$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft File: 0688357ED433C0A60770FB474BDB2C72796B78BD.mft (raw, json) Hash identifier: kK6HIc76Q9siKiSWUhbSOrcHezcDXTPt00AR67eRTy4= Subject key identifier: 8A:E9:D4:0E:F2:74:DF:31:96:9F:99:4D:17:C5:76:DF:5F:52:80:BD Authority key identifier: 06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD Certificate issuer: /CN=0688357ED433C0A60770FB474BDB2C72796B78BD Certificate serial: 413F1C038539CE93B44D465EB5CE23DAAA2D951B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject info access: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft Manifest number: 9E Signing time: Sat 09 Aug 2025 20:24:10 +0000 Manifest this update: Sat 09 Aug 2025 20:19:10 +0000 Manifest next update: Sun 10 Aug 2025 23:45:10 +0000 Files and hashes: 1: 323830343a316165303a3a2f33322d3634203d3e203631363936.roa (hash: MNi0hCQVw5LiwCn26uDAV8DWpcneKIoS1bbRQFE26gw=) 2: 3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa (hash: IaTZ4i3zNgWw2pTgrax+ua0Htv3rIzLefPo79rSHOwM=) 3: 0688357ED433C0A60770FB474BDB2C72796B78BD.crl (hash: I752s/iZLnFRxSu4Npvdx0k4tGJz/rgxis9cqIVQg/U=) 4: 3133382e33362e3233322e302f32322d3332203d3e203631363936.roa (hash: 0PAGB5C8H6IcqwDv00MSTHzGTYgYIUYZIqOHywJKqvU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 10 Aug 2025 14:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:3f:1c:03:85:39:ce:93:b4:4d:46:5e:b5:ce:23:da:aa:2d:95:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0688357ED433C0A60770FB474BDB2C72796B78BD Validity Not Before: Aug 9 20:19:10 2025 GMT Not After : Aug 10 23:45:10 2025 GMT Subject: CN=8AE9D40EF274DF31969F994D17C576DF5F5280BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f5:39:ae:41:36:ee:3f:f1:ad:b3:51:1e:6c: e0:1f:c3:fa:ff:1b:c3:b3:54:6a:cc:89:7f:5d:e7: 0c:5f:1c:67:10:50:dc:8f:6f:6a:d0:a3:a1:1b:84: 88:9c:ad:02:b6:c4:8b:60:e8:d2:d6:05:f7:6a:d9: b6:35:31:48:34:4d:98:7b:69:7e:d2:98:d6:be:69: c0:f3:bd:89:5e:9a:ef:f7:8a:a2:20:80:d4:77:0c: b8:80:92:3f:7a:45:7c:a6:98:53:dc:53:f6:fe:58: 0d:ce:25:30:8d:7b:18:b3:29:e0:fc:93:5b:1b:f1: c1:24:1a:fd:e5:d0:05:03:f1:76:66:bd:8a:e7:90: d7:d1:de:5f:77:28:54:b0:86:5f:e8:b4:40:1d:5c: 87:b0:ec:48:20:dd:24:81:05:2e:a5:71:cb:d9:19: 9b:0a:cf:41:9f:d1:12:f7:83:0e:ac:e4:9c:08:a9: 21:cb:4f:5e:88:dd:ce:ea:f4:6e:8b:8e:0c:04:03: 24:c2:8c:5b:cf:e8:78:c9:7d:b8:04:2b:1d:11:63: cd:17:1f:aa:ca:48:04:e5:58:9b:91:09:c6:10:f9: b7:4f:7d:f2:30:3d:84:67:09:d4:9b:e0:2c:2d:04: ce:9f:90:fe:cc:15:d3:e4:c0:7a:c8:87:9e:47:07: e1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E9:D4:0E:F2:74:DF:31:96:9F:99:4D:17:C5:76:DF:5F:52:80:BD X509v3 Authority Key Identifier: keyid:06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ff:3f:85:4c:ac:fa:f6:38:48:42:f5:f7:52:3c:c7:60:da: a7:c4:b6:bf:f5:8d:0e:07:4d:d3:cf:5d:c1:ca:d5:49:6c:3c: 46:5f:d7:f0:17:ff:44:88:0e:1a:76:fb:74:1c:02:35:ec:da: 79:a5:42:2c:c8:4e:39:53:f8:48:11:79:ae:f0:2a:0d:5e:db: 89:07:4f:63:a9:91:f7:4d:e0:f4:69:c7:5d:3b:55:37:38:54: cb:db:95:1f:c9:71:c1:7d:f0:83:58:8f:18:2c:d4:d0:9e:5b: 86:cb:62:71:aa:95:1d:2e:21:64:9c:3e:83:13:f8:6e:4f:2b: 08:29:a1:7d:32:db:b7:1c:4f:f9:49:4b:5f:7a:56:55:c4:a0: 1f:8c:91:db:7b:21:af:8d:dd:cc:d2:17:79:62:4f:8c:ab:0e: 2c:82:42:74:33:8f:e2:78:6f:7c:9b:13:e6:f9:f7:59:2d:08: 63:1d:43:59:bd:a7:21:9a:b8:a1:5e:9a:a4:ce:4e:e7:b0:ed: 45:8d:b8:69:a5:3f:c9:9d:50:3b:e0:18:19:6d:d2:f9:ed:c9: 6a:5b:94:e1:e9:ba:e7:98:2f:28:c9:83:40:1d:96:2c:2e:c3: 7c:13:49:ea:09:c3:59:9b:5f:91:de:1e:9c:1a:2c:a5:36:24: 4d:18:09:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQT8cA4U5zpO0TUZetc4j2qotlRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4ODM1N0VENDMzQzBBNjA3NzBGQjQ3NEJEQjJDNzI3 OTZCNzhCRDAeFw0yNTA4MDkyMDE5MTBaFw0yNTA4MTAyMzQ1MTBaMDMxMTAvBgNV BAMTKDhBRTlENDBFRjI3NERGMzE5NjlGOTk0RDE3QzU3NkRGNUY1MjgwQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP9TmuQTbuP/Gts1EebOAfw/r/ G8OzVGrMiX9d5wxfHGcQUNyPb2rQo6EbhIicrQK2xItg6NLWBfdq2bY1MUg0TZh7 aX7SmNa+acDzvYlemu/3iqIggNR3DLiAkj96RXymmFPcU/b+WA3OJTCNexizKeD8 k1sb8cEkGv3l0AUD8XZmvYrnkNfR3l93KFSwhl/otEAdXIew7Egg3SSBBS6lccvZ GZsKz0Gf0RL3gw6s5JwIqSHLT16I3c7q9G6LjgwEAyTCjFvP6HjJfbgEKx0RY80X H6rKSATlWJuRCcYQ+bdPffIwPYRnCdSb4CwtBM6fkP7MFdPkwHrIh55HB+HBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiunUDvJ03zGWn5lNF8V2319SgL0wHwYDVR0j BBgwFoAUBog1ftQzwKYHcPtHS9sscnlreL0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNX c3gvMC8wNjg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODgzNTdFRDQzM0MwQTYw NzcwRkI0NzRCREIyQzcyNzk2Qjc4QkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNXc3gvMC8w Njg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS/8/hUys+vY4SEL191I8x2Dap8S2v/WNDgdN089dwcrVSWw8Rl/X8Bf/RIgO Gnb7dBwCNezaeaVCLMhOOVP4SBF5rvAqDV7biQdPY6mR903g9GnHXTtVNzhUy9uV H8lxwX3wg1iPGCzU0J5bhsticaqVHS4hZJw+gxP4bk8rCCmhfTLbtxxP+UlLX3pW VcSgH4yR23shr43dzNIXeWJPjKsOLIJCdDOP4nhvfJsT5vn3WS0IYx1DWb2nIZq4 oV6apM5O57DtRY24aaU/yZ1QO+AYGW3S+e3JaluU4em655gvKMmDQB2WLC7DfBNJ 6gnDWZtfkd4enBospTYkTRgJDA== -----END CERTIFICATE-----Generated at Sun Aug 10 05:42:13 2025 by rpki-client