$ rpki-client -vvf rpki-repo.registro.br/repo/HMCXjXrqj8urYLUoJaBbAgws9PhjJhgT5S4MnPpXAkam/0/31FA0AE794589CB2734A9B6E6D94B276F9A9F9C6.mft File: 31FA0AE794589CB2734A9B6E6D94B276F9A9F9C6.mft (raw, json) Hash identifier: rBPAUmKlOdQSAoAO/phGehCNHq9yg9o+YUUohc9itDQ= Subject key identifier: 5A:86:4E:F3:56:72:C8:4A:07:B4:21:1A:E0:85:70:E6:99:D8:2A:A3 Authority key identifier: 31:FA:0A:E7:94:58:9C:B2:73:4A:9B:6E:6D:94:B2:76:F9:A9:F9:C6 Certificate issuer: /CN=31FA0AE794589CB2734A9B6E6D94B276F9A9F9C6 Certificate serial: 23E36ACCD4C604E7D9779A7CB8416E456418AC6D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31FA0AE794589CB2734A9B6E6D94B276F9A9F9C6.cer Subject info access: rsync://rpki-repo.registro.br/repo/HMCXjXrqj8urYLUoJaBbAgws9PhjJhgT5S4MnPpXAkam/0/31FA0AE794589CB2734A9B6E6D94B276F9A9F9C6.mft Manifest number: 74 Signing time: Wed 05 Nov 2025 15:31:17 +0000 Manifest this update: Wed 05 Nov 2025 15:26:17 +0000 Manifest next update: Thu 06 Nov 2025 16:51:17 +0000 Files and hashes: 1: 323830343a383733303a3a2f33322d3332203d3e20323732363934.roa (hash: 2KlWQLOfflOoUc56Z6ItgxuGEPJZomrE2Y3ExTJevDs=) 2: 323830343a383733303a383030303a3a2f33342d3334203d3e20323732363934.roa (hash: PWbf0JRqXrDciCgQ6k611B+d9RdsIsZwJUZJEOK+ktg=) 3: 323830343a383733303a3a2f33342d3334203d3e20323732363934.roa (hash: 3kGbEb0PcMDEvDFYoIVCzUBZqM8wbwnFieOKga9yik8=) 4: 31FA0AE794589CB2734A9B6E6D94B276F9A9F9C6.crl (hash: BbbWmmIQkW6W+BOHL9RYas3ySacQKfHPV8TSkqx7/Qw=) 5: 323830343a383733303a343030303a3a2f33342d3334203d3e20323732363934.roa (hash: KMwlOgi2UabbhnBbDdolr9z8NzkQc1SWfqfa3W7s+cU=) 6: 323830343a383733303a633030303a3a2f33342d3334203d3e20323732363934.roa (hash: ti9QN9WWElnE3INgqPPnraDiEoQ6t/nPcRTZWswDqRs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HMCXjXrqj8urYLUoJaBbAgws9PhjJhgT5S4MnPpXAkam/0/31FA0AE794589CB2734A9B6E6D94B276F9A9F9C6.crl rsync://rpki-repo.registro.br/repo/HMCXjXrqj8urYLUoJaBbAgws9PhjJhgT5S4MnPpXAkam/0/31FA0AE794589CB2734A9B6E6D94B276F9A9F9C6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31FA0AE794589CB2734A9B6E6D94B276F9A9F9C6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 16:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e3:6a:cc:d4:c6:04:e7:d9:77:9a:7c:b8:41:6e:45:64:18:ac:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31FA0AE794589CB2734A9B6E6D94B276F9A9F9C6 Validity Not Before: Nov 5 15:26:17 2025 GMT Not After : Nov 6 16:51:17 2025 GMT Subject: CN=5A864EF35672C84A07B4211AE08570E699D82AA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:54:9f:d6:33:df:ef:f9:9f:4d:33:67:ee:86: 9f:42:6b:ca:3a:e7:05:8e:c2:4f:6b:bb:6d:87:09: 31:6d:9d:af:bf:14:f1:e2:4a:1f:87:28:40:0f:10: a2:f7:f4:c4:4f:cd:4a:ce:93:41:0c:ac:fd:e5:66: 7e:1d:93:2e:c3:40:2b:b4:01:aa:2a:1d:b7:64:41: 26:73:b8:42:87:67:3b:94:f3:88:a5:49:ba:b2:56: de:da:50:19:cf:64:b3:39:9d:21:bd:a0:59:da:95: 7c:51:a3:9d:68:fb:bf:06:43:2c:48:bd:58:f2:c5: 80:24:77:69:d4:78:53:01:dd:68:c0:42:c7:67:53: e6:24:5e:e0:ba:3d:53:5a:5c:a4:f7:35:32:14:74: a2:32:74:f8:09:c5:f8:2e:e1:ee:fc:55:1d:95:09: da:cd:4d:19:2b:1a:1e:1c:21:e4:bb:e9:15:41:d6: 1b:0f:fd:47:ea:fa:c4:b2:b3:eb:f0:ff:4b:4b:20: 9e:a2:ea:8e:4c:65:94:86:f8:94:c1:17:69:22:7a: 52:b2:1d:09:d5:e6:7a:1f:c5:36:5e:98:ab:97:07: 18:3c:2e:56:f9:62:64:ea:8f:09:75:f2:f8:6b:ab: f7:e6:d8:28:91:c0:81:84:77:61:55:36:62:45:20: 88:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:86:4E:F3:56:72:C8:4A:07:B4:21:1A:E0:85:70:E6:99:D8:2A:A3 X509v3 Authority Key Identifier: keyid:31:FA:0A:E7:94:58:9C:B2:73:4A:9B:6E:6D:94:B2:76:F9:A9:F9:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HMCXjXrqj8urYLUoJaBbAgws9PhjJhgT5S4MnPpXAkam/0/31FA0AE794589CB2734A9B6E6D94B276F9A9F9C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31FA0AE794589CB2734A9B6E6D94B276F9A9F9C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMCXjXrqj8urYLUoJaBbAgws9PhjJhgT5S4MnPpXAkam/0/31FA0AE794589CB2734A9B6E6D94B276F9A9F9C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3b:8d:88:27:29:6c:d6:cb:17:9e:d3:e2:02:a2:32:a1:44: b7:fb:3f:8e:54:48:b4:3c:eb:a8:1c:89:14:3f:e9:84:86:43: 02:17:38:f7:f4:2c:20:79:1a:48:27:9c:79:80:f8:03:94:12: 4b:d2:9c:b7:6a:52:43:49:6a:86:58:21:22:12:a7:09:b9:ef: 68:56:d3:1c:29:35:46:3c:b0:bd:e6:6d:85:ed:78:55:22:be: b4:20:3e:05:2a:0b:17:e4:9f:32:5d:f5:1f:d2:b7:4a:d2:4d: 44:1b:23:b0:74:8e:c7:63:b4:26:d4:ca:37:5d:2f:b3:c6:5e: f1:cc:32:f2:73:65:46:67:7f:c0:e2:ea:7b:a3:a3:4f:63:ff: cd:e1:99:93:d2:48:de:ea:72:99:44:b6:37:50:33:a7:ee:be: 88:2b:af:af:37:3f:4e:82:06:dc:ba:40:b5:1d:55:b2:55:17: 94:fe:cd:17:b0:c2:b8:56:8e:a7:e2:35:eb:8f:06:0b:cf:fc: eb:f3:cf:02:fd:7e:68:40:44:f6:da:6b:db:21:16:fb:f4:1b: 8c:f3:be:46:4d:dd:11:a9:63:07:fe:7b:ff:99:01:9c:1c:ba: 87:06:70:38:5c:16:30:4e:c8:ae:3c:5d:4b:82:4f:d9:39:9d: 4a:56:25:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI+NqzNTGBOfZd5p8uEFuRWQYrG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGQTBBRTc5NDU4OUNCMjczNEE5QjZFNkQ5NEIyNzZG OUE5RjlDNjAeFw0yNTExMDUxNTI2MTdaFw0yNTExMDYxNjUxMTdaMDMxMTAvBgNV BAMTKDVBODY0RUYzNTY3MkM4NEEwN0I0MjExQUUwODU3MEU2OTlEODJBQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAVJ/WM9/v+Z9NM2fuhp9Ca8o6 5wWOwk9ru22HCTFtna+/FPHiSh+HKEAPEKL39MRPzUrOk0EMrP3lZn4dky7DQCu0 AaoqHbdkQSZzuEKHZzuU84ilSbqyVt7aUBnPZLM5nSG9oFnalXxRo51o+78GQyxI vVjyxYAkd2nUeFMB3WjAQsdnU+YkXuC6PVNaXKT3NTIUdKIydPgJxfgu4e78VR2V CdrNTRkrGh4cIeS76RVB1hsP/Ufq+sSys+vw/0tLIJ6i6o5MZZSG+JTBF2kielKy HQnV5nofxTZemKuXBxg8Llb5YmTqjwl18vhrq/fm2CiRwIGEd2FVNmJFIIiBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWoZO81ZyyEoHtCEa4IVw5pnYKqMwHwYDVR0j BBgwFoAUMfoK55RYnLJzSptubZSydvmp+cYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSE1DWGpYcnFqOHVyWUxVb0phQmJBZ3dzOVBoakpoZ1Q1UzRNblBwWEFr YW0vMC8zMUZBMEFFNzk0NTg5Q0IyNzM0QTlCNkU2RDk0QjI3NkY5QTlGOUM2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxRkEwQUU3OTQ1ODlDQjI3 MzRBOUI2RTZEOTRCMjc2RjlBOUY5QzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SE1DWGpYcnFqOHVyWUxVb0phQmJBZ3dzOVBoakpoZ1Q1UzRNblBwWEFrYW0vMC8z MUZBMEFFNzk0NTg5Q0IyNzM0QTlCNkU2RDk0QjI3NkY5QTlGOUM2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnDuNiCcpbNbLF57T4gKiMqFEt/s/jlRItDzrqByJFD/phIZDAhc49/QsIHka SCeceYD4A5QSS9Kct2pSQ0lqhlghIhKnCbnvaFbTHCk1RjywveZthe14VSK+tCA+ BSoLF+SfMl31H9K3StJNRBsjsHSOx2O0JtTKN10vs8Ze8cwy8nNlRmd/wOLqe6Oj T2P/zeGZk9JI3upymUS2N1Azp+6+iCuvrzc/ToIG3LpAtR1VslUXlP7NF7DCuFaO p+I1648GC8/86/PPAv1+aEBE9tpr2yEW+/QbjPO+Rk3dEaljB/57/5kBnBy6hwZw OFwWME7IrjxdS4JP2TmdSlYldQ== -----END CERTIFICATE-----Generated at Wed Nov 5 19:09:12 2025 by rpki-client