$ rpki-client -vvf rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft File: B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft (raw, json) Hash identifier: jLFiuNo5+7AcUsTmOLpQt/QPPvKcGNiEcyqYcmLrJGA= Subject key identifier: 43:3D:09:B9:94:B6:FE:02:17:38:9A:C7:A4:2F:5E:C0:35:30:B0:FD Authority key identifier: B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4 Certificate issuer: /CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4 Certificate serial: 4463F100360A3C42B41F24BE91D226355DF69B14 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer Subject info access: rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft Manifest number: 029F Signing time: Wed 06 Aug 2025 02:28:24 +0000 Manifest this update: Wed 06 Aug 2025 02:23:24 +0000 Manifest next update: Thu 07 Aug 2025 02:37:24 +0000 Files and hashes: 1: B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl (hash: EHxjvqdULwl1sjttbSuSUcT//ASVWG1fJZVgPAc3cMI=) 2: 323830343a373737343a3a2f33322d3332203d3e20323731313739.roa (hash: 15axzlvaPxlpvdEmdsItvuAH+wRillPEZD906FjgXUs=) 3: 3137392e35312e3134382e302f32322d3234203d3e20323731313739.roa (hash: fscH08Be33lLCrOFmFTelyKv56wGOusIcbHMYRtzIk0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 07 Aug 2025 02:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:63:f1:00:36:0a:3c:42:b4:1f:24:be:91:d2:26:35:5d:f6:9b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4 Validity Not Before: Aug 6 02:23:24 2025 GMT Not After : Aug 7 02:37:24 2025 GMT Subject: CN=433D09B994B6FE0217389AC7A42F5EC03530B0FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bb:5a:0a:f0:78:e8:ef:56:e3:51:fa:e2:79: 78:71:64:13:f5:35:62:34:ee:ac:79:73:4f:6c:b6: 92:51:03:5e:cd:d2:ee:b1:89:27:49:50:b7:d2:99: ed:9b:01:a4:3d:3f:48:74:76:ba:24:f3:ed:6b:e4: 49:92:ae:38:c8:1f:ba:14:b9:73:af:25:01:60:04: d2:2d:fc:e3:0d:0c:0b:b4:1b:da:8e:2e:70:f4:c4: e8:01:8a:47:5a:f8:53:3a:57:f2:33:a0:f9:0d:8e: f8:9b:65:90:0a:85:3b:83:47:10:6f:41:f6:2c:22: 76:65:6d:3c:e0:0b:2f:24:12:10:06:4c:e1:c9:aa: 83:1e:3f:69:06:2c:f3:fe:36:31:59:7e:78:91:ce: c2:de:e9:f5:c2:fb:d2:02:5e:41:38:9e:3a:7d:e4: 0f:cf:ff:98:f9:1c:ab:ae:32:2a:ff:38:70:f3:3f: ae:d8:49:0b:b6:87:52:d2:f0:ff:ae:97:3a:25:a5: 58:92:8d:9d:58:96:e7:87:41:d2:80:80:a7:43:38: 16:d0:2b:fb:8d:e5:e0:f9:a7:8f:dd:a5:db:08:21: a4:4d:1b:dd:90:0a:8e:3a:c4:b0:50:f2:a4:a1:54: f6:1b:2c:ba:05:19:80:12:b5:b9:69:99:60:83:3f: d6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3D:09:B9:94:B6:FE:02:17:38:9A:C7:A4:2F:5E:C0:35:30:B0:FD X509v3 Authority Key Identifier: keyid:B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:8d:8a:e5:bc:a6:1c:a1:38:13:d7:cd:07:24:f8:87:bf:c2: 41:4b:9b:91:b7:2f:91:9d:e6:4e:56:8a:b5:f3:0e:ea:88:13: 40:33:78:73:89:06:af:fa:3b:da:41:a9:a2:2c:88:d2:6e:b1: 08:34:dc:d3:68:0e:03:48:d9:27:41:03:99:f1:2b:0d:7d:bd: d1:aa:cf:ba:92:e6:55:9c:fc:9e:1b:51:3a:57:53:c2:1c:95: 0a:fd:da:86:d7:91:9c:a6:67:41:fc:81:28:80:ea:c7:c8:de: dc:d4:69:73:89:17:5d:3d:62:52:7f:c4:8e:14:5e:64:e7:d1: ed:44:f8:16:9f:6c:ac:a7:92:bb:a0:b4:59:51:78:91:07:35: e3:62:b5:b3:e2:f2:88:51:e3:db:00:f3:14:e8:88:98:d2:34: fa:51:84:4d:c4:b3:8e:ab:12:29:90:fe:7e:e5:ca:ed:03:d8: 64:a3:9a:9a:48:66:29:58:ff:f4:0a:fe:3b:c8:50:73:a8:44: af:f1:98:ea:5c:cb:c1:ff:ab:61:54:c7:25:25:af:8e:76:15: 10:43:2b:47:22:17:f7:f8:3e:f8:f5:8c:aa:a6:37:15:96:fe: 8f:82:de:5b:20:d7:c1:1c:63:7e:97:53:28:32:aa:76:77:9a: af:b5:72:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURGPxADYKPEK0HyS+kdImNV32mxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlFRkYyRENDOEQzQjY5MjhFNTE2RTZBMkRGMDg2RTA4 Q0I4OTFFNDAeFw0yNTA4MDYwMjIzMjRaFw0yNTA4MDcwMjM3MjRaMDMxMTAvBgNV BAMTKDQzM0QwOUI5OTRCNkZFMDIxNzM4OUFDN0E0MkY1RUMwMzUzMEIwRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNu1oK8Hjo71bjUfrieXhxZBP1 NWI07qx5c09stpJRA17N0u6xiSdJULfSme2bAaQ9P0h0drok8+1r5EmSrjjIH7oU uXOvJQFgBNIt/OMNDAu0G9qOLnD0xOgBikda+FM6V/IzoPkNjvibZZAKhTuDRxBv QfYsInZlbTzgCy8kEhAGTOHJqoMeP2kGLPP+NjFZfniRzsLe6fXC+9ICXkE4njp9 5A/P/5j5HKuuMir/OHDzP67YSQu2h1LS8P+ulzolpViSjZ1YlueHQdKAgKdDOBbQ K/uN5eD5p4/dpdsIIaRNG92QCo46xLBQ8qShVPYbLLoFGYAStblpmWCDP9anAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQz0JuZS2/gIXOJrHpC9ewDUwsP0wHwYDVR0j BBgwFoAUue/y3MjTtpKOUW5qLfCG4Iy4keQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1lnVUNGakVOYmlMZzRGTEJ6b2tXRGdqbzdVSE44TEtqV0pEemhvU3gx WkgvMS9COUVGRjJEQ0M4RDNCNjkyOEU1MTZFNkEyREYwODZFMDhDQjg5MUU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5RUZGMkRDQzhEM0I2OTI4 RTUxNkU2QTJERjA4NkUwOENCODkxRTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1lnVUNGakVOYmlMZzRGTEJ6b2tXRGdqbzdVSE44TEtqV0pEemhvU3gxWkgvMS9C OUVGRjJEQ0M4RDNCNjkyOEU1MTZFNkEyREYwODZFMDhDQjg5MUU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhY2K5bymHKE4E9fNByT4h7/CQUubkbcvkZ3mTlaKtfMO6ogTQDN4c4kGr/o7 2kGpoiyI0m6xCDTc02gOA0jZJ0EDmfErDX290arPupLmVZz8nhtROldTwhyVCv3a hteRnKZnQfyBKIDqx8je3NRpc4kXXT1iUn/EjhReZOfR7UT4Fp9srKeSu6C0WVF4 kQc142K1s+LyiFHj2wDzFOiImNI0+lGETcSzjqsSKZD+fuXK7QPYZKOamkhmKVj/ 9Ar+O8hQc6hEr/GY6lzLwf+rYVTHJSWvjnYVEEMrRyIX9/g++PWMqqY3FZb+j4Le WyDXwRxjfpdTKDKqdnear7Vyew== -----END CERTIFICATE-----Generated at Wed Aug 6 11:05:05 2025 by rpki-client