$ rpki-client -vvf rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft File: 31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft (raw, json) Hash identifier: hErUiZMP5QvdRb1vIvnn2n/2cL+N43GhdrEFQX2cEJ8= Subject key identifier: 9B:DA:C2:C2:96:AF:D4:EA:E9:6D:3D:4A:2F:6B:73:29:C0:F6:14:0A Authority key identifier: 31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1 Certificate issuer: /CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1 Certificate serial: 46FDD56C3301683D7CA38136A504916E11499E72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer Subject info access: rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft Manifest number: 0305 Signing time: Mon 03 Nov 2025 22:03:00 +0000 Manifest this update: Mon 03 Nov 2025 21:58:00 +0000 Manifest next update: Wed 05 Nov 2025 01:59:00 +0000 Files and hashes: 1: 31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl (hash: +LNzZk7r/iXmI+cnjADQGwuX2+w1ldI9bng+0isn+Fs=) 2: 323830343a333561383a3a2f33322d313238203d3e20323636323939.roa (hash: IsVLxgwYDi8pNm8S0DzwD9QJhFe0QyknmCg1ewqOeJQ=) 3: 3137302e37392e3134382e302f32322d3332203d3e20323636323939.roa (hash: K7OCXntBYYWlJMIreulrBkSYMm1UKWdAl8lbZdhbPBM=) 4: 3137302e302e3139322e302f32322d3332203d3e20323636323939.roa (hash: 30DhOqm2M90Ds5s+OzTCD+5M9ukc+Ih0rydkINiYO4M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 00:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:fd:d5:6c:33:01:68:3d:7c:a3:81:36:a5:04:91:6e:11:49:9e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1 Validity Not Before: Nov 3 21:58:00 2025 GMT Not After : Nov 5 01:59:00 2025 GMT Subject: CN=9BDAC2C296AFD4EAE96D3D4A2F6B7329C0F6140A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d8:40:64:96:fa:d9:cd:eb:3a:02:4a:8e:5c: 65:ec:d1:14:f2:49:cd:41:11:97:82:21:13:4a:b2: 8f:2b:78:2b:df:c1:6d:d8:d8:c3:2c:56:26:18:e2: 52:65:48:1c:9c:82:95:bf:62:85:2d:79:47:58:76: e0:b5:a0:a4:84:87:2c:1f:71:08:e4:02:e2:34:1a: b0:83:2e:ed:90:f9:35:b3:0b:75:53:33:ba:7e:e4: 15:72:21:5e:71:62:09:17:b0:50:c1:de:5f:8e:5c: f3:3a:58:e4:9f:ad:43:61:5d:03:34:f8:4d:a0:37: 7d:6f:2c:55:fe:2d:f5:f1:05:1f:e2:cd:ae:e4:68: a9:0a:b5:f0:1a:dc:a3:5a:9d:7a:0e:1a:a1:36:7c: ce:79:d8:a5:40:c8:4d:e8:5c:f3:0b:87:7c:22:15: 60:16:26:7e:ce:79:52:22:9b:36:e5:da:9c:39:ff: 89:01:3a:cd:7b:42:65:de:12:ec:4b:95:8f:59:0a: c5:90:e1:78:a7:ff:8b:f0:01:88:81:d1:2e:62:b9: 67:0d:e7:c1:7c:24:c4:d9:c9:cd:f1:74:c1:12:7d: 79:d1:ed:25:04:b0:93:69:0b:20:b9:cf:0c:85:e8: 7b:d1:7c:8a:11:39:3d:5c:85:6a:7b:23:fe:ad:98: e6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DA:C2:C2:96:AF:D4:EA:E9:6D:3D:4A:2F:6B:73:29:C0:F6:14:0A X509v3 Authority Key Identifier: keyid:31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:e3:8c:a9:4b:75:a1:5d:22:e2:91:fa:c4:16:56:bb:09:1d: 98:fa:5c:74:bb:c2:31:d0:c3:9d:7e:27:5c:0b:c5:32:1b:54: f2:34:ce:42:6a:76:42:d2:fb:b1:ca:50:59:3d:6f:7c:33:80: 89:ab:9d:f0:ec:95:ba:4b:75:54:a7:12:67:4b:8d:a7:1e:e7: a1:9b:4f:ca:96:13:73:e5:d2:b9:ff:c5:64:ca:8a:59:88:c5: 46:e2:39:00:af:1b:9e:f4:5b:ba:59:a4:26:ca:63:1e:37:45: c1:ff:56:0b:67:8a:53:75:fa:bb:bc:c7:92:ce:14:bd:5f:2d: 9a:70:fb:63:09:ce:42:4c:6d:a9:da:bd:f1:09:e2:7f:7c:1a: cf:c7:c5:43:c1:75:24:64:72:78:46:a5:ae:cc:04:06:1c:e2: fb:c6:2e:e2:17:a4:7c:b4:d8:09:9c:e8:df:b4:5d:5f:e3:e3: 1c:22:df:58:55:97:9d:42:f0:d9:56:47:29:37:45:0c:01:89: 97:e5:ca:9e:c3:01:b8:c2:cb:ee:dc:03:83:51:4f:bf:e4:48: 6b:cd:fa:d3:4f:c3:f1:3f:9c:14:92:e5:13:29:c0:f4:fe:bb: 6f:5a:1f:2f:17:27:cf:e8:11:9d:86:bf:a4:b2:ec:b8:35:a7: 30:15:ae:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURv3VbDMBaD18o4E2pQSRbhFJnnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDRjEyNTUyQzAyNzJDNDUxRTFFRTEyMjQ0RTAzQkRE RDZCMkNBMTAeFw0yNTExMDMyMTU4MDBaFw0yNTExMDUwMTU5MDBaMDMxMTAvBgNV BAMTKDlCREFDMkMyOTZBRkQ0RUFFOTZEM0Q0QTJGNkI3MzI5QzBGNjE0MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD2EBklvrZzes6AkqOXGXs0RTy Sc1BEZeCIRNKso8reCvfwW3Y2MMsViYY4lJlSBycgpW/YoUteUdYduC1oKSEhywf cQjkAuI0GrCDLu2Q+TWzC3VTM7p+5BVyIV5xYgkXsFDB3l+OXPM6WOSfrUNhXQM0 +E2gN31vLFX+LfXxBR/iza7kaKkKtfAa3KNanXoOGqE2fM552KVAyE3oXPMLh3wi FWAWJn7OeVIimzbl2pw5/4kBOs17QmXeEuxLlY9ZCsWQ4Xin/4vwAYiB0S5iuWcN 58F8JMTZyc3xdMESfXnR7SUEsJNpCyC5zwyF6HvRfIoROT1chWp7I/6tmObvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUm9rCwpav1OrpbT1KL2tzKcD2FAowHwYDVR0j BBgwFoAUMc8SVSwCcsRR4e4SJE4Dvd1rLKEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUNtakI4UXlWVGZRZDlCWEJTd25Na3JYaHI0UHV5RG5kWEpoeXB2TG9L aU0vMS8zMUNGMTI1NTJDMDI3MkM0NTFFMUVFMTIyNDRFMDNCRERENkIyQ0ExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQ0YxMjU1MkMwMjcyQzQ1 MUUxRUUxMjI0NEUwM0JEREQ2QjJDQTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUNtakI4UXlWVGZRZDlCWEJTd25Na3JYaHI0UHV5RG5kWEpoeXB2TG9LaU0vMS8z MUNGMTI1NTJDMDI3MkM0NTFFMUVFMTIyNDRFMDNCRERENkIyQ0ExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlOOMqUt1oV0i4pH6xBZWuwkdmPpcdLvCMdDDnX4nXAvFMhtU8jTOQmp2QtL7 scpQWT1vfDOAiaud8OyVukt1VKcSZ0uNpx7noZtPypYTc+XSuf/FZMqKWYjFRuI5 AK8bnvRbulmkJspjHjdFwf9WC2eKU3X6u7zHks4UvV8tmnD7YwnOQkxtqdq98Qni f3waz8fFQ8F1JGRyeEalrswEBhzi+8Yu4hekfLTYCZzo37RdX+PjHCLfWFWXnULw 2VZHKTdFDAGJl+XKnsMBuMLL7twDg1FPv+RIa83600/D8T+cFJLlEynA9P67b1of Lxcnz+gRnYa/pLLsuDWnMBWucA== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:28 2025 by rpki-client