$ rpki-client -vvf rpki-repo.registro.br/repo/Fm2mntrcgHRURKEjWrpUTiiardUTGB7krMytyaPY6VDZ/1/31A41A322EE2F63C163557AB03639BCE9D7C3CBC.mft File: 31A41A322EE2F63C163557AB03639BCE9D7C3CBC.mft (raw, json) Hash identifier: 7yce6wNQ4puWc+Jyc62S2S4bdjyIundiN8/txZqg3zA= Subject key identifier: FF:58:8B:7C:C6:66:C4:00:B1:55:E5:91:1F:0D:BD:6E:F0:A6:B0:D0 Authority key identifier: 31:A4:1A:32:2E:E2:F6:3C:16:35:57:AB:03:63:9B:CE:9D:7C:3C:BC Certificate issuer: /CN=31A41A322EE2F63C163557AB03639BCE9D7C3CBC Certificate serial: 6D0403FBDAD86043AE38019560109AF77ABFA5F5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A41A322EE2F63C163557AB03639BCE9D7C3CBC.cer Subject info access: rsync://rpki-repo.registro.br/repo/Fm2mntrcgHRURKEjWrpUTiiardUTGB7krMytyaPY6VDZ/1/31A41A322EE2F63C163557AB03639BCE9D7C3CBC.mft Manifest number: 0304 Signing time: Mon 03 Nov 2025 10:24:05 +0000 Manifest this update: Mon 03 Nov 2025 10:19:05 +0000 Manifest next update: Tue 04 Nov 2025 10:37:05 +0000 Files and hashes: 1: 323830343a6439383a3a2f33322d3438203d3e203532363432.roa (hash: 6p7Z2Q87XWP5uhNDwG32VEIZqACciIzIAlWt1oh6kKs=) 2: 31A41A322EE2F63C163557AB03639BCE9D7C3CBC.crl (hash: y7Ax2aMSEeh4xpmC5z6LZ0065hYLwMt+xc9Kb0nru9c=) 3: 3137372e3132352e32382e302f32322d3234203d3e203532363432.roa (hash: hhOdD1QPhdjSr1AtF+kZisyUjP6Ii7fIIUaVaA8sibE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Fm2mntrcgHRURKEjWrpUTiiardUTGB7krMytyaPY6VDZ/1/31A41A322EE2F63C163557AB03639BCE9D7C3CBC.crl rsync://rpki-repo.registro.br/repo/Fm2mntrcgHRURKEjWrpUTiiardUTGB7krMytyaPY6VDZ/1/31A41A322EE2F63C163557AB03639BCE9D7C3CBC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A41A322EE2F63C163557AB03639BCE9D7C3CBC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 10:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:04:03:fb:da:d8:60:43:ae:38:01:95:60:10:9a:f7:7a:bf:a5:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31A41A322EE2F63C163557AB03639BCE9D7C3CBC Validity Not Before: Nov 3 10:19:05 2025 GMT Not After : Nov 4 10:37:05 2025 GMT Subject: CN=FF588B7CC666C400B155E5911F0DBD6EF0A6B0D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d9:a0:83:f5:91:c9:0a:4f:06:17:79:23:2c: 19:9c:86:5b:d5:cd:f8:9e:95:b2:c9:02:11:1d:ea: ed:a8:48:ec:87:e4:67:fe:00:59:c1:10:c0:42:5c: ee:62:18:0b:42:04:b6:8c:a5:04:ef:22:fe:a2:c4: 19:53:7a:91:b0:dc:a4:5d:fb:8e:ab:bb:44:4c:fc: f2:4f:5f:45:01:88:46:1f:16:c7:5d:b3:d7:cd:03: 63:d1:88:a4:81:32:d8:b2:e1:5d:5b:c7:94:53:67: 0d:9d:a8:c1:6c:3d:9d:a5:31:40:73:07:ad:e3:79: 1e:e8:c5:04:b8:59:97:eb:28:5c:30:40:b0:45:56: fd:b2:1e:14:f7:6d:67:9c:5f:ce:30:ac:5e:c1:76: f3:bc:ea:f3:3a:3b:72:05:bc:88:84:02:af:25:16: 12:7b:f9:e7:46:12:07:a4:5e:59:f0:27:b6:17:c8: ef:ef:1b:a0:5f:a2:2b:98:53:bd:87:cc:23:51:e3: 38:a6:43:81:f1:f5:63:87:50:65:0a:23:56:01:56: d1:91:4c:f0:ce:47:e6:a4:6f:5c:b2:4e:84:76:42: f6:ec:85:40:ef:a4:46:e5:a0:2d:51:8c:4a:71:75: 33:3d:ad:e4:14:84:62:8e:18:14:e5:00:f0:ba:59: 3c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:58:8B:7C:C6:66:C4:00:B1:55:E5:91:1F:0D:BD:6E:F0:A6:B0:D0 X509v3 Authority Key Identifier: keyid:31:A4:1A:32:2E:E2:F6:3C:16:35:57:AB:03:63:9B:CE:9D:7C:3C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Fm2mntrcgHRURKEjWrpUTiiardUTGB7krMytyaPY6VDZ/1/31A41A322EE2F63C163557AB03639BCE9D7C3CBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A41A322EE2F63C163557AB03639BCE9D7C3CBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm2mntrcgHRURKEjWrpUTiiardUTGB7krMytyaPY6VDZ/1/31A41A322EE2F63C163557AB03639BCE9D7C3CBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:97:9f:0e:a7:a6:39:d1:5e:b5:13:cd:f7:18:2c:c0:00:86: 08:d9:8f:79:8e:7a:78:7e:b8:42:f7:73:b6:2a:ba:6b:f6:4d: c6:ee:87:a6:74:a5:8e:15:45:06:69:ad:ac:1c:c9:32:aa:dd: 3f:7c:5a:58:ce:2a:c3:b5:94:50:7e:b9:56:0b:9a:fe:b5:6e: f2:83:d3:14:0c:e2:7a:df:81:df:a8:fa:29:63:24:ac:3f:d6: 0f:5b:3a:65:a1:9f:96:14:e7:fa:21:f7:b8:dd:b8:59:21:8c: 7f:d4:52:48:fa:ec:a1:ed:ca:7d:4e:d5:ae:66:0b:5a:a8:9b: fa:5d:78:d2:fd:1f:e4:77:62:63:96:b7:83:48:ac:84:1f:2c: 8b:57:2f:ad:9c:c9:1c:63:51:cb:ed:53:40:2b:88:53:01:13: 34:da:16:a3:22:2e:90:55:59:bb:98:2b:fc:d4:3e:16:d3:1c: 35:54:b6:d0:d5:e0:08:4f:8d:59:ab:3e:a4:44:d6:35:b6:c0: 7c:9a:1f:24:bb:d0:b6:8f:9e:7e:93:a3:04:4d:35:58:8e:05: 0f:19:18:6b:dc:d2:b9:96:e7:7b:b7:99:0f:bc:57:ba:7b:e2: 5e:be:c8:21:ec:6c:36:60:08:4f:54:62:1f:c0:66:34:c5:b6: 37:67:6a:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbQQD+9rYYEOuOAGVYBCa93q/pfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFBNDFBMzIyRUUyRjYzQzE2MzU1N0FCMDM2MzlCQ0U5 RDdDM0NCQzAeFw0yNTExMDMxMDE5MDVaFw0yNTExMDQxMDM3MDVaMDMxMTAvBgNV BAMTKEZGNTg4QjdDQzY2NkM0MDBCMTU1RTU5MTFGMERCRDZFRjBBNkIwRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg2aCD9ZHJCk8GF3kjLBmchlvV zfielbLJAhEd6u2oSOyH5Gf+AFnBEMBCXO5iGAtCBLaMpQTvIv6ixBlTepGw3KRd +46ru0RM/PJPX0UBiEYfFsdds9fNA2PRiKSBMtiy4V1bx5RTZw2dqMFsPZ2lMUBz B63jeR7oxQS4WZfrKFwwQLBFVv2yHhT3bWecX84wrF7BdvO86vM6O3IFvIiEAq8l FhJ7+edGEgekXlnwJ7YXyO/vG6BfoiuYU72HzCNR4zimQ4Hx9WOHUGUKI1YBVtGR TPDOR+akb1yyToR2QvbshUDvpEbloC1RjEpxdTM9reQUhGKOGBTlAPC6WTw7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/1iLfMZmxACxVeWRHw29bvCmsNAwHwYDVR0j BBgwFoAUMaQaMi7i9jwWNVerA2Obzp18PLwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRm0ybW50cmNnSFJVUktFaldycFVUaWlhcmRVVEdCN2tyTXl0eWFQWTZW RFovMS8zMUE0MUEzMjJFRTJGNjNDMTYzNTU3QUIwMzYzOUJDRTlEN0MzQ0JDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQTQxQTMyMkVFMkY2M0Mx NjM1NTdBQjAzNjM5QkNFOUQ3QzNDQkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rm0ybW50cmNnSFJVUktFaldycFVUaWlhcmRVVEdCN2tyTXl0eWFQWTZWRFovMS8z MUE0MUEzMjJFRTJGNjNDMTYzNTU3QUIwMzYzOUJDRTlEN0MzQ0JDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASZefDqemOdFetRPN9xgswACGCNmPeY56eH64Qvdztiq6a/ZNxu6HpnSljhVF BmmtrBzJMqrdP3xaWM4qw7WUUH65Vgua/rVu8oPTFAziet+B36j6KWMkrD/WD1s6 ZaGflhTn+iH3uN24WSGMf9RSSPrsoe3KfU7VrmYLWqib+l140v0f5HdiY5a3g0is hB8si1cvrZzJHGNRy+1TQCuIUwETNNoWoyIukFVZu5gr/NQ+FtMcNVS20NXgCE+N Was+pETWNbbAfJofJLvQto+efpOjBE01WI4FDxkYa9zSuZbne7eZD7xXunviXr7I IexsNmAIT1RiH8BmNMW2N2dqfA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:39:46 2025 by rpki-client