$ rpki-client -vvf rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft File: 2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft (raw, json) Hash identifier: 9yME2QmHDVu9o7jwFT8Sr7j54fqhK2hphmD475Br7LY= Subject key identifier: 6F:D9:B7:3C:FF:99:E7:A6:40:27:6B:56:9D:F0:85:F6:19:5E:50:C5 Authority key identifier: 2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B Certificate issuer: /CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B Certificate serial: 297A16EF73C9FE6D67ADD86A5E65A48532550653 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft Manifest number: 028C Signing time: Tue 05 Aug 2025 05:21:48 +0000 Manifest this update: Tue 05 Aug 2025 05:16:48 +0000 Manifest next update: Wed 06 Aug 2025 06:35:48 +0000 Files and hashes: 1: 323830343a316164383a3a2f33322d3438203d3e203532353839.roa (hash: nM9/FgUa0C68sG38T5nV/uNQ86svUq5vsVkQhqR+lIs=) 2: 2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl (hash: R3coX9oKgI4VIrnn4O3A7TaTu1kyqZ39lGlYm4nPuzY=) 3: 3137372e38372e34342e302f32322d3234203d3e203532353839.roa (hash: U1bU2vymA1trGo0kqdj5LljKi5zORYlms1D3T/ome8k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 06:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:7a:16:ef:73:c9:fe:6d:67:ad:d8:6a:5e:65:a4:85:32:55:06:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B Validity Not Before: Aug 5 05:16:48 2025 GMT Not After : Aug 6 06:35:48 2025 GMT Subject: CN=6FD9B73CFF99E7A640276B569DF085F6195E50C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:29:8e:76:b3:33:88:92:82:a4:8a:8e:22:d6: 27:3d:ec:e0:fc:c3:de:6f:f9:89:fd:da:8e:5f:3c: f5:64:82:7a:6a:59:ce:d1:28:c1:f7:04:5a:6d:75: 81:80:6b:77:57:d5:df:b0:f6:d5:e3:dc:2e:84:b6: 06:ca:68:7c:4d:61:02:a3:f6:00:1d:8b:4f:13:8c: 97:21:db:03:dd:f4:0e:fa:e5:05:6b:13:6b:c0:c8: 3d:6c:23:78:67:21:7f:65:dc:b5:fa:12:2e:c0:35: 62:4d:7a:ea:bf:0d:17:35:46:60:e7:1f:bd:01:12: 6b:a7:dd:f3:59:c5:bf:a2:5e:88:89:ab:ba:f9:3c: 26:68:56:7f:4d:86:69:51:59:7a:b6:81:6a:b0:f5: ff:e0:ad:76:37:51:6f:56:bd:e8:19:d4:73:45:5c: 1a:a8:eb:b0:03:2e:9c:e6:d1:57:18:77:a8:be:7e: 7d:1e:04:88:91:c7:6d:4c:45:2b:93:24:39:1f:16: 9f:d0:03:0a:ff:7d:0a:11:08:9d:15:d5:62:5f:bd: 48:94:e7:2f:3e:08:1a:5c:b1:76:c7:14:72:57:f6: 28:7c:b8:47:b7:f9:f1:a5:50:32:74:f7:66:0d:af: 5d:b4:15:c9:52:cf:d4:a3:69:cc:65:de:55:e1:e8: b5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D9:B7:3C:FF:99:E7:A6:40:27:6B:56:9D:F0:85:F6:19:5E:50:C5 X509v3 Authority Key Identifier: keyid:2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:18:e0:81:43:df:35:03:42:da:b7:ac:8c:37:14:87:b8:7f: 06:e0:61:8a:fb:c3:ee:6c:9a:19:a8:d3:fe:71:e4:44:6f:72: 8f:01:9d:57:67:98:77:fe:01:f3:7b:09:b1:19:2f:29:ba:13: 2c:fd:e8:0f:9e:18:96:22:d6:a9:16:34:62:06:24:86:87:29: f0:d7:d2:97:d1:05:ff:8d:c9:c9:2f:40:d2:0e:0c:10:9b:a9: 70:b7:22:ee:d3:1b:d6:68:21:5c:bd:ba:ea:3d:8b:95:c6:89: 61:62:b4:4d:cf:14:77:ba:42:bf:0a:38:8c:cf:56:96:73:0a: 7f:3d:2f:b1:a6:5b:8c:cb:a1:23:d1:ec:bd:76:d8:e0:a9:aa: a1:ed:2a:1d:18:09:bd:c4:ed:64:b0:dd:7a:0c:9e:4b:24:ec: 2b:99:2c:f4:55:5c:82:dd:99:fe:91:81:62:de:f1:9c:d8:87: af:3d:25:47:c8:2e:76:04:e3:95:3e:3d:e7:7d:cd:30:bd:01: b3:58:f3:c8:23:4f:44:9a:74:f1:ac:64:e5:48:fc:fb:3f:9b: 0c:0d:a6:e5:57:dd:1d:7a:17:cc:2b:81:3b:e6:a8:a5:de:d7: 4b:c4:b7:1c:27:be:d0:17:78:a8:40:74:37:00:1e:c5:c4:68: a9:df:e7:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKXoW73PJ/m1nrdhqXmWkhTJVBlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI0NzBFNUMyMzg4RkQ0RUUyN0ZEMDkzQTE4OERCNTFE NTdDQUQzQjAeFw0yNTA4MDUwNTE2NDhaFw0yNTA4MDYwNjM1NDhaMDMxMTAvBgNV BAMTKDZGRDlCNzNDRkY5OUU3QTY0MDI3NkI1NjlERjA4NUY2MTk1RTUwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcKY52szOIkoKkio4i1ic97OD8 w95v+Yn92o5fPPVkgnpqWc7RKMH3BFptdYGAa3dX1d+w9tXj3C6EtgbKaHxNYQKj 9gAdi08TjJch2wPd9A765QVrE2vAyD1sI3hnIX9l3LX6Ei7ANWJNeuq/DRc1RmDn H70BEmun3fNZxb+iXoiJq7r5PCZoVn9NhmlRWXq2gWqw9f/grXY3UW9WvegZ1HNF XBqo67ADLpzm0VcYd6i+fn0eBIiRx21MRSuTJDkfFp/QAwr/fQoRCJ0V1WJfvUiU 5y8+CBpcsXbHFHJX9ih8uEe3+fGlUDJ092YNr120FclSz9Sjacxl3lXh6LWPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUb9m3PP+Z56ZAJ2tWnfCF9hleUMUwHwYDVR0j BBgwFoAUK0cOXCOI/U7if9CToYjbUdV8rTswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3Y5WHhQRWt5ZXY4ZnNtZDdnZ3dMWE1pUHlOdmdWa2pBckg1UnhHRUpk WDEvMS8yQjQ3MEU1QzIzODhGRDRFRTI3RkQwOTNBMTg4REI1MUQ1N0NBRDNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNDcwRTVDMjM4OEZENEVF MjdGRDA5M0ExODhEQjUxRDU3Q0FEM0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3Y5WHhQRWt5ZXY4ZnNtZDdnZ3dMWE1pUHlOdmdWa2pBckg1UnhHRUpkWDEvMS8y QjQ3MEU1QzIzODhGRDRFRTI3RkQwOTNBMTg4REI1MUQ1N0NBRDNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlRjggUPfNQNC2resjDcUh7h/BuBhivvD7myaGajT/nHkRG9yjwGdV2eYd/4B 83sJsRkvKboTLP3oD54YliLWqRY0YgYkhocp8NfSl9EF/43JyS9A0g4MEJupcLci 7tMb1mghXL266j2LlcaJYWK0Tc8Ud7pCvwo4jM9WlnMKfz0vsaZbjMuhI9HsvXbY 4Kmqoe0qHRgJvcTtZLDdegyeSyTsK5ks9FVcgt2Z/pGBYt7xnNiHrz0lR8gudgTj lT49533NML0Bs1jzyCNPRJp08axk5Uj8+z+bDA2m5VfdHXoXzCuBO+aopd7XS8S3 HCe+0Bd4qEB0NwAexcRoqd/nBw== -----END CERTIFICATE-----Generated at Tue Aug 5 17:29:48 2025 by rpki-client