$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.mft File: 31913C696443B8596EC7722D368B4749C287A025.mft (raw, json) Hash identifier: 8nforYMkin+meTToHtqQvo7QCJrpwZXYnsVWGy5oHEo= Subject key identifier: 04:5E:AA:0B:02:0C:F5:6D:FD:CB:E3:5D:FC:57:84:B0:8C:52:2A:4E Authority key identifier: 31:91:3C:69:64:43:B8:59:6E:C7:72:2D:36:8B:47:49:C2:87:A0:25 Certificate issuer: /CN=31913C696443B8596EC7722D368B4749C287A025 Certificate serial: 6A26C4930C8E1F44817EE5E402C5BADF05D10A4D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer Subject info access: rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.mft Manifest number: 02A2 Signing time: Tue 04 Nov 2025 16:19:25 +0000 Manifest this update: Tue 04 Nov 2025 16:14:25 +0000 Manifest next update: Wed 05 Nov 2025 19:22:25 +0000 Files and hashes: 1: 3138362e3232372e36342e302f32322d3234203d3e203631373236.roa (hash: tQtO6upZn/pp5ZgaAHSVlMXZc9ybBbe/+0pkP3gDHBw=) 2: 31913C696443B8596EC7722D368B4749C287A025.crl (hash: TXEujjhaRWfFZi4qHwI4MLvVD0hHz6ovUv3KL7HZKs8=) 3: 3133312e37322e39362e302f32322d3234203d3e203631373236.roa (hash: T4l1Rdp+if5x2GwVENwJ5EG4S5U5hpq/S6oNIsW4FsY=) 4: 323830343a316236383a3a2f33322d3438203d3e203631373236.roa (hash: pfn35jhaqmmVavRIG/aoZzZSN1xJuEgSVB+lmLR7HBw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.crl rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:26:c4:93:0c:8e:1f:44:81:7e:e5:e4:02:c5:ba:df:05:d1:0a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31913C696443B8596EC7722D368B4749C287A025 Validity Not Before: Nov 4 16:14:25 2025 GMT Not After : Nov 5 19:22:25 2025 GMT Subject: CN=045EAA0B020CF56DFDCBE35DFC5784B08C522A4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:36:a1:62:44:54:11:15:d8:75:d6:90:7f:97: 01:12:f2:71:b5:2b:d6:32:c5:22:6e:35:0b:df:e5: ef:12:df:88:9f:b5:b2:31:76:e4:b1:2c:b6:0d:25: 1b:c3:81:43:66:93:fb:38:d0:a1:16:c3:7b:b5:43: 07:de:14:70:4e:b5:39:a2:ca:8c:ac:e4:d6:8f:22: ef:19:15:b9:19:a6:48:12:7a:0b:bf:d9:86:72:2a: af:f2:e3:c1:5f:19:f1:e5:f2:12:c1:21:ef:1d:5a: 85:bd:60:07:e3:45:8c:99:a1:59:3e:ec:b9:cb:97: 77:ce:d1:76:04:24:eb:21:10:7c:44:ef:e0:c0:39: 88:12:ed:af:3d:b7:20:37:be:4c:40:75:ef:93:76: 0c:38:eb:48:c7:2d:b6:a8:44:4c:4f:3e:d9:89:bd: a3:62:00:e7:48:46:b2:1e:f8:ca:14:e4:e0:97:5b: b5:de:26:f3:29:80:56:33:95:9a:6f:eb:10:18:5d: 49:c9:71:12:3c:42:6e:19:09:7e:8f:ab:02:4c:de: e3:d8:21:64:c9:5b:01:83:12:b5:53:75:51:76:67: 0c:f4:12:73:35:7f:5d:f4:f5:02:be:08:16:40:c2: 96:80:0b:2c:0d:8e:4b:42:2d:31:2e:60:cf:3e:43: 5d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5E:AA:0B:02:0C:F5:6D:FD:CB:E3:5D:FC:57:84:B0:8C:52:2A:4E X509v3 Authority Key Identifier: keyid:31:91:3C:69:64:43:B8:59:6E:C7:72:2D:36:8B:47:49:C2:87:A0:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:39:e3:e1:4c:d1:b6:42:e6:e5:2b:20:fb:13:3e:41:87:cb: ae:fa:16:81:bb:55:e1:80:0b:a0:99:d0:15:8f:06:e9:1d:d4: 29:70:e9:99:b2:3e:a2:37:72:25:65:98:4f:28:e4:58:0c:c7: 88:ca:00:00:38:cf:e0:ad:38:cc:c5:cc:42:9d:8b:40:6b:f9: f8:9e:be:55:c3:b4:ca:3c:0f:e5:56:88:f6:10:21:f1:aa:7d: b2:14:c1:64:2f:29:62:a7:33:25:64:94:9d:a8:b6:18:01:8b: 65:05:f4:74:a1:7c:87:0b:4c:fa:bd:81:f2:18:17:40:ce:ff: 24:81:8e:d3:7e:b4:05:c1:b2:d2:e5:92:9b:21:e1:bd:9a:9a: 2e:cf:79:90:3e:53:b3:7b:a6:2c:a1:46:dc:58:60:c7:c4:a3: 6a:9d:b9:36:12:7f:41:5c:25:e5:94:11:ce:03:7b:d4:60:f1: 34:9d:eb:05:be:1c:38:9c:be:1a:d1:d7:f4:7e:7f:d5:36:94: 20:60:79:f1:71:fd:10:3b:88:17:81:0b:4e:87:76:d8:92:ee: c9:06:b6:87:38:98:21:9c:b1:a2:60:cd:0f:c4:b2:19:ab:c3: af:74:f4:a8:63:4c:9c:ad:5e:54:fe:b7:17:29:61:a2:33:a3: 9a:04:c5:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaibEkwyOH0SBfuXkAsW63wXRCk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5MTNDNjk2NDQzQjg1OTZFQzc3MjJEMzY4QjQ3NDlD Mjg3QTAyNTAeFw0yNTExMDQxNjE0MjVaFw0yNTExMDUxOTIyMjVaMDMxMTAvBgNV BAMTKDA0NUVBQTBCMDIwQ0Y1NkRGRENCRTM1REZDNTc4NEIwOEM1MjJBNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHNqFiRFQRFdh11pB/lwES8nG1 K9YyxSJuNQvf5e8S34iftbIxduSxLLYNJRvDgUNmk/s40KEWw3u1QwfeFHBOtTmi yoys5NaPIu8ZFbkZpkgSegu/2YZyKq/y48FfGfHl8hLBIe8dWoW9YAfjRYyZoVk+ 7LnLl3fO0XYEJOshEHxE7+DAOYgS7a89tyA3vkxAde+Tdgw460jHLbaoRExPPtmJ vaNiAOdIRrIe+MoU5OCXW7XeJvMpgFYzlZpv6xAYXUnJcRI8Qm4ZCX6PqwJM3uPY IWTJWwGDErVTdVF2Zwz0EnM1f1309QK+CBZAwpaACywNjktCLTEuYM8+Q11tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBF6qCwIM9W39y+Nd/FeEsIxSKk4wHwYDVR0j BBgwFoAUMZE8aWRDuFlux3ItNotHScKHoCUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGh3QlkycHdVRVV6cDJhWnVMQ1doNUNQV0NxOHI0WGZZZTM0OXZnWTFp NWgvMS8zMTkxM0M2OTY0NDNCODU5NkVDNzcyMkQzNjhCNDc0OUMyODdBMDI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOTEzQzY5NjQ0M0I4NTk2 RUM3NzIyRDM2OEI0NzQ5QzI4N0EwMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGh3QlkycHdVRVV6cDJhWnVMQ1doNUNQV0NxOHI0WGZZZTM0OXZnWTFpNWgvMS8z MTkxM0M2OTY0NDNCODU5NkVDNzcyMkQzNjhCNDc0OUMyODdBMDI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArznj4UzRtkLm5Ssg+xM+QYfLrvoWgbtV4YALoJnQFY8G6R3UKXDpmbI+ojdy JWWYTyjkWAzHiMoAADjP4K04zMXMQp2LQGv5+J6+VcO0yjwP5VaI9hAh8ap9shTB ZC8pYqczJWSUnai2GAGLZQX0dKF8hwtM+r2B8hgXQM7/JIGO0360BcGy0uWSmyHh vZqaLs95kD5Ts3umLKFG3Fhgx8Sjap25NhJ/QVwl5ZQRzgN71GDxNJ3rBb4cOJy+ GtHX9H5/1TaUIGB58XH9EDuIF4ELTod22JLuyQa2hziYIZyxomDND8SyGavDr3T0 qGNMnK1eVP63FylhojOjmgTFdQ== -----END CERTIFICATE-----Generated at Wed Nov 5 02:02:19 2025 by rpki-client