$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft File: CDB34CF4AFC01721153990AE1A10D922F7507546.mft (raw, json) Hash identifier: D88cpNI2g6l6J1IMCaGYNzTeUaNeUTanUEVUIUM60zk= Subject key identifier: 88:09:63:53:A6:F8:F2:55:77:BF:BC:A9:46:78:7F:DC:D2:39:7D:B3 Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 Certificate issuer: /CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Certificate serial: 0453CF6594E479FAF909F07B28CC68F157B3A2A9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject info access: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft Manifest number: 028F Signing time: Tue 05 Aug 2025 14:39:08 +0000 Manifest this update: Tue 05 Aug 2025 14:34:08 +0000 Manifest next update: Wed 06 Aug 2025 16:06:08 +0000 Files and hashes: 1: 3136382e3232382e382e302f32322d3332203d3e20323634393030.roa (hash: y3lZCCq0IOFmfmrjbdteQ0GspT2lhf61PyVMBbr1S80=) 2: 323830343a326639343a3a2f33322d3438203d3e20323634393030.roa (hash: vhvxSeJd+tzRkEzkUqJfnoWG2u32D84RmUUxjVexbJA=) 3: CDB34CF4AFC01721153990AE1A10D922F7507546.crl (hash: ROK9DA8eP9hAes18V4FfYsfFDIGjR6FSi2IqV75KZpI=) 4: 3137302e38302e3233362e302f32322d3332203d3e20323634393030.roa (hash: fCiKWIGD8EL/QIyZTksmVx9NSqYYweXi5WC6tEAvyuA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:53:cf:65:94:e4:79:fa:f9:09:f0:7b:28:cc:68:f1:57:b3:a2:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Validity Not Before: Aug 5 14:34:08 2025 GMT Not After : Aug 6 16:06:08 2025 GMT Subject: CN=88096353A6F8F25577BFBCA946787FDCD2397DB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f1:cc:4c:5f:d5:78:4f:83:f2:e7:73:3a:f6: 22:9c:72:6f:15:ae:c6:74:f1:e0:21:18:dd:4e:8c: ee:2a:6e:8f:d4:76:95:dc:60:b1:bc:10:a1:e2:9f: 82:2d:08:26:51:34:2a:da:03:11:95:a0:74:32:fb: d6:d0:2e:99:7f:1b:32:58:e2:c4:fd:0a:b2:40:98: d4:f2:ce:41:5f:70:c4:af:2c:2b:d1:09:0a:39:bf: 0f:dc:95:31:68:26:51:bd:8b:e5:bc:ba:7a:67:02: 05:80:5e:da:58:3c:12:c8:b7:6c:56:fc:bb:f5:8b: 1b:1b:b8:b5:5d:77:79:ec:35:c1:72:23:7c:4b:34: 67:7c:50:99:93:88:61:23:7d:f9:e7:c6:26:f2:9d: 99:4c:89:37:a8:3a:fe:8a:d3:52:4a:89:30:00:6e: 60:d6:66:60:2d:87:99:f0:15:65:94:c6:05:83:09: fb:29:f6:68:b9:fa:9d:49:8f:7c:0d:8a:ed:8d:f9: 0f:58:d6:de:03:04:2b:10:08:cb:3b:55:6a:ee:6b: 4c:f2:83:c5:ec:2c:5e:71:3a:58:51:53:d1:9c:c7: c5:c8:10:4d:fc:51:b8:c6:5d:5f:1b:22:bd:21:06: 41:6e:b4:ca:7c:59:9f:76:04:3a:4b:6c:6b:22:37: 79:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:09:63:53:A6:F8:F2:55:77:BF:BC:A9:46:78:7F:DC:D2:39:7D:B3 X509v3 Authority Key Identifier: keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:43:db:5f:e0:e9:b9:81:2f:38:8e:1f:c9:23:d3:02:9c:69: f7:42:47:1f:b4:46:3b:87:e6:aa:2c:85:db:a2:ac:f9:36:ae: 5e:50:56:88:66:ed:09:55:d1:93:d2:78:4f:1f:35:30:20:b0: 77:b4:b6:9f:86:75:b9:0f:60:7a:22:94:b5:e3:64:10:11:51: c1:02:fd:c6:ec:62:f5:4a:70:7d:a0:0d:ea:d9:43:d4:00:c0: ca:27:80:8a:29:eb:27:6d:29:b4:05:6b:77:96:6f:d9:d8:26: d4:c6:a8:60:82:5e:cc:6d:57:34:a5:2b:3a:e7:61:32:6a:56: 09:8b:33:bb:07:26:11:aa:c5:f4:36:ed:2f:28:c3:af:2f:dd: 66:a3:48:3f:6e:82:15:b8:90:84:48:81:7f:f6:50:b1:b7:95: 35:cd:1c:8e:9e:97:7d:95:67:30:2b:f7:26:d6:bf:dd:cf:9e: 0c:d4:a5:09:8a:04:b2:d8:a9:1a:42:00:29:f9:e1:17:e0:72: d6:01:c1:03:11:10:08:31:0a:9a:77:ef:73:6b:73:1d:0f:a2: b5:89:97:4e:5e:10:ac:8c:da:96:97:50:6a:fd:6a:40:17:49: bc:b8:40:38:7c:a7:d4:a1:9a:94:45:1b:cc:08:e2:d6:b9:84: 22:e9:18:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBFPPZZTkefr5CfB7KMxo8VezoqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCMzRDRjRBRkMwMTcyMTE1Mzk5MEFFMUExMEQ5MjJG NzUwNzU0NjAeFw0yNTA4MDUxNDM0MDhaFw0yNTA4MDYxNjA2MDhaMDMxMTAvBgNV BAMTKDg4MDk2MzUzQTZGOEYyNTU3N0JGQkNBOTQ2Nzg3RkRDRDIzOTdEQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa8cxMX9V4T4Py53M69iKccm8V rsZ08eAhGN1OjO4qbo/UdpXcYLG8EKHin4ItCCZRNCraAxGVoHQy+9bQLpl/GzJY 4sT9CrJAmNTyzkFfcMSvLCvRCQo5vw/clTFoJlG9i+W8unpnAgWAXtpYPBLIt2xW /Lv1ixsbuLVdd3nsNcFyI3xLNGd8UJmTiGEjffnnxibynZlMiTeoOv6K01JKiTAA bmDWZmAth5nwFWWUxgWDCfsp9mi5+p1Jj3wNiu2N+Q9Y1t4DBCsQCMs7VWrua0zy g8XsLF5xOlhRU9Gcx8XIEE38UbjGXV8bIr0hBkFutMp8WZ92BDpLbGsiN3mDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiAljU6b48lV3v7ypRnh/3NI5fbMwHwYDVR0j BBgwFoAUzbNM9K/AFyEVOZCuGhDZIvdQdUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhU RnEvMC9DREIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQjM0Q0Y0QUZDMDE3MjEx NTM5OTBBRTFBMTBEOTIyRjc1MDc1NDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhURnEvMC9D REIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqUPbX+DpuYEvOI4fySPTApxp90JHH7RGO4fmqiyF26Ks+TauXlBWiGbtCVXR k9J4Tx81MCCwd7S2n4Z1uQ9geiKUteNkEBFRwQL9xuxi9UpwfaAN6tlD1ADAyieA iinrJ20ptAVrd5Zv2dgm1MaoYIJezG1XNKUrOudhMmpWCYszuwcmEarF9DbtLyjD ry/dZqNIP26CFbiQhEiBf/ZQsbeVNc0cjp6XfZVnMCv3Jta/3c+eDNSlCYoEstip GkIAKfnhF+By1gHBAxEQCDEKmnfvc2tzHQ+itYmXTl4QrIzalpdQav1qQBdJvLhA OHyn1KGalEUbzAji1rmEIukYZg== -----END CERTIFICATE-----Generated at Wed Aug 6 00:48:53 2025 by rpki-client