$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft File: D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json) Hash identifier: MxiEw5NtIcvH26TGPP5+SFEr6ycjgsqWiJ0buzJo/ZY= Subject key identifier: E9:D5:B0:68:E4:62:90:FA:DC:03:53:8D:77:99:BC:EB:C1:66:00:FE Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 Certificate issuer: /CN=D2991FF0EF094685597EA5146C4730F0270A9201 Certificate serial: 6C47CA2772E0E28782496A4091912BE755ECCC99 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft Manifest number: 0168 Signing time: Sun 10 Aug 2025 13:07:25 +0000 Manifest this update: Sun 10 Aug 2025 13:02:25 +0000 Manifest next update: Mon 11 Aug 2025 14:41:25 +0000 Files and hashes: 1: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: KTNEcC6Y2VHqLL+qb3kt3ywe3wmftinMc6r4trZIlnw=) 2: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: q1CyUs40PSBZsxlsauj4fNpWHDBLEvFMsN6NMFjG3RA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 14:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:47:ca:27:72:e0:e2:87:82:49:6a:40:91:91:2b:e7:55:ec:cc:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201 Validity Not Before: Aug 10 13:02:25 2025 GMT Not After : Aug 11 14:41:25 2025 GMT Subject: CN=E9D5B068E46290FADC03538D7799BCEBC16600FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:98:38:bc:fb:db:14:f2:94:3d:ca:49:18:3a: 43:e0:87:5c:1d:f9:09:06:34:54:ab:d6:18:f1:42: 38:9e:be:3a:dd:12:a0:ff:99:ed:cc:1f:18:82:a8: d0:90:aa:a7:f4:b1:fe:2e:10:43:f1:09:67:b0:d8: cf:ae:39:ce:8b:77:8f:d7:9a:3c:95:39:f1:7c:3d: 59:6d:1f:c0:e7:e4:6e:10:56:c0:6d:e1:c7:59:1a: 66:9f:bd:23:7e:5f:a7:fe:63:b2:be:67:fb:a9:9a: 6c:6c:b1:a6:16:8f:79:9c:30:ab:6a:39:7c:55:90: 0a:ef:c3:d8:28:ef:6f:31:3d:3d:ca:23:8a:bb:24: f3:e1:39:fe:d0:52:cb:87:ab:f3:39:b1:da:fa:8b: ab:21:49:f3:cf:db:cb:9a:7c:e5:d7:fe:ca:e0:32: 6c:cc:f3:1b:fc:a9:af:bd:d4:ca:8e:0b:a1:e3:bc: 4e:ec:b7:9a:d3:fc:e7:63:6f:3d:63:a5:66:a3:4a: 1d:9a:65:25:a0:96:dd:8d:3f:38:b7:4a:fb:a1:87: 44:88:d5:b2:4f:0b:4b:3d:d0:85:e2:1f:19:47:fb: b4:4e:c3:dc:a4:a4:90:8b:33:5b:6b:a4:ff:fa:68: 39:65:6d:ed:48:31:34:90:a2:2c:aa:fc:e1:d4:3d: bb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D5:B0:68:E4:62:90:FA:DC:03:53:8D:77:99:BC:EB:C1:66:00:FE X509v3 Authority Key Identifier: keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:a4:08:32:36:fa:c7:4a:42:c3:63:e3:ce:27:f3:bc:d2:78: c0:32:2c:94:0e:50:dd:81:ae:68:07:2e:86:b4:5f:f7:12:db: 93:6a:c3:9c:d5:ea:52:72:a8:67:37:f4:44:e0:d2:f0:cc:6c: bf:ad:a5:eb:eb:df:2a:5f:3e:39:0d:70:85:22:f9:ee:98:31: b4:0c:0b:14:94:e6:e8:11:36:6f:90:2e:39:18:bd:d2:90:1a: 35:c1:bc:b2:91:7f:ca:36:33:fd:d7:ad:b8:ff:36:87:51:27: ef:4f:ae:74:b4:61:ac:04:e2:a9:b6:70:2c:1a:be:d6:b3:f4: 1a:1c:50:12:76:11:c8:fd:ce:13:62:81:c8:8c:a9:5e:b4:1e: 25:dd:c6:f1:e1:b6:39:b3:21:ac:3b:df:1d:09:24:3a:fd:ce: 6b:80:93:c4:99:fb:a8:68:c6:bb:41:55:ee:fa:8e:98:31:59: 83:f8:39:63:e4:9e:c9:7a:29:c7:7b:4a:a0:b5:fa:6a:5a:5c: fe:62:3b:f7:26:09:17:ab:4e:97:9f:52:ae:f4:a4:79:eb:5d: 0c:ba:27:9e:64:85:26:24:7b:78:fe:1f:88:36:c1:0f:06:6d: 72:f3:b3:44:cb:5f:c7:a5:94:7c:8e:70:6d:4b:ea:5e:21:e6: 8c:10:ef:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbEfKJ3Lg4oeCSWpAkZEr51XszJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5OTFGRjBFRjA5NDY4NTU5N0VBNTE0NkM0NzMwRjAy NzBBOTIwMTAeFw0yNTA4MTAxMzAyMjVaFw0yNTA4MTExNDQxMjVaMDMxMTAvBgNV BAMTKEU5RDVCMDY4RTQ2MjkwRkFEQzAzNTM4RDc3OTlCQ0VCQzE2NjAwRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSmDi8+9sU8pQ9ykkYOkPgh1wd +QkGNFSr1hjxQjievjrdEqD/me3MHxiCqNCQqqf0sf4uEEPxCWew2M+uOc6Ld4/X mjyVOfF8PVltH8Dn5G4QVsBt4cdZGmafvSN+X6f+Y7K+Z/upmmxssaYWj3mcMKtq OXxVkArvw9go728xPT3KI4q7JPPhOf7QUsuHq/M5sdr6i6shSfPP28uafOXX/srg MmzM8xv8qa+91MqOC6HjvE7st5rT/Odjbz1jpWajSh2aZSWglt2NPzi3Svuhh0SI 1bJPC0s90IXiHxlH+7ROw9ykpJCLM1trpP/6aDllbe1IMTSQoiyq/OHUPbuHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6dWwaORikPrcA1ONd5m868FmAP4wHwYDVR0j BBgwFoAU0pkf8O8JRoVZfqUUbEcw8CcKkgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRW RnovMC9EMjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTkxRkYwRUYwOTQ2ODU1 OTdFQTUxNDZDNDczMEYwMjcwQTkyMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRWRnovMC9E Mjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp6QIMjb6x0pCw2PjzifzvNJ4wDIslA5Q3YGuaAcuhrRf9xLbk2rDnNXqUnKo Zzf0RODS8Mxsv62l6+vfKl8+OQ1whSL57pgxtAwLFJTm6BE2b5AuORi90pAaNcG8 spF/yjYz/detuP82h1En70+udLRhrATiqbZwLBq+1rP0GhxQEnYRyP3OE2KByIyp XrQeJd3G8eG2ObMhrDvfHQkkOv3Oa4CTxJn7qGjGu0FV7vqOmDFZg/g5Y+SeyXop x3tKoLX6alpc/mI79yYJF6tOl59SrvSkeetdDLonnmSFJiR7eP4fiDbBDwZtcvOz RMtfx6WUfI5wbUvqXiHmjBDvnA== -----END CERTIFICATE-----Generated at Mon Aug 11 04:21:21 2025 by rpki-client