$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft File: C28F148D3E037C892C74D290F0D92B67DAE047D8.mft (raw, json) Hash identifier: 6oCEYFfggxN71DtJ46ZQiQcuuPTMRvRN0Z0Hkaot99A= Subject key identifier: CC:FC:52:FD:F4:72:35:1A:08:A1:40:DD:7C:39:82:EC:43:B3:E4:CE Authority key identifier: C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8 Certificate issuer: /CN=C28F148D3E037C892C74D290F0D92B67DAE047D8 Certificate serial: 476BBA6E6ADD668886F6CA6373C3DD6EA04B6DD9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft Manifest number: 02B5 Signing time: Wed 06 Aug 2025 05:37:46 +0000 Manifest this update: Wed 06 Aug 2025 05:32:46 +0000 Manifest next update: Thu 07 Aug 2025 07:53:46 +0000 Files and hashes: 1: 34352e3137382e32322e302f32332d3233203d3e20323639303135.roa (hash: rteSfk0a9HxXOSQqFpJfgo+cx5AjGW8WtimmKG47IlU=) 2: 323830343a356532383a3a2f33322d3332203d3e20323639303135.roa (hash: 0cvHNcgdOrsGhLiSeFftM1H24YlUBTHp9gRnAuF61bI=) 3: 34352e3137382e32302e302f32342d3234203d3e20323639303135.roa (hash: NNCeVF8ae34VqoHRAYhFUXBW9ZCqL2CCW88tJsaQQ9c=) 4: 34352e3137382e32322e302f32342d3234203d3e20323639303135.roa (hash: /DsTevO0WMxjHTNJqS8khDVNrOUlrO3XsXL2znmVHuI=) 5: 34352e3137382e32332e302f32342d3234203d3e20323639303135.roa (hash: Oa7B+oOOkq0p2n9equBSwbsDob1k/t+56D4fFqxf+aM=) 6: 34352e3137382e32302e302f32322d3232203d3e20323639303135.roa (hash: j4ekDAxcPzMxVY71jo3C1lu031tvoBtUmef4Ipzlevk=) 7: 34352e3137382e32312e302f32342d3234203d3e20323639303135.roa (hash: /d2BbJlSHS9sGsfQb7QieDyfoZ5LvCrnCYniJK5uLdY=) 8: C28F148D3E037C892C74D290F0D92B67DAE047D8.crl (hash: j6eChJCLrgedcKrh623OelPNOR7gx7U+rFHfS4YVz8w=) 9: 34352e3137382e32302e302f32332d3233203d3e20323639303135.roa (hash: xQdx9Hw5Ld9CfOcxJo+1JLhzYex5n/uuwn1h4ZHPX7s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 07 Aug 2025 07:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:6b:ba:6e:6a:dd:66:88:86:f6:ca:63:73:c3:dd:6e:a0:4b:6d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C28F148D3E037C892C74D290F0D92B67DAE047D8 Validity Not Before: Aug 6 05:32:46 2025 GMT Not After : Aug 7 07:53:46 2025 GMT Subject: CN=CCFC52FDF472351A08A140DD7C3982EC43B3E4CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e2:1d:78:9c:d2:dd:3f:85:e6:71:5d:61:56: ca:91:e2:7b:0e:d7:1e:c4:19:59:88:27:14:86:16: 95:26:b8:9a:12:a2:3f:21:71:03:c2:a0:6b:19:6e: 48:77:b9:51:9f:21:cf:d0:dd:52:91:db:1a:27:9f: e1:86:1e:e5:be:08:38:e6:64:4c:a1:c7:0a:b5:ef: b3:f5:2b:88:09:12:b2:30:38:69:08:ee:fc:9e:ac: 00:40:92:c4:61:02:8c:7e:68:8c:c7:e2:bc:11:e0: 0a:05:68:6d:a6:54:64:b3:a5:79:1e:ee:bd:53:1e: 8c:4e:0f:5c:a1:ce:42:ab:c4:c0:31:84:41:2d:45: 24:42:ff:9a:e4:0a:02:0a:3b:09:19:f5:c1:4f:70: 09:91:f9:e5:64:ce:57:fc:d8:55:f9:2b:cf:2c:21: 80:c0:d8:4a:4c:c3:a1:20:28:b9:a5:56:e4:e4:dc: a8:bc:22:7b:c1:2e:99:18:89:b7:6b:d3:83:2d:25: 21:f0:42:78:e1:59:b8:1f:ca:73:de:b6:7c:85:e4: 27:3a:15:25:05:72:97:64:64:7a:78:d2:ec:90:01: 82:84:ca:ce:34:91:0b:7c:6f:a7:18:49:ce:87:ed: 6f:57:7a:ab:ed:59:98:2e:a3:f2:19:b9:72:e6:bf: 88:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FC:52:FD:F4:72:35:1A:08:A1:40:DD:7C:39:82:EC:43:B3:E4:CE X509v3 Authority Key Identifier: keyid:C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:80:ba:b9:fe:4d:11:dc:fd:da:8c:f1:bb:9d:72:d2:4c:b3: 2c:d7:47:32:09:7d:4d:e6:a3:98:78:44:e6:ef:60:2a:6a:d5: 1c:df:3d:11:be:77:89:fa:e8:62:c1:16:ae:43:e1:98:5a:8a: a8:c3:55:36:07:fa:1c:62:36:bb:c4:b3:79:1a:f2:53:c8:f8: 82:5c:5c:0c:f9:0c:ba:02:79:22:3f:91:28:64:a6:df:fb:43: 95:18:5b:1d:72:9f:e2:8a:ff:0f:ef:0c:cf:59:34:d5:e7:75: fc:64:59:8b:b0:1a:9c:11:a9:43:f2:15:8d:ca:db:cf:9c:c8: 45:1c:ea:ff:17:92:5f:62:68:22:74:f4:83:35:90:29:9d:90: 0a:c6:e2:21:43:f3:92:19:32:cc:38:f0:12:e6:eb:71:53:f4: 09:1b:88:a4:0d:6d:75:12:5c:8d:b3:c6:55:07:34:b1:08:16: 45:17:7b:8e:87:84:7c:c3:8c:95:4e:8b:7d:b5:b5:33:65:48: 99:1f:7a:6c:b0:37:58:8b:02:3e:6d:dc:a7:06:0f:4e:9e:ba: 08:bf:1e:7f:b4:53:36:a6:ea:94:78:e7:fa:dd:83:b5:7b:49: 16:c6:9f:93:29:0b:23:36:dc:43:69:2d:2c:39:c7:bc:83:50: 7a:00:f8:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR2u6bmrdZoiG9spjc8PdbqBLbdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI4RjE0OEQzRTAzN0M4OTJDNzREMjkwRjBEOTJCNjdE QUUwNDdEODAeFw0yNTA4MDYwNTMyNDZaFw0yNTA4MDcwNzUzNDZaMDMxMTAvBgNV BAMTKENDRkM1MkZERjQ3MjM1MUEwOEExNDBERDdDMzk4MkVDNDNCM0U0Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ4h14nNLdP4XmcV1hVsqR4nsO 1x7EGVmIJxSGFpUmuJoSoj8hcQPCoGsZbkh3uVGfIc/Q3VKR2xonn+GGHuW+CDjm ZEyhxwq177P1K4gJErIwOGkI7vyerABAksRhAox+aIzH4rwR4AoFaG2mVGSzpXke 7r1THoxOD1yhzkKrxMAxhEEtRSRC/5rkCgIKOwkZ9cFPcAmR+eVkzlf82FX5K88s IYDA2EpMw6EgKLmlVuTk3Ki8InvBLpkYibdr04MtJSHwQnjhWbgfynPetnyF5Cc6 FSUFcpdkZHp40uyQAYKEys40kQt8b6cYSc6H7W9XeqvtWZguo/IZuXLmv4ipAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzPxS/fRyNRoIoUDdfDmC7EOz5M4wHwYDVR0j BBgwFoAUwo8UjT4DfIksdNKQ8NkrZ9rgR9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVF Z3AvMi9DMjhGMTQ4RDNFMDM3Qzg5MkM3NEQyOTBGMEQ5MkI2N0RBRTA0N0Q4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyOEYxNDhEM0UwMzdDODky Qzc0RDI5MEYwRDkyQjY3REFFMDQ3RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVFZ3AvMi9D MjhGMTQ4RDNFMDM3Qzg5MkM3NEQyOTBGMEQ5MkI2N0RBRTA0N0Q4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQoC6uf5NEdz92ozxu51y0kyzLNdHMgl9TeajmHhE5u9gKmrVHN89Eb53ifro YsEWrkPhmFqKqMNVNgf6HGI2u8SzeRryU8j4glxcDPkMugJ5Ij+RKGSm3/tDlRhb HXKf4or/D+8Mz1k01ed1/GRZi7AanBGpQ/IVjcrbz5zIRRzq/xeSX2JoInT0gzWQ KZ2QCsbiIUPzkhkyzDjwEubrcVP0CRuIpA1tdRJcjbPGVQc0sQgWRRd7joeEfMOM lU6LfbW1M2VImR96bLA3WIsCPm3cpwYPTp66CL8ef7RTNqbqlHjn+t2DtXtJFsaf kykLIzbcQ2ktLDnHvINQegD47g== -----END CERTIFICATE-----Generated at Wed Aug 6 13:07:45 2025 by rpki-client