$ rpki-client -vvf rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.mft File: 2ED5E473D72A6D301514B818C3D2A94A5E387474.mft (raw, json) Hash identifier: 34+5m5WcQT2OimvBt7m5+GEvA7SGZncmpEAgnHxE5co= Subject key identifier: 3E:FB:69:D8:51:68:0C:B5:88:EB:AF:2E:6E:1D:F2:D2:F5:40:2B:C1 Authority key identifier: 2E:D5:E4:73:D7:2A:6D:30:15:14:B8:18:C3:D2:A9:4A:5E:38:74:74 Certificate issuer: /CN=2ED5E473D72A6D301514B818C3D2A94A5E387474 Certificate serial: 0E699247B1BD819A429E184AA860C1D93BF54D27 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.cer Subject info access: rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.mft Manifest number: 0289 Signing time: Mon 04 Aug 2025 10:01:46 +0000 Manifest this update: Mon 04 Aug 2025 09:56:46 +0000 Manifest next update: Tue 05 Aug 2025 13:54:46 +0000 Files and hashes: 1: 34352e3233302e3134342e302f32322d3234203d3e20323637313633.roa (hash: vh37LS+azGK1lNilgZpjLA+LMtV8gz1C3+2xSFAbMyM=) 2: 2ED5E473D72A6D301514B818C3D2A94A5E387474.crl (hash: IufwxZfuCleOC2A9BeFiFf5vXLbBRnMAbY38kDJPJ5E=) 3: 323830343a343931343a3a2f33322d3438203d3e20323637313633.roa (hash: eq0PcSeiO5odYM2D6uiUlk4JYMLbb/z82YD2kS4iIxk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.crl rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 05 Aug 2025 13:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:69:92:47:b1:bd:81:9a:42:9e:18:4a:a8:60:c1:d9:3b:f5:4d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ED5E473D72A6D301514B818C3D2A94A5E387474 Validity Not Before: Aug 4 09:56:46 2025 GMT Not After : Aug 5 13:54:46 2025 GMT Subject: CN=3EFB69D851680CB588EBAF2E6E1DF2D2F5402BC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d1:ac:20:7c:42:9d:be:66:fb:1a:3c:c7:12: d0:32:4e:c0:93:ec:9d:20:b8:c8:01:9a:f0:2a:19: fe:b9:a6:fc:cc:8a:da:55:ce:c6:b5:46:a0:d8:8c: 4c:5d:e5:28:f7:fb:e0:6f:a6:66:2b:6c:c8:60:8c: 5c:b9:c7:0b:4a:94:ea:6b:db:02:a2:0b:4f:d4:d1: 54:44:0d:5f:cf:32:3a:f5:fa:75:9c:9e:59:39:82: a4:04:e9:67:46:a1:ee:ee:c8:27:42:45:33:35:f8: 87:7f:2b:c9:1d:15:c3:18:aa:88:fa:31:a7:b2:d8: 7d:45:2b:47:38:f4:15:69:0c:e6:1c:0d:a7:4b:23: 5d:80:2c:be:9d:19:45:8c:c2:e1:61:53:f9:a1:4b: 8b:28:8a:d2:3c:7f:e0:b6:f1:27:80:41:f2:cc:37: 3a:9d:fd:52:79:17:34:59:16:9e:a1:c1:79:55:23: af:29:19:44:d2:2e:81:50:93:75:43:ee:b8:99:e3: 1c:6b:cb:19:ff:f9:e3:1d:81:fd:40:7b:98:05:2d: b3:b7:c3:be:f1:d5:c4:d8:b5:37:dd:6f:dc:d2:e9: de:d4:fd:4c:56:84:b3:bf:11:0e:cd:a1:57:ef:d2: 46:6a:8f:5c:60:18:9e:6e:3a:fc:9c:d8:0e:e3:44: 67:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FB:69:D8:51:68:0C:B5:88:EB:AF:2E:6E:1D:F2:D2:F5:40:2B:C1 X509v3 Authority Key Identifier: keyid:2E:D5:E4:73:D7:2A:6D:30:15:14:B8:18:C3:D2:A9:4A:5E:38:74:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:5d:46:2c:0e:85:22:f0:3d:53:36:d6:4a:3c:4b:d3:fa:ec: 10:e2:fb:ee:96:35:38:8f:90:25:40:f8:59:6d:62:34:e3:86: 89:eb:a7:41:e4:45:75:18:7a:3a:df:7a:2a:ce:72:40:7b:58: 93:40:af:ba:90:2e:22:4a:8a:1e:2d:e2:6f:cb:98:52:88:45: 94:66:15:b5:5d:1f:41:54:47:8b:6e:0c:1d:94:ca:26:63:aa: 5c:53:be:56:91:d7:4a:bd:f4:b2:ec:42:ab:95:df:2c:92:27: 91:24:9a:c6:d7:05:bf:67:c9:5b:34:33:32:de:11:9e:ef:1f: 1d:dd:c6:d1:38:d3:11:6d:a5:27:d9:41:75:d9:25:ed:56:57: 46:fe:dd:34:9c:ca:19:0a:32:91:22:48:06:73:7d:82:66:1c: 29:c0:bb:db:d3:d4:62:b3:09:f3:9a:e1:ba:79:81:a6:74:9e: 52:cb:56:d1:72:ea:2a:bd:e9:a7:bb:2c:ec:39:a3:a9:ad:a8: 90:89:eb:70:69:98:a1:f7:bb:9a:da:a0:11:39:99:92:09:5a: 52:2a:c7:cf:c6:7c:95:4a:8c:0b:33:98:dc:25:be:4d:73:30: c0:09:4f:8a:d7:d2:8e:39:8b:0a:e5:38:cd:54:6b:a0:83:bf: 3d:74:2b:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDmmSR7G9gZpCnhhKqGDB2Tv1TScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVENUU0NzNENzJBNkQzMDE1MTRCODE4QzNEMkE5NEE1 RTM4NzQ3NDAeFw0yNTA4MDQwOTU2NDZaFw0yNTA4MDUxMzU0NDZaMDMxMTAvBgNV BAMTKDNFRkI2OUQ4NTE2ODBDQjU4OEVCQUYyRTZFMURGMkQyRjU0MDJCQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD0awgfEKdvmb7GjzHEtAyTsCT 7J0guMgBmvAqGf65pvzMitpVzsa1RqDYjExd5Sj3++BvpmYrbMhgjFy5xwtKlOpr 2wKiC0/U0VREDV/PMjr1+nWcnlk5gqQE6WdGoe7uyCdCRTM1+Id/K8kdFcMYqoj6 Maey2H1FK0c49BVpDOYcDadLI12ALL6dGUWMwuFhU/mhS4soitI8f+C28SeAQfLM Nzqd/VJ5FzRZFp6hwXlVI68pGUTSLoFQk3VD7riZ4xxryxn/+eMdgf1Ae5gFLbO3 w77x1cTYtTfdb9zS6d7U/UxWhLO/EQ7NoVfv0kZqj1xgGJ5uOvyc2A7jRGdPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPvtp2FFoDLWI668ubh3y0vVAK8EwHwYDVR0j BBgwFoAULtXkc9cqbTAVFLgYw9KpSl44dHQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUxXY1JVald4UXptQ1FMU1prbmhaUU5mU1BQblQySERxNlJqY3NDeDN3 cU0vMS8yRUQ1RTQ3M0Q3MkE2RDMwMTUxNEI4MThDM0QyQTk0QTVFMzg3NDc0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFRDVFNDczRDcyQTZEMzAx NTE0QjgxOEMzRDJBOTRBNUUzODc0NzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUxXY1JVald4UXptQ1FMU1prbmhaUU5mU1BQblQySERxNlJqY3NDeDN3cU0vMS8y RUQ1RTQ3M0Q3MkE2RDMwMTUxNEI4MThDM0QyQTk0QTVFMzg3NDc0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjF1GLA6FIvA9UzbWSjxL0/rsEOL77pY1OI+QJUD4WW1iNOOGieunQeRFdRh6 Ot96Ks5yQHtYk0CvupAuIkqKHi3ib8uYUohFlGYVtV0fQVRHi24MHZTKJmOqXFO+ VpHXSr30suxCq5XfLJInkSSaxtcFv2fJWzQzMt4Rnu8fHd3G0TjTEW2lJ9lBddkl 7VZXRv7dNJzKGQoykSJIBnN9gmYcKcC729PUYrMJ85rhunmBpnSeUstW0XLqKr3p p7ss7Dmjqa2okInrcGmYofe7mtqgETmZkglaUirHz8Z8lUqMCzOY3CW+TXMwwAlP itfSjjmLCuU4zVRroIO/PXQr7g== -----END CERTIFICATE-----Generated at Mon Aug 4 22:24:08 2025 by rpki-client