$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.mft File: 31913C696443B8596EC7722D368B4749C287A025.mft (raw, json) Hash identifier: 10tTKGRKMCUtHXNUOtqlMvrblNxr9vyyutv2+skrWrs= Subject key identifier: 41:C1:BF:5C:7B:8F:07:81:EF:6B:4D:8A:5B:74:39:A0:7D:F2:67:B4 Authority key identifier: 31:91:3C:69:64:43:B8:59:6E:C7:72:2D:36:8B:47:49:C2:87:A0:25 Certificate issuer: /CN=31913C696443B8596EC7722D368B4749C287A025 Certificate serial: 49DD129ABD602B06E8C130B2D716AE67242136ED Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer Subject info access: rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.mft Manifest number: 022C Signing time: Fri 08 Aug 2025 03:45:02 +0000 Manifest this update: Fri 08 Aug 2025 03:40:02 +0000 Manifest next update: Sat 09 Aug 2025 03:58:02 +0000 Files and hashes: 1: 3138362e3232372e36342e302f32322d3234203d3e203631373236.roa (hash: tQtO6upZn/pp5ZgaAHSVlMXZc9ybBbe/+0pkP3gDHBw=) 2: 323830343a316236383a3a2f33322d3438203d3e203631373236.roa (hash: pfn35jhaqmmVavRIG/aoZzZSN1xJuEgSVB+lmLR7HBw=) 3: 31913C696443B8596EC7722D368B4749C287A025.crl (hash: mODBxHJoWKEyuKARGg6xbbIUS2uD2TJgMy9HTkqxo8Q=) 4: 3133312e37322e39362e302f32322d3234203d3e203631373236.roa (hash: T4l1Rdp+if5x2GwVENwJ5EG4S5U5hpq/S6oNIsW4FsY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.crl rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 03:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:dd:12:9a:bd:60:2b:06:e8:c1:30:b2:d7:16:ae:67:24:21:36:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31913C696443B8596EC7722D368B4749C287A025 Validity Not Before: Aug 8 03:40:02 2025 GMT Not After : Aug 9 03:58:02 2025 GMT Subject: CN=41C1BF5C7B8F0781EF6B4D8A5B7439A07DF267B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9f:67:cb:b0:28:17:0d:06:40:ca:54:a4:12: 32:fe:d7:fd:8f:e6:25:08:0a:0f:6c:d7:bf:a2:55: ab:73:16:f7:3d:4b:27:aa:d7:0e:e3:6c:83:aa:8e: 60:7c:f0:84:0b:d6:69:ca:72:f5:7b:d3:a2:81:3d: 26:ac:29:01:92:0d:2a:b7:08:1a:a9:db:76:aa:b4: 33:b2:6d:f1:fd:76:29:2f:34:60:45:e7:e2:f2:66: dc:da:79:9f:fc:80:aa:da:80:b9:9e:18:28:86:ba: 36:d9:d0:2b:b1:54:ff:aa:a3:80:74:64:c0:b0:06: 2c:a9:cf:58:15:00:76:9e:62:a9:42:1f:75:bc:65: f5:eb:4e:fa:d3:7e:c0:74:89:e1:33:6b:2d:d6:82: 16:e3:1a:c6:81:e8:83:fa:51:6a:03:a2:ae:8e:08: 1b:00:d9:e4:37:9e:d5:ac:6c:82:55:34:27:2f:51: 1c:01:e7:57:b6:46:c5:b9:37:b7:7b:8a:f3:9c:b7: 04:b3:e5:0d:54:c5:fd:83:9c:6e:6c:89:40:b0:38: ab:d1:59:66:ba:a2:a3:b7:0d:28:42:a9:e0:22:07: 71:8c:fd:06:5b:e2:bd:88:43:52:96:8f:7a:6a:1e: 19:43:aa:a5:02:08:b5:fa:7f:14:86:48:bb:99:a6: 22:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C1:BF:5C:7B:8F:07:81:EF:6B:4D:8A:5B:74:39:A0:7D:F2:67:B4 X509v3 Authority Key Identifier: keyid:31:91:3C:69:64:43:B8:59:6E:C7:72:2D:36:8B:47:49:C2:87:A0:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d7:70:5e:41:ba:55:b6:31:7b:4e:ec:96:44:11:98:d9:56: 1e:a7:51:8f:17:eb:8b:d5:9c:f0:50:45:04:19:33:c7:85:64: d0:95:3a:2c:48:4b:8c:d8:06:bc:f9:40:32:32:5c:b0:37:18: 5c:fe:1f:0e:35:2a:09:2f:35:09:76:4b:cb:69:54:60:fe:a7: 6e:98:07:b0:a6:e0:36:37:49:aa:94:94:e1:1c:9f:e3:de:34: 3c:e8:67:81:85:f5:b3:35:b0:1b:bf:9e:88:d1:23:1a:bb:70: e4:73:76:ea:aa:4c:79:1d:45:a7:1b:75:ed:a8:8c:da:99:99: db:42:72:7e:ca:e0:07:2a:ca:d7:22:6f:93:73:91:b6:c2:54: 5c:59:cf:d9:a4:85:70:12:e2:94:a3:28:fd:40:da:72:53:5b: 86:b6:12:e0:8f:93:b2:8f:70:f5:d3:47:41:ba:bd:76:5b:f9: 6b:cf:24:a4:3f:3d:44:c2:33:c9:c9:d4:ab:2d:fd:e5:d3:75: ad:62:f4:0a:82:27:2c:25:5a:3d:68:db:72:0e:c0:65:3f:a5: 5a:f7:7d:18:3e:87:69:04:7c:e3:18:25:a8:51:43:c9:82:6f: bf:09:7a:b1:8f:48:73:66:cc:20:20:2f:51:7b:7d:e7:da:72: 32:dc:e1:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSd0Smr1gKwbowTCy1xauZyQhNu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5MTNDNjk2NDQzQjg1OTZFQzc3MjJEMzY4QjQ3NDlD Mjg3QTAyNTAeFw0yNTA4MDgwMzQwMDJaFw0yNTA4MDkwMzU4MDJaMDMxMTAvBgNV BAMTKDQxQzFCRjVDN0I4RjA3ODFFRjZCNEQ4QTVCNzQzOUEwN0RGMjY3QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNn2fLsCgXDQZAylSkEjL+1/2P 5iUICg9s17+iVatzFvc9Syeq1w7jbIOqjmB88IQL1mnKcvV706KBPSasKQGSDSq3 CBqp23aqtDOybfH9dikvNGBF5+LyZtzaeZ/8gKragLmeGCiGujbZ0CuxVP+qo4B0 ZMCwBiypz1gVAHaeYqlCH3W8ZfXrTvrTfsB0ieEzay3WghbjGsaB6IP6UWoDoq6O CBsA2eQ3ntWsbIJVNCcvURwB51e2RsW5N7d7ivOctwSz5Q1Uxf2DnG5siUCwOKvR WWa6oqO3DShCqeAiB3GM/QZb4r2IQ1KWj3pqHhlDqqUCCLX6fxSGSLuZpiINAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQcG/XHuPB4Hva02KW3Q5oH3yZ7QwHwYDVR0j BBgwFoAUMZE8aWRDuFlux3ItNotHScKHoCUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGh3QlkycHdVRVV6cDJhWnVMQ1doNUNQV0NxOHI0WGZZZTM0OXZnWTFp NWgvMS8zMTkxM0M2OTY0NDNCODU5NkVDNzcyMkQzNjhCNDc0OUMyODdBMDI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOTEzQzY5NjQ0M0I4NTk2 RUM3NzIyRDM2OEI0NzQ5QzI4N0EwMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGh3QlkycHdVRVV6cDJhWnVMQ1doNUNQV0NxOHI0WGZZZTM0OXZnWTFpNWgvMS8z MTkxM0M2OTY0NDNCODU5NkVDNzcyMkQzNjhCNDc0OUMyODdBMDI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZNdwXkG6VbYxe07slkQRmNlWHqdRjxfri9Wc8FBFBBkzx4Vk0JU6LEhLjNgG vPlAMjJcsDcYXP4fDjUqCS81CXZLy2lUYP6nbpgHsKbgNjdJqpSU4Ryf4940POhn gYX1szWwG7+eiNEjGrtw5HN26qpMeR1Fpxt17aiM2pmZ20JyfsrgByrK1yJvk3OR tsJUXFnP2aSFcBLilKMo/UDaclNbhrYS4I+Tso9w9dNHQbq9dlv5a88kpD89RMIz ycnUqy395dN1rWL0CoInLCVaPWjbcg7AZT+lWvd9GD6HaQR84xglqFFDyYJvvwl6 sY9Ic2bMICAvUXt959pyMtzh+Q== -----END CERTIFICATE-----Generated at Fri Aug 8 19:37:40 2025 by rpki-client