$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft File: CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft (raw, json) Hash identifier: o61oB/s9kC2CkqsUOtPRXS+tb/SLPkPFf9QyM6jTB8Y= Subject key identifier: 27:25:DD:52:38:FC:7D:F2:BD:7B:16:76:D7:7B:11:16:5F:07:AC:CA Authority key identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2 Certificate issuer: /CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2 Certificate serial: 4701C4F6F2515F39C4F26504E5589FECE7D827C5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer Subject info access: rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft Manifest number: 029A Signing time: Mon 04 Aug 2025 07:38:04 +0000 Manifest this update: Mon 04 Aug 2025 07:33:04 +0000 Manifest next update: Tue 05 Aug 2025 08:53:04 +0000 Files and hashes: 1: CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl (hash: sWRNZGLueGaNSkYR7WyInVe2MMh51m+YjFk6zbi4k0s=) 2: 3137302e3233332e3131322e302f32322d3233203d3e20323635303738.roa (hash: C8nl6i1YJBXuY7KqnNcHZ82XxRjwU4qb4KZwT3Ruswc=) 3: 3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa (hash: pWacx1NTt02D42bFq04vbBmqRB/XXWUQOecty6CnIa0=) 4: 323830343a333237303a3a2f33322d3430203d3e20323635303738.roa (hash: mWceP2rzR05Egi1VVd5zyaviINwwnfTfMxgvkPFbjos=) 5: 3137302e3233332e3131342e302f32342d3234203d3e20323635303738.roa (hash: 6qqQly8fj1pIk6aSIlrvnSFvdMYQB2GBvscX+DADI14=) 6: 3137302e3233332e3131352e302f32342d3234203d3e20323635303738.roa (hash: RJSiz6X40u1exZ0lylVroJmRjsSn1sj876c4G/oZyzw=) 7: 3137302e3233332e3131332e302f32342d3234203d3e20323733373838.roa (hash: ssuLAytq/OHz9ywB7G0F/3NjIxPtlXCrc4g55U9IvkI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 05 Aug 2025 08:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:01:c4:f6:f2:51:5f:39:c4:f2:65:04:e5:58:9f:ec:e7:d8:27:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2 Validity Not Before: Aug 4 07:33:04 2025 GMT Not After : Aug 5 08:53:04 2025 GMT Subject: CN=2725DD5238FC7DF2BD7B1676D77B11165F07ACCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ef:f7:2b:6f:c8:fc:c9:f9:db:f5:ad:d0:9e: 89:52:d1:e5:df:1b:6b:f7:f6:1d:8a:5c:8b:ac:09: 5d:3d:97:ab:71:70:12:75:34:1d:e6:b5:64:ea:4b: 6a:6a:65:39:1a:a0:3e:fb:de:96:31:ef:7b:e2:cd: a3:10:65:dc:16:0a:d2:ae:a7:33:33:14:56:b0:89: 99:41:b9:bc:05:ff:ac:27:08:d3:3c:98:54:09:26: 59:04:04:17:36:ae:d1:db:57:b6:07:4f:b0:97:13: 5e:90:4b:c2:39:57:3b:cc:92:d4:b4:31:ce:4a:55: 82:e4:f4:bf:5f:63:b4:fe:f2:01:ad:53:5e:ff:bf: 23:66:f7:16:8c:92:a5:f7:88:a0:80:1b:a3:3f:7a: 70:d6:41:0a:f9:4a:54:13:65:ab:61:e3:14:8d:a7: 47:54:2e:1c:fd:59:20:18:e1:44:c6:94:4d:f5:f9: 6f:e3:1b:3c:b1:08:b3:bf:b8:53:8b:c9:e0:3f:a1: f4:02:47:91:79:31:52:71:a2:52:60:18:10:8b:ef: bb:7b:0e:85:66:26:e9:7b:a1:2b:63:71:bf:83:62: ab:11:66:0d:21:c4:46:03:6d:2b:25:53:1f:7a:b3: ad:cc:8d:8c:3e:99:4c:75:ec:ce:d7:5c:59:0d:e9: 39:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:25:DD:52:38:FC:7D:F2:BD:7B:16:76:D7:7B:11:16:5F:07:AC:CA X509v3 Authority Key Identifier: keyid:CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:20:0a:4a:c4:d1:6b:f5:24:2f:76:f1:80:ee:8d:46:56:40: 60:7e:d5:2a:21:96:43:0b:c9:8b:0c:6c:2c:17:47:de:4f:d9: f3:2a:b1:c8:99:63:35:b8:2b:de:3d:8c:91:96:8a:96:06:dc: 4f:9e:32:12:c5:1e:24:a3:c6:1a:c1:3b:bf:68:bc:4d:79:18: 57:7b:1b:b0:07:0a:99:84:a3:14:98:10:2f:58:e4:09:05:ba: eb:b4:22:0a:54:26:1b:e0:ac:36:ca:8c:22:47:87:a1:6e:de: 50:81:be:aa:77:aa:b5:f9:2d:8c:99:3a:a5:d5:49:bc:cc:c2: 7b:f8:31:33:86:4b:07:69:9a:dd:52:d6:76:f1:0c:20:99:39: 86:99:4f:a5:ac:d4:98:9f:a7:0b:da:93:80:7b:01:af:8d:47: 1d:44:3d:34:c2:8b:ee:ba:eb:83:a1:ae:6f:4f:b0:9f:7c:60: aa:f8:28:18:d0:f4:fd:3b:32:1a:83:4f:fd:89:9d:3a:5c:db: 4d:bd:c0:08:0e:55:ad:86:9a:ae:ad:6b:14:88:b7:00:d0:4b: 39:20:90:c9:4f:53:0d:e8:75:0b:c6:46:33:da:a7:81:5f:13: d1:c8:cf:f1:89:2a:3b:9b:cf:8c:4d:1e:bf:8c:32:46:b4:4d: c7:3d:5e:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURwHE9vJRXznE8mUE5Vif7OfYJ8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U5RTdENEZCNjY0RTNDRjJGQzkwRTk2MDRGQUUxOThB MUEzMDJCMjAeFw0yNTA4MDQwNzMzMDRaFw0yNTA4MDUwODUzMDRaMDMxMTAvBgNV BAMTKDI3MjVERDUyMzhGQzdERjJCRDdCMTY3NkQ3N0IxMTE2NUYwN0FDQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp7/crb8j8yfnb9a3QnolS0eXf G2v39h2KXIusCV09l6txcBJ1NB3mtWTqS2pqZTkaoD773pYx73vizaMQZdwWCtKu pzMzFFawiZlBubwF/6wnCNM8mFQJJlkEBBc2rtHbV7YHT7CXE16QS8I5VzvMktS0 Mc5KVYLk9L9fY7T+8gGtU17/vyNm9xaMkqX3iKCAG6M/enDWQQr5SlQTZath4xSN p0dULhz9WSAY4UTGlE31+W/jGzyxCLO/uFOLyeA/ofQCR5F5MVJxolJgGBCL77t7 DoVmJul7oStjcb+DYqsRZg0hxEYDbSslUx96s63MjYw+mUx17M7XXFkN6TmJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJyXdUjj8ffK9exZ213sRFl8HrMowHwYDVR0j BBgwFoAUzp59T7Zk488vyQ6WBPrhmKGjArIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDZiNXRkRkt5TjQ1dzNpcGRrZFJBN0hXSnlGdTRGb0VoY1VuWVJQNVdz VHYvMS9DRTlFN0Q0RkI2NjRFM0NGMkZDOTBFOTYwNEZBRTE5OEExQTMwMkIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFOUU3RDRGQjY2NEUzQ0Yy RkM5MEU5NjA0RkFFMTk4QTFBMzAyQjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDZiNXRkRkt5TjQ1dzNpcGRrZFJBN0hXSnlGdTRGb0VoY1VuWVJQNVdzVHYvMS9D RTlFN0Q0RkI2NjRFM0NGMkZDOTBFOTYwNEZBRTE5OEExQTMwMkIyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUCAKSsTRa/UkL3bxgO6NRlZAYH7VKiGWQwvJiwxsLBdH3k/Z8yqxyJljNbgr 3j2MkZaKlgbcT54yEsUeJKPGGsE7v2i8TXkYV3sbsAcKmYSjFJgQL1jkCQW667Qi ClQmG+CsNsqMIkeHoW7eUIG+qneqtfktjJk6pdVJvMzCe/gxM4ZLB2ma3VLWdvEM IJk5hplPpazUmJ+nC9qTgHsBr41HHUQ9NMKL7rrrg6Gub0+wn3xgqvgoGND0/Tsy GoNP/YmdOlzbTb3ACA5VrYaarq1rFIi3ANBLOSCQyU9TDeh1C8ZGM9qngV8T0cjP 8YkqO5vPjE0ev4wyRrRNxz1eVQ== -----END CERTIFICATE-----Generated at Mon Aug 4 21:43:35 2025 by rpki-client