$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft File: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft (raw, json) Hash identifier: q8RNIMYMtBUXIOWlB0mmXVpgDW154MjZlkqdOibS+M4= Subject key identifier: EC:F0:67:6D:06:38:A6:65:89:A0:F0:C4:C7:1C:F6:B7:62:29:82:CF Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB Certificate issuer: /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Certificate serial: 7A2AD3CE8586F39306750148793D0A15807ABA73 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft Manifest number: 0291 Signing time: Sun 10 Aug 2025 14:05:45 +0000 Manifest this update: Sun 10 Aug 2025 14:00:45 +0000 Manifest next update: Mon 11 Aug 2025 17:45:45 +0000 Files and hashes: 1: 34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (hash: MFaOGmG3uk10MnFBlQJ/Pj6U7TcWeAadSbIdDIDPMAE=) 2: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl (hash: wy8fLiLW+ofSLRGrExJsPuxg13m21sEwazoGVGWMbQ0=) 3: 323830343a353431383a3a2f33322d3438203d3e20323638363238.roa (hash: hHMhRh5DdSaR5fzUNnHJawbPKzBIyAZaoDmsUo8IWgk=) 4: 3230382e35322e3136322e302f32332d3234203d3e20323638363238.roa (hash: maW2GNrI3AoqX8WFxWiMg/YOqECnU1fsdQA4kdJdduU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 17:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:2a:d3:ce:85:86:f3:93:06:75:01:48:79:3d:0a:15:80:7a:ba:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Validity Not Before: Aug 10 14:00:45 2025 GMT Not After : Aug 11 17:45:45 2025 GMT Subject: CN=ECF0676D0638A66589A0F0C4C71CF6B7622982CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6c:23:0a:fa:45:65:79:4f:b9:ba:f3:1d:9b: f8:69:1b:c7:68:47:31:a0:cf:5b:cd:12:40:5c:4d: 49:c9:8f:ce:07:10:97:bf:b0:c2:ac:63:97:a8:1b: 89:7d:a5:45:96:dd:2f:c0:91:46:7b:54:b3:12:42: a1:65:90:46:5d:05:dc:95:c5:b9:91:e9:39:ed:20: 45:77:9a:ae:d1:a6:e2:1f:75:9b:44:ca:36:cf:64: 41:72:51:67:34:94:bc:71:64:0a:a6:58:61:c9:e5: fe:91:40:59:f1:bc:dd:2a:d2:5d:9d:1f:10:90:f4: 68:5d:d0:43:53:e3:56:1f:09:c0:4c:0d:9c:6b:6d: c9:83:32:64:38:a1:27:6e:de:77:b7:fb:bc:3b:d9: b6:32:0c:ad:91:4d:9d:e5:3f:d2:9d:ff:fa:99:1d: 8d:54:db:11:70:36:fa:25:ef:99:56:d5:70:79:10: c9:c0:36:31:29:19:de:c7:47:86:de:df:b6:2c:55: e2:7b:66:ac:d3:a9:8f:a8:ff:ef:cb:10:a8:e5:43: 3e:17:25:92:80:d4:ea:4b:67:a7:4a:d0:48:a0:52: 7c:74:8a:e1:17:15:6b:bf:7e:48:b9:da:2b:f9:b1: b6:67:38:bd:91:c8:ed:d2:68:30:96:7f:67:35:b4: 66:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F0:67:6D:06:38:A6:65:89:A0:F0:C4:C7:1C:F6:B7:62:29:82:CF X509v3 Authority Key Identifier: keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b8:0d:c9:93:ac:73:dd:83:39:d6:68:6c:a9:1f:10:82:5d: 7f:b7:23:7f:00:8e:05:dc:3a:78:85:69:b1:31:ab:75:08:7c: ea:d0:88:76:0d:03:81:2b:27:f4:21:b3:29:84:fa:08:ff:59: ed:c6:6e:94:94:22:8e:51:d7:44:7e:33:12:99:a0:2c:61:14: e8:af:c7:9b:02:fb:c6:db:e8:24:8b:9c:13:ea:0b:71:6d:35: d6:b5:a5:ec:c7:08:71:a4:fa:ca:ff:60:3f:79:11:c7:9f:cd: 93:ae:b0:6c:e2:95:f3:a2:fd:df:4f:32:9d:3a:4f:0b:3d:18: cd:2a:a2:a6:6b:ba:36:3c:3e:c5:1b:bd:7a:99:17:26:ee:92: ad:01:4f:93:4d:e8:1a:65:13:af:92:33:a2:f8:3c:78:34:33: 37:65:b1:69:bd:77:0f:61:98:a2:48:a5:0f:fb:a0:39:9b:2f: 79:de:31:25:f5:c1:22:c8:9b:8f:22:80:be:f9:be:e1:09:ed: ca:cd:42:5e:05:83:36:7a:f5:75:40:39:c7:a1:e4:2a:d1:b7: ae:e9:31:e1:cd:8c:07:ef:f8:d9:be:a9:7b:ae:8c:cb:7f:5b: fc:9a:80:3f:f0:1e:60:e7:65:13:85:41:52:fd:95:7d:4a:66: 6f:42:b8:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeirTzoWG85MGdQFIeT0KFYB6unMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzU5NEU5MzZFMUUyOEFENUFENzNBNkJGMjhBRTM4 QzAwMjhGQjAeFw0yNTA4MTAxNDAwNDVaFw0yNTA4MTExNzQ1NDVaMDMxMTAvBgNV BAMTKEVDRjA2NzZEMDYzOEE2NjU4OUEwRjBDNEM3MUNGNkI3NjIyOTgyQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSbCMK+kVleU+5uvMdm/hpG8do RzGgz1vNEkBcTUnJj84HEJe/sMKsY5eoG4l9pUWW3S/AkUZ7VLMSQqFlkEZdBdyV xbmR6TntIEV3mq7RpuIfdZtEyjbPZEFyUWc0lLxxZAqmWGHJ5f6RQFnxvN0q0l2d HxCQ9Ghd0ENT41YfCcBMDZxrbcmDMmQ4oSdu3ne3+7w72bYyDK2RTZ3lP9Kd//qZ HY1U2xFwNvol75lW1XB5EMnANjEpGd7HR4be37YsVeJ7ZqzTqY+o/+/LEKjlQz4X JZKA1OpLZ6dK0EigUnx0iuEXFWu/fki52iv5sbZnOL2RyO3SaDCWf2c1tGYLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7PBnbQY4pmWJoPDExxz2t2Ipgs8wHwYDVR0j BBgwFoAULJxZTpNuHiitWtc6a/KK44wAKPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpy aEEvMS8yQzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDOUM1OTRFOTM2RTFFMjhB RDVBRDczQTZCRjI4QUUzOEMwMDI4RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpyaEEvMS8y QzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgrgNyZOsc92DOdZobKkfEIJdf7cjfwCOBdw6eIVpsTGrdQh86tCIdg0DgSsn 9CGzKYT6CP9Z7cZulJQijlHXRH4zEpmgLGEU6K/HmwL7xtvoJIucE+oLcW011rWl 7McIcaT6yv9gP3kRx5/Nk66wbOKV86L9308ynTpPCz0YzSqipmu6Njw+xRu9epkX Ju6SrQFPk03oGmUTr5Izovg8eDQzN2Wxab13D2GYokilD/ugOZsved4xJfXBIsib jyKAvvm+4Qntys1CXgWDNnr1dUA5x6HkKtG3rukx4c2MB+/42b6pe66My39b/JqA P/AeYOdlE4VBUv2VfUpmb0K4nw== -----END CERTIFICATE-----Generated at Mon Aug 11 04:17:11 2025 by rpki-client