$ rpki-client -vvf rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft File: 23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft (raw, json) Hash identifier: 3TgxkcjgrYsgsxJkND/6WZaEHSqNThc1YS9HWQMHx3A= Subject key identifier: 16:C2:69:99:8A:E5:60:E4:27:E3:9D:2E:A7:A9:13:10:BD:2E:BE:C0 Authority key identifier: 23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1 Certificate issuer: /CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1 Certificate serial: 0C7C957819983E1C0511558F81E91710E86A3787 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer Subject info access: rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft Manifest number: 02E0 Signing time: Tue 05 Aug 2025 12:50:00 +0000 Manifest this update: Tue 05 Aug 2025 12:45:00 +0000 Manifest next update: Wed 06 Aug 2025 12:50:00 +0000 Files and hashes: 1: 3139322e3134312e3136332e302f32342d3234203d3e20323637343839.roa (hash: CSH5Kqa0MaU1ZDO/gzNbFA7PEwyWlG0nbaFiIb2W4g0=) 2: 23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl (hash: sbC9g0ndN3l3FaFbdqhVR7Iqv1iD4fh4DX+GWsdP37s=) 3: 323830343a343234343a3a2f33322d3335203d3e20323637343839.roa (hash: kfOAlEuTV7YUgllyaQimHZqDnsN1E6oP+7UEeK4GKtc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 12:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:7c:95:78:19:98:3e:1c:05:11:55:8f:81:e9:17:10:e8:6a:37:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1 Validity Not Before: Aug 5 12:45:00 2025 GMT Not After : Aug 6 12:50:00 2025 GMT Subject: CN=3082010A02820101009C22502FF9F22E1BDEFE0115E5B10B4D464EC92F435D6C9605BC80968295A116D0CD1D19449E5CBCC86558C5DE93179617202EA851928E51C6657CC96529EBA557B661580E688DEAA14A41BAA11B592DB6F18AEB51C07FB55CBA6C3092896D899F5D582FBC998D7F11E2311C20D16B83C9B939CD4678EC76DDA8371B23F9A49619ABDB2A17DBD184278B186E689A3E85A48FF275D1B9A417665504AC3DB834F7D7AC7B7670A2E0C41CD62D3A70BF9FEAC08B85425DC7FB0291226E423428649C8E82F5C2D15EA27C2E2B2FB72FA4D209952598B5DECACCA08E93DE18413E4738A970DEB1D71AFC7C3F861DD343C8ACC939FA8EC69EA5D3E1B43F179B3093592F0203010001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:22:50:2f:f9:f2:2e:1b:de:fe:01:15:e5:b1: 0b:4d:46:4e:c9:2f:43:5d:6c:96:05:bc:80:96:82: 95:a1:16:d0:cd:1d:19:44:9e:5c:bc:c8:65:58:c5: de:93:17:96:17:20:2e:a8:51:92:8e:51:c6:65:7c: c9:65:29:eb:a5:57:b6:61:58:0e:68:8d:ea:a1:4a: 41:ba:a1:1b:59:2d:b6:f1:8a:eb:51:c0:7f:b5:5c: ba:6c:30:92:89:6d:89:9f:5d:58:2f:bc:99:8d:7f: 11:e2:31:1c:20:d1:6b:83:c9:b9:39:cd:46:78:ec: 76:dd:a8:37:1b:23:f9:a4:96:19:ab:db:2a:17:db: d1:84:27:8b:18:6e:68:9a:3e:85:a4:8f:f2:75:d1: b9:a4:17:66:55:04:ac:3d:b8:34:f7:d7:ac:7b:76: 70:a2:e0:c4:1c:d6:2d:3a:70:bf:9f:ea:c0:8b:85: 42:5d:c7:fb:02:91:22:6e:42:34:28:64:9c:8e:82: f5:c2:d1:5e:a2:7c:2e:2b:2f:b7:2f:a4:d2:09:95: 25:98:b5:de:ca:cc:a0:8e:93:de:18:41:3e:47:38: a9:70:de:b1:d7:1a:fc:7c:3f:86:1d:d3:43:c8:ac: c9:39:fa:8e:c6:9e:a5:d3:e1:b4:3f:17:9b:30:93: 59:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C2:69:99:8A:E5:60:E4:27:E3:9D:2E:A7:A9:13:10:BD:2E:BE:C0 X509v3 Authority Key Identifier: keyid:23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:74:66:6e:4b:44:3b:aa:57:c5:02:8c:75:2b:81:88:58:fa: f4:8d:46:1e:36:12:94:40:be:56:fa:9c:2a:98:29:d0:69:a5: 06:e9:9e:7a:da:0b:9c:b6:03:85:ed:ed:8d:32:c6:89:53:67: 3d:6e:fd:99:47:67:f8:28:a1:56:fe:17:95:d7:dd:81:88:22: ff:5f:a6:98:01:5f:0a:cc:55:40:66:ef:31:1f:29:f3:62:a1: dd:a8:14:d0:7b:96:2e:ba:8b:0f:ec:64:7c:45:82:1f:f5:16: 83:bb:84:17:eb:19:cb:b0:58:18:04:e1:7d:4d:42:27:31:d4: 85:28:f6:d9:f2:57:43:4d:73:d7:a2:16:9c:5f:3a:2b:c9:41: b2:87:a9:09:7f:6f:4a:5a:f2:d9:0b:b0:32:1b:36:90:1d:13: 0b:01:bd:81:62:e0:28:83:44:43:c8:fa:2e:8a:e5:74:cd:f5: b8:66:64:f1:dd:96:01:c1:d4:aa:ae:2f:1c:cf:7a:69:9d:96: b5:30:be:05:53:d5:2a:f7:50:f6:b3:e7:79:be:eb:ee:ce:8b: 87:08:ff:a8:2d:b9:52:73:5d:22:3e:5e:6b:d4:99:8e:da:7a: 96:82:5d:67:d5:25:95:b8:ee:c4:20:49:72:78:7b:f1:98:4e: c1:68:d1:4f -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUDHyVeBmYPhwFEVWPgekXEOhqN4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNFQ0Q0RDFBRjg4Q0UyRTFCM0RGNkRGODdGQzc2Q0Mx NTdBMDdDMTAeFw0yNTA4MDUxMjQ1MDBaFw0yNTA4MDYxMjUwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUMyMjUwMkZGOUYyMkUxQkRF RkUwMTE1RTVCMTBCNEQ0NjRFQzkyRjQzNUQ2Qzk2MDVCQzgwOTY4Mjk1QTExNkQw Q0QxRDE5NDQ5RTVDQkNDODY1NThDNURFOTMxNzk2MTcyMDJFQTg1MTkyOEU1MUM2 NjU3Q0M5NjUyOUVCQTU1N0I2NjE1ODBFNjg4REVBQTE0QTQxQkFBMTFCNTkyREI2 RjE4QUVCNTFDMDdGQjU1Q0JBNkMzMDkyODk2RDg5OUY1RDU4MkZCQzk5OEQ3RjEx RTIzMTFDMjBEMTZCODNDOUI5MzlDRDQ2NzhFQzc2RERBODM3MUIyM0Y5QTQ5NjE5 QUJEQjJBMTdEQkQxODQyNzhCMTg2RTY4OUEzRTg1QTQ4RkYyNzVEMUI5QTQxNzY2 NTUwNEFDM0RCODM0RjdEN0FDN0I3NjcwQTJFMEM0MUNENjJEM0E3MEJGOUZFQUMw OEI4NTQyNURDN0ZCMDI5MTIyNkU0MjM0Mjg2NDlDOEU4MkY1QzJEMTVFQTI3QzJF MkIyRkI3MkZBNEQyMDk5NTI1OThCNURFQ0FDQ0EwOEU5M0RFMTg0MTNFNDczOEE5 NzBERUIxRDcxQUZDN0MzRjg2MUREMzQzQzhBQ0M5MzlGQThFQzY5RUE1RDNFMUI0 M0YxNzlCMzA5MzU5MkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAnCJQL/nyLhve/gEV5bELTUZOyS9DXWyWBbyAloKVoRbQzR0ZRJ5c vMhlWMXekxeWFyAuqFGSjlHGZXzJZSnrpVe2YVgOaI3qoUpBuqEbWS228YrrUcB/ tVy6bDCSiW2Jn11YL7yZjX8R4jEcINFrg8m5Oc1GeOx23ag3GyP5pJYZq9sqF9vR hCeLGG5omj6FpI/yddG5pBdmVQSsPbg099ese3ZwouDEHNYtOnC/n+rAi4VCXcf7 ApEibkI0KGScjoL1wtFeonwuKy+3L6TSCZUlmLXeysygjpPeGEE+RzipcN6x1xr8 fD+GHdNDyKzJOfqOxp6l0+G0PxebMJNZLwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FBbCaZmK5WDkJ+OdLqepExC9Lr7AMB8GA1UdIwQYMBaAFCPs1NGviM4uGz3234f8 dswVegfBMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg1czF4QkV0eDhCR1N2 NndQSE5wYnlyMkxwWFhwUENHa3RIaUp2WXV4Mjd0LzEvMjNFQ0Q0RDFBRjg4Q0Uy RTFCM0RGNkRGODdGQzc2Q0MxNTdBMDdDMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS8yM0VDRDREMUFGODhDRTJFMUIzREY2REY4N0ZDNzZDQzE1N0Ew N0MxLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg1czF4QkV0eDhCR1N2NndQSE5w YnlyMkxwWFhwUENHa3RIaUp2WXV4Mjd0LzEvMjNFQ0Q0RDFBRjg4Q0UyRTFCM0RG NkRGODdGQzc2Q0MxNTdBMDdDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMd0Zm5LRDuqV8UCjHUrgYhY +vSNRh42EpRAvlb6nCqYKdBppQbpnnraC5y2A4Xt7Y0yxolTZz1u/ZlHZ/gooVb+ F5XX3YGIIv9fppgBXwrMVUBm7zEfKfNiod2oFNB7li66iw/sZHxFgh/1FoO7hBfr GcuwWBgE4X1NQicx1IUo9tnyV0NNc9eiFpxfOivJQbKHqQl/b0pa8tkLsDIbNpAd EwsBvYFi4CiDREPI+i6K5XTN9bhmZPHdlgHB1KquLxzPemmdlrUwvgVT1Sr3UPaz 53m+6+7Oi4cI/6gtuVJzXSI+XmvUmY7aepaCXWfVJZW47sQgSXJ4e/GYTsFo0U8= -----END CERTIFICATE-----Generated at Tue Aug 5 17:31:20 2025 by rpki-client