$ rpki-client -vvf rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft File: 31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft (raw, json) Hash identifier: eX2EkLhTqgObN94x3P3a1s5pQKgVBegKz70j5QjJH/Y= Subject key identifier: 37:03:DA:FA:9C:67:C7:D2:D9:DD:8F:E8:B7:03:38:B9:17:03:28:CA Authority key identifier: 31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1 Certificate issuer: /CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1 Certificate serial: 66D1910154AA8377E2312E940BB8D0C19A27CE62 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer Subject info access: rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft Manifest number: 028B Signing time: Mon 04 Aug 2025 13:37:24 +0000 Manifest this update: Mon 04 Aug 2025 13:32:24 +0000 Manifest next update: Tue 05 Aug 2025 15:03:24 +0000 Files and hashes: 1: 31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl (hash: BebFmThXt4hIW/IBsNvTVnTymaIq/OjXZTzxTSfLeJQ=) 2: 3137302e37392e3134382e302f32322d3332203d3e20323636323939.roa (hash: K7OCXntBYYWlJMIreulrBkSYMm1UKWdAl8lbZdhbPBM=) 3: 3137302e302e3139322e302f32322d3332203d3e20323636323939.roa (hash: 30DhOqm2M90Ds5s+OzTCD+5M9ukc+Ih0rydkINiYO4M=) 4: 323830343a333561383a3a2f33322d313238203d3e20323636323939.roa (hash: IsVLxgwYDi8pNm8S0DzwD9QJhFe0QyknmCg1ewqOeJQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 05 Aug 2025 15:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d1:91:01:54:aa:83:77:e2:31:2e:94:0b:b8:d0:c1:9a:27:ce:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1 Validity Not Before: Aug 4 13:32:24 2025 GMT Not After : Aug 5 15:03:24 2025 GMT Subject: CN=3703DAFA9C67C7D2D9DD8FE8B70338B9170328CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:86:eb:ad:eb:da:51:8a:1a:19:1b:38:71: d8:a8:b8:98:7a:ef:b2:d4:7c:5b:e5:39:c7:25:b2: 78:ac:90:76:57:7f:45:e8:51:5a:c7:9f:ac:74:10: 45:a4:1a:15:9d:13:25:38:df:43:e7:11:8d:f5:f8: 96:1b:e4:7a:a4:c7:46:87:17:57:a5:61:77:b1:65: a8:b1:8d:21:32:60:be:b0:3f:d3:7f:e3:79:45:42: b2:f8:2d:72:49:42:ce:3c:54:3f:e9:3e:8e:6c:b0: be:07:19:e6:f1:56:69:6f:f1:da:66:94:2d:4b:64: 43:3e:7c:dd:e6:dc:d1:70:7d:92:ed:2a:ec:9b:03: 67:6c:80:5d:81:4e:69:72:a3:e6:0d:71:05:1d:43: ac:fa:e8:6f:95:ae:29:8b:12:87:5d:98:cb:70:c0: c2:41:00:a0:be:1c:7e:1b:1a:92:d2:8d:2f:a3:f4: 17:d9:55:62:39:3f:c6:6b:af:d0:d3:9a:e2:80:59: 09:1a:39:57:e9:9d:04:13:f6:29:1b:c1:94:a4:c8: c8:95:75:a5:be:f7:29:ff:9d:0e:d2:c0:2f:ef:d2: 4d:6e:08:88:e2:62:34:8c:9e:90:64:06:89:3c:ae: 51:d0:29:32:13:fb:90:4f:ea:48:ed:b3:c2:72:0b: 0e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:03:DA:FA:9C:67:C7:D2:D9:DD:8F:E8:B7:03:38:B9:17:03:28:CA X509v3 Authority Key Identifier: keyid:31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7e:55:3b:30:84:79:d1:97:78:a9:a1:a3:ea:49:84:dc:6f: e9:15:b1:bd:25:33:e7:3d:f8:7d:8b:ab:ec:4e:4a:c8:4d:b8: 22:43:17:ea:25:d3:86:3b:47:60:2b:5e:58:80:5b:4b:b7:c0: 03:dc:2d:d4:f8:11:5c:2c:78:bc:71:4b:1b:be:69:be:68:00: f0:2a:87:cd:60:91:bb:99:15:e8:68:cc:b2:96:b0:a0:f0:0d: 7c:a4:30:ab:e0:ea:70:8c:bd:61:a5:e1:44:12:68:a3:84:c6: 75:37:34:20:60:6a:cd:c9:6f:3d:f5:54:86:6c:cb:d4:d7:39: 74:be:df:2d:07:9e:53:90:05:48:fa:a6:f5:7c:b3:19:5d:52: b0:d8:13:c2:af:6d:77:72:8e:8f:9c:3d:ab:00:b6:c3:97:96: 57:c4:aa:4e:b3:2b:b1:09:14:df:4d:b7:0d:de:e1:d3:68:cb: 0e:72:7b:7d:a7:09:cc:93:9c:58:e3:9f:bd:ee:e9:4e:fa:8b: bf:fd:5e:b2:08:71:55:62:49:ea:2d:52:5f:5a:8a:8c:e9:7a: 3b:96:d5:03:61:ae:c7:5f:f5:63:6e:40:23:53:10:cb:b0:bc: ab:5a:54:94:da:70:94:de:de:25:c7:ca:58:22:10:37:c7:9b: 17:86:9e:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZtGRAVSqg3fiMS6UC7jQwZonzmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDRjEyNTUyQzAyNzJDNDUxRTFFRTEyMjQ0RTAzQkRE RDZCMkNBMTAeFw0yNTA4MDQxMzMyMjRaFw0yNTA4MDUxNTAzMjRaMDMxMTAvBgNV BAMTKDM3MDNEQUZBOUM2N0M3RDJEOUREOEZFOEI3MDMzOEI5MTcwMzI4Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwfIbrrevaUYoaGRs4cdiouJh6 77LUfFvlOcclsniskHZXf0XoUVrHn6x0EEWkGhWdEyU430PnEY31+JYb5Hqkx0aH F1elYXexZaixjSEyYL6wP9N/43lFQrL4LXJJQs48VD/pPo5ssL4HGebxVmlv8dpm lC1LZEM+fN3m3NFwfZLtKuybA2dsgF2BTmlyo+YNcQUdQ6z66G+VrimLEoddmMtw wMJBAKC+HH4bGpLSjS+j9BfZVWI5P8Zrr9DTmuKAWQkaOVfpnQQT9ikbwZSkyMiV daW+9yn/nQ7SwC/v0k1uCIjiYjSMnpBkBok8rlHQKTIT+5BP6kjts8JyCw4lAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNwPa+pxnx9LZ3Y/otwM4uRcDKMowHwYDVR0j BBgwFoAUMc8SVSwCcsRR4e4SJE4Dvd1rLKEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUNtakI4UXlWVGZRZDlCWEJTd25Na3JYaHI0UHV5RG5kWEpoeXB2TG9L aU0vMS8zMUNGMTI1NTJDMDI3MkM0NTFFMUVFMTIyNDRFMDNCRERENkIyQ0ExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQ0YxMjU1MkMwMjcyQzQ1 MUUxRUUxMjI0NEUwM0JEREQ2QjJDQTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUNtakI4UXlWVGZRZDlCWEJTd25Na3JYaHI0UHV5RG5kWEpoeXB2TG9LaU0vMS8z MUNGMTI1NTJDMDI3MkM0NTFFMUVFMTIyNDRFMDNCRERENkIyQ0ExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATX5VOzCEedGXeKmho+pJhNxv6RWxvSUz5z34fYur7E5KyE24IkMX6iXThjtH YCteWIBbS7fAA9wt1PgRXCx4vHFLG75pvmgA8CqHzWCRu5kV6GjMspawoPANfKQw q+DqcIy9YaXhRBJoo4TGdTc0IGBqzclvPfVUhmzL1Nc5dL7fLQeeU5AFSPqm9Xyz GV1SsNgTwq9td3KOj5w9qwC2w5eWV8SqTrMrsQkU3023Dd7h02jLDnJ7facJzJOc WOOfve7pTvqLv/1esghxVWJJ6i1SX1qKjOl6O5bVA2Gux1/1Y25AI1MQy7C8q1pU lNpwlN7eJcfKWCIQN8ebF4ae2w== -----END CERTIFICATE-----Generated at Mon Aug 4 22:11:59 2025 by rpki-client