$ rpki-client -vvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft File: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft (raw, json) Hash identifier: jerlwFniS93WeNObNNxvk5HbSYXMbf7poIJSIAjX8bY= Subject key identifier: 42:8F:E8:B8:C3:C6:AE:BC:F9:ED:75:48:FF:27:1D:47:52:60:55:34 Authority key identifier: 02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED Certificate issuer: /CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Certificate serial: 62BEFBD27668F15A3D0721F9AB312B7144174C96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer Subject info access: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft Manifest number: 0289 Signing time: Wed 06 Aug 2025 12:23:08 +0000 Manifest this update: Wed 06 Aug 2025 12:18:08 +0000 Manifest next update: Thu 07 Aug 2025 16:19:08 +0000 Files and hashes: 1: 3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa (hash: BzoyXL30Xsaxt5/GzA+mLV5q6XBxznhdO2qisUbseRg=) 2: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl (hash: mAe9RIgJ5oL3QhRfAo5ovP6H5cu2PvYBPpnSDnWW3kI=) 3: 323830343a313431633a3a2f33322d313238203d3e203533313330.roa (hash: cjsfM81trhoZs+Ib78YBfAQ97ux0mFDSEJNG8MM4Pa8=) 4: 3139312e372e37322e302f32312d3234203d3e203533313330.roa (hash: uXdeuicJG1GO+GJKUORCb4DqvhzxPyQ2Z5ORNJJFr7Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 07 Aug 2025 16:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:be:fb:d2:76:68:f1:5a:3d:07:21:f9:ab:31:2b:71:44:17:4c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Validity Not Before: Aug 6 12:18:08 2025 GMT Not After : Aug 7 16:19:08 2025 GMT Subject: CN=428FE8B8C3C6AEBCF9ED7548FF271D4752605534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:92:7a:22:bf:89:f1:84:aa:d0:d3:e6:32:bb: 67:e1:37:58:00:92:0c:1a:43:1b:c6:da:ab:07:62: 06:65:89:a1:e0:1e:b5:0d:fc:39:02:1d:48:16:31: 7d:57:12:20:e6:cd:3d:09:c0:d3:8a:5e:d0:ad:8c: 70:c0:a4:4b:f3:6a:50:fe:e5:ba:17:57:dd:0b:9f: d3:8b:c8:4e:d5:79:ec:f2:4b:1c:da:a5:f9:f1:49: 6c:f3:8d:5d:8a:4f:80:70:3e:51:7f:9a:a8:89:09: ff:71:b3:94:8c:35:a0:2c:38:0c:6e:0a:5e:a5:a0: a8:8c:c0:d5:b0:de:61:5b:eb:73:68:26:61:a1:2d: 1e:1b:29:c7:15:db:06:61:36:7e:ee:17:f7:af:01: 50:e8:09:72:99:28:61:11:c4:e0:0a:08:df:f9:89: da:58:75:c3:5e:41:d1:ab:81:3d:0a:44:a4:f2:e8: cb:81:3f:a1:dc:de:77:1d:9f:9b:a3:f7:df:ca:48: ab:4c:a9:62:51:ce:6a:22:4c:fe:04:58:18:87:9c: 14:fa:fc:b9:27:8d:de:3d:31:64:b6:0d:8f:07:61: dd:ee:e1:d2:b5:1e:d2:e0:88:49:a7:e9:06:94:62: 8a:82:f1:85:7a:fd:23:59:96:f5:14:10:29:67:98: 22:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8F:E8:B8:C3:C6:AE:BC:F9:ED:75:48:FF:27:1D:47:52:60:55:34 X509v3 Authority Key Identifier: keyid:02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:50:63:c6:f3:63:7e:90:6c:79:62:e1:ea:6c:10:88:08:51: 72:4a:f6:60:f5:95:26:d7:c9:c1:9f:0e:44:3f:b1:64:0f:7a: 5b:6f:39:d1:18:da:f7:ea:15:8c:66:0c:40:b6:85:b8:91:6d: 95:0b:4d:ad:32:99:97:b6:4e:60:9f:d3:e2:01:97:fb:6a:9b: 06:82:7a:9a:96:85:dd:5f:55:63:df:07:02:c9:fb:4b:d1:3c: 40:70:7a:23:25:94:b6:1a:eb:f1:c0:a5:97:cc:f9:7b:9d:65: 39:8f:d7:e8:c0:d8:a4:ba:f3:6b:62:66:40:dc:a2:15:49:a8: 40:c5:2b:e2:eb:14:94:66:f6:95:7b:fb:99:97:c9:cc:e1:35: 56:a0:5f:32:d3:34:d9:21:26:6d:99:a9:a9:61:07:00:db:b3: 4d:c5:bd:01:c3:fd:f2:5d:a0:ec:3e:f2:37:5f:b2:53:f9:70: 0e:e0:e7:21:09:c2:1c:af:5f:cb:8e:0f:10:84:7e:c5:7a:76: 3e:52:d8:71:48:cb:45:b8:bb:21:0f:a6:36:d4:15:90:03:36: f8:21:2c:fd:1a:03:63:7a:a6:cc:ca:59:32:33:ac:02:e2:5f: 51:4f:1d:ad:d0:5b:e7:7d:af:1d:4e:8c:28:13:72:34:1c:d1: 4d:42:10:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYr770nZo8Vo9ByH5qzErcUQXTJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJDQjk5M0U5NTg1QTUzRkM2QjQwREE3NjJBNzNFQjI4 MjFCRjZFRDAeFw0yNTA4MDYxMjE4MDhaFw0yNTA4MDcxNjE5MDhaMDMxMTAvBgNV BAMTKDQyOEZFOEI4QzNDNkFFQkNGOUVENzU0OEZGMjcxRDQ3NTI2MDU1MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEknoiv4nxhKrQ0+Yyu2fhN1gA kgwaQxvG2qsHYgZliaHgHrUN/DkCHUgWMX1XEiDmzT0JwNOKXtCtjHDApEvzalD+ 5boXV90Ln9OLyE7VeezySxzapfnxSWzzjV2KT4BwPlF/mqiJCf9xs5SMNaAsOAxu Cl6loKiMwNWw3mFb63NoJmGhLR4bKccV2wZhNn7uF/evAVDoCXKZKGERxOAKCN/5 idpYdcNeQdGrgT0KRKTy6MuBP6Hc3ncdn5uj99/KSKtMqWJRzmoiTP4EWBiHnBT6 /Lknjd49MWS2DY8HYd3u4dK1HtLgiEmn6QaUYoqC8YV6/SNZlvUUEClnmCINAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQo/ouMPGrrz57XVI/ycdR1JgVTQwHwYDVR0j BBgwFoAUAsuZPpWFpT/GtA2nYqc+soIb9u0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtM NlovMS8wMkNCOTkzRTk1ODVBNTNGQzZCNDBEQTc2MkE3M0VCMjgyMUJGNkVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyQ0I5OTNFOTU4NUE1M0ZD NkI0MERBNzYyQTczRUIyODIxQkY2RUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtMNlovMS8w MkNCOTkzRTk1ODVBNTNGQzZCNDBEQTc2MkE3M0VCMjgyMUJGNkVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVFBjxvNjfpBseWLh6mwQiAhRckr2YPWVJtfJwZ8ORD+xZA96W2850Rja9+oV jGYMQLaFuJFtlQtNrTKZl7ZOYJ/T4gGX+2qbBoJ6mpaF3V9VY98HAsn7S9E8QHB6 IyWUthrr8cCll8z5e51lOY/X6MDYpLrza2JmQNyiFUmoQMUr4usUlGb2lXv7mZfJ zOE1VqBfMtM02SEmbZmpqWEHANuzTcW9AcP98l2g7D7yN1+yU/lwDuDnIQnCHK9f y44PEIR+xXp2PlLYcUjLRbi7IQ+mNtQVkAM2+CEs/RoDY3qmzMpZMjOsAuJfUU8d rdBb532vHU6MKBNyNBzRTUIQjA== -----END CERTIFICATE-----Generated at Thu Aug 7 05:13:13 2025 by rpki-client