$ rpki-client -vvf rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft File: BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft (raw, json) Hash identifier: Xz6jyaWwYauEi7d6vX6BNvVw/Wj01ULL6BxkW03JL6U= Subject key identifier: F9:79:75:E9:D4:B2:66:7C:59:D0:57:C5:73:C8:6B:64:F9:4A:DD:DE Authority key identifier: BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25 Certificate issuer: /CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25 Certificate serial: 7DF8AF4A1F4356E893A64F34B5CC5C94144CA9F9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer Subject info access: rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft Manifest number: 028C Signing time: Tue 05 Aug 2025 22:49:52 +0000 Manifest this update: Tue 05 Aug 2025 22:44:52 +0000 Manifest next update: Thu 07 Aug 2025 02:10:52 +0000 Files and hashes: 1: BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl (hash: /aZ7zLO4sGuPenbdV2jLOwka37pBjxPXSuDhcvJJYgk=) 2: 34352e3136352e3136342e302f32332d3332203d3e20323638363833.roa (hash: SFgnoC9b6XsOBWOxtYvSuXC8DcOSjBAvZ5UdN6KIgQ0=) 3: 34352e3136352e3136362e302f32332d3332203d3e20323638363833.roa (hash: 5bSUPkODUWs9/kJhkVx3i4fO1qFGfYEB0H4MohPcXH8=) 4: 323830343a353530303a3a2f33342d313238203d3e20323638363833.roa (hash: CY1cgckh5LfihHbyiE5qbTbYicOGwA3cdqSQfEjeJok=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 07 Aug 2025 02:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f8:af:4a:1f:43:56:e8:93:a6:4f:34:b5:cc:5c:94:14:4c:a9:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25 Validity Not Before: Aug 5 22:44:52 2025 GMT Not After : Aug 7 02:10:52 2025 GMT Subject: CN=F97975E9D4B2667C59D057C573C86B64F94ADDDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:32:79:64:30:ba:55:02:cc:ea:87:61:c4:13: 55:b1:ed:2a:7b:2c:f8:92:ef:df:46:bc:65:fe:29: d2:7c:2e:a2:0d:3c:a6:42:a6:24:60:ec:86:8f:59: 2c:ff:22:71:c9:c7:29:a1:f4:a6:80:f2:0e:cd:60: 53:7d:d7:13:24:5b:23:8f:5b:18:fe:7f:6f:ae:3b: 5a:8f:77:49:90:8c:bb:01:b8:57:75:3e:a9:b2:53: 28:13:3a:ff:2a:64:b8:5f:d0:ef:02:0e:8b:71:ad: 1e:6b:c4:ff:01:ef:22:fc:49:71:5a:65:58:32:d3: 87:41:ce:c1:bc:f0:8f:fb:32:2c:22:5d:e6:32:47: bc:84:ff:25:9d:e3:d2:25:7e:1a:5b:97:5d:29:a7: fb:97:0a:3d:6d:e6:d6:4c:6e:43:a5:08:4f:24:7a: e6:87:59:43:a6:c2:cc:dc:d7:90:9f:57:a9:18:bc: 27:4f:d5:cf:b9:db:99:ec:d2:c3:e2:71:6f:35:cc: 1e:a8:d8:41:5e:fe:0d:28:68:91:08:ed:c6:49:85: 6a:26:77:95:27:69:84:4c:0c:6e:73:f3:6c:28:52: 22:c2:af:08:97:81:e9:c2:c9:44:eb:a8:11:a4:90: 8c:f6:93:87:d7:19:0f:35:be:b9:ba:70:61:24:38: 5d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:79:75:E9:D4:B2:66:7C:59:D0:57:C5:73:C8:6B:64:F9:4A:DD:DE X509v3 Authority Key Identifier: keyid:BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:97:98:b1:e0:63:27:bf:89:dc:e7:d5:64:c1:83:20:94:6e: 6b:e3:21:85:e9:a6:5b:89:f5:95:05:79:b5:f1:b6:6d:ec:9e: 1e:45:0b:0a:d5:2c:bf:8a:37:8d:70:36:81:66:e8:0e:38:a6: 5f:4f:1f:2f:e6:03:68:5a:d6:78:ae:a7:6e:e7:c6:78:71:da: cb:b4:54:f2:72:f7:d9:70:7c:99:35:75:49:82:1e:16:af:43: a2:41:23:3f:bc:5a:e3:2b:4d:49:86:6f:af:72:be:51:bc:43: 2c:2f:ee:0c:19:85:74:11:22:87:d7:49:86:4f:c5:be:9d:6e: 61:24:f5:cb:00:4c:80:58:b0:19:62:e5:44:80:06:28:51:52: 4c:30:89:11:4c:af:a0:68:a4:1b:bf:70:3d:44:0a:d1:4e:6a: 46:2f:65:48:11:be:e0:aa:fa:07:7d:2e:aa:e7:47:21:01:04: 7c:34:61:05:47:5f:84:1a:0a:8e:45:2c:41:fe:ee:30:0e:6a: 49:72:ba:72:c7:29:cf:82:ec:9f:97:11:7f:9a:68:86:62:df: cd:e5:11:6e:65:a5:e2:ad:9c:3f:b9:64:a2:e0:30:f9:78:9c: aa:73:d6:1a:b9:cc:ec:db:60:d9:9b:1c:0f:b3:f6:50:ce:dd: a6:82:75:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUffivSh9DVuiTpk80tcxclBRMqfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU5MTkxRjIyMkQzNkZGN0VEOTQwQTJCNUU0OTFFMkE4 MDIxREEyNTAeFw0yNTA4MDUyMjQ0NTJaFw0yNTA4MDcwMjEwNTJaMDMxMTAvBgNV BAMTKEY5Nzk3NUU5RDRCMjY2N0M1OUQwNTdDNTczQzg2QjY0Rjk0QUREREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaMnlkMLpVAszqh2HEE1Wx7Sp7 LPiS799GvGX+KdJ8LqINPKZCpiRg7IaPWSz/InHJxymh9KaA8g7NYFN91xMkWyOP Wxj+f2+uO1qPd0mQjLsBuFd1PqmyUygTOv8qZLhf0O8CDotxrR5rxP8B7yL8SXFa ZVgy04dBzsG88I/7MiwiXeYyR7yE/yWd49Ilfhpbl10pp/uXCj1t5tZMbkOlCE8k euaHWUOmwszc15CfV6kYvCdP1c+525ns0sPicW81zB6o2EFe/g0oaJEI7cZJhWom d5UnaYRMDG5z82woUiLCrwiXgenCyUTrqBGkkIz2k4fXGQ81vrm6cGEkOF3pAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+Xl16dSyZnxZ0FfFc8hrZPlK3d4wHwYDVR0j BBgwFoAUvpGR8iLTb/ftlAorXkkeKoAh2iUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1lMRXd3c0Q4UXF3ZkxUaXN3UXFlZHZ2TVJTeWVyVlpyY0JkS1dCd0t2 eGsvMS9CRTkxOTFGMjIyRDM2RkY3RUQ5NDBBMkI1RTQ5MUUyQTgwMjFEQTI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFOTE5MUYyMjJEMzZGRjdF RDk0MEEyQjVFNDkxRTJBODAyMURBMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1lMRXd3c0Q4UXF3ZkxUaXN3UXFlZHZ2TVJTeWVyVlpyY0JkS1dCd0t2eGsvMS9C RTkxOTFGMjIyRDM2RkY3RUQ5NDBBMkI1RTQ5MUUyQTgwMjFEQTI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACZeYseBjJ7+J3OfVZMGDIJRua+MhhemmW4n1lQV5tfG2beyeHkULCtUsv4o3 jXA2gWboDjimX08fL+YDaFrWeK6nbufGeHHay7RU8nL32XB8mTV1SYIeFq9DokEj P7xa4ytNSYZvr3K+UbxDLC/uDBmFdBEih9dJhk/Fvp1uYST1ywBMgFiwGWLlRIAG KFFSTDCJEUyvoGikG79wPUQK0U5qRi9lSBG+4Kr6B30uqudHIQEEfDRhBUdfhBoK jkUsQf7uMA5qSXK6cscpz4Lsn5cRf5pohmLfzeURbmWl4q2cP7lkouAw+XicqnPW GrnM7Ntg2ZscD7P2UM7dpoJ1lA== -----END CERTIFICATE-----Generated at Wed Aug 6 11:19:56 2025 by rpki-client