$ rpki-client -vvf rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft File: 8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft (raw, json) Hash identifier: ezD5eOGjAVIPmRlTISVH+0J7H67GY3Qf7qwBJiwS2jg= Subject key identifier: 5F:8D:8E:F2:8B:BC:B3:B5:E9:2E:BA:C4:EF:9D:08:17:3C:D8:47:EE Authority key identifier: 8F:A5:DE:96:82:20:D6:6A:91:64:CA:3A:A2:46:77:EF:9C:12:7E:E8 Certificate issuer: /CN=8FA5DE968220D66A9164CA3AA24677EF9C127EE8 Certificate serial: 6CDA4013F1051F9116B02071F22F1D1CE88B7456 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft Manifest number: 029E Signing time: Fri 08 Aug 2025 18:42:18 +0000 Manifest this update: Fri 08 Aug 2025 18:37:18 +0000 Manifest next update: Sat 09 Aug 2025 19:51:18 +0000 Files and hashes: 1: 323830343a3661633a376630303a3a2f34302d3430203d3e20323632363031.roa (hash: 2snvYOGpJCtNy79KrVoIQ+1upEgisrvIe+PcymU3JxA=) 2: 3137372e37352e3234302e302f32302d3234203d3e20323632363031.roa (hash: gfBJAuNHH60Mk6JXfLpN58DbrfIj+i/D/Aa1r4O8jp4=) 3: 323830343a3661633a3a2f33322d3333203d3e20323632363031.roa (hash: bVJ51Xgk4Od1w28rYgBH1+HLLM5myBZZHXOSJEw0m8o=) 4: 8FA5DE968220D66A9164CA3AA24677EF9C127EE8.crl (hash: EgDQGvaoDQVFiOQnYF2BMdmbNDNAOmSOYWLx5/CNGvw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.crl rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 19:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:da:40:13:f1:05:1f:91:16:b0:20:71:f2:2f:1d:1c:e8:8b:74:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FA5DE968220D66A9164CA3AA24677EF9C127EE8 Validity Not Before: Aug 8 18:37:18 2025 GMT Not After : Aug 9 19:51:18 2025 GMT Subject: CN=5F8D8EF28BBCB3B5E92EBAC4EF9D08173CD847EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:92:2f:f4:97:0f:81:01:bf:d7:bc:7a:c8:f4: dc:d6:9d:86:76:8b:dc:bb:f6:84:76:bd:ef:c4:8a: cd:76:46:0f:71:3e:9e:62:8c:07:b3:bb:9d:26:00: 2c:88:3e:ca:df:06:2b:88:ba:42:44:01:43:56:44: d2:e9:61:28:6d:26:52:e1:82:37:9f:e9:d7:83:38: 8d:14:d2:7f:c2:f0:a2:a8:d9:f1:3a:b6:bb:8b:04: fe:6c:90:1d:4c:68:d6:ff:9a:fd:a3:32:fb:fc:36: b3:bc:bc:e0:d7:fb:9e:a2:00:54:12:ea:8c:5a:90: 88:de:db:dc:49:5b:e7:72:55:ff:dc:05:fc:1a:f3: 04:cb:9f:67:39:eb:31:cc:24:b6:de:dc:a1:18:33: 9a:00:7f:c8:13:c3:d6:8e:f9:c3:a2:bf:6b:00:cd: 7f:85:55:ac:d8:57:39:d3:ce:81:02:87:0a:71:cf: 7c:51:f0:83:4e:9c:fb:09:cb:c8:35:10:d7:a4:6f: b6:bf:f3:4c:db:f0:38:00:31:f1:27:4b:e0:52:c7: 0b:a5:a9:d3:35:59:8f:60:ae:52:45:94:47:c1:fd: 05:ad:70:ec:f8:61:5d:73:9c:b9:29:eb:98:5c:8c: 9c:24:e2:5c:34:ae:eb:84:98:af:18:35:f5:c8:73: 20:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8D:8E:F2:8B:BC:B3:B5:E9:2E:BA:C4:EF:9D:08:17:3C:D8:47:EE X509v3 Authority Key Identifier: keyid:8F:A5:DE:96:82:20:D6:6A:91:64:CA:3A:A2:46:77:EF:9C:12:7E:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:17:5b:79:5c:05:b4:11:aa:ff:36:95:72:6b:53:1d:05:99: ce:11:83:6f:03:9d:1c:5b:88:09:43:ac:44:10:06:58:ee:de: cf:a5:f4:4f:e6:6e:df:a4:1c:34:90:fa:04:ba:73:85:07:f1: aa:a4:9b:05:c9:ce:d8:28:6c:90:fe:a1:6a:47:bc:81:40:92: a9:17:e9:b6:18:05:44:4e:99:c9:e4:99:d7:95:73:aa:41:2c: 59:e9:0f:05:87:4d:7a:05:53:ba:51:cd:cb:11:63:dd:c4:87: 2c:39:4a:7a:3f:c7:d5:25:0b:19:bd:60:4d:12:72:0f:69:7a: d5:0c:4a:1e:f7:bf:be:a6:51:57:35:0a:e0:3c:3a:9a:ea:5e: aa:c7:df:25:7c:a0:ac:99:da:12:f1:96:fc:f0:81:a4:30:39: c3:55:7c:ef:7e:da:bc:6b:07:6b:de:62:e1:ba:ca:6c:3e:ce: d7:6a:76:83:7a:66:a6:47:77:cc:d9:dd:d4:c6:a2:37:e4:17: 8d:fa:ee:bb:1a:5f:b9:b7:a7:20:3f:79:f4:21:6a:b0:d4:60: 97:16:95:bb:de:f4:ce:13:82:f9:ea:56:ec:9f:58:56:81:df: 90:1b:1f:2c:c9:d3:21:46:8a:a9:2d:c9:0b:d2:a4:6a:33:88: 15:04:27:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbNpAE/EFH5EWsCBx8i8dHOiLdFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZBNURFOTY4MjIwRDY2QTkxNjRDQTNBQTI0Njc3RUY5 QzEyN0VFODAeFw0yNTA4MDgxODM3MThaFw0yNTA4MDkxOTUxMThaMDMxMTAvBgNV BAMTKDVGOEQ4RUYyOEJCQ0IzQjVFOTJFQkFDNEVGOUQwODE3M0NEODQ3RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTki/0lw+BAb/XvHrI9NzWnYZ2 i9y79oR2ve/Eis12Rg9xPp5ijAezu50mACyIPsrfBiuIukJEAUNWRNLpYShtJlLh gjef6deDOI0U0n/C8KKo2fE6truLBP5skB1MaNb/mv2jMvv8NrO8vODX+56iAFQS 6oxakIje29xJW+dyVf/cBfwa8wTLn2c56zHMJLbe3KEYM5oAf8gTw9aO+cOiv2sA zX+FVazYVznTzoEChwpxz3xR8INOnPsJy8g1ENekb7a/80zb8DgAMfEnS+BSxwul qdM1WY9grlJFlEfB/QWtcOz4YV1znLkp65hcjJwk4lw0ruuEmK8YNfXIcyDVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUX42O8ou8s7XpLrrE750IFzzYR+4wHwYDVR0j BBgwFoAUj6XeloIg1mqRZMo6okZ375wSfugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0NXSGlvZzgxMldoRlF0WkRvaXNRNDlvMm51bXJKcEhuMVZCaU56Tmo4 TnAvMS84RkE1REU5NjgyMjBENjZBOTE2NENBM0FBMjQ2NzdFRjlDMTI3RUU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGQTVERTk2ODIyMEQ2NkE5 MTY0Q0EzQUEyNDY3N0VGOUMxMjdFRTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0NXSGlvZzgxMldoRlF0WkRvaXNRNDlvMm51bXJKcEhuMVZCaU56Tmo4TnAvMS84 RkE1REU5NjgyMjBENjZBOTE2NENBM0FBMjQ2NzdFRjlDMTI3RUU4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYRdbeVwFtBGq/zaVcmtTHQWZzhGDbwOdHFuICUOsRBAGWO7ez6X0T+Zu36Qc NJD6BLpzhQfxqqSbBcnO2ChskP6hake8gUCSqRfpthgFRE6ZyeSZ15VzqkEsWekP BYdNegVTulHNyxFj3cSHLDlKej/H1SULGb1gTRJyD2l61QxKHve/vqZRVzUK4Dw6 mupeqsffJXygrJnaEvGW/PCBpDA5w1V8737avGsHa95i4brKbD7O12p2g3pmpkd3 zNnd1MaiN+QXjfruuxpfubenID959CFqsNRglxaVu970zhOC+epW7J9YVoHfkBsf LMnTIUaKqS3JC9KkajOIFQQnAw== -----END CERTIFICATE-----Generated at Sat Aug 9 10:32:25 2025 by rpki-client