$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft File: CA2ED340034D0368230850867C30E245990118A2.mft (raw, json) Hash identifier: YG5zdtCQHbelrTNdwFw93ANLtINzDFCn0+lnzWVMe8g= Subject key identifier: 9C:EA:02:C7:BE:38:F5:9B:EF:9C:72:26:D6:E6:D6:30:DF:8F:EB:56 Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2 Certificate issuer: /CN=CA2ED340034D0368230850867C30E245990118A2 Certificate serial: 4B08DF604A8149DB7767B648E41B65B2CFD10262 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft Manifest number: 02E0 Signing time: Tue 05 Aug 2025 11:10:00 +0000 Manifest this update: Tue 05 Aug 2025 11:05:00 +0000 Manifest next update: Wed 06 Aug 2025 11:10:00 +0000 Files and hashes: 1: 323830343a336438303a3a2f33322d3438203d3e20323636353335.roa (hash: tpoXD4T4EUi9EwpxT41fxDYxhlTzas0mOmEydCxj8EA=) 2: 3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa (hash: dTVML3Vbzw4YnIZhgLmRkiNFb188p4H6d/auTvRDB4A=) 3: 3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa (hash: rStpDynGRR2uvmjQkNNftRfa83aI9CFXepHd5ccjIOo=) 4: 3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa (hash: 5e4gcNEn5VL2vN7iW7nA5Df4Xfu26IOs2pc5B0p4lXc=) 5: 3136302e3233382e3136302e302f32332d3233203d3e20323636353335.roa (hash: yjU6PAJwL/lIZeEtQEZbUNPm0Zr33QD1yFw6wjO3p2g=) 6: 3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa (hash: bJTEqeP16XCpCH5JZabT/MCNKPhW6t9nzCk4I/T1oI0=) 7: 3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa (hash: lZ9umGE5NlyJckpUrEcRBf2qnDy03PIbFuZNB7UkcM4=) 8: CA2ED340034D0368230850867C30E245990118A2.crl (hash: 7/5f3N+FQYihJKy1uxMtvSK6SUN2E8QsxPNu5MzTToY=) 9: 3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa (hash: k3rhtpDLwoW36HfhrQiYO+psfP/HD50OXGIZu2C/YjE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 11:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:08:df:60:4a:81:49:db:77:67:b6:48:e4:1b:65:b2:cf:d1:02:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA2ED340034D0368230850867C30E245990118A2 Validity Not Before: Aug 5 11:05:00 2025 GMT Not After : Aug 6 11:10:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:99:ea:03:79:a3:03:88:1f:e2:4c:72:9e:84: c4:75:3e:3c:7f:44:21:81:eb:76:22:8f:12:ed:c1: 65:1d:5b:a0:7b:28:f8:4a:df:ad:0c:f6:21:02:e9: dd:73:f0:5b:48:d4:13:bf:b4:d8:54:10:63:ec:f6: 07:70:59:93:35:e8:32:f8:fd:66:43:17:a1:9a:b3: ca:9f:e4:46:1d:10:12:00:e9:4c:a9:e4:52:73:cc: db:ed:32:fd:0e:5f:f5:9f:a9:35:ff:a2:ce:4a:77: 53:97:82:9b:87:43:18:75:13:d3:9b:0a:4c:a1:8e: c3:0e:6c:5c:de:b2:6c:68:17:c0:0a:c7:46:8b:81: d0:53:1c:25:01:4b:12:5b:b5:4d:9a:3d:9c:94:f7: 85:b8:d1:7d:cc:3a:dc:36:23:fc:3e:fb:e4:87:4d: 44:51:14:26:af:75:95:46:77:d4:89:c2:64:bd:f6: 32:42:38:51:ef:15:b5:af:32:be:76:d8:3a:90:ba: a5:d3:35:b3:de:50:1e:5e:6c:32:1f:5c:fe:c3:73: 3f:6f:90:8b:7d:04:b9:ae:d2:e6:e1:81:37:ba:cb: 65:78:62:34:89:e5:d5:16:a0:e4:8e:c4:19:1a:cc: 3d:66:53:40:e8:02:38:3b:d2:44:22:dc:91:14:15: 35:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EA:02:C7:BE:38:F5:9B:EF:9C:72:26:D6:E6:D6:30:DF:8F:EB:56 X509v3 Authority Key Identifier: keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:95:96:22:cd:eb:d3:a5:28:c1:d4:5a:86:f5:c6:a7:75:3b: 9f:c6:41:59:21:3d:8c:0f:7b:18:7a:24:42:e1:a2:6e:2b:79: f2:70:0c:ec:4a:e9:0a:3a:0f:46:cc:9d:d4:a5:4d:f8:bb:c5: d7:ca:50:31:30:71:94:ed:9f:3e:8e:a5:ee:ae:39:9a:7a:d0: 64:34:7e:01:19:6d:63:b6:8f:7c:5d:81:6f:da:46:a2:31:18: 9a:43:00:4c:1f:b5:a3:7f:e7:f5:0f:a6:b1:dc:b3:83:a5:c9: f6:96:91:3c:82:c0:8b:fa:a1:2b:41:f1:f6:a8:cf:3c:ac:c2: b7:8d:0d:71:62:14:47:4f:0a:d5:65:b8:a7:7f:d6:dd:e5:3e: 3f:f4:be:7d:fb:7a:2b:69:71:d3:a5:8b:84:2f:92:3d:20:a6: 25:d4:bb:ee:f0:84:d7:20:b3:89:e1:9d:4e:bb:6d:4f:d3:4d: 02:50:e7:9a:61:4e:52:eb:be:b8:6e:e3:03:6e:5a:c1:c7:b2: c4:b6:56:aa:fc:f9:a5:ec:9c:8b:40:e1:95:d7:3a:09:25:87: 93:ff:e7:56:e1:c6:ee:b0:34:06:da:8c:b1:c5:f1:2b:7c:a4: b9:8a:01:52:55:27:86:20:a4:3d:f0:c3:54:58:bc:12:ce:34: a2:19:82:c4 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUSwjfYEqBSdt3Z7ZI5Btlss/RAmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyRUQzNDAwMzREMDM2ODIzMDg1MDg2N0MzMEUyNDU5 OTAxMThBMjAeFw0yNTA4MDUxMTA1MDBaFw0yNTA4MDYxMTEwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTQ5OUVBMDM3OUEzMDM4ODFG RTI0QzcyOUU4NEM0NzUzRTNDN0Y0NDIxODFFQjc2MjI4RjEyRURDMTY1MUQ1QkEw N0IyOEY4NEFERkFEMENGNjIxMDJFOURENzNGMDVCNDhENDEzQkZCNEQ4NTQxMDYz RUNGNjA3NzA1OTkzMzVFODMyRjhGRDY2NDMxN0ExOUFCM0NBOUZFNDQ2MUQxMDEy MDBFOTRDQTlFNDUyNzNDQ0RCRUQzMkZEMEU1RkY1OUZBOTM1RkZBMkNFNEE3NzUz OTc4MjlCODc0MzE4NzUxM0QzOUIwQTRDQTE4RUMzMEU2QzVDREVCMjZDNjgxN0Mw MEFDNzQ2OEI4MUQwNTMxQzI1MDE0QjEyNUJCNTREOUEzRDlDOTRGNzg1QjhEMTdE Q0MzQURDMzYyM0ZDM0VGQkU0ODc0RDQ0NTExNDI2QUY3NTk1NDY3N0Q0ODlDMjY0 QkRGNjMyNDIzODUxRUYxNUI1QUYzMkJFNzZEODNBOTBCQUE1RDMzNUIzREU1MDFF NUU2QzMyMUY1Q0ZFQzM3MzNGNkY5MDhCN0QwNEI5QUVEMkU2RTE4MTM3QkFDQjY1 Nzg2MjM0ODlFNUQ1MTZBMEU0OEVDNDE5MUFDQzNENjY1MzQwRTgwMjM4M0JEMjQ0 MjJEQzkxMTQxNTM1QzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEApJnqA3mjA4gf4kxynoTEdT48f0Qhget2Io8S7cFlHVugeyj4St+t DPYhAundc/BbSNQTv7TYVBBj7PYHcFmTNegy+P1mQxehmrPKn+RGHRASAOlMqeRS c8zb7TL9Dl/1n6k1/6LOSndTl4Kbh0MYdRPTmwpMoY7DDmxc3rJsaBfACsdGi4HQ UxwlAUsSW7VNmj2clPeFuNF9zDrcNiP8Pvvkh01EURQmr3WVRnfUicJkvfYyQjhR 7xW1rzK+dtg6kLql0zWz3lAeXmwyH1z+w3M/b5CLfQS5rtLm4YE3ustleGI0ieXV FqDkjsQZGsw9ZlNA6AI4O9JEItyRFBU1yQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FJzqAse+OPWb75xyJtbm1jDfj+tWMB8GA1UdIwQYMBaAFMou00ADTQNoIwhQhnww 4kWZARiiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4 RXZIVEhXaWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2 ODIzMDg1MDg2N0MzMEUyNDU5OTAxMThBMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9DQTJFRDM0MDAzNEQwMzY4MjMwODUwODY3QzMwRTI0NTk5MDEx OEEyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4RXZIVEhX aWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2ODIzMDg1 MDg2N0MzMEUyNDU5OTAxMThBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACeVliLN69OlKMHUWob1xqd1 O5/GQVkhPYwPexh6JELhom4refJwDOxK6Qo6D0bMndSlTfi7xdfKUDEwcZTtnz6O pe6uOZp60GQ0fgEZbWO2j3xdgW/aRqIxGJpDAEwftaN/5/UPprHcs4OlyfaWkTyC wIv6oStB8faozzyswreNDXFiFEdPCtVluKd/1t3lPj/0vn37eitpcdOli4Qvkj0g piXUu+7whNcgs4nhnU67bU/TTQJQ55phTlLrvrhu4wNuWsHHssS2Vqr8+aXsnItA 4ZXXOgklh5P/51bhxu6wNAbajLHF8St8pLmKAVJVJ4YgpD3ww1RYvBLONKIZgsQ= -----END CERTIFICATE-----Generated at Tue Aug 5 17:28:06 2025 by rpki-client