$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft File: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft (raw, json) Hash identifier: JiEHcsSSDrZ8uoiaMDZsfHLQelIGeq817ml/tTXigdI= Subject key identifier: 1F:15:F1:11:14:6C:57:57:0F:88:71:E9:31:67:89:5B:19:FB:B1:86 Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE Certificate issuer: /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Certificate serial: 56363645A732F204B42828949FAC9E987C572514 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft Manifest number: 0288 Signing time: Sat 09 Aug 2025 17:11:21 +0000 Manifest this update: Sat 09 Aug 2025 17:06:21 +0000 Manifest next update: Sun 10 Aug 2025 18:03:21 +0000 Files and hashes: 1: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl (hash: /C1AcnDKGUdkVhr9oWAeSJ80+SiaFtAXwmJFSMdF96E=) 2: 323830343a323762633a3a2f33322d3438203d3e20323633393139.roa (hash: o5soZhe+dlhemRC6K331qQOeiYKJedndqQuOLBx6nRk=) 3: 3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa (hash: 9lrgdFqXcmk1aveRypR0nwRoxN6RAu5lewGudgo7m5A=) 4: 3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (hash: daKi2XN6iI/5shlbC2ws+WpCE+eRSaaM95sbtBClTTE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 10 Aug 2025 14:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:36:36:45:a7:32:f2:04:b4:28:28:94:9f:ac:9e:98:7c:57:25:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Validity Not Before: Aug 9 17:06:21 2025 GMT Not After : Aug 10 18:03:21 2025 GMT Subject: CN=1F15F111146C57570F8871E93167895B19FBB186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fc:3b:71:02:8e:a8:68:76:56:ae:28:13:ca: e3:06:10:71:04:c2:5c:41:d3:8c:3f:a7:5b:5a:b7: 13:fb:ae:32:64:29:b1:be:53:f5:40:1b:1a:5f:91: 75:84:16:8b:19:73:49:bb:92:35:6e:d8:ce:7b:cb: 1f:3b:5e:3e:d2:77:44:64:0f:d4:53:15:2d:7f:75: d2:a6:39:cf:2c:32:f6:73:84:e9:58:d9:93:e3:e1: d4:91:16:e8:24:d9:62:73:09:59:b5:c8:bf:77:b4: cb:77:cb:ad:be:a0:b6:62:4f:2d:68:20:76:c5:09: 9e:e1:52:8a:61:b0:91:4f:ab:fe:ac:53:f6:14:74: 1b:47:9e:06:3e:30:5c:2e:41:04:26:c0:21:f3:7d: 93:ab:2f:fb:ac:90:ce:3f:75:52:07:f7:cc:13:b3: d5:97:92:53:ca:5b:3f:b8:07:51:52:7f:ff:bb:5c: c0:03:2e:ce:9c:71:d8:7f:65:f9:5f:cd:65:08:f3: 5f:37:07:25:5f:13:cb:4a:ed:26:1f:d5:d0:55:d4: 11:1c:8f:6b:45:01:97:24:77:f2:a7:f1:05:28:fd: 61:6e:c0:15:57:93:63:f1:f2:f7:68:1a:63:ee:4c: 09:e4:15:d0:29:11:5f:61:d7:a7:21:18:27:13:61: 39:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:15:F1:11:14:6C:57:57:0F:88:71:E9:31:67:89:5B:19:FB:B1:86 X509v3 Authority Key Identifier: keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:af:85:c2:35:51:bb:77:7d:04:2e:e2:32:d8:1e:1a:36:36: c5:91:ef:de:8b:b9:62:38:81:d1:11:bb:62:81:b9:3d:70:2b: cf:21:e0:2d:c7:f9:00:7e:51:e6:9d:b1:37:a7:c6:d5:36:53: f6:72:25:64:81:17:fb:cf:e4:2e:ba:34:05:67:e5:ce:f8:0a: ba:c0:54:71:0c:09:35:0b:f7:e4:c6:19:b0:3c:17:91:cf:ff: de:7c:d8:e4:f9:9a:bd:63:de:80:2b:b3:da:b7:e5:57:2e:ee: e0:28:86:79:fb:f2:bb:14:56:71:eb:c9:61:ba:4f:7e:ed:5c: 05:22:cf:d5:09:da:f0:e0:de:cd:a8:f4:89:8f:64:a4:b3:aa: e8:87:c2:38:78:e4:65:4d:e1:e5:a7:11:08:f2:60:8e:5a:cd: 4e:9d:58:89:2a:81:07:e4:b2:d2:a8:3b:99:3f:90:c2:79:09: 7f:a5:9a:71:00:fb:c4:89:be:31:a5:ea:67:80:6e:d3:2e:2e: 77:ff:b6:1a:cb:25:df:d3:92:70:4c:c5:42:64:cc:bf:0e:35: 2a:41:e0:77:2f:6e:2d:29:d4:e8:f5:82:9e:4b:72:e9:4e:7e: 6f:60:da:2f:ba:48:5a:fe:b6:d9:c3:4f:2d:20:6c:b4:1d:4f: ec:50:7b:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVjY2Racy8gS0KCiUn6yemHxXJRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRTlDOTBFQkM1MDgyRjgwMjA1NUVGQUE2MzYwQzY2 MUJGODVDRTAeFw0yNTA4MDkxNzA2MjFaFw0yNTA4MTAxODAzMjFaMDMxMTAvBgNV BAMTKDFGMTVGMTExMTQ2QzU3NTcwRjg4NzFFOTMxNjc4OTVCMTlGQkIxODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/DtxAo6oaHZWrigTyuMGEHEE wlxB04w/p1tatxP7rjJkKbG+U/VAGxpfkXWEFosZc0m7kjVu2M57yx87Xj7Sd0Rk D9RTFS1/ddKmOc8sMvZzhOlY2ZPj4dSRFugk2WJzCVm1yL93tMt3y62+oLZiTy1o IHbFCZ7hUophsJFPq/6sU/YUdBtHngY+MFwuQQQmwCHzfZOrL/uskM4/dVIH98wT s9WXklPKWz+4B1FSf/+7XMADLs6ccdh/ZflfzWUI8183ByVfE8tK7SYf1dBV1BEc j2tFAZckd/Kn8QUo/WFuwBVXk2Px8vdoGmPuTAnkFdApEV9h16chGCcTYTmtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHxXxERRsV1cPiHHpMWeJWxn7sYYwHwYDVR0j BBgwFoAUi66ckOvFCC+AIFXvqmNgxmG/hc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNL ODUvMS84QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQUU5QzkwRUJDNTA4MkY4 MDIwNTVFRkFBNjM2MEM2NjFCRjg1Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNLODUvMS84 QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWK+FwjVRu3d9BC7iMtgeGjY2xZHv3ou5YjiB0RG7YoG5PXArzyHgLcf5AH5R 5p2xN6fG1TZT9nIlZIEX+8/kLro0BWflzvgKusBUcQwJNQv35MYZsDwXkc//3nzY 5PmavWPegCuz2rflVy7u4CiGefvyuxRWcevJYbpPfu1cBSLP1Qna8ODezaj0iY9k pLOq6IfCOHjkZU3h5acRCPJgjlrNTp1YiSqBB+Sy0qg7mT+QwnkJf6WacQD7xIm+ MaXqZ4Bu0y4ud/+2Gssl39OScEzFQmTMvw41KkHgdy9uLSnU6PWCnkty6U5+b2Da L7pIWv622cNPLSBstB1P7FB7Nw== -----END CERTIFICATE-----Generated at Sun Aug 10 04:58:59 2025 by rpki-client