$ rpki-client -vvf rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.mft File: F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.mft (raw, json) Hash identifier: UwE0XoFcdOzK2dk2TmW5UHZaxxTxNxzHpBuimzj/NfU= Subject key identifier: A7:31:F9:50:BD:0C:0A:F6:38:91:B6:39:AD:12:70:EE:A7:CB:E8:30 Authority key identifier: F8:9C:05:D8:9E:9A:8F:66:D8:75:8D:1F:8B:5E:7F:00:AC:7A:2B:76 Certificate issuer: /CN=F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76 Certificate serial: 04868D10A36435021BB7FFC7AA1B77D15F01EE9E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.cer Subject info access: rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.mft Manifest number: 7A Signing time: Mon 04 Aug 2025 15:48:43 +0000 Manifest this update: Mon 04 Aug 2025 15:43:43 +0000 Manifest next update: Tue 05 Aug 2025 18:59:43 +0000 Files and hashes: 1: 323830343a313865343a3a2f33322d313238203d3e203631373631.roa (hash: lMKm2AmmLA2KyhRByU7NQAZHyx+VM/IIAvW3uO44Iqo=) 2: F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.crl (hash: pjIskDa3e+fcGPpX0qpN4hEM3fMAdHrKzCNXaaR87gw=) 3: 3137302e38322e38382e302f32322d3332203d3e203631373631.roa (hash: DeV3ghzClDhNWc5fI48Fh+wmoNn3hxAURf0+NWEs6+0=) 4: 3230312e3135382e32302e302f32322d3332203d3e203631373631.roa (hash: D+BmbotEMRuhgcf/8juLcrwkiiy0a0xn/fvzywyRNaA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.crl rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 05 Aug 2025 18:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:86:8d:10:a3:64:35:02:1b:b7:ff:c7:aa:1b:77:d1:5f:01:ee:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76 Validity Not Before: Aug 4 15:43:43 2025 GMT Not After : Aug 5 18:59:43 2025 GMT Subject: CN=A731F950BD0C0AF63891B639AD1270EEA7CBE830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:48:03:51:7d:c9:93:8d:97:b3:d0:ee:11:21: 01:72:f6:87:30:b8:87:79:ed:d1:f7:0a:86:7f:72: 66:01:8d:07:c4:5f:de:1d:17:f9:19:1d:34:fa:41: 5f:8c:16:a4:64:c3:8c:f3:70:73:30:ae:0c:ee:2e: 94:e4:3f:60:93:3c:bd:db:58:a1:41:ad:41:08:fa: 7a:91:eb:56:d5:65:1e:76:48:70:80:29:81:b1:61: 79:c4:9c:77:04:a2:c9:c6:dc:13:9d:e6:7b:e6:94: ef:a1:f1:d8:11:c8:21:00:74:24:11:ee:8b:fd:9b: 23:76:f1:bc:6c:f0:7d:1a:ff:f0:16:3e:54:01:72: 99:db:59:0d:d4:d6:6d:df:f2:7f:3f:7c:8a:6f:ed: e4:c0:a6:2d:a0:b4:e9:ac:1e:5f:b7:c9:6e:43:cc: f9:9d:ad:b2:20:f1:3f:b8:39:6c:4e:55:f6:b4:f1: f8:b6:17:e0:17:80:f8:1f:91:9d:5c:ea:41:db:f3: 35:ea:66:c4:28:8f:ac:12:2e:02:5f:d2:05:e9:2d: d7:f8:9b:7d:63:f4:0f:c7:67:ce:48:ff:36:1a:d5: c1:a3:a6:a5:b0:97:fd:41:33:c6:b0:f5:c6:86:20: ec:0c:26:6b:5f:0a:ab:66:c1:a8:7a:61:4f:30:db: c5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:31:F9:50:BD:0C:0A:F6:38:91:B6:39:AD:12:70:EE:A7:CB:E8:30 X509v3 Authority Key Identifier: keyid:F8:9C:05:D8:9E:9A:8F:66:D8:75:8D:1F:8B:5E:7F:00:AC:7A:2B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:0e:03:22:ca:46:ca:05:e6:8e:ec:59:2a:75:3a:41:ac:f1: dc:aa:0e:da:c0:2f:06:e9:a6:7b:f4:c7:d0:47:66:9a:50:63: 24:2d:27:77:45:88:0d:09:34:91:1d:53:5a:04:1c:8d:7c:da: 6f:7a:6a:36:94:4f:f7:f7:5f:ee:76:10:86:40:11:da:b6:89: ab:50:82:97:f9:4c:c0:77:61:31:4f:9b:2e:0b:cd:cd:2c:f1: 7e:b8:02:2c:af:90:be:10:c4:f2:8e:08:e5:dc:fb:67:31:12: 4f:75:16:1f:ab:3d:6b:9e:25:25:62:d2:b9:4e:d0:23:8b:78: 08:41:57:4b:52:e4:e6:68:d4:e0:8f:dc:5c:05:ef:81:93:1a: 30:54:54:a8:c1:f4:fe:a6:57:af:52:86:46:48:e2:a6:0e:bb: 3f:12:66:45:60:2c:a7:fd:9f:97:4e:ce:6d:d8:2d:e4:d0:23: 9f:0e:7e:9c:4d:b0:3a:8b:ad:9e:bd:78:9b:54:54:6f:68:e7: 1d:ba:33:ce:1e:7f:a7:32:16:c6:92:ff:cf:09:90:24:2d:71: db:a6:d7:65:73:64:70:8d:9c:b4:f6:55:b6:a5:df:e6:86:d4: 00:5c:16:1d:28:2b:e3:63:ee:93:cc:cb:29:47:be:6f:ec:6c: 8c:af:e5:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBIaNEKNkNQIbt//Hqht30V8B7p4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg5QzA1RDg5RTlBOEY2NkQ4NzU4RDFGOEI1RTdGMDBB QzdBMkI3NjAeFw0yNTA4MDQxNTQzNDNaFw0yNTA4MDUxODU5NDNaMDMxMTAvBgNV BAMTKEE3MzFGOTUwQkQwQzBBRjYzODkxQjYzOUFEMTI3MEVFQTdDQkU4MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHSANRfcmTjZez0O4RIQFy9ocw uId57dH3CoZ/cmYBjQfEX94dF/kZHTT6QV+MFqRkw4zzcHMwrgzuLpTkP2CTPL3b WKFBrUEI+nqR61bVZR52SHCAKYGxYXnEnHcEosnG3BOd5nvmlO+h8dgRyCEAdCQR 7ov9myN28bxs8H0a//AWPlQBcpnbWQ3U1m3f8n8/fIpv7eTApi2gtOmsHl+3yW5D zPmdrbIg8T+4OWxOVfa08fi2F+AXgPgfkZ1c6kHb8zXqZsQoj6wSLgJf0gXpLdf4 m31j9A/HZ85I/zYa1cGjpqWwl/1BM8aw9caGIOwMJmtfCqtmwah6YU8w28XjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpzH5UL0MCvY4kbY5rRJw7qfL6DAwHwYDVR0j BBgwFoAU+JwF2J6aj2bYdY0fi15/AKx6K3YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQm9LbjJlMmdpYlF3cnFRZTVWZE5ZQ3ZaWFV2NHRVZmk2UEhnTVZ0a3Qx YWQvMC9GODlDMDVEODlFOUE4RjY2RDg3NThEMUY4QjVFN0YwMEFDN0EyQjc2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4OUMwNUQ4OUU5QThGNjZE ODc1OEQxRjhCNUU3RjAwQUM3QTJCNzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qm9LbjJlMmdpYlF3cnFRZTVWZE5ZQ3ZaWFV2NHRVZmk2UEhnTVZ0a3QxYWQvMC9G ODlDMDVEODlFOUE4RjY2RDg3NThEMUY4QjVFN0YwMEFDN0EyQjc2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkQ4DIspGygXmjuxZKnU6Qazx3KoO2sAvBumme/TH0EdmmlBjJC0nd0WIDQk0 kR1TWgQcjXzab3pqNpRP9/df7nYQhkAR2raJq1CCl/lMwHdhMU+bLgvNzSzxfrgC LK+QvhDE8o4I5dz7ZzEST3UWH6s9a54lJWLSuU7QI4t4CEFXS1Lk5mjU4I/cXAXv gZMaMFRUqMH0/qZXr1KGRkjipg67PxJmRWAsp/2fl07Obdgt5NAjnw5+nE2wOout nr14m1RUb2jnHbozzh5/pzIWxpL/zwmQJC1x26bXZXNkcI2ctPZVtqXf5obUAFwW HSgr42Puk8zLKUe+b+xsjK/l4A== -----END CERTIFICATE-----Generated at Mon Aug 4 21:35:56 2025 by rpki-client