733343538.roa (hash: Mh6mp2NI59RQVoXN3aFVokMT6fJWu85UdtTFNII0mpc=) 3: 31AEEE5273A31C2077C2F957CF5A2C2D240750E3.crl (hash: p/iWYsONSVOI9p0+X7+8ftdnuYbYyfLpdGIQA3fEQVQ=) 4: 3230312e3231362e3132342e302f32322d3332203d3e20323730333034.roa (hash: sfnLaTHDQS9Ygt/qvSr8vquvrC5x88RVTot0u1y0wjs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.crl rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Sep 2025 02:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d5:9a:7c:f6:7f:47:fa:e3:da:e4:20:c0:16:1a:b4:39:ae:37:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31AEEE5273A31C2077C2F957CF5A2C2D240750E3 Validity Not Before: Sep 19 01:28:22 2025 GMT Not After : Sep 20 02:30:22 2025 GMT Subject: CN=8E558211C526F3A0E386208CE0F6BB86C5F615C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:99:28:42:03:50:55:aa:f0:f4:39:8a:1b:e8: fc:d7:a3:24:01:48:41:e7:3e:74:63:0d:94:5a:81: 6a:8d:1e:a6:aa:18:11:8b:c5:0c:df:39:37:c7:cd: 29:7a:f0:52:7b:4b:01:dd:c5:8d:5f:cf:3f:42:b9: 82:5a:f9:b1:65:fb:5d:d1:17:e3:e4:73:5e:a2:57: e6:48:ab:4c:2d:b1:3c:78:c3:4b:62:e5:f4:41:4d: 13:61:ff:73:ea:c7:bc:40:5f:eb:8c:14:40:09:aa: 1a:6f:ca:85:65:13:d2:2d:66:b0:56:28:4e:e5:b3: 88:58:11:af:06:8d:af:a5:01:2e:e5:5a:21:b1:50: 93:58:04:52:a7:d2:31:59:02:34:2a:c8:c0:8c:95: b0:54:22:c2:78:b1:38:95:16:fb:5e:bf:35:9c:d9: b3:67:36:bb:d9:0e:60:5e:17:fe:ba:4e:54:15:38: 3a:f3:41:ce:8a:a2:1d:43:75:8e:c1:38:b3:a7:c4: 6e:ce:f2:f5:21:a5:48:76:be:47:95:b6:52:7a:57: c2:9e:9e:93:0e:20:ab:12:54:5b:32:44:74:ea:ed: 01:93:3c:bd:e4:4d:70:b8:95:2f:46:80:90:c0:99: aa:74:6c:6a:67:30:91:60:b7:83:c3:6b:5f:2c:24: 42:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:55:82:11:C5:26:F3:A0:E3:86:20:8C:E0:F6:BB:86:C5:F6:15:C8 X509v3 Authority Key Identifier: keyid:31:AE:EE:52:73:A3:1C:20:77:C2:F9:57:CF:5A:2C:2D:24:07:50:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:17:ee:78:47:c4:1f:cd:51:85:bd:37:3d:14:6f:53:d7:0a: f9:c5:fb:fe:4f:7c:b8:52:4d:dc:be:b8:2d:db:af:04:88:27: da:af:bb:f2:8e:78:da:51:28:a6:69:28:ed:7e:f2:bb:d4:6f: 20:6b:4e:00:71:75:02:3e:08:1b:20:11:35:6d:9f:20:89:c7: 9c:ac:b8:16:e1:7a:81:89:3b:25:ce:67:e6:53:4b:f6:ce:e9: a7:03:89:7c:2d:c2:ec:1e:05:8d:9a:c0:e3:b0:f7:ce:0f:1b: 9a:3c:2a:d3:d1:2d:7f:a3:93:24:82:37:2c:30:4b:a4:2e:05: ed:25:42:ab:14:5e:88:29:ee:b4:d6:10:dd:50:59:6a:44:84: 39:cb:95:88:9d:4c:9e:ca:64:3b:b2:47:6e:38:3f:a8:3b:d3: bc:9e:b3:2a:2b:05:5a:b0:34:a0:3c:5e:ef:5b:24:e2:cf:5c: ca:0e:21:fa:2e:fd:de:85:ea:94:ce:e0:6e:49:fb:eb:b7:d7: fa:41:fa:fc:17:4b:64:ae:f2:2a:e4:84:ac:80:56:b2:4f:75: 8d:d1:b5:f7:a5:bb:1c:27:69:59:0c:79:11:67:5d:3f:d0:65: f8:b9:f4:25:df:99:9a:3d:0c:88:11:c7:96:fe:00:6a:40:4e: 1f:da:cc:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTtWafPZ/R/rj2uQgwBYatDmuN5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFBRUVFNTI3M0EzMUMyMDc3QzJGOTU3Q0Y1QTJDMkQy NDA3NTBFMzAeFw0yNTA5MTkwMTI4MjJaFw0yNTA5MjAwMjMwMjJaMDMxMTAvBgNV BAMTKDhFNTU4MjExQzUyNkYzQTBFMzg2MjA4Q0UwRjZCQjg2QzVGNjE1QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzmShCA1BVqvD0OYob6PzXoyQB SEHnPnRjDZRagWqNHqaqGBGLxQzfOTfHzSl68FJ7SwHdxY1fzz9CuYJa+bFl+13R F+Pkc16iV+ZIq0wtsTx4w0ti5fRBTRNh/3Pqx7xAX+uMFEAJqhpvyoVlE9ItZrBW KE7ls4hYEa8Gja+lAS7lWiGxUJNYBFKn0jFZAjQqyMCMlbBUIsJ4sTiVFvtevzWc 2bNnNrvZDmBeF/66TlQVODrzQc6Koh1DdY7BOLOnxG7O8vUhpUh2vkeVtlJ6V8Ke npMOIKsSVFsyRHTq7QGTPL3kTXC4lS9GgJDAmap0bGpnMJFgt4PDa18sJEKtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjlWCEcUm86DjhiCM4Pa7hsX2FcgwHwYDVR0j BBgwFoAUMa7uUnOjHCB3wvlXz1osLSQHUOMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTdKb0pZRVFFdFcxZjVlS2paRVpnTDE5YjRnTnBwdzRZcktTOXNkeDg3 S0wvMS8zMUFFRUU1MjczQTMxQzIwNzdDMkY5NTdDRjVBMkMyRDI0MDc1MEUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQUVFRTUyNzNBMzFDMjA3 N0MyRjk1N0NGNUEyQzJEMjQwNzUwRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTdKb0pZRVFFdFcxZjVlS2paRVpnTDE5YjRnTnBwdzRZcktTOXNkeDg3S0wvMS8z MUFFRUU1MjczQTMxQzIwNzdDMkY5NTdDRjVBMkMyRDI0MDc1MEUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARxfueEfEH81Rhb03PRRvU9cK+cX7/k98uFJN3L64LduvBIgn2q+78o542lEo pmko7X7yu9RvIGtOAHF1Aj4IGyARNW2fIInHnKy4FuF6gYk7Jc5n5lNL9s7ppwOJ fC3C7B4FjZrA47D3zg8bmjwq09Etf6OTJII3LDBLpC4F7SVCqxReiCnutNYQ3VBZ akSEOcuViJ1MnspkO7JHbjg/qDvTvJ6zKisFWrA0oDxe71sk4s9cyg4h+i793oXq lM7gbkn767fX+kH6/BdLZK7yKuSErIBWsk91jdG196W7HCdpWQx5EWddP9Bl+Ln0 Jd+Zmj0MiBHHlv4AakBOH9rMUw== -----END CERTIFICATE-----Generated at Fri Sep 19 10:20:43 2025 by rpki-client