$ rpki-client -vvf rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft File: 31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft (raw, json) Hash identifier: 0TtcaYVcDpHTEyBrnic/GLE1/ki8GxWyoIfvAC+QHhA= Subject key identifier: DB:CF:6B:EA:55:F8:A3:24:15:76:18:CF:1C:6C:E2:AB:1C:BE:73:DA Authority key identifier: 31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1 Certificate issuer: /CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1 Certificate serial: 7D9789522077951EE7602EC812A07686EFA716B2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer Subject info access: rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft Manifest number: 020E Signing time: Sun 27 Apr 2025 22:22:12 +0000 Manifest this update: Sun 27 Apr 2025 22:17:12 +0000 Manifest next update: Tue 29 Apr 2025 01:47:12 +0000 Files and hashes: 1: 31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl (hash: Yn2t5e8qbH2TfwSOCC008hTfWEOk5n+6qaIpMykDREU=) 2: 3137302e302e3139322e302f32322d3332203d3e20323636323939.roa (hash: ZHS86h1PqASQZtMDUbjSTdL+kx8jsevUN91wERnwtto=) 3: 323830343a333561383a3a2f33322d313238203d3e20323636323939.roa (hash: IsVLxgwYDi8pNm8S0DzwD9QJhFe0QyknmCg1ewqOeJQ=) 4: 3137302e37392e3134382e302f32322d3332203d3e20323636323939.roa (hash: K7OCXntBYYWlJMIreulrBkSYMm1UKWdAl8lbZdhbPBM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 01:47:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:97:89:52:20:77:95:1e:e7:60:2e:c8:12:a0:76:86:ef:a7:16:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1 Validity Not Before: Apr 27 22:17:12 2025 GMT Not After : Apr 29 01:47:12 2025 GMT Subject: CN=DBCF6BEA55F8A324157618CF1C6CE2AB1CBE73DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ac:80:69:6a:bf:89:87:80:1e:59:ef:df:96: 1f:ba:5e:4f:8d:a8:17:0f:9a:0f:1c:2b:45:20:d4: 78:ad:ad:ed:cb:13:db:e9:1c:d5:e2:12:ac:aa:37: 38:67:3c:e8:66:8d:6d:08:bd:97:49:c5:73:9a:63: d9:37:69:5d:48:c9:41:19:fc:14:02:8b:6b:b1:f4: 26:39:ad:bd:a9:d7:9f:a6:19:48:00:70:6b:9c:b1: 17:60:e1:4c:d6:d5:5a:ea:92:75:e8:b5:a7:cd:f5: c6:64:29:78:38:7b:ce:c6:96:bd:cb:3e:f9:68:42: ed:f2:ea:89:06:83:b1:c3:c0:39:5d:c5:b2:7b:af: 16:0c:96:9a:e4:d6:44:19:39:ea:e9:e9:e9:6b:05: 26:cd:ef:b5:a8:3d:71:ab:77:77:61:bf:86:d3:85: c4:c8:80:e5:43:e5:0c:ea:20:de:6d:b1:af:5a:0a: 7c:bf:a2:7b:ce:77:8c:79:af:34:0c:fb:f3:1e:19: 72:3f:57:54:63:63:b4:86:89:05:eb:c9:c6:3e:8c: 9f:74:d6:90:5d:0b:a7:b8:d8:ea:01:49:13:7d:36: d3:22:54:2c:39:3d:d7:d1:af:3f:ed:3f:2e:1a:37: b2:d0:f9:97:c9:91:c4:bc:10:53:b6:bb:63:76:e3: 9c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CF:6B:EA:55:F8:A3:24:15:76:18:CF:1C:6C:E2:AB:1C:BE:73:DA X509v3 Authority Key Identifier: keyid:31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:cb:ba:28:f1:1b:eb:cd:70:22:ae:73:12:04:f2:52:9d:0d: 3f:3d:19:f8:b1:22:83:de:a6:26:ac:fe:2c:2d:64:1e:02:71: cd:ad:19:01:95:4e:ff:0b:9b:84:5c:7f:ba:48:cc:30:bd:6f: ae:58:21:af:77:0b:83:e7:2e:17:b5:8e:7d:a4:17:f5:a5:10: 94:ca:5f:6c:b8:9b:99:51:a9:38:4e:03:d2:f8:de:45:0f:72: 79:b0:56:7d:ff:d6:3b:93:49:49:6a:10:7a:ae:cf:ad:c6:e5: 86:cc:d6:b5:84:b0:42:68:39:d9:6d:25:9b:09:8e:73:49:2a: 13:33:9f:36:82:78:ee:e9:71:75:db:b2:0b:ca:26:01:bc:4b: c8:35:c8:29:ca:a6:0c:d7:be:b1:5e:ca:6b:14:9d:99:4b:34: 89:01:4b:16:aa:02:aa:0e:07:1c:19:7f:03:07:bd:85:19:e6: e5:0f:b8:96:d7:d9:2e:05:b8:50:14:17:c1:f7:39:2e:60:43: 5d:25:b2:07:00:c6:e4:fc:78:7d:73:68:2c:0f:b5:3b:a3:d7: 52:d7:5d:ce:bd:17:e7:84:7d:da:70:de:d5:fb:86:ea:cf:35: ca:9e:8e:a8:55:0e:ad:9b:ac:2c:0b:90:02:05:cf:fd:bc:12: 99:9a:f9:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfZeJUiB3lR7nYC7IEqB2hu+nFrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDRjEyNTUyQzAyNzJDNDUxRTFFRTEyMjQ0RTAzQkRE RDZCMkNBMTAeFw0yNTA0MjcyMjE3MTJaFw0yNTA0MjkwMTQ3MTJaMDMxMTAvBgNV BAMTKERCQ0Y2QkVBNTVGOEEzMjQxNTc2MThDRjFDNkNFMkFCMUNCRTczREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVrIBpar+Jh4AeWe/flh+6Xk+N qBcPmg8cK0Ug1Hitre3LE9vpHNXiEqyqNzhnPOhmjW0IvZdJxXOaY9k3aV1IyUEZ /BQCi2ux9CY5rb2p15+mGUgAcGucsRdg4UzW1VrqknXotafN9cZkKXg4e87Glr3L PvloQu3y6okGg7HDwDldxbJ7rxYMlprk1kQZOerp6elrBSbN77WoPXGrd3dhv4bT hcTIgOVD5QzqIN5tsa9aCny/onvOd4x5rzQM+/MeGXI/V1RjY7SGiQXrycY+jJ90 1pBdC6e42OoBSRN9NtMiVCw5PdfRrz/tPy4aN7LQ+ZfJkcS8EFO2u2N245xDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU289r6lX4oyQVdhjPHGziqxy+c9owHwYDVR0j BBgwFoAUMc8SVSwCcsRR4e4SJE4Dvd1rLKEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUNtakI4UXlWVGZRZDlCWEJTd25Na3JYaHI0UHV5RG5kWEpoeXB2TG9L aU0vMS8zMUNGMTI1NTJDMDI3MkM0NTFFMUVFMTIyNDRFMDNCRERENkIyQ0ExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQ0YxMjU1MkMwMjcyQzQ1 MUUxRUUxMjI0NEUwM0JEREQ2QjJDQTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUNtakI4UXlWVGZRZDlCWEJTd25Na3JYaHI0UHV5RG5kWEpoeXB2TG9LaU0vMS8z MUNGMTI1NTJDMDI3MkM0NTFFMUVFMTIyNDRFMDNCRERENkIyQ0ExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfMu6KPEb681wIq5zEgTyUp0NPz0Z+LEig96mJqz+LC1kHgJxza0ZAZVO/wub hFx/ukjMML1vrlghr3cLg+cuF7WOfaQX9aUQlMpfbLibmVGpOE4D0vjeRQ9yebBW ff/WO5NJSWoQeq7PrcblhszWtYSwQmg52W0lmwmOc0kqEzOfNoJ47ulxdduyC8om AbxLyDXIKcqmDNe+sV7KaxSdmUs0iQFLFqoCqg4HHBl/Awe9hRnm5Q+4ltfZLgW4 UBQXwfc5LmBDXSWyBwDG5Px4fXNoLA+1O6PXUtddzr0X54R92nDe1fuG6s81yp6O qFUOrZusLAuQAgXP/bwSmZr5Nw== -----END CERTIFICATE-----Generated at Mon Apr 28 15:03:36 2025 by rpki-client