$ rpki-client -vvf rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft File: 2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft (raw, json) Hash identifier: QnoqthwNlP4XnE5kNxmuOMKe8SAmDUPPBzrTP3xqfiQ= Subject key identifier: BE:94:2C:09:B3:29:A7:6A:3A:D2:AF:11:C9:FD:86:CC:3F:58:DA:22 Authority key identifier: 2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C Certificate issuer: /CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C Certificate serial: 05998C3CF2F959ECA64776E61C8592943D634DF5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer Subject info access: rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft Manifest number: 028C Signing time: Tue 05 Aug 2025 12:39:51 +0000 Manifest this update: Tue 05 Aug 2025 12:34:51 +0000 Manifest next update: Wed 06 Aug 2025 14:22:51 +0000 Files and hashes: 1: 2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl (hash: tjpz5v5Y3Gy+Gi4ZV5TyzMjsymjQLqiJ7+IvWEI+/hM=) 2: 3133382e3230342e33362e302f32322d3332203d3e203631373735.roa (hash: i42Zf9JlK4N1mmLBTa9TWccNagKQVyNdUEy5+83Gmck=) 3: 3133382e3230342e33372e302f32342d3332203d3e203631373735.roa (hash: bHsfgx5bc+iOPbuSRSP7Bx9qmbPdlwgcPx8SooF5nOw=) 4: 323830343a313932383a3a2f33322d313238203d3e203631373735.roa (hash: nuyhgAzX27qSeSVno+9wZ9X/49ZgMdBWxUwbjgZnHk0=) 5: 3230302e3232392e38342e302f32322d3332203d3e203631373735.roa (hash: HUgjgoMoXy/HcsuPu+XEO8HJHVpykWC6LHcx5p1rb50=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 14:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:99:8c:3c:f2:f9:59:ec:a6:47:76:e6:1c:85:92:94:3d:63:4d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C Validity Not Before: Aug 5 12:34:51 2025 GMT Not After : Aug 6 14:22:51 2025 GMT Subject: CN=BE942C09B329A76A3AD2AF11C9FD86CC3F58DA22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6b:4b:13:ff:bb:5e:28:4b:6a:f1:fa:95:f8: 4a:97:aa:40:61:da:89:c0:42:b4:26:a9:ad:bf:cb: 2d:86:7a:38:4b:09:7c:1a:89:14:ab:c2:f4:56:09: 7e:7a:38:d5:e0:bb:53:da:8b:26:0b:06:d1:07:b3: 1c:f0:be:b8:f2:52:92:77:99:51:0d:e9:e2:d9:24: 91:1d:c8:c1:ff:c0:bd:c6:19:c5:06:79:ae:b8:31: 08:d2:24:e1:75:42:28:18:d8:97:6b:59:33:6f:40: 14:30:88:5c:e6:36:c7:b0:80:58:8c:8b:0a:a8:9e: b4:c9:80:52:c0:43:53:6e:5f:0c:17:a9:98:cf:f5: a6:c6:f7:33:30:2d:84:f7:a5:39:ce:9f:86:2c:34: 26:fc:fe:b3:f4:42:d9:98:cd:c7:fb:fc:cb:c8:f5: 38:bd:f5:b0:7a:9f:ae:57:f0:0c:cf:1d:d3:4c:0c: ee:0d:ac:de:3e:76:02:bb:86:6d:11:26:9d:ed:dc: 41:10:a8:08:51:ec:20:33:7a:00:a5:5a:0d:87:46: bd:b7:86:1a:5f:8f:81:d7:75:c1:53:69:c2:7e:21: 9f:75:46:36:91:83:f8:7a:db:81:50:8f:75:ad:50: 76:48:94:06:9a:67:8d:ab:6a:80:d9:42:f9:70:93: ed:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:94:2C:09:B3:29:A7:6A:3A:D2:AF:11:C9:FD:86:CC:3F:58:DA:22 X509v3 Authority Key Identifier: keyid:2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4a:e7:d4:c6:e9:da:da:65:df:6a:00:e0:d6:51:9a:b4:ad: 79:3b:a6:73:4b:c6:54:d6:f5:4a:01:ff:cc:86:3c:02:90:09: 8a:a4:74:ad:6c:f0:da:61:99:cc:07:80:44:2b:90:6d:af:d6: d8:91:d9:e3:17:fc:b8:ce:a0:c9:e1:fd:4c:b0:bc:99:20:96: c0:a1:d2:fb:e5:be:81:f2:72:7d:da:07:d0:fa:aa:fa:52:3b: c3:f4:35:ba:5f:b0:a3:f9:36:e3:21:db:79:af:34:03:0f:80: 2d:38:2c:96:d0:37:d8:20:99:b1:e3:b7:4a:57:79:27:63:83: 9d:40:b4:e9:39:56:84:5f:18:aa:f0:fd:88:d2:38:16:90:9f: a9:db:6e:ed:02:01:06:2d:1d:3f:45:03:cc:61:d9:c4:df:4a: c4:ca:6f:36:7b:2a:09:2b:56:91:e8:ae:8c:e0:f5:7b:a5:4c: 18:75:34:e3:0f:2b:34:c9:e9:19:29:83:1c:73:86:cf:57:e0: 03:35:5e:f9:9b:d1:e2:da:b5:f4:f5:1c:17:57:cf:ba:a7:26: 56:c9:d2:eb:5a:de:30:3e:ef:bd:43:9d:33:8c:b1:e5:49:94: b2:13:9b:53:ec:35:42:1f:d0:90:6a:eb:8a:83:4d:b1:89:6c: d7:ee:3d:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBZmMPPL5WeymR3bmHIWSlD1jTfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE0REY5MDk3Rjk3NjY0QTAwQTMxOEVGQUUyMkRDMTAz NkU5MUI1QzAeFw0yNTA4MDUxMjM0NTFaFw0yNTA4MDYxNDIyNTFaMDMxMTAvBgNV BAMTKEJFOTQyQzA5QjMyOUE3NkEzQUQyQUYxMUM5RkQ4NkNDM0Y1OERBMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoa0sT/7teKEtq8fqV+EqXqkBh 2onAQrQmqa2/yy2GejhLCXwaiRSrwvRWCX56ONXgu1PaiyYLBtEHsxzwvrjyUpJ3 mVEN6eLZJJEdyMH/wL3GGcUGea64MQjSJOF1QigY2JdrWTNvQBQwiFzmNsewgFiM iwqonrTJgFLAQ1NuXwwXqZjP9abG9zMwLYT3pTnOn4YsNCb8/rP0QtmYzcf7/MvI 9Ti99bB6n65X8AzPHdNMDO4NrN4+dgK7hm0RJp3t3EEQqAhR7CAzegClWg2HRr23 hhpfj4HXdcFTacJ+IZ91RjaRg/h624FQj3WtUHZIlAaaZ42raoDZQvlwk+0jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvpQsCbMpp2o60q8Ryf2GzD9Y2iIwHwYDVR0j BBgwFoAUKk35CX+XZkoAoxjvriLcEDbpG1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFZScFF6VTd3aG1LSkh0YUZxd3drSktyN2h6WVgzdkVEemU1MXJ2czZp WDIvMS8yQTRERjkwOTdGOTc2NjRBMDBBMzE4RUZBRTIyREMxMDM2RTkxQjVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNERGOTA5N0Y5NzY2NEEw MEEzMThFRkFFMjJEQzEwMzZFOTFCNUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFZScFF6VTd3aG1LSkh0YUZxd3drSktyN2h6WVgzdkVEemU1MXJ2czZpWDIvMS8y QTRERjkwOTdGOTc2NjRBMDBBMzE4RUZBRTIyREMxMDM2RTkxQjVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG0rn1Mbp2tpl32oA4NZRmrSteTumc0vGVNb1SgH/zIY8ApAJiqR0rWzw2mGZ zAeARCuQba/W2JHZ4xf8uM6gyeH9TLC8mSCWwKHS++W+gfJyfdoH0Pqq+lI7w/Q1 ul+wo/k24yHbea80Aw+ALTgsltA32CCZseO3Sld5J2ODnUC06TlWhF8YqvD9iNI4 FpCfqdtu7QIBBi0dP0UDzGHZxN9KxMpvNnsqCStWkeiujOD1e6VMGHU04w8rNMnp GSmDHHOGz1fgAzVe+ZvR4tq19PUcF1fPuqcmVsnS61reMD7vvUOdM4yx5UmUshOb U+w1Qh/QkGrrioNNsYls1+49Tw== -----END CERTIFICATE-----Generated at Tue Aug 5 16:44:15 2025 by rpki-client