$ rpki-client -vvf rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.mft File: 0F8527D7B78AAF3D805B156085B133DC25F008C2.mft (raw, json) Hash identifier: Z5DX8wrl+0mZidjAM8sHMGPvSd5SL2Eq2rLpuHvUnKU= Subject key identifier: 72:BC:FE:64:02:9C:ED:BC:9C:2D:2E:23:B9:41:DF:F2:7B:C4:4F:07 Authority key identifier: 0F:85:27:D7:B7:8A:AF:3D:80:5B:15:60:85:B1:33:DC:25:F0:08:C2 Certificate issuer: /CN=0F8527D7B78AAF3D805B156085B133DC25F008C2 Certificate serial: 2538B64A7FF3ED75E347EABA6356A1F5E92AAF53 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.mft Manifest number: 0291 Signing time: Sun 10 Aug 2025 17:02:14 +0000 Manifest this update: Sun 10 Aug 2025 16:57:14 +0000 Manifest next update: Mon 11 Aug 2025 18:12:14 +0000 Files and hashes: 1: 323830343a363238383a3a2f33322d313238203d3e20323639333032.roa (hash: mCi58gE6mto4l20v0MTk29C3Pqml+EIUm2zKqhd4tDY=) 2: 34352e3138322e3136342e302f32322d3332203d3e20323639333032.roa (hash: N9grxltOROc+ux6E/qeZmK2RCXheOYXSNWp+YJl41vA=) 3: 0F8527D7B78AAF3D805B156085B133DC25F008C2.crl (hash: xACuHUzzkfccvB/E+ewWtKyvaU3KE8MRK9Ele8+03Ao=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.crl rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 17:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:38:b6:4a:7f:f3:ed:75:e3:47:ea:ba:63:56:a1:f5:e9:2a:af:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F8527D7B78AAF3D805B156085B133DC25F008C2 Validity Not Before: Aug 10 16:57:14 2025 GMT Not After : Aug 11 18:12:14 2025 GMT Subject: CN=72BCFE64029CEDBC9C2D2E23B941DFF27BC44F07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5c:90:43:28:aa:67:2a:10:73:e9:24:be:69: c7:d1:a7:e7:34:29:72:55:b0:d2:e9:45:2f:84:2d: 6d:6d:6e:fb:dd:0c:ea:7c:32:6c:16:59:9b:74:71: c2:92:b4:45:17:55:0d:1e:f8:e3:76:fc:28:e1:3e: ae:51:fb:5b:1b:58:26:4b:cb:ba:8e:a2:14:51:76: 7f:f4:c9:d6:0b:3f:31:d6:84:3a:a8:67:47:31:d3: a2:c7:aa:bc:9a:71:8c:84:44:fb:87:33:03:76:8b: af:04:00:3c:f3:6d:8f:10:bb:74:9c:b9:42:95:dc: ec:f1:ec:92:17:39:75:d8:51:bf:57:cc:1c:40:3a: cf:e1:b2:2f:80:e1:d3:5b:9a:03:2a:22:1f:50:ba: 7b:fc:3e:bf:d4:5c:e3:0d:ff:3e:6a:bf:ae:5d:07: 9e:1b:d1:9f:fe:56:6c:df:93:cb:dd:29:74:10:ec: a3:b0:35:f6:1b:51:6f:ea:e3:95:24:37:01:5b:b4: 3e:de:85:ca:41:32:e7:f2:45:06:01:90:ac:a3:98: 09:28:1c:28:ba:17:67:4f:47:44:76:c6:d9:92:5b: 70:ec:2e:f7:ac:c0:12:64:31:da:c5:a0:5b:a6:74: 9f:80:29:b9:49:44:13:df:79:ea:2b:13:a6:1f:41: 70:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BC:FE:64:02:9C:ED:BC:9C:2D:2E:23:B9:41:DF:F2:7B:C4:4F:07 X509v3 Authority Key Identifier: keyid:0F:85:27:D7:B7:8A:AF:3D:80:5B:15:60:85:B1:33:DC:25:F0:08:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/1/0F8527D7B78AAF3D805B156085B133DC25F008C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:bb:6d:3d:54:7e:1a:bf:f1:de:10:ab:37:92:94:61:a4:e2: 58:98:d0:27:24:d2:37:45:7e:66:61:e7:4b:e2:4e:81:b3:1e: c3:51:10:6f:3c:9b:7d:fa:7c:8e:d5:ba:70:af:3b:97:f3:0a: 6a:eb:67:09:13:83:38:3c:2f:42:98:1e:34:85:f2:ae:6d:b7: 89:da:cd:a7:b9:cb:9f:b6:3d:6a:42:ab:86:2d:9c:5b:64:bb: e2:a6:1a:67:d0:08:39:a9:07:20:4f:17:10:0c:02:af:2d:1f: 27:ff:1d:38:be:7a:75:d6:59:38:8a:b2:85:e7:e0:af:6b:b7: 33:80:0c:5d:10:26:ce:63:8b:1d:bb:3c:70:ba:26:ab:29:32: 27:e8:f3:a1:18:ee:05:e0:9e:10:1e:66:e5:37:fb:b1:99:5c: d5:8f:56:5d:ae:c6:16:52:c4:21:f7:15:c2:12:3c:34:5e:62: 66:7c:62:e1:f6:bc:8f:5c:b9:41:9c:97:43:9f:cd:37:2a:6e: 3a:10:c7:8e:dd:4a:bf:64:f1:41:7c:ab:68:80:2f:21:8e:a9: 81:30:3a:f9:48:0f:a5:ec:fe:25:82:cf:cc:0a:12:11:7c:c2: 2b:3b:42:14:17:ea:b7:d2:bb:1d:94:29:ba:a2:7a:29:0b:6f: b3:54:3f:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJTi2Sn/z7XXjR+q6Y1ah9ekqr1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY4NTI3RDdCNzhBQUYzRDgwNUIxNTYwODVCMTMzREMy NUYwMDhDMjAeFw0yNTA4MTAxNjU3MTRaFw0yNTA4MTExODEyMTRaMDMxMTAvBgNV BAMTKDcyQkNGRTY0MDI5Q0VEQkM5QzJEMkUyM0I5NDFERkYyN0JDNDRGMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8XJBDKKpnKhBz6SS+acfRp+c0 KXJVsNLpRS+ELW1tbvvdDOp8MmwWWZt0ccKStEUXVQ0e+ON2/CjhPq5R+1sbWCZL y7qOohRRdn/0ydYLPzHWhDqoZ0cx06LHqryacYyERPuHMwN2i68EADzzbY8Qu3Sc uUKV3Ozx7JIXOXXYUb9XzBxAOs/hsi+A4dNbmgMqIh9Qunv8Pr/UXOMN/z5qv65d B54b0Z/+Vmzfk8vdKXQQ7KOwNfYbUW/q45UkNwFbtD7ehcpBMufyRQYBkKyjmAko HCi6F2dPR0R2xtmSW3DsLveswBJkMdrFoFumdJ+AKblJRBPfeeorE6YfQXBFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcrz+ZAKc7bycLS4juUHf8nvETwcwHwYDVR0j BBgwFoAUD4Un17eKrz2AWxVghbEz3CXwCMIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2dGVzRxVUhpaU1SN3l0MnVGMktnYnZDWExIMjdiYkFVc2N1MmJFQ1hx dEYvMS8wRjg1MjdEN0I3OEFBRjNEODA1QjE1NjA4NUIxMzNEQzI1RjAwOEMyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGODUyN0Q3Qjc4QUFGM0Q4 MDVCMTU2MDg1QjEzM0RDMjVGMDA4QzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2dGVzRxVUhpaU1SN3l0MnVGMktnYnZDWExIMjdiYkFVc2N1MmJFQ1hxdEYvMS8w Rjg1MjdEN0I3OEFBRjNEODA1QjE1NjA4NUIxMzNEQzI1RjAwOEMyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcLttPVR+Gr/x3hCrN5KUYaTiWJjQJyTSN0V+ZmHnS+JOgbMew1EQbzybffp8 jtW6cK87l/MKautnCRODODwvQpgeNIXyrm23idrNp7nLn7Y9akKrhi2cW2S74qYa Z9AIOakHIE8XEAwCry0fJ/8dOL56ddZZOIqyhefgr2u3M4AMXRAmzmOLHbs8cLom qykyJ+jzoRjuBeCeEB5m5Tf7sZlc1Y9WXa7GFlLEIfcVwhI8NF5iZnxi4fa8j1y5 QZyXQ5/NNypuOhDHjt1Kv2TxQXyraIAvIY6pgTA6+UgPpez+JYLPzAoSEXzCKztC FBfqt9K7HZQpuqJ6KQtvs1Q/jw== -----END CERTIFICATE-----Generated at Sun Aug 10 21:19:10 2025 by rpki-client