$ rpki-client -vvf rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft File: 470AE1EB9714E43320F9D361336505142D7D836B.mft (raw, json) Hash identifier: gewkjuLhnmEmOO0dbXJAK8UA2g8LTE6LgpG2Ln3/lkw= Subject key identifier: 2E:D3:6E:34:35:28:89:BA:99:F3:3E:EE:7A:CA:C4:37:7A:01:30:D2 Authority key identifier: 47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B Certificate issuer: /CN=470AE1EB9714E43320F9D361336505142D7D836B Certificate serial: 326A7E6B335156268A134132BADD0D06192EF464 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft Manifest number: 43 Signing time: Sun 10 Aug 2025 13:34:01 +0000 Manifest this update: Sun 10 Aug 2025 13:29:01 +0000 Manifest next update: Mon 11 Aug 2025 16:36:01 +0000 Files and hashes: 1: 470AE1EB9714E43320F9D361336505142D7D836B.crl (hash: iQ1QpQoBixCqDI74I55c0kt0PYeHhM6Z8H7ulVsdT/k=) 2: 3137372e33392e39362e302f32342d3332203d3e20323731363135.roa (hash: 1vyNuWE5jauLyptTokeHnfrLaNFayN+UWnzSx2Hk+eA=) 3: 3137372e33392e39382e302f32332d3332203d3e20323731363135.roa (hash: BdLrbEU7II3NX1HsAT1F9Ah5WD1IUR9s5CyZjRaEy4Y=) 4: 323830343a376534633a3a2f33322d313238203d3e20323731363135.roa (hash: OdU9UEZt02QpSGkR3fyYMJem0AChe2we0Z/o1VOpO5k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 16:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:6a:7e:6b:33:51:56:26:8a:13:41:32:ba:dd:0d:06:19:2e:f4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=470AE1EB9714E43320F9D361336505142D7D836B Validity Not Before: Aug 10 13:29:01 2025 GMT Not After : Aug 11 16:36:01 2025 GMT Subject: CN=2ED36E34352889BA99F33EEE7ACAC4377A0130D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6f:b8:fe:69:17:6c:15:89:0c:b9:f0:cb:64: b7:35:e3:00:35:03:de:13:84:90:b2:4f:93:71:1e: 1e:e9:f1:ad:51:99:df:b5:4f:e8:7f:15:b4:9f:07: e1:72:18:d2:1f:66:c2:16:d2:c4:df:35:39:39:3c: a2:d3:d6:d1:f9:20:15:71:2a:c8:2f:4e:13:c6:e2: aa:70:81:57:b9:a9:95:c8:e1:9a:aa:82:64:16:f7: b4:5a:48:94:29:f3:03:f7:0f:81:4d:d8:b7:0e:99: 74:08:1f:1f:36:ec:90:3e:5a:f1:c4:5d:2f:45:ec: b8:1c:17:a9:fc:c5:bf:18:d4:67:16:71:77:5a:9b: 10:11:de:6d:79:6d:55:b9:e7:14:e3:dc:ef:7f:30: 52:e8:c5:69:df:cb:1f:36:bb:52:a5:b7:ae:45:8c: 81:40:35:04:f5:03:2b:37:53:88:d8:ce:16:4d:d5: f4:33:a2:f6:fe:77:1c:27:4a:e4:57:68:55:16:0e: ea:7b:a1:79:ee:82:a1:4a:02:5d:b3:65:54:19:6e: 9c:bc:d5:76:85:5c:0a:1c:de:e8:a6:fa:58:30:30: cc:27:ed:6a:6c:76:31:ba:8f:b1:ef:48:d6:9d:28: 21:31:f9:b0:8a:a0:44:ca:58:d5:ae:b7:d5:ab:d9: 6b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D3:6E:34:35:28:89:BA:99:F3:3E:EE:7A:CA:C4:37:7A:01:30:D2 X509v3 Authority Key Identifier: keyid:47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:22:d2:af:e5:98:8b:58:f6:f3:d2:32:54:e8:e6:46:38:cf: 15:11:e7:57:18:d1:8c:d0:fa:df:b4:63:88:bf:d9:85:c6:13: e7:84:7b:17:b7:44:54:11:37:ce:48:a9:90:07:31:7f:cd:3b: 81:6f:2b:08:7e:13:52:87:85:b9:ca:14:fc:25:8e:d0:1f:07: a9:84:30:f4:0c:01:f9:84:4e:06:60:6e:7f:cb:74:68:58:b7: 2f:93:0e:49:3f:eb:ad:70:93:e0:ad:a7:1c:b9:03:e8:69:2c: 3a:01:7a:c6:ee:b7:54:60:34:53:24:80:7d:73:eb:7d:6a:1d: 81:ca:c3:fd:00:64:88:eb:df:43:0e:85:0e:bb:16:73:53:08: 37:d9:13:5c:82:52:0e:38:34:f7:67:5c:f5:58:68:47:c1:e7: ee:fa:34:23:73:5c:e0:4f:0a:ef:f2:32:0e:e1:22:6e:55:48: 15:9d:85:f2:bf:d9:03:ea:c8:ac:6f:55:28:08:88:6c:b5:e8: 16:ac:56:5c:1f:04:ba:7b:a7:90:83:31:9d:b3:ce:2c:b7:50: 9c:d3:ab:77:86:33:03:36:a6:50:35:00:e0:ba:bd:7d:54:30: 97:46:79:3d:08:52:2e:7c:ba:89:db:15:90:31:e9:3f:a8:bd: bc:4a:bb:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMmp+azNRViaKE0Eyut0NBhku9GQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDcwQUUxRUI5NzE0RTQzMzIwRjlEMzYxMzM2NTA1MTQy RDdEODM2QjAeFw0yNTA4MTAxMzI5MDFaFw0yNTA4MTExNjM2MDFaMDMxMTAvBgNV BAMTKDJFRDM2RTM0MzUyODg5QkE5OUYzM0VFRTdBQ0FDNDM3N0EwMTMwRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHb7j+aRdsFYkMufDLZLc14wA1 A94ThJCyT5NxHh7p8a1Rmd+1T+h/FbSfB+FyGNIfZsIW0sTfNTk5PKLT1tH5IBVx KsgvThPG4qpwgVe5qZXI4ZqqgmQW97RaSJQp8wP3D4FN2LcOmXQIHx827JA+WvHE XS9F7LgcF6n8xb8Y1GcWcXdamxAR3m15bVW55xTj3O9/MFLoxWnfyx82u1Klt65F jIFANQT1Ays3U4jYzhZN1fQzovb+dxwnSuRXaFUWDup7oXnugqFKAl2zZVQZbpy8 1XaFXAoc3uim+lgwMMwn7WpsdjG6j7HvSNadKCEx+bCKoETKWNWut9Wr2WvJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULtNuNDUoibqZ8z7uesrEN3oBMNIwHwYDVR0j BBgwFoAURwrh65cU5DMg+dNhM2UFFC19g2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkNNendWYWtXMzdvbTVYUFNyRVFjdVBHWjFDUUZOenc2eXZ0bW9SU0dv THcvMC80NzBBRTFFQjk3MTRFNDMzMjBGOUQzNjEzMzY1MDUxNDJEN0Q4MzZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3MEFFMUVCOTcxNEU0MzMy MEY5RDM2MTMzNjUwNTE0MkQ3RDgzNkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkNNendWYWtXMzdvbTVYUFNyRVFjdVBHWjFDUUZOenc2eXZ0bW9SU0dvTHcvMC80 NzBBRTFFQjk3MTRFNDMzMjBGOUQzNjEzMzY1MDUxNDJEN0Q4MzZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQCLSr+WYi1j289IyVOjmRjjPFRHnVxjRjND637RjiL/ZhcYT54R7F7dEVBE3 zkipkAcxf807gW8rCH4TUoeFucoU/CWO0B8HqYQw9AwB+YROBmBuf8t0aFi3L5MO ST/rrXCT4K2nHLkD6GksOgF6xu63VGA0UySAfXPrfWodgcrD/QBkiOvfQw6FDrsW c1MIN9kTXIJSDjg092dc9VhoR8Hn7vo0I3Nc4E8K7/IyDuEiblVIFZ2F8r/ZA+rI rG9VKAiIbLXoFqxWXB8EununkIMxnbPOLLdQnNOrd4YzAzamUDUA4Lq9fVQwl0Z5 PQhSLny6idsVkDHpP6i9vEq7sw== -----END CERTIFICATE-----Generated at Sun Aug 10 18:56:43 2025 by rpki-client