$ rpki-client -vvf rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.mft File: 94BE3C088C5997DF6AA8B56878A0239FF601A352.mft (raw, json) Hash identifier: q2RfrBhE3wTe8OHRG7qpHHOvJWV5mvT0er6T/H6uZM8= Subject key identifier: 49:7A:F6:A9:AD:FE:29:10:85:90:4B:3C:D0:A1:6D:7D:FD:E6:10:DC Authority key identifier: 94:BE:3C:08:8C:59:97:DF:6A:A8:B5:68:78:A0:23:9F:F6:01:A3:52 Certificate issuer: /CN=94BE3C088C5997DF6AA8B56878A0239FF601A352 Certificate serial: 4B163056BAE5DDDD5F53282391A57917D4C733C7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.cer Subject info access: rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.mft Manifest number: 028F Signing time: Mon 04 Aug 2025 23:40:16 +0000 Manifest this update: Mon 04 Aug 2025 23:35:16 +0000 Manifest next update: Wed 06 Aug 2025 02:11:16 +0000 Files and hashes: 1: 323830343a353834633a383030303a3a2f33332d3333203d3e20323638313230.roa (hash: Q/HWf1hjNMbaanV1MTTWaTCyAk06QhIqzpCCQ0L4bf8=) 2: 323830343a353834633a3a2f33332d3333203d3e20323638313230.roa (hash: pQ0CYIYKSlW+02ASBQlgpR0BM2UXs/u03JfSAAWre3E=) 3: 34352e3136392e35362e302f32322d3234203d3e20323638313230.roa (hash: c0a70ZW/HXztkzAdglauONsyURi6bUPGDcHSgrGQNBo=) 4: 94BE3C088C5997DF6AA8B56878A0239FF601A352.crl (hash: do68Bgp2d689286cDpKQG55x0ObCJHLsvDU2wEKMth0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.crl rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 02:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:16:30:56:ba:e5:dd:dd:5f:53:28:23:91:a5:79:17:d4:c7:33:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94BE3C088C5997DF6AA8B56878A0239FF601A352 Validity Not Before: Aug 4 23:35:16 2025 GMT Not After : Aug 6 02:11:16 2025 GMT Subject: CN=497AF6A9ADFE291085904B3CD0A16D7DFDE610DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6f:85:70:a3:ea:e6:15:9c:7c:ab:c3:fb:59: f5:fc:d4:f4:aa:bb:ef:d2:e6:18:80:5a:31:1d:bc: ee:6d:02:b8:fc:be:c0:d9:61:21:66:20:d0:68:c9: 7f:ca:2c:00:af:42:6c:e7:df:e2:f0:a3:27:45:e3: fd:dd:43:51:a9:e1:d6:28:1f:fa:d2:76:d8:f6:90: dd:36:eb:c0:54:52:a3:d6:04:e6:43:15:3e:89:61: bf:5f:18:86:60:4d:94:e8:ae:e2:f2:89:05:c1:b1: bd:8d:3e:10:fe:62:f3:fa:8d:6d:a5:4e:b8:58:57: dc:c8:d7:ee:ca:58:82:54:4c:2b:c9:98:99:44:15: 2d:83:39:3a:8f:79:78:55:22:c5:fd:51:22:53:5b: 47:72:f3:74:45:3e:1b:0d:34:37:bd:8d:f1:6d:ce: 2b:ce:1f:7e:52:9a:a5:bb:8e:7a:e9:e3:b6:44:b4: f6:35:d8:92:c4:13:7c:e1:99:34:a0:eb:c1:41:ad: 85:30:f2:16:56:82:2b:f5:52:a3:2f:9c:5b:fa:e0: 3f:9b:04:80:e5:96:80:b0:c6:a2:c0:9f:af:1d:6f: 20:4b:ac:7d:5a:15:8f:88:f6:0d:28:5d:18:16:2d: 22:bf:cd:2b:f5:00:33:74:ef:7d:94:97:58:69:7a: e0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7A:F6:A9:AD:FE:29:10:85:90:4B:3C:D0:A1:6D:7D:FD:E6:10:DC X509v3 Authority Key Identifier: keyid:94:BE:3C:08:8C:59:97:DF:6A:A8:B5:68:78:A0:23:9F:F6:01:A3:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:22:43:8f:61:33:5d:3e:62:2b:9c:d2:a3:1c:05:e8:43:33: 45:69:45:09:d4:9a:2d:8c:f6:f9:10:5b:af:c3:3f:92:59:0b: 77:f4:5c:d0:71:9d:6a:f2:bd:a8:ee:04:41:00:91:e6:1a:31: f2:43:8a:5a:86:ba:0e:a9:0d:d8:3e:24:b7:10:6e:aa:a5:9c: fb:ae:3b:b5:14:22:0b:cc:0b:2b:b5:f1:5a:84:68:ad:56:e5: fa:87:5e:0f:30:12:eb:78:9a:89:47:d2:80:c6:c1:b7:f0:be: cf:0b:49:ab:87:91:1f:23:ed:9c:8b:9f:e1:f9:51:d0:3c:1c: eb:1d:e6:f9:af:c9:39:8c:4b:d8:9d:de:f4:a7:b6:73:e2:be: cf:c5:2a:c4:2c:88:dd:04:56:88:b8:32:d1:48:69:13:37:3e: 1c:d6:2d:f7:82:38:e0:41:08:90:7e:b3:64:91:83:85:f3:8a: 10:fd:97:3d:a5:78:83:40:1e:fe:05:55:a4:7f:42:7a:6b:00: cb:66:ac:54:36:a8:e0:78:2e:d5:d7:2a:5a:09:3b:df:aa:70: d5:3b:97:07:a2:93:15:12:0f:f3:cd:83:ec:ab:ba:f2:5b:4e: 20:6f:02:ef:62:77:38:6c:11:15:cc:4e:bd:38:bb:bb:7c:dd: e5:4c:cc:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSxYwVrrl3d1fUygjkaV5F9THM8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRCRTNDMDg4QzU5OTdERjZBQThCNTY4NzhBMDIzOUZG NjAxQTM1MjAeFw0yNTA4MDQyMzM1MTZaFw0yNTA4MDYwMjExMTZaMDMxMTAvBgNV BAMTKDQ5N0FGNkE5QURGRTI5MTA4NTkwNEIzQ0QwQTE2RDdERkRFNjEwREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfb4Vwo+rmFZx8q8P7WfX81PSq u+/S5hiAWjEdvO5tArj8vsDZYSFmINBoyX/KLACvQmzn3+LwoydF4/3dQ1Gp4dYo H/rSdtj2kN0268BUUqPWBOZDFT6JYb9fGIZgTZToruLyiQXBsb2NPhD+YvP6jW2l TrhYV9zI1+7KWIJUTCvJmJlEFS2DOTqPeXhVIsX9USJTW0dy83RFPhsNNDe9jfFt zivOH35SmqW7jnrp47ZEtPY12JLEE3zhmTSg68FBrYUw8hZWgiv1UqMvnFv64D+b BIDlloCwxqLAn68dbyBLrH1aFY+I9g0oXRgWLSK/zSv1ADN0732Ul1hpeuDLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSXr2qa3+KRCFkEs80KFtff3mENwwHwYDVR0j BBgwFoAUlL48CIxZl99qqLVoeKAjn/YBo1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnZrZGQ1MmJEZGRyamJGbXE4Q1h3cE1ONEpkWHJ0N1hTMlRqUGV0R1VU SFovMS85NEJFM0MwODhDNTk5N0RGNkFBOEI1Njg3OEEwMjM5RkY2MDFBMzUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0QkUzQzA4OEM1OTk3REY2 QUE4QjU2ODc4QTAyMzlGRjYwMUEzNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnZrZGQ1MmJEZGRyamJGbXE4Q1h3cE1ONEpkWHJ0N1hTMlRqUGV0R1VUSFovMS85 NEJFM0MwODhDNTk5N0RGNkFBOEI1Njg3OEEwMjM5RkY2MDFBMzUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFiJDj2EzXT5iK5zSoxwF6EMzRWlFCdSaLYz2+RBbr8M/klkLd/Rc0HGdavK9 qO4EQQCR5hox8kOKWoa6DqkN2D4ktxBuqqWc+647tRQiC8wLK7XxWoRorVbl+ode DzAS63iaiUfSgMbBt/C+zwtJq4eRHyPtnIuf4flR0Dwc6x3m+a/JOYxL2J3e9Ke2 c+K+z8UqxCyI3QRWiLgy0UhpEzc+HNYt94I44EEIkH6zZJGDhfOKEP2XPaV4g0Ae /gVVpH9CemsAy2asVDao4Hgu1dcqWgk736pw1TuXB6KTFRIP882D7Ku68ltOIG8C 72J3OGwRFcxOvTi7u3zd5UzM/Q== -----END CERTIFICATE-----Generated at Tue Aug 5 16:49:46 2025 by rpki-client