$ rpki-client -vvf rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft File: 1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft (raw, json) Hash identifier: tfIRyOf550D4fY+52Cx1e4dBP8uXeXqftYV0dg/DWuU= Subject key identifier: F3:DD:D6:FD:04:E1:E9:20:11:15:B5:72:E4:9A:CD:5E:94:97:66:41 Authority key identifier: 1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0 Certificate issuer: /CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0 Certificate serial: 4B9B53BADF9A546E6BCDF1937BCA364EE0F6FF4D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft Manifest number: 0285 Signing time: Tue 05 Aug 2025 00:15:00 +0000 Manifest this update: Tue 05 Aug 2025 00:10:00 +0000 Manifest next update: Wed 06 Aug 2025 03:49:00 +0000 Files and hashes: 1: 1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl (hash: tXduECWpW4KLD6SjCll1AU7LQWGasTAyuhIxvrDqI64=) 2: 323830343a346566383a3a2f33322d3335203d3e20323638323935.roa (hash: BstW0UlvH2wEHgaNKCbfIv8DXJSe7M/kYqDRbvgjc5k=) 3: 34352e3233372e3233362e302f32322d3234203d3e20323638323935.roa (hash: 1C/jOWt5ZHfKspqIFOUeY8exgTDIPGSvNHULSTIuARE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 03:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:9b:53:ba:df:9a:54:6e:6b:cd:f1:93:7b:ca:36:4e:e0:f6:ff:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0 Validity Not Before: Aug 5 00:10:00 2025 GMT Not After : Aug 6 03:49:00 2025 GMT Subject: CN=F3DDD6FD04E1E9201115B572E49ACD5E94976641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0f:33:68:82:76:f4:46:31:2b:cc:89:e0:f5: e1:a1:59:ac:96:12:14:8e:8f:0b:ee:74:da:50:f3: aa:1e:c6:43:b6:72:fc:c5:60:a6:ba:f6:fe:b2:a1: ff:31:c7:e7:08:89:ed:01:31:a2:e0:d9:09:7c:55: 72:61:47:08:41:61:8d:84:7d:7d:00:80:9e:ff:66: 90:10:9b:c4:c3:b4:07:99:0b:ae:43:6b:b6:ee:8e: 9e:5a:8f:b2:a7:48:03:a5:39:17:f5:0a:6a:7a:5e: dc:5f:30:56:b9:49:e3:90:07:6e:9d:fe:80:68:45: ac:8d:01:c3:e1:e1:67:df:66:2d:43:15:61:1e:d3: 33:45:32:8d:4f:37:10:65:fe:a9:ef:a5:0b:b8:66: e1:db:f0:2a:b3:d0:a0:31:7d:1a:88:d1:da:05:29: 5c:71:93:bf:5e:03:82:0d:a6:ea:a6:9c:9a:43:d9: 89:08:56:0e:b6:24:5b:cb:10:55:3b:b6:b4:3e:ab: 16:6a:41:0f:96:42:23:f9:2d:54:ce:76:4d:36:aa: c6:61:e9:64:1c:35:ff:21:07:f9:79:c9:4c:37:07: 86:63:b7:17:45:ee:76:96:ff:58:63:73:c7:27:c6: 74:d4:9b:05:b0:13:bb:5b:50:78:04:68:e8:18:bb: 9b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DD:D6:FD:04:E1:E9:20:11:15:B5:72:E4:9A:CD:5E:94:97:66:41 X509v3 Authority Key Identifier: keyid:1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:88:89:bb:38:9f:7d:9b:cb:9d:94:f0:47:7e:79:48:55:f7: 85:e8:57:ae:9e:08:3c:dd:49:6b:07:94:8a:b1:d6:ba:74:01: 1d:75:80:09:9b:f4:13:41:96:5b:48:43:ce:d8:a2:3d:25:73: 92:32:cf:05:d7:8e:70:44:b8:27:80:2f:26:1d:9f:fc:ad:46: d5:1a:00:1f:e5:66:8b:61:ae:42:b7:d0:e9:d8:7e:df:3a:e9: e4:bf:f6:2b:88:b5:e1:5b:48:4e:68:b5:b5:21:86:73:5b:67: bc:b9:47:b9:84:4a:b9:44:d1:fc:14:ba:72:53:70:07:2b:1c: 97:3a:03:f8:a0:82:00:42:08:63:c3:01:fa:35:13:d5:d5:48: ec:60:0f:21:af:88:99:8f:5d:a7:c4:7c:15:94:3e:f7:2f:a2: d6:67:2a:56:c4:05:2c:10:db:fe:71:f5:04:ea:7f:6d:b8:f9: af:15:bd:f2:e8:b1:17:ba:c3:12:3a:9d:6b:23:4e:a6:ed:6a: ac:c4:c2:ba:6a:bf:61:1e:26:d8:ac:ab:9f:9f:37:03:e9:c5: fe:34:df:90:00:32:4d:d8:52:b2:28:77:8f:65:2d:a6:64:9c: d0:93:63:6d:37:ee:3e:d1:0c:84:29:05:3d:db:c0:87:c0:d4: 8b:9d:02:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS5tTut+aVG5rzfGTe8o2TuD2/00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMzYwOUQ5NjZERDhCMjJFNUZENTY2N0U0QkFDQUNF RkY4RDFGMDAeFw0yNTA4MDUwMDEwMDBaFw0yNTA4MDYwMzQ5MDBaMDMxMTAvBgNV BAMTKEYzRERENkZEMDRFMUU5MjAxMTE1QjU3MkU0OUFDRDVFOTQ5NzY2NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmDzNognb0RjErzIng9eGhWayW EhSOjwvudNpQ86oexkO2cvzFYKa69v6yof8xx+cIie0BMaLg2Ql8VXJhRwhBYY2E fX0AgJ7/ZpAQm8TDtAeZC65Da7bujp5aj7KnSAOlORf1Cmp6XtxfMFa5SeOQB26d /oBoRayNAcPh4WffZi1DFWEe0zNFMo1PNxBl/qnvpQu4ZuHb8Cqz0KAxfRqI0doF KVxxk79eA4INpuqmnJpD2YkIVg62JFvLEFU7trQ+qxZqQQ+WQiP5LVTOdk02qsZh 6WQcNf8hB/l5yUw3B4ZjtxdF7naW/1hjc8cnxnTUmwWwE7tbUHgEaOgYu5utAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU893W/QTh6SARFbVy5JrNXpSXZkEwHwYDVR0j BBgwFoAUG6NgnZZt2LIuX9VmfkusrO/40fAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkRHejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FI cm8vMS8xQkEzNjA5RDk2NkREOEIyMkU1RkQ1NjY3RTRCQUNBQ0VGRjhEMUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCQTM2MDlEOTY2REQ4QjIy RTVGRDU2NjdFNEJBQ0FDRUZGOEQxRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkRHejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FIcm8vMS8x QkEzNjA5RDk2NkREOEIyMkU1RkQ1NjY3RTRCQUNBQ0VGRjhEMUYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeYiJuziffZvLnZTwR355SFX3hehXrp4IPN1JaweUirHWunQBHXWACZv0E0GW W0hDztiiPSVzkjLPBdeOcES4J4AvJh2f/K1G1RoAH+Vmi2GuQrfQ6dh+3zrp5L/2 K4i14VtITmi1tSGGc1tnvLlHuYRKuUTR/BS6clNwBysclzoD+KCCAEIIY8MB+jUT 1dVI7GAPIa+ImY9dp8R8FZQ+9y+i1mcqVsQFLBDb/nH1BOp/bbj5rxW98uixF7rD EjqdayNOpu1qrMTCumq/YR4m2Kyrn583A+nF/jTfkAAyTdhSsih3j2UtpmSc0JNj bTfuPtEMhCkFPdvAh8DUi50CDQ== -----END CERTIFICATE-----Generated at Tue Aug 5 08:09:52 2025 by rpki-client