$ rpki-client -vvf rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft File: 31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft (raw, json) Hash identifier: UX/c6ff/KcY1tQm8FiO9IawcnFcsumnthSXAxXoYCNU= Subject key identifier: 28:68:FD:11:DF:3B:AF:B8:95:56:64:73:1B:87:AE:91:7E:92:C2:2F Authority key identifier: 31:BA:D9:80:8D:E8:04:90:3A:A6:C6:5B:BE:33:CB:EE:1C:99:1D:9A Certificate issuer: /CN=31BAD9808DE804903AA6C65BBE33CBEE1C991D9A Certificate serial: 7B37E524AC4F2675240ACAD1A6300DDED0E24B34 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer Subject info access: rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft Manifest number: 0309 Signing time: Wed 05 Nov 2025 01:09:44 +0000 Manifest this update: Wed 05 Nov 2025 01:04:44 +0000 Manifest next update: Thu 06 Nov 2025 04:23:44 +0000 Files and hashes: 1: 323830343a333963303a3a2f33322d3332203d3e20323636303438.roa (hash: 2+aJnh2Q9Ds6NmQQtQrdd3EFoTKUAvkgTSsvPWnE2Ek=) 2: 31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl (hash: pfxrY+pqL/TGmOhRQAEsYKETO+wEazA50RZ06uV8Dsk=) 3: 34352e342e3131362e302f32322d3232203d3e20323636303438.roa (hash: ahehKlt3W03bvotZ/SKfxhWvDlNr0XGgSJ6YRYOsDlI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 04:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:37:e5:24:ac:4f:26:75:24:0a:ca:d1:a6:30:0d:de:d0:e2:4b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31BAD9808DE804903AA6C65BBE33CBEE1C991D9A Validity Not Before: Nov 5 01:04:44 2025 GMT Not After : Nov 6 04:23:44 2025 GMT Subject: CN=2868FD11DF3BAFB8955664731B87AE917E92C22F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6a:df:ec:a3:e1:35:02:0d:55:c7:66:4b:02: 77:5a:ef:3e:dc:b3:d3:67:28:7f:10:19:9e:ea:35: c3:6e:29:e7:47:7a:7b:71:39:e0:e1:c6:19:7d:d1: b9:c1:77:73:2d:0c:95:df:f1:1e:3a:f9:20:63:76: 7b:18:0f:15:d6:4e:e7:f0:ab:07:94:7e:d3:5d:87: 50:cb:65:8a:24:c8:ab:1d:ab:1e:d0:1b:89:5d:9b: d5:f0:80:70:68:15:9b:ea:3c:7a:6b:d0:3b:01:2a: 1f:7e:33:7e:e7:f7:46:fc:1b:8e:e6:74:96:0f:a2: d7:6f:a9:c8:00:4c:40:22:af:14:f1:c2:e6:ae:db: 33:bd:5c:cf:77:13:2f:b9:b4:9f:45:c4:27:62:da: 9d:25:d5:86:f3:e8:7b:41:bb:6e:b1:a1:e3:50:a9: 53:a4:1f:a5:af:96:07:03:d1:9b:a6:27:85:c9:84: 4e:39:66:2e:05:24:a5:cf:aa:83:17:e8:f4:5c:86: 06:2e:8a:45:a8:1d:6f:8c:b0:d8:08:df:37:66:18: 9c:61:b5:eb:6a:1e:db:84:c8:91:63:74:ae:c0:26: 9b:df:62:59:b4:b2:ac:4a:cc:a7:af:93:c9:63:74: 95:5a:a5:5b:02:18:a5:0a:7c:ec:cc:ce:bc:82:ac: f9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:68:FD:11:DF:3B:AF:B8:95:56:64:73:1B:87:AE:91:7E:92:C2:2F X509v3 Authority Key Identifier: keyid:31:BA:D9:80:8D:E8:04:90:3A:A6:C6:5B:BE:33:CB:EE:1C:99:1D:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:db:01:af:7e:2f:76:1e:f8:25:72:da:f5:bf:4e:28:d9:06: 2c:b1:0a:a6:f8:c3:98:e6:f4:53:40:70:c2:ed:d9:43:ed:63: b4:29:ba:30:e3:02:b7:25:14:33:27:ff:02:f8:b3:c9:7f:6f: 9d:7c:a6:55:85:e7:ff:16:38:e7:58:7b:32:2d:0b:ef:42:49: 45:d5:cf:df:e2:74:b6:c5:c7:5f:24:6d:44:82:62:1b:19:2f: 27:fd:76:f8:44:a4:94:33:1e:02:7d:32:72:24:13:de:59:2e: fd:ab:48:e6:9a:fb:49:4b:8b:09:12:a1:50:03:a5:e4:0e:fa: 35:3b:ab:ca:07:50:aa:2b:5a:cc:de:ca:66:8f:8f:85:68:33: 8d:1a:d1:12:62:a3:75:1b:c9:c2:30:ea:61:6f:cd:ae:b8:c7: d7:9d:34:39:ed:28:73:48:13:28:60:e1:0a:49:68:be:72:dc: 7a:5d:c0:17:f6:96:17:e0:0b:ba:8f:72:61:72:55:41:76:2a: 0f:5f:99:35:a4:de:a1:33:a8:90:63:fd:47:82:28:47:d8:bb: 5a:7a:19:a2:60:3a:af:6b:e7:40:5c:7e:40:2a:58:84:d4:29: 27:f0:22:91:a7:68:a8:e8:eb:f9:bd:0a:54:80:6d:c4:1a:c8: cd:aa:a0:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUezflJKxPJnUkCsrRpjAN3tDiSzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFCQUQ5ODA4REU4MDQ5MDNBQTZDNjVCQkUzM0NCRUUx Qzk5MUQ5QTAeFw0yNTExMDUwMTA0NDRaFw0yNTExMDYwNDIzNDRaMDMxMTAvBgNV BAMTKDI4NjhGRDExREYzQkFGQjg5NTU2NjQ3MzFCODdBRTkxN0U5MkMyMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcat/so+E1Ag1Vx2ZLAnda7z7c s9NnKH8QGZ7qNcNuKedHentxOeDhxhl90bnBd3MtDJXf8R46+SBjdnsYDxXWTufw qweUftNdh1DLZYokyKsdqx7QG4ldm9XwgHBoFZvqPHpr0DsBKh9+M37n90b8G47m dJYPotdvqcgATEAirxTxwuau2zO9XM93Ey+5tJ9FxCdi2p0l1Ybz6HtBu26xoeNQ qVOkH6WvlgcD0ZumJ4XJhE45Zi4FJKXPqoMX6PRchgYuikWoHW+MsNgI3zdmGJxh tetqHtuEyJFjdK7AJpvfYlm0sqxKzKevk8ljdJVapVsCGKUKfOzMzryCrPkhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKGj9Ed87r7iVVmRzG4eukX6Swi8wHwYDVR0j BBgwFoAUMbrZgI3oBJA6psZbvjPL7hyZHZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGlQeExDM2dXd2RqcnJRbVRMWmJzWnUxZVZXZkxxeXZYMVluR1c2TjRQ NTYvMS8zMUJBRDk4MDhERTgwNDkwM0FBNkM2NUJCRTMzQ0JFRTFDOTkxRDlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQkFEOTgwOERFODA0OTAz QUE2QzY1QkJFMzNDQkVFMUM5OTFEOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGlQeExDM2dXd2RqcnJRbVRMWmJzWnUxZVZXZkxxeXZYMVluR1c2TjRQNTYvMS8z MUJBRDk4MDhERTgwNDkwM0FBNkM2NUJCRTMzQ0JFRTFDOTkxRDlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo9sBr34vdh74JXLa9b9OKNkGLLEKpvjDmOb0U0Bwwu3ZQ+1jtCm6MOMCtyUU Myf/AvizyX9vnXymVYXn/xY451h7Mi0L70JJRdXP3+J0tsXHXyRtRIJiGxkvJ/12 +ESklDMeAn0yciQT3lku/atI5pr7SUuLCRKhUAOl5A76NTurygdQqitazN7KZo+P hWgzjRrREmKjdRvJwjDqYW/NrrjH1500Oe0oc0gTKGDhCklovnLcel3AF/aWF+AL uo9yYXJVQXYqD1+ZNaTeoTOokGP9R4IoR9i7WnoZomA6r2vnQFx+QCpYhNQpJ/Ai kadoqOjr+b0KVIBtxBrIzaqg9w== -----END CERTIFICATE-----Generated at Wed Nov 5 05:10:26 2025 by rpki-client