$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft File: 9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft (raw, json) Hash identifier: Wm8FU6bhf1jzS46sGxiLcKDlozG4ECP334XAT5iy8O0= Subject key identifier: 3B:98:89:F7:76:97:D9:64:86:6B:08:93:38:A8:C5:65:CF:50:C8:3A Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2 Certificate issuer: /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2 Certificate serial: 10060C01E00B78E40B37CA7580FD0083D0AB4469 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft Manifest number: FF Signing time: Sat 09 Aug 2025 21:15:42 +0000 Manifest this update: Sat 09 Aug 2025 21:10:42 +0000 Manifest next update: Mon 11 Aug 2025 00:30:42 +0000 Files and hashes: 1: 323830343a363862633a3a2f33322d3334203d3e20323639373132.roa (hash: 8RPnTiQ7wXRMCXsqv1axTDou5GdSXQ84NpnMqja7IR4=) 2: 3139302e3131322e3135362e302f32322d3234203d3e20323639373132.roa (hash: XsvSwhJsvhiN3zT4zP/EO47T43tGtKD9SfW4Q24OOT4=) 3: 9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl (hash: hu2vgCrtuJ8A0EZ841cjFiV3c2S9Ul0Uni70qgZ13xI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 10 Aug 2025 14:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:06:0c:01:e0:0b:78:e4:0b:37:ca:75:80:fd:00:83:d0:ab:44:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2 Validity Not Before: Aug 9 21:10:42 2025 GMT Not After : Aug 11 00:30:42 2025 GMT Subject: CN=3B9889F77697D964866B089338A8C565CF50C83A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7a:9e:3a:2d:33:a1:f3:aa:4b:0b:24:83:71: fc:65:40:c9:8d:29:fe:5b:55:a2:dd:4e:b7:02:24: 75:d8:47:11:b7:ae:cb:1f:1d:b1:89:f6:35:5e:ad: fb:95:cd:0f:2c:dd:34:8a:1c:6d:6f:32:6a:43:fc: a3:22:9c:64:54:16:42:57:ee:e0:3c:68:72:01:f4: a2:53:7f:b0:a7:49:d3:9b:9f:06:60:57:4f:f2:6a: 4d:e4:a6:c6:9b:37:3a:30:d5:43:d6:db:27:5d:3d: 32:47:1f:3a:b1:b9:83:ea:f3:f9:c1:e6:61:e6:9a: d7:14:2d:17:92:75:b7:e4:1a:a6:4a:7d:39:70:56: 68:44:a2:29:af:f7:78:ac:90:2c:73:69:15:33:2a: 96:7a:b2:f1:1d:ae:35:e9:3f:4a:19:28:c7:ae:ac: 0e:b5:3a:80:70:d8:bd:6d:bb:8b:39:48:5c:3c:df: 90:fd:b5:01:25:82:c8:86:20:c5:12:ad:79:f3:75: 2b:13:5c:75:a5:dd:2d:fb:ab:d6:a0:7f:f4:36:29: 3c:42:62:9b:5d:d4:29:07:be:91:b1:74:6b:ce:7e: 7f:42:17:91:e2:39:00:c9:9b:68:8e:65:a3:fd:46: 61:d0:cf:22:ee:72:95:e0:0e:e5:8f:d5:15:96:dc: c0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:98:89:F7:76:97:D9:64:86:6B:08:93:38:A8:C5:65:CF:50:C8:3A X509v3 Authority Key Identifier: keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:3b:f8:f1:be:85:c5:13:1a:0b:71:dc:42:8c:c8:60:a9:e1: 78:3b:30:a8:52:bd:47:4f:76:fc:76:e6:9e:8b:13:e6:5a:5d: d7:4e:ca:62:99:2f:a2:d6:29:52:30:eb:1d:55:b0:e7:01:d8: 65:57:63:78:0a:d7:07:7c:43:c5:0d:07:65:3a:9c:be:7a:ba: 2b:a6:14:28:6d:4c:0e:9b:e2:73:40:0e:d3:04:c6:79:4f:f6: e0:e8:86:f3:ed:a4:40:e8:98:6c:0a:22:b8:93:a8:20:c5:e8: 57:81:54:02:4d:1f:ae:11:2f:14:85:c5:fd:2e:2c:cc:4b:72: ff:2e:9a:cd:c0:ef:25:54:c4:cf:c2:ff:f6:f0:13:2e:fd:28: f3:f1:4a:46:d0:39:af:93:24:f2:43:46:8c:1f:88:1f:45:2b: 3b:e6:47:3d:d3:c5:e7:68:f0:85:be:89:a9:61:c8:0c:bb:ce: 4a:7c:b7:7e:de:31:7a:8f:28:18:9e:f5:65:53:39:48:d3:1b: 01:76:70:d9:df:25:77:e7:de:82:33:f2:59:4b:67:5b:2f:af: 26:11:b6:3f:ce:03:2d:c6:d0:45:80:e3:6d:62:11:e2:34:5a: 7b:e5:4f:2f:66:04:6c:cc:76:94:ad:5c:e2:6b:5c:cd:93:38: ba:11:16:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEAYMAeALeOQLN8p1gP0Ag9CrRGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI0MEMyQ0MxM0VBQjUwMzQ1RURBQ0ZBQ0MxNURCNDNF NjBCODVBMjAeFw0yNTA4MDkyMTEwNDJaFw0yNTA4MTEwMDMwNDJaMDMxMTAvBgNV BAMTKDNCOTg4OUY3NzY5N0Q5NjQ4NjZCMDg5MzM4QThDNTY1Q0Y1MEM4M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxep46LTOh86pLCySDcfxlQMmN Kf5bVaLdTrcCJHXYRxG3rssfHbGJ9jVerfuVzQ8s3TSKHG1vMmpD/KMinGRUFkJX 7uA8aHIB9KJTf7CnSdObnwZgV0/yak3kpsabNzow1UPW2yddPTJHHzqxuYPq8/nB 5mHmmtcULReSdbfkGqZKfTlwVmhEoimv93iskCxzaRUzKpZ6svEdrjXpP0oZKMeu rA61OoBw2L1tu4s5SFw835D9tQElgsiGIMUSrXnzdSsTXHWl3S37q9agf/Q2KTxC Yptd1CkHvpGxdGvOfn9CF5HiOQDJm2iOZaP9RmHQzyLucpXgDuWP1RWW3MDdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUO5iJ93aX2WSGawiTOKjFZc9QyDowHwYDVR0j BBgwFoAUm0DCzBPqtQNF7az6zBXbQ+YLhaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRt MmcvMC85QjQwQzJDQzEzRUFCNTAzNDVFREFDRkFDQzE1REI0M0U2MEI4NUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNDBDMkNDMTNFQUI1MDM0 NUVEQUNGQUNDMTVEQjQzRTYwQjg1QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRtMmcvMC85 QjQwQzJDQzEzRUFCNTAzNDVFREFDRkFDQzE1REI0M0U2MEI4NUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsDv48b6FxRMaC3HcQozIYKnheDswqFK9R092/HbmnosT5lpd107KYpkvotYp UjDrHVWw5wHYZVdjeArXB3xDxQ0HZTqcvnq6K6YUKG1MDpvic0AO0wTGeU/24OiG 8+2kQOiYbAoiuJOoIMXoV4FUAk0frhEvFIXF/S4szEty/y6azcDvJVTEz8L/9vAT Lv0o8/FKRtA5r5Mk8kNGjB+IH0UrO+ZHPdPF52jwhb6JqWHIDLvOSny3ft4xeo8o GJ71ZVM5SNMbAXZw2d8ld+fegjPyWUtnWy+vJhG2P84DLcbQRYDjbWIR4jRae+VP L2YEbMx2lK1c4mtczZM4uhEWIw== -----END CERTIFICATE-----Generated at Sun Aug 10 04:26:37 2025 by rpki-client