$ rpki-client -vvf rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft File: 31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft (raw, json) Hash identifier: tVGCz9niAsS0w/FR+M/nX6NPdtYw17y87uTtmfd72h0= Subject key identifier: 1E:57:1E:5E:7A:93:A3:F1:41:83:6C:58:90:D2:69:70:8C:78:12:55 Authority key identifier: 31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1 Certificate issuer: /CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1 Certificate serial: 1A9EA02F437BD6F22F08CAC9B8E9A14CEC445BD0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer Subject info access: rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft Manifest number: 0306 Signing time: Tue 04 Nov 2025 18:03:00 +0000 Manifest this update: Tue 04 Nov 2025 17:58:00 +0000 Manifest next update: Wed 05 Nov 2025 20:08:00 +0000 Files and hashes: 1: 323830343a333561383a3a2f33322d313238203d3e20323636323939.roa (hash: IsVLxgwYDi8pNm8S0DzwD9QJhFe0QyknmCg1ewqOeJQ=) 2: 31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl (hash: wNEpZQyHLeunisRUIrZ7iJPbN5nDs95gtX2fsmaT+Lo=) 3: 3137302e37392e3134382e302f32322d3332203d3e20323636323939.roa (hash: K7OCXntBYYWlJMIreulrBkSYMm1UKWdAl8lbZdhbPBM=) 4: 3137302e302e3139322e302f32322d3332203d3e20323636323939.roa (hash: 30DhOqm2M90Ds5s+OzTCD+5M9ukc+Ih0rydkINiYO4M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:9e:a0:2f:43:7b:d6:f2:2f:08:ca:c9:b8:e9:a1:4c:ec:44:5b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1 Validity Not Before: Nov 4 17:58:00 2025 GMT Not After : Nov 5 20:08:00 2025 GMT Subject: CN=1E571E5E7A93A3F141836C5890D269708C781255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4b:b6:68:ba:ab:52:25:89:80:c0:fe:d5:b0: 2f:9f:af:fb:1a:fe:63:3a:91:34:1e:e1:ac:5e:c3: 26:ed:ca:d4:d5:2d:eb:51:03:7e:b1:87:d4:4f:03: 63:e9:c6:4e:e5:c6:b9:cd:3a:d8:2f:2e:83:c7:41: 6b:93:a7:d1:c2:75:1a:c5:8d:7e:4a:25:54:16:30: f9:31:65:3e:6b:6e:be:cb:1f:ef:cc:ca:d4:2f:ea: 47:6a:31:60:f8:fa:57:b4:e2:d1:6c:14:42:37:0d: b6:c5:78:84:1f:4b:5f:44:c7:4a:6c:57:f5:c6:cf: 82:f7:e3:e7:55:f9:c7:e9:50:f3:b4:18:d7:57:06: 0e:f9:b6:d5:37:cb:7c:b1:f0:1f:3d:1c:46:09:4f: d0:1a:46:31:8c:4f:d5:55:03:d3:9a:3e:f8:01:f7: d2:47:76:f6:81:27:50:cd:45:1c:cb:fa:79:1d:f9: e8:8d:38:86:0e:72:38:15:71:e9:20:b9:ac:6c:d3: 74:c3:fc:a8:a4:61:1e:89:8b:55:01:f2:6d:e3:d8: 13:d6:67:5f:1a:26:26:a3:62:02:77:58:71:5d:d5: f9:53:20:ea:71:11:8b:c2:60:88:d0:0a:cd:0b:e5: ad:2f:b5:be:12:51:1f:d5:63:8e:a4:6d:37:9a:b0: d6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:57:1E:5E:7A:93:A3:F1:41:83:6C:58:90:D2:69:70:8C:78:12:55 X509v3 Authority Key Identifier: keyid:31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:95:eb:e4:37:29:91:d3:83:e8:e4:4b:9f:33:31:b6:2d:a9: 4d:6f:07:34:a7:36:fc:5a:97:8a:ba:fd:ea:56:cd:8b:ce:23: 1f:55:6c:fb:31:0c:3c:7d:a5:88:5e:8d:1c:9c:ed:04:e3:5f: 79:53:93:f3:a4:b9:29:ab:87:c8:68:d1:a5:55:c4:af:6b:5d: a6:d4:0f:38:19:b5:54:f9:c1:6a:78:3e:fe:7f:57:bf:bb:55: 55:71:06:17:77:74:8c:45:63:b8:4d:a1:db:0a:c1:98:ff:69: 07:f0:a1:3d:9d:d4:0f:c7:6d:d1:6d:56:88:0b:f0:3b:66:2b: 18:5e:c9:f8:d5:6c:46:14:f7:a4:e1:48:29:d0:2a:91:87:f1: 7d:75:e4:49:7a:f2:7f:d4:b3:82:c2:5c:a5:fb:d3:c2:30:5a: c2:e9:86:fe:d1:3e:60:4d:07:fa:d8:8b:89:ad:1f:d4:8b:27: 0d:f3:c6:a3:21:00:0e:42:4f:f9:1a:f8:b5:51:c8:e8:e1:f6: 7d:8d:6a:f9:f9:14:c6:3c:59:b9:53:46:eb:66:f1:d6:14:6d: b8:d7:00:57:3a:ef:9d:e8:6f:fd:7b:d7:07:cd:cb:ed:52:72: 99:dc:e5:0b:f8:2b:9f:82:fe:d8:c3:fc:29:9c:21:f0:9f:74: 2e:d5:ac:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGp6gL0N71vIvCMrJuOmhTOxEW9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDRjEyNTUyQzAyNzJDNDUxRTFFRTEyMjQ0RTAzQkRE RDZCMkNBMTAeFw0yNTExMDQxNzU4MDBaFw0yNTExMDUyMDA4MDBaMDMxMTAvBgNV BAMTKDFFNTcxRTVFN0E5M0EzRjE0MTgzNkM1ODkwRDI2OTcwOEM3ODEyNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfS7ZouqtSJYmAwP7VsC+fr/sa /mM6kTQe4axewybtytTVLetRA36xh9RPA2Ppxk7lxrnNOtgvLoPHQWuTp9HCdRrF jX5KJVQWMPkxZT5rbr7LH+/MytQv6kdqMWD4+le04tFsFEI3DbbFeIQfS19Ex0ps V/XGz4L34+dV+cfpUPO0GNdXBg75ttU3y3yx8B89HEYJT9AaRjGMT9VVA9OaPvgB 99JHdvaBJ1DNRRzL+nkd+eiNOIYOcjgVcekguaxs03TD/KikYR6Ji1UB8m3j2BPW Z18aJiajYgJ3WHFd1flTIOpxEYvCYIjQCs0L5a0vtb4SUR/VY46kbTeasNY1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHlceXnqTo/FBg2xYkNJpcIx4ElUwHwYDVR0j BBgwFoAUMc8SVSwCcsRR4e4SJE4Dvd1rLKEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUNtakI4UXlWVGZRZDlCWEJTd25Na3JYaHI0UHV5RG5kWEpoeXB2TG9L aU0vMS8zMUNGMTI1NTJDMDI3MkM0NTFFMUVFMTIyNDRFMDNCRERENkIyQ0ExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQ0YxMjU1MkMwMjcyQzQ1 MUUxRUUxMjI0NEUwM0JEREQ2QjJDQTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUNtakI4UXlWVGZRZDlCWEJTd25Na3JYaHI0UHV5RG5kWEpoeXB2TG9LaU0vMS8z MUNGMTI1NTJDMDI3MkM0NTFFMUVFMTIyNDRFMDNCRERENkIyQ0ExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhZXr5DcpkdOD6ORLnzMxti2pTW8HNKc2/FqXirr96lbNi84jH1Vs+zEMPH2l iF6NHJztBONfeVOT86S5KauHyGjRpVXEr2tdptQPOBm1VPnBang+/n9Xv7tVVXEG F3d0jEVjuE2h2wrBmP9pB/ChPZ3UD8dt0W1WiAvwO2YrGF7J+NVsRhT3pOFIKdAq kYfxfXXkSXryf9SzgsJcpfvTwjBawumG/tE+YE0H+tiLia0f1IsnDfPGoyEADkJP +Rr4tVHI6OH2fY1q+fkUxjxZuVNG62bx1hRtuNcAVzrvnehv/XvXB83L7VJymdzl C/grn4L+2MP8KZwh8J90LtWskQ== -----END CERTIFICATE-----Generated at Wed Nov 5 08:52:10 2025 by rpki-client