$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft File: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft (raw, json) Hash identifier: l5IExIWasoN/RKJhCnTuUwUxgh+slefdYOAAgULUrVc= Subject key identifier: 43:24:DE:AB:5A:25:6E:50:AF:3B:A8:72:98:9B:8A:F5:D0:7E:9C:C1 Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 Certificate issuer: /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Certificate serial: 7A76CDBF6707A72FB852F12AEBD101FBC8C3D109 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft Manifest number: 0295 Signing time: Sat 09 Aug 2025 15:07:13 +0000 Manifest this update: Sat 09 Aug 2025 15:02:13 +0000 Manifest next update: Sun 10 Aug 2025 17:37:13 +0000 Files and hashes: 1: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl (hash: jILL8m8IjuvQQ2EmGomtYiYPOCJXC8oBx6ADr5/7Zr4=) 2: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: Qo7jd7bqgZ8RaIGB3HsVpFHOePniB9jZXdO3Roenvho=) 3: 3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa (hash: 7KaEu9sw42ksNhOklCsT9hgtSIgophy55hML3k/smrA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 10 Aug 2025 14:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:76:cd:bf:67:07:a7:2f:b8:52:f1:2a:eb:d1:01:fb:c8:c3:d1:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Validity Not Before: Aug 9 15:02:13 2025 GMT Not After : Aug 10 17:37:13 2025 GMT Subject: CN=4324DEAB5A256E50AF3BA872989B8AF5D07E9CC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:66:7b:48:78:87:a3:a8:6e:95:cb:0e:66:40: 40:2b:13:2e:ec:c2:d2:8e:01:21:39:1e:f0:d4:1d: f1:6c:a1:bf:c4:fd:98:e1:7e:44:ec:38:d7:d6:e5: b1:85:d5:72:16:84:d1:18:18:37:15:fc:74:9c:a7: 31:37:b5:ed:c2:ae:66:a4:d1:8d:55:c1:2d:64:02: fd:8f:b6:60:df:38:9c:0b:63:70:17:85:a3:96:72: 41:72:f9:6b:1e:66:cb:8f:32:8e:26:e5:f1:00:0d: b9:e3:c4:47:e7:b6:01:58:a8:8f:f1:11:d3:12:9d: d6:30:63:e4:dd:93:77:71:d5:ab:bb:26:99:a1:bd: 25:da:b4:af:69:df:3b:e8:dc:62:00:01:45:c7:43: 84:45:4b:de:6c:a5:17:8f:a7:6b:de:43:69:e9:1e: f3:29:98:85:03:37:59:4b:e4:03:4e:08:5c:74:7d: e9:ed:9b:be:96:18:98:9a:34:7a:4b:1b:db:09:ba: cc:72:ee:86:cb:c1:c1:84:ad:7a:74:cd:31:03:4c: e0:65:d1:99:3f:3b:f3:dd:4b:eb:69:8e:10:29:2a: c3:94:64:df:26:0e:e8:b4:3e:1f:e4:13:c8:4f:6b: 91:eb:6b:7c:3f:b4:86:0d:e1:73:2a:54:15:f8:b2: e5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:24:DE:AB:5A:25:6E:50:AF:3B:A8:72:98:9B:8A:F5:D0:7E:9C:C1 X509v3 Authority Key Identifier: keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:73:95:5d:b0:c8:ad:9a:c8:83:9a:a7:46:82:93:74:29:04: ef:76:db:d6:24:26:98:00:97:b9:f8:7d:5e:4c:49:b4:4a:8b: e1:a6:39:54:9e:35:f0:a4:bd:2c:9d:41:79:e9:f5:21:b0:0a: 4c:5e:ba:d4:6b:8a:56:ff:9e:2d:d6:6b:ca:8c:38:fa:a8:ae: 4f:9d:33:d2:0b:7a:09:85:37:36:d1:97:43:7a:41:d7:17:99: ab:fc:1f:e6:34:5b:e6:68:f3:a1:8a:63:47:56:3a:49:dc:ec: 5e:b6:d8:b9:44:53:be:9d:2c:51:f0:dc:fa:2c:b3:4a:9c:ad: e9:ca:21:56:31:7e:51:e8:21:28:8b:3c:ff:41:41:a0:d5:39: 70:c0:0e:3b:3e:cb:5c:5b:34:12:13:db:81:25:85:23:d8:de: bf:0b:86:05:ac:8c:20:64:ad:f9:a1:92:87:ee:7e:3f:03:51: 13:db:54:1d:3e:51:bc:d5:c1:1b:5c:8b:38:10:63:d7:2c:d2: 2d:b1:ee:cd:de:e3:2b:5e:3d:d3:b7:b0:69:dc:60:08:d1:32: 03:9e:a3:57:56:18:e0:e5:87:5d:fc:90:03:3e:f1:2c:f5:26: 8e:52:4e:5c:5d:47:2c:aa:ab:a0:9b:f8:9e:0d:da:09:dd:03: 5d:f9:28:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUenbNv2cHpy+4UvEq69EB+8jD0QkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyMzkxRkE3QzI4QUUwRjlDOEIyQjk5RTE5MDkyQTM0 ODdBMkVDOTAeFw0yNTA4MDkxNTAyMTNaFw0yNTA4MTAxNzM3MTNaMDMxMTAvBgNV BAMTKDQzMjRERUFCNUEyNTZFNTBBRjNCQTg3Mjk4OUI4QUY1RDA3RTlDQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZZntIeIejqG6Vyw5mQEArEy7s wtKOASE5HvDUHfFsob/E/ZjhfkTsONfW5bGF1XIWhNEYGDcV/HScpzE3te3Crmak 0Y1VwS1kAv2PtmDfOJwLY3AXhaOWckFy+WseZsuPMo4m5fEADbnjxEfntgFYqI/x EdMSndYwY+Tdk3dx1au7JpmhvSXatK9p3zvo3GIAAUXHQ4RFS95spRePp2veQ2np HvMpmIUDN1lL5ANOCFx0fentm76WGJiaNHpLG9sJusxy7obLwcGErXp0zTEDTOBl 0Zk/O/PdS+tpjhApKsOUZN8mDui0Ph/kE8hPa5Hra3w/tIYN4XMqVBX4suUJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQyTeq1olblCvO6hymJuK9dB+nMEwHwYDVR0j BBgwFoAUzSOR+nworg+ciyuZ4ZCSo0h6LskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRo U1gvMS9DRDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMjM5MUZBN0MyOEFFMEY5 QzhCMkI5OUUxOTA5MkEzNDg3QTJFQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRoU1gvMS9D RDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd3OVXbDIrZrIg5qnRoKTdCkE73bb1iQmmACXufh9XkxJtEqL4aY5VJ418KS9 LJ1Been1IbAKTF661GuKVv+eLdZryow4+qiuT50z0gt6CYU3NtGXQ3pB1xeZq/wf 5jRb5mjzoYpjR1Y6SdzsXrbYuURTvp0sUfDc+iyzSpyt6cohVjF+UeghKIs8/0FB oNU5cMAOOz7LXFs0EhPbgSWFI9jevwuGBayMIGSt+aGSh+5+PwNRE9tUHT5RvNXB G1yLOBBj1yzSLbHuzd7jK14907ewadxgCNEyA56jV1YY4OWHXfyQAz7xLPUmjlJO XF1HLKqroJv4ng3aCd0DXfkoUw== -----END CERTIFICATE-----Generated at Sat Aug 9 23:18:39 2025 by rpki-client