$ rpki-client -vvf rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft File: 2601DE669734AEE0385101964D2ED4C0B8A927D4.mft (raw, json) Hash identifier: Mg+0ILC6E1pjuulpR7KtfznojqM3igUfXc0MVLoXLpA= Subject key identifier: 29:84:55:86:B0:30:C9:4C:A8:F0:6E:D7:BB:E5:87:32:97:15:74:2E Authority key identifier: 26:01:DE:66:97:34:AE:E0:38:51:01:96:4D:2E:D4:C0:B8:A9:27:D4 Certificate issuer: /CN=2601DE669734AEE0385101964D2ED4C0B8A927D4 Certificate serial: 5ADDE3913F7DF5F12C7F276E407EF7113465347C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer Subject info access: rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft Manifest number: F4 Signing time: Mon 11 Aug 2025 00:21:17 +0000 Manifest this update: Mon 11 Aug 2025 00:16:17 +0000 Manifest next update: Tue 12 Aug 2025 03:39:17 +0000 Files and hashes: 1: 2601DE669734AEE0385101964D2ED4C0B8A927D4.crl (hash: nvngbsDEZ5nLDTVyxYMKOkVGP8COFT63hfhIDHULccI=) 2: 323830343a383631343a3a2f33322d3434203d3e20323732363139.roa (hash: pQviQjOONbuzn6pqxVPP7SoctO2grbtBArJUd8XQvF4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.crl rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 12 Aug 2025 03:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:dd:e3:91:3f:7d:f5:f1:2c:7f:27:6e:40:7e:f7:11:34:65:34:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2601DE669734AEE0385101964D2ED4C0B8A927D4 Validity Not Before: Aug 11 00:16:17 2025 GMT Not After : Aug 12 03:39:17 2025 GMT Subject: CN=29845586B030C94CA8F06ED7BBE587329715742E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f9:7b:b8:00:cd:3a:75:49:12:22:5e:83:c2: 7d:73:d1:21:98:56:8c:77:c3:a8:47:43:9a:2b:61: f4:ba:81:82:e4:7a:c2:16:7a:06:68:cb:6d:33:13: fe:4c:48:92:89:ba:30:1c:38:ea:c1:f5:5b:58:54: 12:2e:26:b5:5b:9c:2b:cb:92:64:1b:5a:de:14:50: 89:c5:4d:51:14:ae:0c:3b:fa:d2:fd:c6:36:ed:57: fc:92:39:27:c1:62:2a:6b:dc:17:17:cd:cb:68:ba: 6d:1b:2a:f4:55:d8:07:7f:43:23:fc:6c:23:cb:e2: 09:60:b9:e5:21:eb:4b:12:be:d4:a2:63:30:82:d9: b3:3b:5e:a6:09:09:fd:cc:27:3b:41:32:7f:53:f2: 0a:dc:67:02:ad:f9:5b:5f:b4:69:d0:f6:cd:c7:7c: 16:ed:62:9b:93:34:e7:7a:0a:d1:3b:b9:44:d0:45: dd:5e:d7:92:36:07:f2:6f:e2:1c:8d:a4:19:c2:ce: 8e:b0:69:71:22:e6:ef:75:9d:5a:69:92:12:2b:42: 73:eb:74:07:5b:bf:fd:2b:c3:64:30:66:f5:12:d8: e3:70:56:b3:f9:1b:26:27:5e:e3:0a:76:1e:7d:c5: 0c:3f:dd:82:6d:92:66:e3:ac:f7:c3:f7:42:1c:8c: 51:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:84:55:86:B0:30:C9:4C:A8:F0:6E:D7:BB:E5:87:32:97:15:74:2E X509v3 Authority Key Identifier: keyid:26:01:DE:66:97:34:AE:E0:38:51:01:96:4D:2E:D4:C0:B8:A9:27:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:8f:b7:42:c7:0e:c6:d5:4e:bc:65:9e:1e:ad:d9:d6:e5:4f: a7:47:11:45:13:2a:d3:b0:95:cc:6f:2e:b8:16:42:fd:60:20: b4:b0:08:b8:38:83:0e:b6:45:41:76:66:ba:85:2a:b3:a6:85: b8:7c:1e:ef:92:97:b4:9e:c2:99:48:3d:fa:22:02:9b:f7:10: 55:b4:0b:0a:d2:61:18:6a:51:c9:a4:19:d9:e7:5d:5e:b8:17: a3:b9:6b:2f:81:74:02:ec:b7:ec:b1:86:d8:8b:2d:75:fb:53: 9c:d1:8a:14:72:c8:45:4d:89:ee:33:aa:9b:70:ce:31:88:f6: 9d:e5:80:12:bb:6d:3c:09:bb:9a:0e:f6:de:e0:c8:75:53:ce: 13:f6:dd:27:1b:24:58:05:99:47:18:03:40:7d:3b:2c:f9:e5: d5:97:3b:1d:08:d5:e6:08:a5:2d:e1:26:b3:9f:6a:aa:03:9f: 38:b9:9e:9c:be:c6:39:d6:6b:4e:c9:68:be:43:6b:f6:16:dc: b5:7e:a9:07:0a:a7:0c:52:75:e7:b6:72:d0:15:4d:e2:a0:a2: e0:85:e6:3f:9d:93:a7:ef:24:19:9f:db:00:c2:ee:a1:09:a2: 9e:e1:ab:34:50:e4:7f:77:89:73:94:85:fe:34:51:e1:3d:d5: 8a:fa:ca:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWt3jkT999fEsfyduQH73ETRlNHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjYwMURFNjY5NzM0QUVFMDM4NTEwMTk2NEQyRUQ0QzBC OEE5MjdENDAeFw0yNTA4MTEwMDE2MTdaFw0yNTA4MTIwMzM5MTdaMDMxMTAvBgNV BAMTKDI5ODQ1NTg2QjAzMEM5NENBOEYwNkVEN0JCRTU4NzMyOTcxNTc0MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU+Xu4AM06dUkSIl6Dwn1z0SGY Vox3w6hHQ5orYfS6gYLkesIWegZoy20zE/5MSJKJujAcOOrB9VtYVBIuJrVbnCvL kmQbWt4UUInFTVEUrgw7+tL9xjbtV/ySOSfBYipr3BcXzctoum0bKvRV2Ad/QyP8 bCPL4glgueUh60sSvtSiYzCC2bM7XqYJCf3MJztBMn9T8grcZwKt+VtftGnQ9s3H fBbtYpuTNOd6CtE7uUTQRd1e15I2B/Jv4hyNpBnCzo6waXEi5u91nVppkhIrQnPr dAdbv/0rw2QwZvUS2ONwVrP5GyYnXuMKdh59xQw/3YJtkmbjrPfD90IcjFH9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKYRVhrAwyUyo8G7Xu+WHMpcVdC4wHwYDVR0j BBgwFoAUJgHeZpc0ruA4UQGWTS7UwLipJ9QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnVaVnJaZ0tTeHJ0MllCaWtaUzNmRTdFY1BId25UYTlFd3Z3cmI3MzlU MXIvMC8yNjAxREU2Njk3MzRBRUUwMzg1MTAxOTY0RDJFRDRDMEI4QTkyN0Q0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2MDFERTY2OTczNEFFRTAz ODUxMDE5NjREMkVENEMwQjhBOTI3RDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnVaVnJaZ0tTeHJ0MllCaWtaUzNmRTdFY1BId25UYTlFd3Z3cmI3MzlUMXIvMC8y NjAxREU2Njk3MzRBRUUwMzg1MTAxOTY0RDJFRDRDMEI4QTkyN0Q0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjo+3QscOxtVOvGWeHq3Z1uVPp0cRRRMq07CVzG8uuBZC/WAgtLAIuDiDDrZF QXZmuoUqs6aFuHwe75KXtJ7CmUg9+iICm/cQVbQLCtJhGGpRyaQZ2eddXrgXo7lr L4F0Auy37LGG2IstdftTnNGKFHLIRU2J7jOqm3DOMYj2neWAErttPAm7mg723uDI dVPOE/bdJxskWAWZRxgDQH07LPnl1Zc7HQjV5gilLeEms59qqgOfOLmenL7GOdZr TslovkNr9hbctX6pBwqnDFJ157Zy0BVN4qCi4IXmP52Tp+8kGZ/bAMLuoQminuGr NFDkf3eJc5SF/jRR4T3VivrKAQ== -----END CERTIFICATE-----Generated at Mon Aug 11 08:57:12 2025 by rpki-client