$ rpki-client -vvf rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft File: 9A8CDCA9443D140D02860AA0070928656A172CE1.mft (raw, json) Hash identifier: dlHkiaqJm8WeGv5vFymIYP0SePaK/C+Sc6lsahxsuhc= Subject key identifier: 4B:69:6A:75:05:03:20:32:2C:F9:73:E5:E4:53:84:E0:23:A0:A3:6D Authority key identifier: 9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1 Certificate issuer: /CN=9A8CDCA9443D140D02860AA0070928656A172CE1 Certificate serial: 169BC0448B64D0398B249713D6BC78C4E01A53DD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer Subject info access: rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft Manifest number: 0290 Signing time: Fri 08 Aug 2025 03:00:18 +0000 Manifest this update: Fri 08 Aug 2025 02:55:18 +0000 Manifest next update: Sat 09 Aug 2025 05:50:18 +0000 Files and hashes: 1: 323830343a333930633a3a2f33322d3438203d3e20323636353230.roa (hash: 6QI59QFSBypQTZ5kO9smMt1xwKHCr2mkAkTRBmyy6jQ=) 2: 3137302e3234352e39322e302f32322d3234203d3e20323636353230.roa (hash: UXdHA797b5kGmZTBMIoKW3ejH3LItHlI0iAJwdYv0OA=) 3: 9A8CDCA9443D140D02860AA0070928656A172CE1.crl (hash: WH0sKnZ1b/IvMkwZy5BD5SvfnXOrm5ZX6odu67p11kI=) 4: 34352e3137372e3134302e302f32322d3234203d3e20323636353230.roa (hash: 8R4rvXI+iMslyFXB4PeOWRFCLmpgdZrCcLVZ5KHaVfI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.crl rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 05:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:9b:c0:44:8b:64:d0:39:8b:24:97:13:d6:bc:78:c4:e0:1a:53:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8CDCA9443D140D02860AA0070928656A172CE1 Validity Not Before: Aug 8 02:55:18 2025 GMT Not After : Aug 9 05:50:18 2025 GMT Subject: CN=4B696A75050320322CF973E5E45384E023A0A36D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fb:83:9f:e0:24:16:b7:af:56:3c:b3:ae:10: 6e:62:5d:13:67:c2:a8:5f:29:d3:4e:66:3f:05:3e: bb:a8:af:37:65:13:1f:cb:fa:4a:51:59:7e:91:7c: 68:50:fd:7a:46:2a:8e:61:90:6b:61:f4:69:41:a6: 91:53:e7:d3:68:ef:0d:dd:a6:8e:df:9a:cd:6f:1b: 69:cc:78:9f:bc:2d:c4:4e:39:01:1f:fd:d8:bc:9b: b3:f2:ee:94:82:a2:d9:25:66:d5:2f:52:c7:99:49: ba:f2:c4:3c:ad:8d:32:72:64:b1:51:7f:8f:0a:f2: 63:1d:d8:87:14:31:91:e6:83:a7:ec:d4:51:71:ee: 5b:de:81:1a:d9:f9:6d:56:8d:4b:78:fa:f1:9f:47: d6:4a:60:60:97:4f:a3:21:a4:a0:62:05:13:9a:de: 0b:51:80:45:b7:ad:b8:ec:1c:cb:db:bc:b6:2b:b3: 5a:af:da:6d:80:52:c4:13:68:f9:b2:71:ab:ef:a7: 9d:4f:2b:69:a8:b0:85:49:8a:12:83:e3:75:2b:80: 42:b6:c3:73:54:aa:70:9b:81:f6:e2:77:de:98:01: 92:40:a5:db:99:d7:b5:a5:39:e4:d5:90:a8:f1:a5: 9f:b8:14:db:b4:de:da:88:96:86:f8:1b:60:7b:ba: 9d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:69:6A:75:05:03:20:32:2C:F9:73:E5:E4:53:84:E0:23:A0:A3:6D X509v3 Authority Key Identifier: keyid:9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:8b:87:7d:ad:06:cd:0f:05:35:fd:98:45:a8:7b:2c:08:55: 64:89:18:a4:a0:c0:13:4b:68:70:c4:94:52:f2:42:1d:de:23: 58:e4:2d:1a:96:75:0f:c1:96:38:07:55:ba:c4:eb:81:80:5b: 67:7c:a6:3b:1c:d2:60:e9:6c:1a:7c:91:f9:b4:ab:33:b8:37: be:c3:a4:ad:91:ba:cc:ce:d7:60:b5:3d:d8:69:74:6f:3f:61: 0a:0f:af:28:c9:a0:aa:38:3c:b5:3d:a4:99:f2:17:59:c5:a4: d2:db:c0:9f:5b:f9:9c:4c:e9:b3:7d:f5:f2:18:e4:71:e4:15: 42:bb:88:1f:ee:35:31:48:45:da:7e:94:5b:74:f0:e8:24:33: 52:3f:5e:a4:5d:a0:3e:4d:3e:71:03:9a:60:2e:83:ac:8d:06: 7d:9f:6f:58:ac:98:d6:4b:76:67:a3:eb:61:f1:a1:09:b9:eb: 80:57:0e:28:34:62:f5:a8:cd:5b:6c:69:56:1b:dc:3f:90:33: b1:2b:e9:57:27:6b:f2:50:6d:41:e4:78:05:08:8c:8d:0b:e3: b9:84:4c:e1:14:b7:84:55:79:b5:0d:fc:71:5e:e1:74:55:d2: 26:d1:db:1e:7d:f9:88:eb:0f:3e:40:a0:46:b9:09:74:aa:54: 4d:89:0f:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFpvARItk0DmLJJcT1rx4xOAaU90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4Q0RDQTk0NDNEMTQwRDAyODYwQUEwMDcwOTI4NjU2 QTE3MkNFMTAeFw0yNTA4MDgwMjU1MThaFw0yNTA4MDkwNTUwMThaMDMxMTAvBgNV BAMTKDRCNjk2QTc1MDUwMzIwMzIyQ0Y5NzNFNUU0NTM4NEUwMjNBMEEzNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs+4Of4CQWt69WPLOuEG5iXRNn wqhfKdNOZj8FPruorzdlEx/L+kpRWX6RfGhQ/XpGKo5hkGth9GlBppFT59No7w3d po7fms1vG2nMeJ+8LcROOQEf/di8m7Py7pSCotklZtUvUseZSbryxDytjTJyZLFR f48K8mMd2IcUMZHmg6fs1FFx7lvegRrZ+W1WjUt4+vGfR9ZKYGCXT6MhpKBiBROa 3gtRgEW3rbjsHMvbvLYrs1qv2m2AUsQTaPmycavvp51PK2mosIVJihKD43UrgEK2 w3NUqnCbgfbid96YAZJApduZ17WlOeTVkKjxpZ+4FNu03tqIlob4G2B7up0dAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUS2lqdQUDIDIs+XPl5FOE4COgo20wHwYDVR0j BBgwFoAUmozcqUQ9FA0ChgqgBwkoZWoXLOEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmd5TllXTjlyOGZQV003d0NmZHB6M1JOaEh3aEFaeUNrQkhjcVh1OWlC VW0vMS85QThDRENBOTQ0M0QxNDBEMDI4NjBBQTAwNzA5Mjg2NTZBMTcyQ0UxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBOENEQ0E5NDQzRDE0MEQw Mjg2MEFBMDA3MDkyODY1NkExNzJDRTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qmd5TllXTjlyOGZQV003d0NmZHB6M1JOaEh3aEFaeUNrQkhjcVh1OWlCVW0vMS85 QThDRENBOTQ0M0QxNDBEMDI4NjBBQTAwNzA5Mjg2NTZBMTcyQ0UxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZYuHfa0GzQ8FNf2YRah7LAhVZIkYpKDAE0tocMSUUvJCHd4jWOQtGpZ1D8GW OAdVusTrgYBbZ3ymOxzSYOlsGnyR+bSrM7g3vsOkrZG6zM7XYLU92Gl0bz9hCg+v KMmgqjg8tT2kmfIXWcWk0tvAn1v5nEzps3318hjkceQVQruIH+41MUhF2n6UW3Tw 6CQzUj9epF2gPk0+cQOaYC6DrI0GfZ9vWKyY1kt2Z6PrYfGhCbnrgFcOKDRi9ajN W2xpVhvcP5AzsSvpVydr8lBtQeR4BQiMjQvjuYRM4RS3hFV5tQ38cV7hdFXSJtHb Hn35iOsPPkCgRrkJdKpUTYkPMg== -----END CERTIFICATE-----Generated at Fri Aug 8 21:02:21 2025 by rpki-client