$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft File: AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft (raw, json) Hash identifier: NEAcIth+vjQNsNlUCyCl0RyEu6/Srzvy9CvqTtpSzEo= Subject key identifier: 3D:1E:15:4D:E5:17:4E:06:43:3A:5A:8C:8B:A3:68:69:7C:DE:71:AB Authority key identifier: AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A Certificate issuer: /CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A Certificate serial: 297CF5DA5B125A824F24AC694DB1651938AF54B8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer Subject info access: rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft Manifest number: 0138 Signing time: Sat 09 Aug 2025 09:19:35 +0000 Manifest this update: Sat 09 Aug 2025 09:14:35 +0000 Manifest next update: Sun 10 Aug 2025 11:43:35 +0000 Files and hashes: 1: 323830343a353463383a3a2f33322d3438203d3e203631353935.roa (hash: Ae2efMgnwM2PCNT7dU75s66Sccj5kzLKU0a/b++2GsQ=) 2: 34352e3136352e38302e302f32322d3234203d3e203631353935.roa (hash: P3iRqeK3Yv57QU7Bwadb2mGTtOHbUHSsYSW0mi15khA=) 3: 34352e3136352e38302e302f32322d3234203d3e203533343237.roa (hash: W6Il1nJqq5qqLa4TPlQ/OzjTUK08KOF0OrC0Ec1PXjE=) 4: AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl (hash: BcWew1oBa3eHRMfxGJUmToaB1XCeUcGnYwj0+PIEytk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 10 Aug 2025 11:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:7c:f5:da:5b:12:5a:82:4f:24:ac:69:4d:b1:65:19:38:af:54:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A Validity Not Before: Aug 9 09:14:35 2025 GMT Not After : Aug 10 11:43:35 2025 GMT Subject: CN=3D1E154DE5174E06433A5A8C8BA368697CDE71AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f0:6b:20:65:89:9c:d4:83:80:30:69:7d:43: 63:0a:23:d7:7a:17:16:aa:c0:64:76:37:0c:36:62: 3c:a8:5c:06:b3:02:15:f9:9a:8b:0e:8f:a1:20:d1: e1:0d:f8:dc:04:bf:46:15:ef:99:be:ac:b4:09:3e: b8:e8:a5:1d:78:9a:cc:1d:50:a8:6c:fe:5b:de:52: f0:e7:cc:6a:e3:7c:96:71:63:8f:0b:cc:86:e2:30: f1:03:c0:5c:ae:c8:4b:a1:e2:06:ac:d8:c1:0f:df: b5:f0:1f:dd:16:ba:42:89:4a:81:1d:cd:74:30:8d: d3:31:68:95:99:52:c3:f3:e5:3c:ba:12:6d:42:69: 04:61:14:ec:31:c2:00:6e:b8:5a:da:3b:88:93:60: cf:78:5b:20:ab:e8:86:18:f9:4e:1b:9f:67:5b:f5: d0:54:6b:87:0f:de:84:6a:d0:e8:06:c9:41:3a:2f: 36:94:d9:42:e7:ab:d3:6e:b5:04:aa:80:09:de:93: 9c:eb:95:d4:ae:4d:c2:99:78:b7:44:2b:9c:d0:7e: 73:38:52:f3:25:e7:50:a7:68:6d:cc:ff:43:fe:4d: bd:57:b9:3c:cf:8d:4e:2e:fd:e8:ff:7e:f4:ba:57: e7:4d:81:33:2d:cf:ad:e9:9c:d2:26:be:81:b0:26: 60:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1E:15:4D:E5:17:4E:06:43:3A:5A:8C:8B:A3:68:69:7C:DE:71:AB X509v3 Authority Key Identifier: keyid:AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:15:e4:34:7d:8f:05:06:1e:9c:b0:e8:ff:3c:22:f9:99:f2: ad:ce:e4:7a:6e:f5:de:bb:8b:7a:f7:45:e9:41:60:f0:d1:c6: 91:20:aa:01:90:0b:1d:6d:dc:4a:c2:ec:27:d9:4b:3b:68:27: bc:93:ef:30:da:fd:aa:a5:a2:b3:a0:9e:53:17:fb:e8:67:52: d7:b9:fc:8d:de:25:42:f5:34:ba:9e:73:be:c8:14:f0:de:43: 8d:87:5b:b6:29:39:fe:68:3a:42:9c:aa:e4:3f:cc:be:3f:ba: ff:d0:1a:6d:5d:2d:ed:cb:8b:d1:c7:9d:27:37:21:29:07:5d: 20:34:f3:8a:97:4e:d7:81:27:2e:1f:f3:97:99:4b:e8:08:eb: 74:ef:c0:ca:7e:57:cd:21:f8:f1:72:3c:6b:90:df:00:85:21: 44:fc:08:3d:98:6c:7c:44:13:bc:73:57:dc:b9:56:7e:e3:35: a3:fa:e2:94:9a:1d:61:07:3e:b8:f3:0b:06:c4:f8:e2:07:8d: 9a:c6:f6:ed:1d:b0:42:ef:a3:c2:ba:3f:8e:b7:58:9b:1d:ec: 8f:d4:8b:9e:41:21:8f:36:25:3e:bf:0b:5c:25:b2:20:03:80: e4:76:b5:d1:84:13:c6:91:e2:89:c0:e3:81:db:3b:fa:0e:c3: 2b:6e:e6:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKXz12lsSWoJPJKxpTbFlGTivVLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1OEVFRDIwQ0VBMDQwMUJERUJERTRDQTI5Q0MyREI1 OUQ3MTEzQTAeFw0yNTA4MDkwOTE0MzVaFw0yNTA4MTAxMTQzMzVaMDMxMTAvBgNV BAMTKDNEMUUxNTRERTUxNzRFMDY0MzNBNUE4QzhCQTM2ODY5N0NERTcxQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq8GsgZYmc1IOAMGl9Q2MKI9d6 FxaqwGR2Nww2YjyoXAazAhX5mosOj6Eg0eEN+NwEv0YV75m+rLQJPrjopR14mswd UKhs/lveUvDnzGrjfJZxY48LzIbiMPEDwFyuyEuh4gas2MEP37XwH90WukKJSoEd zXQwjdMxaJWZUsPz5Ty6Em1CaQRhFOwxwgBuuFraO4iTYM94WyCr6IYY+U4bn2db 9dBUa4cP3oRq0OgGyUE6LzaU2ULnq9NutQSqgAnek5zrldSuTcKZeLdEK5zQfnM4 UvMl51CnaG3M/0P+Tb1XuTzPjU4u/ej/fvS6V+dNgTMtz63pnNImvoGwJmDhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPR4VTeUXTgZDOlqMi6NoaXzecaswHwYDVR0j BBgwFoAUrVju0gzqBAG9695MopzC21nXETowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkhneE5zQUpmQTRpUzk0WmtGZjJ5WnlRQnlSb3piSjFFUFVBS0xmNXBi eUYvMC9BRDU4RUVEMjBDRUEwNDAxQkRFQkRFNENBMjlDQzJEQjU5RDcxMTNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENThFRUQyMENFQTA0MDFC REVCREU0Q0EyOUNDMkRCNTlENzExM0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkhneE5zQUpmQTRpUzk0WmtGZjJ5WnlRQnlSb3piSjFFUFVBS0xmNXBieUYvMC9B RDU4RUVEMjBDRUEwNDAxQkRFQkRFNENBMjlDQzJEQjU5RDcxMTNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUhXkNH2PBQYenLDo/zwi+Znyrc7kem713ruLevdF6UFg8NHGkSCqAZALHW3c SsLsJ9lLO2gnvJPvMNr9qqWis6CeUxf76GdS17n8jd4lQvU0up5zvsgU8N5DjYdb tik5/mg6Qpyq5D/Mvj+6/9AabV0t7cuL0cedJzchKQddIDTzipdO14EnLh/zl5lL 6AjrdO/Ayn5XzSH48XI8a5DfAIUhRPwIPZhsfEQTvHNX3LlWfuM1o/rilJodYQc+ uPMLBsT44geNmsb27R2wQu+jwro/jrdYmx3sj9SLnkEhjzYlPr8LXCWyIAOA5Ha1 0YQTxpHiicDjgds7+g7DK27mzA== -----END CERTIFICATE-----Generated at Sun Aug 10 04:47:29 2025 by rpki-client