$ rpki-client -vvf rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft File: 8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft (raw, json) Hash identifier: hMqEebJUbpQiP3zVlRq2EJp/ZwAumHn3jVIEUviP4Rc= Subject key identifier: 21:8C:48:7E:DA:BE:AD:1E:95:9C:69:3A:06:B8:B4:24:F2:8E:18:B0 Authority key identifier: 8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F Certificate issuer: /CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F Certificate serial: 5318FADCE267FCB80F3AEBA88BDD46D38B46E02F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer Subject info access: rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft Manifest number: 7A Signing time: Sat 09 Aug 2025 14:45:57 +0000 Manifest this update: Sat 09 Aug 2025 14:40:57 +0000 Manifest next update: Sun 10 Aug 2025 16:46:57 +0000 Files and hashes: 1: 3137302e3233382e3234382e302f32322d3332203d3e20323633393539.roa (hash: 9vkM44Why6sGQcMypDT8T8Q9VtBz4wbE97cshJxXhpQ=) 2: 8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl (hash: EtCHrWG8bByXkrFeye099RfduJzUbnREY0I3aZsLRcM=) 3: 323830343a323836303a3a2f33322d313238203d3e20323633393539.roa (hash: oVXD5VaDUqeD9Go0IkrJ158heEh4rOl0USTusw94FRI=) 4: 3133382e3235352e37322e302f32322d3332203d3e20323633393539.roa (hash: waEFhBe+SjRSqQswDzUJGqZm7m+XO9yIfZZm4YTlyYw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 10 Aug 2025 14:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:18:fa:dc:e2:67:fc:b8:0f:3a:eb:a8:8b:dd:46:d3:8b:46:e0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F Validity Not Before: Aug 9 14:40:57 2025 GMT Not After : Aug 10 16:46:57 2025 GMT Subject: CN=218C487EDABEAD1E959C693A06B8B424F28E18B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0c:59:24:7b:dd:50:5b:ca:da:18:6d:8d:27: 5c:7a:f7:4a:81:c5:35:f5:3f:df:ee:44:44:28:ec: f1:4f:cd:07:58:d9:b6:64:f8:82:fd:9e:9b:04:46: 92:53:79:d6:85:fa:3d:04:a8:ac:ac:e0:37:0d:3e: 74:fa:64:6c:1c:71:88:41:a2:d9:67:65:02:40:05: 9a:78:f4:23:7b:ab:99:15:5c:90:e7:23:57:1d:ba: 96:6b:8d:3f:1e:df:95:4e:c5:b7:f5:7c:f6:94:d5: 04:3c:f5:57:bf:50:2a:d6:de:83:a9:86:34:dd:6f: 10:9b:c9:af:8b:18:f0:98:4e:c9:16:00:6b:e1:bc: 77:dc:3d:76:35:ea:c7:6a:51:dd:6d:dc:e7:46:91: 02:68:c6:76:d6:3e:8e:8c:64:8e:5d:8f:a5:32:94: f6:e2:30:fd:32:b3:35:72:97:dd:43:0d:b9:eb:91: 64:02:dd:8d:57:7f:c2:88:9e:13:fe:93:bf:8d:36: 42:f7:70:27:d6:e6:6e:77:90:07:ae:9b:34:0a:16: cb:b1:ef:83:12:44:33:69:77:2c:2c:31:04:be:9e: 1e:26:3b:96:ac:e3:88:be:bb:8c:d2:04:62:d4:b3: 92:df:ab:e4:1f:d9:b7:8c:39:6b:7d:32:eb:ee:31: bb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8C:48:7E:DA:BE:AD:1E:95:9C:69:3A:06:B8:B4:24:F2:8E:18:B0 X509v3 Authority Key Identifier: keyid:8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:07:21:92:af:12:e4:f4:21:a0:53:36:c0:eb:18:43:be:80: 30:7d:5e:52:c7:7b:0f:ec:09:56:01:42:de:5a:1e:4e:7d:8b: b2:f5:d6:9b:9b:02:10:07:1f:b6:60:3d:51:23:f0:c8:2f:ea: 1c:4f:15:48:0c:71:52:29:66:42:f2:55:1e:4c:51:05:fb:9a: fb:2c:86:94:e8:40:32:2d:ce:c6:d4:0c:5b:0e:dc:1e:b4:93: 43:1a:29:39:45:be:73:40:21:d9:7f:f7:0f:c9:ff:1f:f9:51: 8b:83:d7:5e:c4:88:bf:68:f0:50:51:e0:21:90:30:98:1a:6b: 28:cf:69:6e:48:dd:cc:8f:b4:f4:eb:1b:ea:b4:9c:87:28:97: c9:61:cf:3b:09:12:e6:84:0c:77:dd:1b:4f:7a:ba:23:1f:6f: 1e:a0:91:b6:8f:fc:d8:cf:72:6c:47:d9:5f:b3:00:e4:45:a7: cf:f2:38:4d:7d:3f:89:13:a6:fe:9f:03:cc:bc:00:c8:df:82: ba:b6:e0:c8:5a:b9:75:b5:e2:08:51:42:e4:be:f4:83:3b:0f: 3c:c0:f4:dc:a1:77:95:31:a9:69:e3:47:94:8f:bc:b2:00:b4: c3:a1:ae:0c:b4:0b:a6:9a:03:7f:43:ab:30:bd:e9:f9:74:bc: 21:c8:ec:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUxj63OJn/LgPOuuoi91G04tG4C8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENCNUEyNTE2RjcxM0NGRkU5RDE1MDRFNzlBNEJEM0I5 QUZCMEEwRjAeFw0yNTA4MDkxNDQwNTdaFw0yNTA4MTAxNjQ2NTdaMDMxMTAvBgNV BAMTKDIxOEM0ODdFREFCRUFEMUU5NTlDNjkzQTA2QjhCNDI0RjI4RTE4QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGDFkke91QW8raGG2NJ1x690qB xTX1P9/uREQo7PFPzQdY2bZk+IL9npsERpJTedaF+j0EqKys4DcNPnT6ZGwccYhB otlnZQJABZp49CN7q5kVXJDnI1cdupZrjT8e35VOxbf1fPaU1QQ89Ve/UCrW3oOp hjTdbxCbya+LGPCYTskWAGvhvHfcPXY16sdqUd1t3OdGkQJoxnbWPo6MZI5dj6Uy lPbiMP0yszVyl91DDbnrkWQC3Y1Xf8KInhP+k7+NNkL3cCfW5m53kAeumzQKFsux 74MSRDNpdywsMQS+nh4mO5as44i+u4zSBGLUs5Lfq+Qf2beMOWt9MuvuMbtVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIYxIftq+rR6VnGk6Bri0JPKOGLAwHwYDVR0j BBgwFoAUjLWiUW9xPP/p0VBOeaS9O5r7Cg8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVhGemVkeXJZTExBSG1YQmFmSzdDSzNqcHRNb2ZvN0gxbVNDV1FQUjVN YUMvMC84Q0I1QTI1MTZGNzEzQ0ZGRTlEMTUwNEU3OUE0QkQzQjlBRkIwQTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDQjVBMjUxNkY3MTNDRkZF OUQxNTA0RTc5QTRCRDNCOUFGQjBBMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVhGemVkeXJZTExBSG1YQmFmSzdDSzNqcHRNb2ZvN0gxbVNDV1FQUjVNYUMvMC84 Q0I1QTI1MTZGNzEzQ0ZGRTlEMTUwNEU3OUE0QkQzQjlBRkIwQTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASAchkq8S5PQhoFM2wOsYQ76AMH1eUsd7D+wJVgFC3loeTn2LsvXWm5sCEAcf tmA9USPwyC/qHE8VSAxxUilmQvJVHkxRBfua+yyGlOhAMi3OxtQMWw7cHrSTQxop OUW+c0Ah2X/3D8n/H/lRi4PXXsSIv2jwUFHgIZAwmBprKM9pbkjdzI+09Osb6rSc hyiXyWHPOwkS5oQMd90bT3q6Ix9vHqCRto/82M9ybEfZX7MA5EWnz/I4TX0/iROm /p8DzLwAyN+CurbgyFq5dbXiCFFC5L70gzsPPMD03KF3lTGpaeNHlI+8sgC0w6Gu DLQLppoDf0OrML3p+XS8IcjstA== -----END CERTIFICATE-----Generated at Sun Aug 10 04:58:25 2025 by rpki-client