$ rpki-client -vvf rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.mft File: BCD84CFFDA0533E6587050A943123B0F8858F5DB.mft (raw, json) Hash identifier: HLWa5BzL8GYnNsa+kbmU2NCtODa9AkrxTLZal8BaWw0= Subject key identifier: 4E:C3:DF:73:0A:BF:8A:7A:7A:08:62:B0:F5:8D:66:10:DA:6C:F5:91 Authority key identifier: BC:D8:4C:FF:DA:05:33:E6:58:70:50:A9:43:12:3B:0F:88:58:F5:DB Certificate issuer: /CN=BCD84CFFDA0533E6587050A943123B0F8858F5DB Certificate serial: 0EEA29C62792058F0B45E8F6B84F02D35421101A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.cer Subject info access: rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.mft Manifest number: 028F Signing time: Sat 09 Aug 2025 22:57:08 +0000 Manifest this update: Sat 09 Aug 2025 22:52:08 +0000 Manifest next update: Mon 11 Aug 2025 01:50:08 +0000 Files and hashes: 1: 323830343a353662633a3a2f33322d3332203d3e20323638303230.roa (hash: mhx6cKgOhVLcKw675OTCHiP8tvbKUi0S6KHLqdPM4wQ=) 2: 34352e3136372e382e302f32322d3232203d3e20323638303230.roa (hash: dJ3B/3Tbn4gheIcX04EKHe9CZLqULlgtrBJ424/H1X0=) 3: BCD84CFFDA0533E6587050A943123B0F8858F5DB.crl (hash: 433zAjPoewyeHcCbn7/QTxCrck00hEbVXFtr6h7pjMc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.crl rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 01:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ea:29:c6:27:92:05:8f:0b:45:e8:f6:b8:4f:02:d3:54:21:10:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCD84CFFDA0533E6587050A943123B0F8858F5DB Validity Not Before: Aug 9 22:52:08 2025 GMT Not After : Aug 11 01:50:08 2025 GMT Subject: CN=4EC3DF730ABF8A7A7A0862B0F58D6610DA6CF591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:49:29:2f:7c:cc:96:83:1b:91:4b:5c:a7: 7f:ef:28:55:87:54:1e:0b:11:61:9f:a4:1a:72:d0: a3:a7:81:da:47:3d:e3:a5:de:61:8e:ce:59:a2:da: 12:e9:15:57:65:0b:05:1b:be:81:51:cf:7d:7a:31: f7:bb:8b:5f:73:2f:c0:60:1d:3a:48:fe:1b:5f:c2: 2c:15:0a:54:cf:77:8c:29:8f:79:21:83:e8:d6:00: bd:34:87:75:19:5a:1e:8f:7d:be:b2:76:35:92:44: a9:e3:f0:aa:13:3c:81:e8:5a:c2:71:56:63:ed:dc: e8:15:e8:4c:c1:e8:97:97:37:8a:b2:ba:f8:6f:26: 39:56:b6:84:85:87:ed:1e:55:27:b4:60:2c:21:61: bc:0b:ed:16:f6:0b:8f:d8:c6:5e:ce:74:ef:33:df: 30:c2:79:59:2d:65:56:b5:0c:f2:3e:5a:8b:8f:36: 22:b5:01:b2:8b:9c:ea:ea:b4:9c:36:b2:48:6f:d9: 36:10:2d:77:bb:7a:55:7b:d0:64:41:b5:2f:e8:2c: 1b:8b:8d:26:b7:6c:ea:a5:43:b3:0f:bb:02:fc:c8: 76:a3:71:d1:05:c0:95:d8:e3:0d:ff:98:ae:76:4c: 80:84:6d:25:41:4a:90:24:e9:a4:57:09:f0:b8:8d: 6e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C3:DF:73:0A:BF:8A:7A:7A:08:62:B0:F5:8D:66:10:DA:6C:F5:91 X509v3 Authority Key Identifier: keyid:BC:D8:4C:FF:DA:05:33:E6:58:70:50:A9:43:12:3B:0F:88:58:F5:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:49:df:8c:57:b0:fe:ad:11:7c:1a:26:05:a3:9c:db:3e:38: a2:91:4b:67:80:02:c6:33:86:d6:b3:40:b7:36:f9:35:45:ad: ef:1a:dc:bd:3c:0c:1f:22:02:b8:12:27:f9:76:0f:7b:09:de: ac:29:47:1b:9a:39:43:1f:26:64:73:96:39:f5:51:b8:7a:03: 38:c3:d2:b9:30:82:90:67:fc:4d:f6:61:eb:da:82:63:3f:95: 49:22:ac:f6:ef:09:90:4f:c3:9f:b0:e6:eb:32:43:55:4f:34: 56:eb:d2:1c:75:f3:76:51:0c:4f:85:73:25:c8:e4:03:b2:a4: e3:6e:12:89:73:a8:28:ea:aa:de:58:c2:60:d0:3d:9c:56:91: ce:83:fe:b8:18:36:ed:05:6e:e5:68:4c:fc:6e:c6:cb:f6:e6: 63:cd:3e:59:f7:01:41:0f:79:eb:0d:7b:0e:43:8f:8d:94:35: 24:af:b8:fa:83:29:37:83:d0:63:ac:56:a3:9a:03:98:63:fb: dd:c8:0b:01:d1:a0:9f:0d:e3:d8:fa:d4:71:f5:f9:c1:f5:6e: ce:12:de:6e:9d:2b:9f:bf:77:1a:b1:5d:03:70:82:31:58:c8: 0b:53:06:05:14:bd:7b:5d:2e:42:79:6a:38:56:1d:d5:ac:0a: da:55:26:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDuopxieSBY8LRej2uE8C01QhEBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNEODRDRkZEQTA1MzNFNjU4NzA1MEE5NDMxMjNCMEY4 ODU4RjVEQjAeFw0yNTA4MDkyMjUyMDhaFw0yNTA4MTEwMTUwMDhaMDMxMTAvBgNV BAMTKDRFQzNERjczMEFCRjhBN0E3QTA4NjJCMEY1OEQ2NjEwREE2Q0Y1OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6y0kpL3zMloMbkUtcp3/vKFWH VB4LEWGfpBpy0KOngdpHPeOl3mGOzlmi2hLpFVdlCwUbvoFRz316Mfe7i19zL8Bg HTpI/htfwiwVClTPd4wpj3khg+jWAL00h3UZWh6Pfb6ydjWSRKnj8KoTPIHoWsJx VmPt3OgV6EzB6JeXN4qyuvhvJjlWtoSFh+0eVSe0YCwhYbwL7Rb2C4/Yxl7OdO8z 3zDCeVktZVa1DPI+WouPNiK1AbKLnOrqtJw2skhv2TYQLXe7elV70GRBtS/oLBuL jSa3bOqlQ7MPuwL8yHajcdEFwJXY4w3/mK52TICEbSVBSpAk6aRXCfC4jW7DAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTsPfcwq/inp6CGKw9Y1mENps9ZEwHwYDVR0j BBgwFoAUvNhM/9oFM+ZYcFCpQxI7D4hY9dswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1JLNFVBbVpyMkUxVGhrcjJLVHF0NHA3d3Z6SGR3alpkZVA4dVRYTmVq V2QvMS9CQ0Q4NENGRkRBMDUzM0U2NTg3MDUwQTk0MzEyM0IwRjg4NThGNURCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDRDg0Q0ZGREEwNTMzRTY1 ODcwNTBBOTQzMTIzQjBGODg1OEY1REIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1JLNFVBbVpyMkUxVGhrcjJLVHF0NHA3d3Z6SGR3alpkZVA4dVRYTmVqV2QvMS9C Q0Q4NENGRkRBMDUzM0U2NTg3MDUwQTk0MzEyM0IwRjg4NThGNURCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo0nfjFew/q0RfBomBaOc2z44opFLZ4ACxjOG1rNAtzb5NUWt7xrcvTwMHyIC uBIn+XYPewnerClHG5o5Qx8mZHOWOfVRuHoDOMPSuTCCkGf8TfZh69qCYz+VSSKs 9u8JkE/Dn7Dm6zJDVU80VuvSHHXzdlEMT4VzJcjkA7Kk424SiXOoKOqq3ljCYNA9 nFaRzoP+uBg27QVu5WhM/G7Gy/bmY80+WfcBQQ956w17DkOPjZQ1JK+4+oMpN4PQ Y6xWo5oDmGP73cgLAdGgnw3j2PrUcfX5wfVuzhLebp0rn793GrFdA3CCMVjIC1MG BRS9e10uQnlqOFYd1awK2lUmRg== -----END CERTIFICATE-----Generated at Sun Aug 10 16:02:59 2025 by rpki-client