$ rpki-client -vvf rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft File: 0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft (raw, json) Hash identifier: +eEbWlvb7q/0dhs2ULM59K0+736bddkYfov9VKPLt4c= Subject key identifier: 02:CD:D8:81:2B:4B:DC:9E:C4:A7:8E:17:44:CA:7E:DA:CE:27:59:D0 Authority key identifier: 06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A Certificate issuer: /CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A Certificate serial: 182347201FDE1E7C0D2FC3EBF45F5E96D806417C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer Subject info access: rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft Manifest number: 0293 Signing time: Fri 08 Aug 2025 15:50:35 +0000 Manifest this update: Fri 08 Aug 2025 15:45:35 +0000 Manifest next update: Sat 09 Aug 2025 16:31:35 +0000 Files and hashes: 1: 0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl (hash: hqMg+7BV2yThpj+9BHigrVqJDJ/VjqLMSnwHhzjvsUw=) 2: 34352e3138312e3139322e302f32322d3233203d3e20323639323033.roa (hash: RTprnNg5aQfyb92AvIkxl/fHyWTeQKd0ma+1zK6ILDA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 16:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:23:47:20:1f:de:1e:7c:0d:2f:c3:eb:f4:5f:5e:96:d8:06:41:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A Validity Not Before: Aug 8 15:45:35 2025 GMT Not After : Aug 9 16:31:35 2025 GMT Subject: CN=02CDD8812B4BDC9EC4A78E1744CA7EDACE2759D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3f:ac:95:96:6d:f5:e7:b4:02:25:4d:a6:52: 09:18:54:91:e2:f4:b9:92:25:83:59:dd:50:f2:dc: ce:4d:9a:f2:90:92:b4:c8:bf:26:3b:f5:80:fd:dc: 29:53:c5:d3:9f:fa:3a:be:5d:2d:93:36:71:5b:bd: b4:67:f5:b5:08:52:cb:39:50:11:7f:ad:b2:9d:7d: a5:78:4d:37:e1:ba:46:c9:3d:64:63:3a:af:6c:de: 07:62:ec:d9:18:5e:3c:bd:ef:15:9e:90:0b:a9:16: a3:45:2a:68:f1:24:62:99:fb:fc:58:59:40:d0:9b: 51:62:35:ab:c1:d5:17:38:85:91:ba:35:d0:88:9d: 0c:73:7f:df:3b:79:54:78:f2:98:78:52:c5:13:7f: 78:c3:62:20:e9:5b:bb:5a:55:4d:b8:3a:b6:89:40: 86:bf:17:eb:09:f4:72:77:df:8f:11:26:de:7d:2e: 0a:e3:7b:20:2a:74:ad:80:86:d4:65:ee:c3:d9:c1: 61:c6:8a:ec:30:c5:82:76:a9:0e:d6:e5:a4:d0:81: 0c:d7:1a:0f:2d:f3:dc:c4:4b:47:02:75:6c:b1:d4: 37:b4:63:0e:0c:45:d2:10:39:8c:d7:cb:0e:0b:a9: 80:3b:d7:87:5d:23:34:45:7b:ef:4f:c8:21:62:b4: 3a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CD:D8:81:2B:4B:DC:9E:C4:A7:8E:17:44:CA:7E:DA:CE:27:59:D0 X509v3 Authority Key Identifier: keyid:06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a3:43:7f:1d:48:a4:92:8b:30:91:de:6d:57:6d:8f:97:41: e2:7b:41:ef:88:76:00:93:b2:c1:7c:90:43:23:48:cb:c8:8f: 81:94:41:37:85:c5:0f:0d:56:79:67:93:18:63:25:41:c0:7c: a5:53:63:a6:41:a0:c6:28:90:01:25:63:85:eb:55:07:72:e5: ef:89:a2:6f:51:46:12:fd:d4:de:1e:38:72:57:05:d9:60:32: 9f:a7:30:bf:49:2d:9d:30:63:4f:30:a1:27:b8:9d:51:da:c8: 78:55:82:99:5a:af:c0:e3:17:cd:8a:37:d4:1a:74:38:47:4c: c1:3d:a4:68:30:71:6a:94:df:62:2e:cb:e8:47:d6:05:1d:70: b1:36:a8:d4:8c:8d:16:f2:ef:d6:98:0e:18:a0:18:ad:80:60: 12:12:3a:0a:d9:97:fe:f8:aa:6b:f6:2d:2b:88:31:f4:fc:a2: f2:ea:9a:4f:e4:fb:fb:79:eb:e8:ce:e8:f1:ec:46:48:01:96: 6a:0f:4c:f9:10:9c:26:80:21:b4:0a:56:ae:cf:f6:f7:0a:92: 19:a0:e7:3d:83:82:21:3e:bd:9f:68:d4:6d:7b:57:f8:3a:21: 7c:ea:b3:86:da:9d:20:59:46:d7:70:ac:8f:00:f7:0f:20:0b: 0c:10:94:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGCNHIB/eHnwNL8Pr9F9eltgGQXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4NUJCNjM3N0U0MzgyM0Y2RUFGN0NEMEVFMDRCN0I1 MDhCQjQzQTAeFw0yNTA4MDgxNTQ1MzVaFw0yNTA4MDkxNjMxMzVaMDMxMTAvBgNV BAMTKDAyQ0REODgxMkI0QkRDOUVDNEE3OEUxNzQ0Q0E3RURBQ0UyNzU5RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeP6yVlm3157QCJU2mUgkYVJHi 9LmSJYNZ3VDy3M5NmvKQkrTIvyY79YD93ClTxdOf+jq+XS2TNnFbvbRn9bUIUss5 UBF/rbKdfaV4TTfhukbJPWRjOq9s3gdi7NkYXjy97xWekAupFqNFKmjxJGKZ+/xY WUDQm1FiNavB1Rc4hZG6NdCInQxzf987eVR48ph4UsUTf3jDYiDpW7taVU24OraJ QIa/F+sJ9HJ3348RJt59LgrjeyAqdK2AhtRl7sPZwWHGiuwwxYJ2qQ7W5aTQgQzX Gg8t89zES0cCdWyx1De0Yw4MRdIQOYzXyw4LqYA714ddIzRFe+9PyCFitDrRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAs3YgStL3J7Ep44XRMp+2s4nWdAwHwYDVR0j BBgwFoAUBoW7Y3fkOCP26vfNDuBLe1CLtDowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjVLTkdyS0h3SzdkNzEyRVA0VVo4b1A1b3NHWmQyMjdibWc0RzhSVzVG SFMvMS8wNjg1QkI2Mzc3RTQzODIzRjZFQUY3Q0QwRUUwNEI3QjUwOEJCNDNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODVCQjYzNzdFNDM4MjNG NkVBRjdDRDBFRTA0QjdCNTA4QkI0M0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NjVLTkdyS0h3SzdkNzEyRVA0VVo4b1A1b3NHWmQyMjdibWc0RzhSVzVGSFMvMS8w Njg1QkI2Mzc3RTQzODIzRjZFQUY3Q0QwRUUwNEI3QjUwOEJCNDNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP6NDfx1IpJKLMJHebVdtj5dB4ntB74h2AJOywXyQQyNIy8iPgZRBN4XFDw1W eWeTGGMlQcB8pVNjpkGgxiiQASVjhetVB3Ll74mib1FGEv3U3h44clcF2WAyn6cw v0ktnTBjTzChJ7idUdrIeFWCmVqvwOMXzYo31Bp0OEdMwT2kaDBxapTfYi7L6EfW BR1wsTao1IyNFvLv1pgOGKAYrYBgEhI6CtmX/viqa/YtK4gx9Pyi8uqaT+T7+3nr 6M7o8exGSAGWag9M+RCcJoAhtApWrs/29wqSGaDnPYOCIT69n2jUbXtX+DohfOqz htqdIFlG13CsjwD3DyALDBCUew== -----END CERTIFICATE-----Generated at Fri Aug 8 20:59:51 2025 by rpki-client