$ rpki-client -vvf rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft File: 9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft (raw, json) Hash identifier: gSOlV4/Cm+MYBEXmDqMkNxk07Lf+UDkW0l6Y34LGO9A= Subject key identifier: 8A:4E:46:E3:35:AC:F4:E9:50:EA:DD:24:EE:3B:D2:3C:8D:4C:03:04 Authority key identifier: 9B:CF:53:52:E2:C8:A4:37:59:7F:AB:4E:62:75:E8:61:F7:E4:2F:01 Certificate issuer: /CN=9BCF5352E2C8A437597FAB4E6275E861F7E42F01 Certificate serial: 1F286B1378BBD3223F879D91EF458C38993D6031 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.cer Subject info access: rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft Manifest number: 59 Signing time: Fri 08 Aug 2025 15:19:48 +0000 Manifest this update: Fri 08 Aug 2025 15:14:48 +0000 Manifest next update: Sat 09 Aug 2025 15:56:48 +0000 Files and hashes: 1: 9BCF5352E2C8A437597FAB4E6275E861F7E42F01.crl (hash: nhXvKMVra8LZDkKI24HXtxNwrIwrInrtzjJlSkTn/60=) 2: 3139322e3233312e3137352e302f32342d3234203d3e20323731323937.roa (hash: RvjBWTTGSRQhFYPFHIcADDXN+HPlEAjpyTfgUWjt4MY=) 3: 323830343a373934633a3a2f33322d3332203d3e20323731323937.roa (hash: EPgT0uqHRP14e2Ydws+qdNEZrTAIh7Vm9BAP/DL1mMo=) 4: 34352e3232392e3133362e302f32342d3234203d3e20323731323937.roa (hash: +o5sIScdM46kmAqqS9GWVWLK1tGhtWhWXgceQVZIZ0s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.crl rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 15:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:28:6b:13:78:bb:d3:22:3f:87:9d:91:ef:45:8c:38:99:3d:60:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BCF5352E2C8A437597FAB4E6275E861F7E42F01 Validity Not Before: Aug 8 15:14:48 2025 GMT Not After : Aug 9 15:56:48 2025 GMT Subject: CN=8A4E46E335ACF4E950EADD24EE3BD23C8D4C0304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e2:e4:8b:26:c8:4e:b0:79:cc:4a:4e:7b:24: 19:83:a4:3c:f3:ac:07:1d:16:d4:73:f4:d8:7a:26: a4:4f:75:b9:61:ad:dd:08:f8:60:fc:1e:60:2f:6f: 61:55:63:0a:de:94:d7:86:fd:87:da:4b:c7:35:2c: 88:f5:aa:9f:e0:e7:29:bc:70:8f:3d:45:f3:54:d8: 7c:60:33:1c:43:de:40:a1:be:4b:b4:96:02:9c:20: 04:1f:9d:e5:59:f3:d7:27:4a:06:2c:44:fc:48:de: fe:10:2e:14:e4:dc:1e:1f:42:e7:2f:09:4a:a9:2e: e5:13:59:f7:35:3f:2c:54:e0:af:5d:c5:07:8e:d3: 30:b5:41:25:3e:2c:8c:cc:47:c3:cd:76:e1:d1:d5: 86:27:b1:0d:89:84:f1:0c:b6:32:d3:be:94:c1:80: 03:07:dc:74:b8:50:ca:09:4b:ba:cd:3f:49:3b:9e: 16:63:71:70:87:93:41:6f:fa:1f:27:7d:9c:ab:20: 3b:35:7c:22:96:0a:fc:d8:1e:1c:99:79:33:b6:2c: 20:38:4b:12:92:1c:a9:b2:9c:eb:18:46:52:e2:e7: 5d:df:e2:54:2f:25:cd:c1:fd:aa:81:b1:ea:52:99: dc:c6:4f:de:97:78:55:63:c3:5e:74:8f:53:bf:51: 57:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4E:46:E3:35:AC:F4:E9:50:EA:DD:24:EE:3B:D2:3C:8D:4C:03:04 X509v3 Authority Key Identifier: keyid:9B:CF:53:52:E2:C8:A4:37:59:7F:AB:4E:62:75:E8:61:F7:E4:2F:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:0c:5e:59:94:85:e5:dd:ed:28:4f:e0:47:89:25:c6:7f:5b: 56:f1:f3:bb:99:94:5c:15:12:69:d7:ea:d2:eb:af:fa:a3:be: 28:67:1b:3b:de:a9:00:59:6b:78:d5:14:71:1b:78:fb:cd:9d: 67:5f:6f:51:35:2f:1b:1c:20:9b:d7:05:78:bf:c1:9c:a9:76: b6:e4:95:9b:fe:03:cd:0b:17:81:63:88:c8:a6:e7:ea:00:11: e3:f6:0a:d0:e2:8c:a2:de:57:5f:30:4b:8c:55:95:33:25:53: 17:90:ef:05:fc:1a:09:ef:5f:cf:9f:61:85:39:90:1d:60:03: ee:6b:21:7a:ba:a7:44:6b:7b:55:ac:7a:31:03:3d:db:5a:16: ab:fb:c9:8c:65:9d:0c:19:f9:e6:b6:bd:1d:20:38:6d:21:77: c2:31:e4:85:cd:13:b1:af:58:6b:8d:8c:ea:2b:d8:f0:6c:39: 5b:f9:f3:7d:ff:a8:44:e6:a9:8a:77:1e:b1:b1:9e:1c:90:ce: a0:f0:65:90:01:d6:34:42:82:8b:0b:0a:8d:f5:4d:00:c2:61: 88:32:bd:da:e1:51:f5:16:0c:4f:75:84:e2:59:36:b1:cd:73: 41:4c:39:6e:f6:9c:67:2a:47:d1:19:c5:5f:62:2d:05:54:42: e6:a2:8d:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHyhrE3i70yI/h52R70WMOJk9YDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJDRjUzNTJFMkM4QTQzNzU5N0ZBQjRFNjI3NUU4NjFG N0U0MkYwMTAeFw0yNTA4MDgxNTE0NDhaFw0yNTA4MDkxNTU2NDhaMDMxMTAvBgNV BAMTKDhBNEU0NkUzMzVBQ0Y0RTk1MEVBREQyNEVFM0JEMjNDOEQ0QzAzMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT4uSLJshOsHnMSk57JBmDpDzz rAcdFtRz9Nh6JqRPdblhrd0I+GD8HmAvb2FVYwrelNeG/YfaS8c1LIj1qp/g5ym8 cI89RfNU2HxgMxxD3kChvku0lgKcIAQfneVZ89cnSgYsRPxI3v4QLhTk3B4fQucv CUqpLuUTWfc1PyxU4K9dxQeO0zC1QSU+LIzMR8PNduHR1YYnsQ2JhPEMtjLTvpTB gAMH3HS4UMoJS7rNP0k7nhZjcXCHk0Fv+h8nfZyrIDs1fCKWCvzYHhyZeTO2LCA4 SxKSHKmynOsYRlLi513f4lQvJc3B/aqBsepSmdzGT96XeFVjw150j1O/UVd5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUik5G4zWs9OlQ6t0k7jvSPI1MAwQwHwYDVR0j BBgwFoAUm89TUuLIpDdZf6tOYnXoYffkLwEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN01aRWltbmFTNTlFMmVBdzhoNG9YS2VocjVDWW1tTXRIWGtuMW91QXRo ZFEvMC85QkNGNTM1MkUyQzhBNDM3NTk3RkFCNEU2Mjc1RTg2MUY3RTQyRjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCQ0Y1MzUyRTJDOEE0Mzc1 OTdGQUI0RTYyNzVFODYxRjdFNDJGMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N01aRWltbmFTNTlFMmVBdzhoNG9YS2VocjVDWW1tTXRIWGtuMW91QXRoZFEvMC85 QkNGNTM1MkUyQzhBNDM3NTk3RkFCNEU2Mjc1RTg2MUY3RTQyRjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbAxeWZSF5d3tKE/gR4klxn9bVvHzu5mUXBUSadfq0uuv+qO+KGcbO96pAFlr eNUUcRt4+82dZ19vUTUvGxwgm9cFeL/BnKl2tuSVm/4DzQsXgWOIyKbn6gAR4/YK 0OKMot5XXzBLjFWVMyVTF5DvBfwaCe9fz59hhTmQHWAD7msherqnRGt7Vax6MQM9 21oWq/vJjGWdDBn55ra9HSA4bSF3wjHkhc0Tsa9Ya42M6ivY8Gw5W/nzff+oROap incesbGeHJDOoPBlkAHWNEKCiwsKjfVNAMJhiDK92uFR9RYMT3WE4lk2sc1zQUw5 bvacZypH0RnFX2ItBVRC5qKNIQ== -----END CERTIFICATE-----Generated at Sat Aug 9 01:06:56 2025 by rpki-client