$ rpki-client -vvf rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft File: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft (raw, json) Hash identifier: Nfo6T2AXNPUY8JR/Q45utmAG7d2npp2R9ljpdzhegJw= Subject key identifier: F8:72:E4:A1:06:BB:64:70:6A:FE:C9:58:5B:07:60:A6:8A:36:52:24 Authority key identifier: D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB Certificate issuer: /CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB Certificate serial: 57D33DBE547D4A5D589CFDC357612D8365B8E1A5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer Subject info access: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft Manifest number: 58 Signing time: Fri 08 Aug 2025 06:12:29 +0000 Manifest this update: Fri 08 Aug 2025 06:07:29 +0000 Manifest next update: Sat 09 Aug 2025 06:24:29 +0000 Files and hashes: 1: 323830343a343461303a3a2f33322d3438203d3e20323637363433.roa (hash: OhP4AfZLm8wKcC8NRb3lR5wasqSW+ZFcBQBWlmtzm+0=) 2: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl (hash: Sao7d6A4WkXRPwjyQwDAm6GKwUE9ATo1+Rpmmy0isu4=) 3: 34352e37312e3232302e302f32322d3234203d3e20323637363433.roa (hash: DphYCMXiIhOunJYgpxuGmI/F5WVwTY6x8muqbHvOLD0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 06:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d3:3d:be:54:7d:4a:5d:58:9c:fd:c3:57:61:2d:83:65:b8:e1:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB Validity Not Before: Aug 8 06:07:29 2025 GMT Not After : Aug 9 06:24:29 2025 GMT Subject: CN=F872E4A106BB64706AFEC9585B0760A68A365224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:94:6e:bc:ec:c6:f7:de:05:10:84:e8:a9:a9: 20:df:e0:c6:d7:af:2c:63:ce:df:d8:6e:51:2d:5c: e3:62:27:0f:40:36:c2:cf:03:49:db:99:a0:5c:3b: a2:b1:71:ae:8b:53:84:02:ed:64:48:3f:2c:c8:76: 14:24:77:0b:10:f4:d3:0a:5c:ca:5e:73:b5:f8:bd: 51:f2:ab:75:6a:24:32:9e:a9:73:7e:9e:47:79:60: 70:0a:f3:91:8b:05:c9:6f:d7:65:86:ff:b2:4e:f9: 72:5a:3b:d1:a7:a5:55:74:7f:19:ec:3d:ce:14:20: d0:13:3b:b9:42:27:0b:f6:db:5c:87:fb:fd:40:60: 58:9e:77:a8:af:bd:82:eb:63:1e:74:8f:8e:c8:ce: 47:02:d8:99:e7:57:c6:71:0f:e2:7b:0c:44:e3:e6: 94:2f:f1:7d:ec:76:5c:aa:f0:d2:81:8c:af:bd:7a: 13:78:3d:cc:f9:0b:b7:fb:f8:25:b8:a7:14:59:3d: 7d:83:05:24:53:a6:90:f0:bc:94:a7:5f:28:b7:b4: 00:5a:2f:b7:44:cc:98:ae:e0:aa:1f:6e:58:c8:d7: 6c:db:2a:89:68:39:7a:47:a9:64:72:c1:6d:e6:78: af:d9:5e:2d:ee:76:ce:7a:46:59:45:b7:5a:7c:fd: 52:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:72:E4:A1:06:BB:64:70:6A:FE:C9:58:5B:07:60:A6:8A:36:52:24 X509v3 Authority Key Identifier: keyid:D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:cb:85:a3:37:63:39:26:94:d8:5e:a0:fc:71:fa:d2:60:67: 5c:ad:24:a6:d6:41:40:dd:78:09:89:3a:34:85:7a:5b:b6:54: fc:85:4f:e6:af:15:e0:72:18:52:a4:17:51:94:93:4c:b7:b7: 72:3a:7a:96:5a:20:f3:df:ec:e8:90:e2:a3:36:69:a5:a9:84: 2a:07:a9:a3:41:17:6d:dd:9c:d7:41:76:36:9d:c2:54:26:51: 0f:33:84:eb:25:6d:f0:d0:69:49:4d:95:68:7b:ba:47:b5:96: ef:84:d5:61:8e:c1:bf:c2:5b:77:1b:f5:fb:f7:a9:da:1f:28: b2:a3:17:17:6b:3d:14:cd:38:59:d8:43:08:09:bb:45:42:a3: 7e:79:7d:93:27:2b:db:d3:e6:03:a2:ad:bf:9a:2d:0c:7e:36: f7:23:4d:c0:31:fc:99:d6:c1:4c:2b:2d:ee:12:75:45:22:59: d5:e4:6b:56:bc:8c:ad:57:8f:7e:9e:35:f2:92:d6:04:cb:b3: 3f:ee:b2:c3:98:a1:76:20:c7:25:30:d7:94:d1:7a:ab:dd:db: 7b:fd:d7:72:eb:b2:5d:57:84:4c:ff:14:d7:10:d9:58:31:2b: c8:23:bd:ff:a6:e8:4e:70:f6:c2:c0:ca:6c:6b:3d:74:b7:29: 7d:41:42:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUV9M9vlR9Sl1YnP3DV2Etg2W44aUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk3MEYxN0M4NkQ0RDVBOUM2Mzk1RTlFMkQxNjAxQkJE OUZBOEJEQjAeFw0yNTA4MDgwNjA3MjlaFw0yNTA4MDkwNjI0MjlaMDMxMTAvBgNV BAMTKEY4NzJFNEExMDZCQjY0NzA2QUZFQzk1ODVCMDc2MEE2OEEzNjUyMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNlG687Mb33gUQhOipqSDf4MbX ryxjzt/YblEtXONiJw9ANsLPA0nbmaBcO6Kxca6LU4QC7WRIPyzIdhQkdwsQ9NMK XMpec7X4vVHyq3VqJDKeqXN+nkd5YHAK85GLBclv12WG/7JO+XJaO9GnpVV0fxns Pc4UINATO7lCJwv221yH+/1AYFied6ivvYLrYx50j47IzkcC2JnnV8ZxD+J7DETj 5pQv8X3sdlyq8NKBjK+9ehN4Pcz5C7f7+CW4pxRZPX2DBSRTppDwvJSnXyi3tABa L7dEzJiu4KofbljI12zbKoloOXpHqWRywW3meK/ZXi3uds56RllFt1p8/VJ9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+HLkoQa7ZHBq/slYWwdgpoo2UiQwHwYDVR0j BBgwFoAU2XDxfIbU1anGOV6eLRYBu9n6i9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzNDNHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhv dmIvMS9EOTcwRjE3Qzg2RDRENUE5QzYzOTVFOUUyRDE2MDFCQkQ5RkE4QkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NzBGMTdDODZENEQ1QTlD NjM5NUU5RTJEMTYwMUJCRDlGQThCREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzNDNHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhvdmIvMS9E OTcwRjE3Qzg2RDRENUE5QzYzOTVFOUUyRDE2MDFCQkQ5RkE4QkRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAksuFozdjOSaU2F6g/HH60mBnXK0kptZBQN14CYk6NIV6W7ZU/IVP5q8V4HIY UqQXUZSTTLe3cjp6llog89/s6JDiozZppamEKgepo0EXbd2c10F2Np3CVCZRDzOE 6yVt8NBpSU2VaHu6R7WW74TVYY7Bv8Jbdxv1+/ep2h8osqMXF2s9FM04WdhDCAm7 RUKjfnl9kycr29PmA6Ktv5otDH429yNNwDH8mdbBTCst7hJ1RSJZ1eRrVryMrVeP fp418pLWBMuzP+6yw5ihdiDHJTDXlNF6q93be/3XcuuyXVeETP8U1xDZWDEryCO9 /6boTnD2wsDKbGs9dLcpfUFCCA== -----END CERTIFICATE-----Generated at Fri Aug 8 19:39:28 2025 by rpki-client