$ rpki-client -vvf rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft File: 01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft (raw, json) Hash identifier: wRy3JLR9WhbsEwU6ziwCz2gWrrt6aGgIJIZgLHRt2zE= Subject key identifier: 4F:52:FB:03:8D:CF:D5:5F:6E:3E:6F:39:76:D9:3B:3E:15:05:B7:F6 Authority key identifier: 01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C Certificate issuer: /CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C Certificate serial: 2C03B8E027DA19656B321A49F50ED06EFF5EDED4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer Subject info access: rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft Manifest number: 028E Signing time: Tue 05 Aug 2025 06:34:35 +0000 Manifest this update: Tue 05 Aug 2025 06:29:35 +0000 Manifest next update: Wed 06 Aug 2025 10:10:35 +0000 Files and hashes: 1: 01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl (hash: CSFLGcR5ToPFEjikJ+0cPK3nP2iyaSPUZlTbXbxHJgk=) 2: 34352e3137322e3230302e302f32322d3234203d3e20323638383234.roa (hash: 0YsTjeqlNRVyQvgwlwqrsgilyPHmCf1iPKM6xbeuc78=) 3: 323830343a356233303a3a2f33322d3438203d3e20323638383234.roa (hash: 6f8pVuH01b1SF3mi0On+jZU5yb6oYEzn5QGJJ2ruw7o=) 4: 3137392e3130372e35322e302f32322d3234203d3e20323638383234.roa (hash: GXCJwGNSeovJEODltbl+tv+hc1YYl0zHS2TuTav4gew=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 10:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:03:b8:e0:27:da:19:65:6b:32:1a:49:f5:0e:d0:6e:ff:5e:de:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C Validity Not Before: Aug 5 06:29:35 2025 GMT Not After : Aug 6 10:10:35 2025 GMT Subject: CN=4F52FB038DCFD55F6E3E6F3976D93B3E1505B7F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6b:9a:48:30:a1:cd:cb:c8:77:28:aa:44:74: fb:3f:a6:0f:4a:3a:ea:2c:19:98:8e:cb:61:ba:db: 3b:ef:e6:fb:f5:be:30:0b:5c:30:f7:0d:c8:14:71: c0:4d:60:af:25:30:60:c0:4b:46:61:a0:b7:66:38: 6e:44:d5:25:41:ac:ec:5e:60:d4:63:82:c1:cf:ca: 27:48:89:59:51:74:fc:f5:b1:99:36:f3:a2:3c:9c: 9b:ca:21:9b:f7:69:7a:e7:be:c2:bc:f5:36:64:b6: 8e:e7:26:64:84:a9:c4:cd:cd:f8:03:77:0e:cd:38: c1:1d:8d:35:94:53:46:03:8d:de:0b:ae:5c:19:73: 14:66:4d:57:68:97:b0:80:3c:1a:70:1b:82:5a:3e: e8:cb:dd:ee:2b:6e:67:4d:d9:19:8c:0f:55:e2:b5: 44:27:21:57:ad:72:a3:69:14:48:bb:de:a0:c3:33: 2e:09:70:a2:75:0f:a0:ae:f5:ff:a3:a6:0e:7a:02: 28:e4:e3:6d:6b:2e:f1:28:31:1e:c0:25:b6:72:fb: 8d:52:4b:8f:b2:a4:94:7a:f4:5d:8f:6c:58:45:a0: 01:8c:c3:d4:15:54:97:92:4a:54:b5:0c:4c:d7:39: 59:7f:6b:f0:b3:ce:70:55:50:70:3e:e5:df:b7:6b: 4f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:52:FB:03:8D:CF:D5:5F:6E:3E:6F:39:76:D9:3B:3E:15:05:B7:F6 X509v3 Authority Key Identifier: keyid:01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a5:40:a1:57:53:72:20:20:33:7f:65:31:4e:92:bc:5b:ae: 09:1f:2d:79:79:76:3a:1e:ed:06:33:39:7c:e1:9f:fe:d8:98: 79:f6:24:eb:c0:bb:ea:63:16:28:40:dd:a0:53:3c:8f:9c:3b: dc:64:51:cb:3d:65:5f:46:84:f1:c6:ee:cc:1d:92:f1:13:eb: 25:94:35:71:2f:a4:11:db:73:8c:1b:c4:fb:d9:17:c1:12:68: 27:96:82:2a:42:00:c0:13:8b:2e:e8:d0:b9:cd:b6:57:97:e5: f8:a2:f6:7c:67:96:ca:b4:f3:dc:4c:df:0f:22:d8:3d:f5:cc: fb:c2:5c:60:e4:1c:54:b8:a8:89:2a:ca:4b:f4:fd:77:4a:47: 50:99:a1:53:cf:a6:d5:56:24:c4:08:22:cb:e7:25:c8:ab:69: b4:55:71:36:6a:0a:ff:3e:e3:ac:03:79:38:0e:14:5d:52:9b: 1f:f3:d7:6b:4d:c4:b7:d1:c4:9f:4b:52:2c:41:28:ab:5b:b8: 6f:5d:2b:c1:5c:4c:db:c5:9e:86:c1:54:a0:2e:cc:0f:15:72: 85:71:a6:59:c8:5c:35:77:6e:10:fa:df:d7:27:38:06:da:48: 03:de:25:c4:6e:5d:61:87:16:90:90:60:27:3e:15:b1:a1:75: 4a:d9:e2:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULAO44CfaGWVrMhpJ9Q7Qbv9e3tQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFDQjcxMDhCQkNBMjlGNTU0RDQyMUFDRTAzMkI5NzdB QTFCRjY3QzAeFw0yNTA4MDUwNjI5MzVaFw0yNTA4MDYxMDEwMzVaMDMxMTAvBgNV BAMTKDRGNTJGQjAzOERDRkQ1NUY2RTNFNkYzOTc2RDkzQjNFMTUwNUI3RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxa5pIMKHNy8h3KKpEdPs/pg9K OuosGZiOy2G62zvv5vv1vjALXDD3DcgUccBNYK8lMGDAS0ZhoLdmOG5E1SVBrOxe YNRjgsHPyidIiVlRdPz1sZk286I8nJvKIZv3aXrnvsK89TZkto7nJmSEqcTNzfgD dw7NOMEdjTWUU0YDjd4LrlwZcxRmTVdol7CAPBpwG4JaPujL3e4rbmdN2RmMD1Xi tUQnIVetcqNpFEi73qDDMy4JcKJ1D6Cu9f+jpg56Aijk421rLvEoMR7AJbZy+41S S4+ypJR69F2PbFhFoAGMw9QVVJeSSlS1DEzXOVl/a/CzznBVUHA+5d+3a09DAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUT1L7A43P1V9uPm85dtk7PhUFt/YwHwYDVR0j BBgwFoAUActxCLvKKfVU1CGs4DK5d6ob9nwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUU0Y0d3elR1V21rTWhtakI0enBjV2d6V2JZVlRKRXlkNU02R2JGU2ZV aUIvMS8wMUNCNzEwOEJCQ0EyOUY1NTRENDIxQUNFMDMyQjk3N0FBMUJGNjdDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQ0I3MTA4QkJDQTI5RjU1 NEQ0MjFBQ0UwMzJCOTc3QUExQkY2N0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUU0Y0d3elR1V21rTWhtakI0enBjV2d6V2JZVlRKRXlkNU02R2JGU2ZVaUIvMS8w MUNCNzEwOEJCQ0EyOUY1NTRENDIxQUNFMDMyQjk3N0FBMUJGNjdDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh6VAoVdTciAgM39lMU6SvFuuCR8teXl2Oh7tBjM5fOGf/tiYefYk68C76mMW KEDdoFM8j5w73GRRyz1lX0aE8cbuzB2S8RPrJZQ1cS+kEdtzjBvE+9kXwRJoJ5aC KkIAwBOLLujQuc22V5fl+KL2fGeWyrTz3EzfDyLYPfXM+8JcYOQcVLioiSrKS/T9 d0pHUJmhU8+m1VYkxAgiy+clyKtptFVxNmoK/z7jrAN5OA4UXVKbH/PXa03Et9HE n0tSLEEoq1u4b10rwVxM28WehsFUoC7MDxVyhXGmWchcNXduEPrf1yc4BtpIA94l xG5dYYcWkJBgJz4VsaF1StniSg== -----END CERTIFICATE-----Generated at Tue Aug 5 16:34:52 2025 by rpki-client