$ rpki-client -vvf rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.mft File: 20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.mft (raw, json) Hash identifier: 0rMVUZ3bh2TV5AVDX2BfE3HZkhQLHgW+h5bug0vCyMg= Subject key identifier: EE:32:D1:03:B8:45:8F:85:C5:57:1A:B9:77:D9:7C:86:7F:68:53:80 Authority key identifier: 20:E5:AB:E1:C1:0D:0B:4C:AF:5B:8A:8B:FD:0E:B5:59:D1:59:8D:5C Certificate issuer: /CN=20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C Certificate serial: 221CC793F8B7B3BA223D44102ADBBC0336B9496D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.cer Subject info access: rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.mft Manifest number: 40 Signing time: Sun 10 Aug 2025 17:02:08 +0000 Manifest this update: Sun 10 Aug 2025 16:57:08 +0000 Manifest next update: Mon 11 Aug 2025 20:20:08 +0000 Files and hashes: 1: 20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.crl (hash: SEa/H1vrUKDGsv6rR9eiKIq5myNCSPsDdjKcBnc5X24=) 2: 323830343a313538383a3a2f33322d3336203d3e20323633333933.roa (hash: RkMXKecvmW5kgrux+ScsWloo6oerwyF9YYoG25+10TE=) 3: 3137372e3232322e3230302e302f32312d3234203d3e20323633333933.roa (hash: pZZmxcSR9EAlttKYSeDpPeTr6SVaV3Klh3SCSp08wZk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.crl rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 17:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:1c:c7:93:f8:b7:b3:ba:22:3d:44:10:2a:db:bc:03:36:b9:49:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C Validity Not Before: Aug 10 16:57:08 2025 GMT Not After : Aug 11 20:20:08 2025 GMT Subject: CN=EE32D103B8458F85C5571AB977D97C867F685380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9f:9b:8a:ec:3a:d0:64:c6:51:89:bd:30:b9: 42:71:18:d1:28:62:71:95:6b:06:7f:f2:1c:1c:98: 1e:0a:e5:0e:df:fd:76:94:49:c0:4a:a9:87:7f:e7: 18:05:1d:cf:b4:f8:fa:dd:7e:f6:ad:30:83:2a:d9: 8d:38:4a:e7:45:b3:23:ff:57:f5:8f:65:48:ed:b1: df:58:81:b0:3b:56:13:9b:32:6c:1e:c3:26:50:53: 71:39:5a:6e:85:66:f1:1b:ef:b3:ce:ed:bb:71:cd: c1:9c:77:bb:ff:29:2a:05:db:0d:fc:05:fc:73:3f: 83:ef:63:95:d5:8c:8f:53:b3:f3:30:c1:21:3b:b6: 9d:ba:fa:db:58:9d:11:81:9f:ea:04:5e:ea:86:a5: 87:97:ae:56:2c:ea:a1:0f:9c:4e:e7:9f:c1:e8:51: 18:60:7c:30:13:d4:a4:09:48:8c:1e:ee:fb:6a:51: ab:15:f1:f3:d8:1b:a3:da:ae:62:db:e8:d4:87:dc: 7b:12:3d:af:37:b6:b5:51:a4:67:a2:7f:a9:64:91: 9e:8a:9a:11:49:31:8f:56:c0:65:c9:23:3b:a5:5a: 7d:7a:60:c5:65:1a:bc:da:f3:3c:62:38:98:cf:db: b5:37:a3:14:f8:5e:73:74:b8:6f:35:2a:83:ee:45: a3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:32:D1:03:B8:45:8F:85:C5:57:1A:B9:77:D9:7C:86:7F:68:53:80 X509v3 Authority Key Identifier: keyid:20:E5:AB:E1:C1:0D:0B:4C:AF:5B:8A:8B:FD:0E:B5:59:D1:59:8D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b8:ca:db:53:4e:4d:a9:a5:1b:72:99:6f:b9:17:31:ae:5f: 6a:59:57:0f:3c:95:53:1b:5c:4c:85:df:17:72:0c:4f:22:b5: e4:8c:33:ee:f2:83:b9:7e:3c:f4:bf:19:e9:8a:82:ce:f2:50: a9:ad:79:cb:68:f7:86:da:03:c1:c3:6f:39:d6:e8:52:28:04: 6f:17:98:db:15:30:13:00:26:f4:e1:83:e2:9e:4d:ca:67:56: b6:5f:ed:da:59:14:d3:30:12:69:2e:2a:02:75:ac:82:e1:dd: 98:1d:7f:12:a4:54:9b:6d:cf:31:55:de:a4:e1:6e:1b:5f:62: 2a:c8:9f:9d:60:aa:1b:74:e9:2d:5c:9d:4a:d7:3f:7e:5a:19: 4f:f8:68:16:c5:1d:89:06:c3:2b:00:93:1a:16:73:89:b7:1f: 85:cf:6a:aa:62:3a:c6:ab:e7:5a:76:b8:fb:f3:0e:71:98:6f: f2:f1:9f:fc:af:93:bf:95:a3:74:99:69:cb:20:17:52:0e:27: 93:49:93:19:c9:36:43:16:54:8f:a2:14:b2:3a:8f:39:5b:94: c0:e3:85:36:fa:58:8a:80:a8:f9:73:26:34:c0:a2:8e:bc:a2: 57:a0:3a:a2:e3:4d:df:2b:7a:92:19:16:ec:fa:5f:04:57:6e: a2:7c:82:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIhzHk/i3s7oiPUQQKtu8Aza5SW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFNUFCRTFDMTBEMEI0Q0FGNUI4QThCRkQwRUI1NTlE MTU5OEQ1QzAeFw0yNTA4MTAxNjU3MDhaFw0yNTA4MTEyMDIwMDhaMDMxMTAvBgNV BAMTKEVFMzJEMTAzQjg0NThGODVDNTU3MUFCOTc3RDk3Qzg2N0Y2ODUzODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMn5uK7DrQZMZRib0wuUJxGNEo YnGVawZ/8hwcmB4K5Q7f/XaUScBKqYd/5xgFHc+0+PrdfvatMIMq2Y04SudFsyP/ V/WPZUjtsd9YgbA7VhObMmwewyZQU3E5Wm6FZvEb77PO7btxzcGcd7v/KSoF2w38 BfxzP4PvY5XVjI9Ts/MwwSE7tp26+ttYnRGBn+oEXuqGpYeXrlYs6qEPnE7nn8Ho URhgfDAT1KQJSIwe7vtqUasV8fPYG6ParmLb6NSH3HsSPa83trVRpGeif6lkkZ6K mhFJMY9WwGXJIzulWn16YMVlGrza8zxiOJjP27U3oxT4XnN0uG81KoPuRaPDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7jLRA7hFj4XFVxq5d9l8hn9oU4AwHwYDVR0j BBgwFoAUIOWr4cENC0yvW4qL/Q61WdFZjVwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnBwUWVjWHo5VTRvNVJhRGZMenVIdHROQmJvR2QzeHJQM2dSajhOVHdY NTUvMC8yMEU1QUJFMUMxMEQwQjRDQUY1QjhBOEJGRDBFQjU1OUQxNTk4RDVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwRTVBQkUxQzEwRDBCNENB RjVCOEE4QkZEMEVCNTU5RDE1OThENUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnBwUWVjWHo5VTRvNVJhRGZMenVIdHROQmJvR2QzeHJQM2dSajhOVHdYNTUvMC8y MEU1QUJFMUMxMEQwQjRDQUY1QjhBOEJGRDBFQjU1OUQxNTk4RDVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAbjK21NOTamlG3KZb7kXMa5fallXDzyVUxtcTIXfF3IMTyK15Iwz7vKDuX48 9L8Z6YqCzvJQqa15y2j3htoDwcNvOdboUigEbxeY2xUwEwAm9OGD4p5NymdWtl/t 2lkU0zASaS4qAnWsguHdmB1/EqRUm23PMVXepOFuG19iKsifnWCqG3TpLVydStc/ floZT/hoFsUdiQbDKwCTGhZzibcfhc9qqmI6xqvnWna4+/MOcZhv8vGf/K+Tv5Wj dJlpyyAXUg4nk0mTGck2QxZUj6IUsjqPOVuUwOOFNvpYioCo+XMmNMCijryiV6A6 ouNN3yt6khkW7PpfBFduonyC+Q== -----END CERTIFICATE-----Generated at Sun Aug 10 18:48:56 2025 by rpki-client