$ rpki-client -vvf rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft File: 8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft (raw, json) Hash identifier: Vff1LyyQjE215spXJonurDRre1ip9TvvWWpCsbI2STA= Subject key identifier: B3:A9:DA:96:6A:F5:59:67:6D:E2:F8:8C:E4:20:ED:D1:EF:B8:14:6C Authority key identifier: 8E:C7:D5:A9:01:6A:AE:FC:41:0E:D4:66:E0:0B:14:EB:DC:E6:EE:7F Certificate issuer: /CN=8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F Certificate serial: 4FF3963260AC1EC071D9D2DF0D647EA281777FCA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer Subject info access: rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft Manifest number: 0291 Signing time: Sun 10 Aug 2025 10:23:56 +0000 Manifest this update: Sun 10 Aug 2025 10:18:56 +0000 Manifest next update: Mon 11 Aug 2025 12:11:56 +0000 Files and hashes: 1: 323830343a333534303a3a2f33322d3438203d3e20323636323737.roa (hash: P1a8+zNmPoNV87lU1gPo9XyXRrpLc9cUorv71O21VUA=) 2: 3137302e37382e3130302e302f32322d3234203d3e20323636323737.roa (hash: EOg/hM1DxnfBQMJLRQ41kPRgUah10XE4r5WsOtjys1w=) 3: 8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl (hash: dK1xjtHtbEAEu6xzSXcZP2eNrFAf3jut+UQHTbaET/4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 12:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f3:96:32:60:ac:1e:c0:71:d9:d2:df:0d:64:7e:a2:81:77:7f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F Validity Not Before: Aug 10 10:18:56 2025 GMT Not After : Aug 11 12:11:56 2025 GMT Subject: CN=B3A9DA966AF559676DE2F88CE420EDD1EFB8146C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:10:6d:c7:09:1f:a8:65:0f:46:9b:5a:84:b9: a5:36:75:2c:e1:3a:56:90:69:13:49:54:c0:a6:a6: aa:0b:b8:84:66:30:2c:34:ed:78:8e:ad:3f:1b:01: e5:f2:db:2c:c0:a6:99:ee:e4:59:1c:0e:3f:3b:59: 02:5b:d4:e1:52:b2:73:ad:84:ba:0c:aa:25:f8:19: 21:2f:ed:2d:b1:83:10:c9:27:80:2c:7a:8c:e1:23: d1:e6:90:25:61:71:41:b7:cd:83:ea:ed:19:e5:ea: a9:a4:a2:1b:45:58:af:2f:6b:91:e7:30:78:3a:b5: b7:be:93:88:a7:32:2f:96:76:87:76:9a:a1:7c:da: 3d:08:81:17:bb:a1:77:cb:91:5a:ae:29:4d:7f:90: 4e:fd:7b:86:1d:74:c0:81:13:26:0e:17:02:12:0a: d5:7c:15:21:cc:6f:b8:da:81:cf:5b:e2:68:8b:43: ed:55:3e:bc:c2:64:58:7c:9d:31:57:d6:e1:8a:0f: af:61:0e:85:f1:dc:0e:fe:23:7b:52:07:80:8e:07: 7d:24:bb:63:de:48:5c:f0:ab:a6:c5:8f:8d:6c:8c: 69:68:7b:2e:30:3c:a3:01:c8:f9:01:59:53:2a:ac: 72:82:e7:8b:7e:f0:27:a2:41:d5:94:14:a3:16:39: 19:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A9:DA:96:6A:F5:59:67:6D:E2:F8:8C:E4:20:ED:D1:EF:B8:14:6C X509v3 Authority Key Identifier: keyid:8E:C7:D5:A9:01:6A:AE:FC:41:0E:D4:66:E0:0B:14:EB:DC:E6:EE:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:46:b6:d9:15:33:f7:70:62:7e:2d:d4:e9:ea:e4:b5:20:48: 97:16:15:ae:10:3f:7d:c0:1e:be:26:69:ce:10:8a:ec:f3:7f: f2:92:0e:91:cc:53:65:3c:85:13:99:74:66:70:51:09:f8:f0: 7d:fe:f7:08:94:06:42:71:0a:33:a3:fa:40:c7:02:23:b8:e9: c9:67:50:7c:d8:05:33:7b:52:4b:6b:1c:d0:98:bd:b7:0f:f8: 33:36:56:73:c7:60:83:b3:6e:fb:b5:ef:7e:4a:21:12:e7:13: f4:77:84:71:59:88:ee:4d:21:3c:1f:aa:88:ef:c9:9e:9b:ef: 88:6a:5e:e9:ab:00:3e:e2:30:f8:72:7c:2c:6f:db:48:97:cd: 4d:da:aa:82:5d:41:d0:de:26:e7:56:19:60:a2:29:62:04:1c: 47:0a:12:d3:f0:c3:34:5d:c8:e3:92:87:0a:01:5f:d8:d8:1c: 5f:29:13:51:22:85:3d:20:f1:59:11:bb:e9:11:2e:1f:a6:e4: 79:6e:42:87:ba:ca:c4:69:8b:bb:4d:b0:bf:4d:45:32:04:c8: 75:95:e6:a3:4f:29:dc:7e:8b:9f:ec:12:2a:5f:e2:5f:7f:fb: f7:1c:03:c5:a9:93:c0:84:d0:a2:29:76:03:60:5f:c7:18:94: c3:c0:18:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUT/OWMmCsHsBx2dLfDWR+ooF3f8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVDN0Q1QTkwMTZBQUVGQzQxMEVENDY2RTAwQjE0RUJE Q0U2RUU3RjAeFw0yNTA4MTAxMDE4NTZaFw0yNTA4MTExMjExNTZaMDMxMTAvBgNV BAMTKEIzQTlEQTk2NkFGNTU5Njc2REUyRjg4Q0U0MjBFREQxRUZCODE0NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlEG3HCR+oZQ9Gm1qEuaU2dSzh OlaQaRNJVMCmpqoLuIRmMCw07XiOrT8bAeXy2yzAppnu5FkcDj87WQJb1OFSsnOt hLoMqiX4GSEv7S2xgxDJJ4AseozhI9HmkCVhcUG3zYPq7Rnl6qmkohtFWK8va5Hn MHg6tbe+k4inMi+Wdod2mqF82j0IgRe7oXfLkVquKU1/kE79e4YddMCBEyYOFwIS CtV8FSHMb7jagc9b4miLQ+1VPrzCZFh8nTFX1uGKD69hDoXx3A7+I3tSB4COB30k u2PeSFzwq6bFj41sjGloey4wPKMByPkBWVMqrHKC54t+8CeiQdWUFKMWORn9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUs6nalmr1WWdt4viM5CDt0e+4FGwwHwYDVR0j BBgwFoAUjsfVqQFqrvxBDtRm4AsU69zm7n8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlBwZUg0aFV3SFNtTlY5aHc3Y3g0Um1GOG90Sk5OOEhQZndrbUZuOTR1 aXMvMS84RUM3RDVBOTAxNkFBRUZDNDEwRUQ0NjZFMDBCMTRFQkRDRTZFRTdGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQzdENUE5MDE2QUFFRkM0 MTBFRDQ2NkUwMEIxNEVCRENFNkVFN0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlBwZUg0aFV3SFNtTlY5aHc3Y3g0Um1GOG90Sk5OOEhQZndrbUZuOTR1aXMvMS84 RUM3RDVBOTAxNkFBRUZDNDEwRUQ0NjZFMDBCMTRFQkRDRTZFRTdGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcEa22RUz93Bifi3U6erktSBIlxYVrhA/fcAeviZpzhCK7PN/8pIOkcxTZTyF E5l0ZnBRCfjwff73CJQGQnEKM6P6QMcCI7jpyWdQfNgFM3tSS2sc0Ji9tw/4MzZW c8dgg7Nu+7XvfkohEucT9HeEcVmI7k0hPB+qiO/JnpvviGpe6asAPuIw+HJ8LG/b SJfNTdqqgl1B0N4m51YZYKIpYgQcRwoS0/DDNF3I45KHCgFf2NgcXykTUSKFPSDx WRG76REuH6bkeW5Ch7rKxGmLu02wv01FMgTIdZXmo08p3H6Ln+wSKl/iX3/79xwD xamTwITQoil2A2BfxxiUw8AYfw== -----END CERTIFICATE-----Generated at Sun Aug 10 21:10:00 2025 by rpki-client