$ rpki-client -vvf rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/431AB4194AA9ED551263DE427F4F121C7979E894.mft File: 431AB4194AA9ED551263DE427F4F121C7979E894.mft (raw, json) Hash identifier: a820iTxoyfoGhux1IqL2wbQodSAy9asKF7M7tfAe+Bg= Subject key identifier: 96:AA:F1:88:EF:77:06:A5:49:0F:FE:56:79:D0:92:37:DF:64:BD:E7 Authority key identifier: 43:1A:B4:19:4A:A9:ED:55:12:63:DE:42:7F:4F:12:1C:79:79:E8:94 Certificate issuer: /CN=431AB4194AA9ED551263DE427F4F121C7979E894 Certificate serial: 1A3DB27D9C012F628BA3BAA0D7A4FFAE4B6BE01C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431AB4194AA9ED551263DE427F4F121C7979E894.cer Subject info access: rsync://rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/431AB4194AA9ED551263DE427F4F121C7979E894.mft Manifest number: 70 Signing time: Tue 04 Nov 2025 01:41:25 +0000 Manifest this update: Tue 04 Nov 2025 01:36:25 +0000 Manifest next update: Wed 05 Nov 2025 03:08:25 +0000 Files and hashes: 1: 323830343a393235383a3a2f33322d313238203d3e20323734373036.roa (hash: 5qfys5S0TBbigQIsdFA//QFeQpuuAuKFccvmGfy28xo=) 2: 431AB4194AA9ED551263DE427F4F121C7979E894.crl (hash: GSMiGJS1JV0KbcfZgJKbKRMSHz9ob01KZftgqr69+rs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/431AB4194AA9ED551263DE427F4F121C7979E894.crl rsync://rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/431AB4194AA9ED551263DE427F4F121C7979E894.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431AB4194AA9ED551263DE427F4F121C7979E894.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 03:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:3d:b2:7d:9c:01:2f:62:8b:a3:ba:a0:d7:a4:ff:ae:4b:6b:e0:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=431AB4194AA9ED551263DE427F4F121C7979E894 Validity Not Before: Nov 4 01:36:25 2025 GMT Not After : Nov 5 03:08:25 2025 GMT Subject: CN=96AAF188EF7706A5490FFE5679D09237DF64BDE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5e:b0:0c:06:a7:eb:c0:f0:13:67:f6:87:4d: ed:f1:f9:21:bb:b1:c6:82:b2:05:f5:8b:71:c6:a8: f6:d6:f5:cd:5f:c4:4a:4d:cd:0c:8a:50:34:61:8b: d3:bd:e0:bf:34:44:54:45:45:94:ec:40:ab:14:4f: 33:84:50:fa:f6:41:39:82:7e:3d:53:13:4c:8c:7b: a2:1e:47:5a:23:cd:5a:87:de:6a:f7:e6:3f:c9:88: f5:d5:21:4e:b0:aa:4d:e7:88:7c:84:bc:61:58:a5: 2b:05:ec:6d:7f:9b:8a:04:0a:f0:d8:a1:b6:55:fc: e0:8c:17:85:c6:08:a3:20:33:63:9f:8e:dd:b1:bc: f9:a5:9c:aa:98:4e:59:aa:73:5c:2c:ee:46:b2:b3: 37:b2:c7:2b:ff:22:ae:c1:fb:cb:08:15:55:e9:3e: 63:d5:e9:28:cb:0a:e4:53:a2:86:9f:0e:b7:55:33: 78:bf:a8:fb:d8:19:00:ab:a9:95:bd:f0:a0:27:bc: 7b:a8:66:ea:e4:80:ea:ce:8c:5b:78:39:d0:0a:05: 11:c0:9c:db:5f:2d:75:80:3a:92:42:53:a9:a1:e5: 42:fb:72:87:2f:d9:ee:cd:01:53:a6:bc:03:eb:b9: c2:b8:92:db:93:c5:78:f8:74:0f:f4:1d:96:46:3c: c5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AA:F1:88:EF:77:06:A5:49:0F:FE:56:79:D0:92:37:DF:64:BD:E7 X509v3 Authority Key Identifier: keyid:43:1A:B4:19:4A:A9:ED:55:12:63:DE:42:7F:4F:12:1C:79:79:E8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/431AB4194AA9ED551263DE427F4F121C7979E894.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431AB4194AA9ED551263DE427F4F121C7979E894.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/431AB4194AA9ED551263DE427F4F121C7979E894.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:cb:39:25:1a:1d:f5:f0:c8:ed:33:a8:3d:46:69:76:5a:c1: d3:82:30:d9:2f:1f:5e:74:8f:f0:cb:44:ca:0b:49:b5:be:b2: d6:19:98:bc:76:b5:81:03:f1:8d:fb:c9:33:22:7c:ea:ee:8a: 3e:58:94:a1:31:5c:93:dd:04:04:b1:bf:bc:52:18:fd:3b:92: 2a:cd:82:d9:d9:bc:3c:59:d5:5a:89:9b:d2:1b:78:d8:bb:64: fc:13:63:8a:1a:b8:d2:5e:7a:95:56:6d:75:aa:43:bb:32:14: 30:e2:1c:2d:9d:0a:e1:61:c7:05:40:63:02:51:89:13:39:70: e9:2c:c8:87:36:bf:94:e3:38:ca:7b:14:ea:45:6a:0c:2f:18: c6:02:0a:06:b7:cb:0e:8b:7e:75:f4:5a:4a:57:fe:01:3d:aa: de:3d:2b:f5:c1:ab:77:42:14:5e:c5:89:60:9d:97:28:3d:d8: 4b:10:dd:9a:bc:79:da:80:c6:e5:97:51:7a:14:b2:34:e1:4b: fe:90:4e:fd:08:23:17:c1:d3:f8:22:1c:50:6a:ed:c7:9a:31: 61:d8:fd:3e:f2:f7:c1:a5:bf:8b:a8:c6:6d:2d:49:f4:96:b7: 01:ff:b3:4c:2b:a4:9a:e3:bd:a8:d4:39:b0:13:74:de:e7:1b: fd:f4:e4:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGj2yfZwBL2KLo7qg16T/rktr4BwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMxQUI0MTk0QUE5RUQ1NTEyNjNERTQyN0Y0RjEyMUM3 OTc5RTg5NDAeFw0yNTExMDQwMTM2MjVaFw0yNTExMDUwMzA4MjVaMDMxMTAvBgNV BAMTKDk2QUFGMTg4RUY3NzA2QTU0OTBGRkU1Njc5RDA5MjM3REY2NEJERTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8XrAMBqfrwPATZ/aHTe3x+SG7 scaCsgX1i3HGqPbW9c1fxEpNzQyKUDRhi9O94L80RFRFRZTsQKsUTzOEUPr2QTmC fj1TE0yMe6IeR1ojzVqH3mr35j/JiPXVIU6wqk3niHyEvGFYpSsF7G1/m4oECvDY obZV/OCMF4XGCKMgM2Ofjt2xvPmlnKqYTlmqc1ws7kayszeyxyv/Iq7B+8sIFVXp PmPV6SjLCuRTooafDrdVM3i/qPvYGQCrqZW98KAnvHuoZurkgOrOjFt4OdAKBRHA nNtfLXWAOpJCU6mh5UL7cocv2e7NAVOmvAPrucK4ktuTxXj4dA/0HZZGPMWdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlqrxiO93BqVJD/5WedCSN99kvecwHwYDVR0j BBgwFoAUQxq0GUqp7VUSY95Cf08SHHl56JQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR1JyMWpDN1VhYXdDa3RNWFh1R1FUQUQ4cnZSYWtLaHRObWpFSFZ2cjJE Y2cvMC80MzFBQjQxOTRBQTlFRDU1MTI2M0RFNDI3RjRGMTIxQzc5NzlFODk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzMUFCNDE5NEFBOUVENTUx MjYzREU0MjdGNEYxMjFDNzk3OUU4OTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R1JyMWpDN1VhYXdDa3RNWFh1R1FUQUQ4cnZSYWtLaHRObWpFSFZ2cjJEY2cvMC80 MzFBQjQxOTRBQTlFRDU1MTI2M0RFNDI3RjRGMTIxQzc5NzlFODk0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa8s5JRod9fDI7TOoPUZpdlrB04Iw2S8fXnSP8MtEygtJtb6y1hmYvHa1gQPx jfvJMyJ86u6KPliUoTFck90EBLG/vFIY/TuSKs2C2dm8PFnVWomb0ht42Ltk/BNj ihq40l56lVZtdapDuzIUMOIcLZ0K4WHHBUBjAlGJEzlw6SzIhza/lOM4ynsU6kVq DC8YxgIKBrfLDot+dfRaSlf+AT2q3j0r9cGrd0IUXsWJYJ2XKD3YSxDdmrx52oDG 5ZdRehSyNOFL/pBO/QgjF8HT+CIcUGrtx5oxYdj9PvL3waW/i6jGbS1J9Ja3Af+z TCukmuO9qNQ5sBN03ucb/fTkaw== -----END CERTIFICATE-----Generated at Tue Nov 4 05:04:32 2025 by rpki-client