$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft File: 89F33609E2B118C8ED9A105548D2D01FD6E38729.mft (raw, json) Hash identifier: aj82Iz9C7kqlSC22RMgN8gP6kNpaWZHwS8u8nYFO5ok= Subject key identifier: 9C:E4:08:34:A3:92:24:5A:6D:EE:44:98:72:7C:B4:3D:15:41:ED:0E Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 Certificate issuer: /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Certificate serial: 7DA96BE77FF0857AB3AA803EFC6A4F232699448F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject info access: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft Manifest number: 028A Signing time: Tue 05 Aug 2025 18:55:00 +0000 Manifest this update: Tue 05 Aug 2025 18:50:00 +0000 Manifest next update: Wed 06 Aug 2025 20:27:00 +0000 Files and hashes: 1: 323830343a313263303a3a2f33322d3438203d3e20323633343936.roa (hash: yCRnKe7Cfo4f5weE5YMpi/ZO3/1Psrg+aJlLbswl12Y=) 2: 3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa (hash: 91gQ1OFtC7i3YwbFOdgAOt94iN2xUARUXKGh62+Ssos=) 3: 89F33609E2B118C8ED9A105548D2D01FD6E38729.crl (hash: zZh1DiTYwIC9p3ym/LZ0HBYbOLbKZtEF618RLk9RQ4c=) 4: 3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa (hash: bMO8E7JDP414YIw6qvyG05VpeLGja7y87JGV9snRtok=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 20:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a9:6b:e7:7f:f0:85:7a:b3:aa:80:3e:fc:6a:4f:23:26:99:44:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Validity Not Before: Aug 5 18:50:00 2025 GMT Not After : Aug 6 20:27:00 2025 GMT Subject: CN=9CE40834A392245A6DEE4498727CB43D1541ED0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b3:f0:9d:36:78:f9:67:90:bd:e5:91:d9:05: 35:a5:f2:b0:e4:cf:01:5f:da:ff:ec:19:b1:bd:14: 03:98:2d:b9:7d:b1:d8:22:6f:41:48:ab:a3:e2:26: 38:7e:47:c3:ee:d7:ca:d7:22:32:e8:74:1e:32:b9: bd:29:ff:71:f4:3b:1a:df:44:07:0b:cd:19:a3:e0: 21:82:4d:31:a0:5e:97:46:3f:2d:ba:ed:3b:f7:a2: 27:8b:0a:46:4c:64:ad:27:79:98:25:d5:3a:2a:ee: a6:20:ab:18:8e:20:35:37:26:89:f0:67:66:af:4f: df:bc:9e:94:66:76:b9:3a:30:30:e2:4e:08:97:89: 74:89:06:9f:19:94:9e:46:69:3e:a7:ca:a9:f4:3f: 6d:51:93:d4:e9:10:f8:03:4f:b5:6a:19:14:42:88: bb:7c:9d:05:46:27:7e:40:4e:61:d0:e2:d9:7a:e7: a0:30:82:06:4b:8d:09:e4:f6:76:1d:c0:d8:3a:08: 0a:94:e5:a3:79:44:42:da:14:29:7e:eb:90:f3:02: d0:f6:22:47:04:62:97:97:4c:7c:07:03:a7:c6:e1: a9:39:0e:b6:31:16:53:58:33:c1:66:5e:6c:cf:7b: b4:65:7d:e9:67:d5:9e:21:99:9b:24:3c:fb:28:7b: 85:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E4:08:34:A3:92:24:5A:6D:EE:44:98:72:7C:B4:3D:15:41:ED:0E X509v3 Authority Key Identifier: keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:da:60:3c:c7:19:ad:af:42:fb:48:a4:2e:fe:d6:65:da:e2: b0:7d:c7:51:40:1c:a1:51:84:60:8f:52:70:72:c7:d0:68:2e: 3b:62:18:fd:b0:a5:6a:ec:fa:6a:2d:cb:51:fc:d9:f9:7d:f1: 5b:1c:08:fc:a0:1d:c4:a7:43:20:e7:8c:1d:b0:41:b5:e5:57: 0c:f5:e0:7e:18:f8:69:a8:4b:ac:c8:d1:e4:69:9b:88:b8:4d: ff:08:21:9b:1d:9d:9d:69:1b:cf:23:66:ff:60:12:36:38:f4: 27:16:18:a5:07:d6:e0:cd:46:7d:29:65:94:31:28:0e:01:f4: 27:06:df:98:a5:d6:c4:83:e7:4f:b6:2a:3f:00:5a:14:05:07: 8a:87:cd:0f:fa:28:09:5e:7a:4d:f5:00:47:a7:d8:07:fc:9a: 63:b6:f5:aa:f2:11:3a:5b:9e:ff:89:e9:89:07:9b:a8:c2:86: 22:ed:83:40:58:a7:14:cc:8a:50:31:f8:47:f5:57:dc:81:03: be:97:91:5c:d8:56:05:13:01:9d:2d:6f:ca:39:0f:53:57:78: 85:01:a3:77:08:93:ee:0a:07:9c:12:e7:57:6d:0e:c9:79:77: 3a:f1:34:43:79:f5:ba:97:02:d5:0a:7a:db:88:ce:74:ef:d2: f6:dc:73:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfalr53/whXqzqoA+/GpPIyaZRI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlGMzM2MDlFMkIxMThDOEVEOUExMDU1NDhEMkQwMUZE NkUzODcyOTAeFw0yNTA4MDUxODUwMDBaFw0yNTA4MDYyMDI3MDBaMDMxMTAvBgNV BAMTKDlDRTQwODM0QTM5MjI0NUE2REVFNDQ5ODcyN0NCNDNEMTU0MUVEMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCts/CdNnj5Z5C95ZHZBTWl8rDk zwFf2v/sGbG9FAOYLbl9sdgib0FIq6PiJjh+R8Pu18rXIjLodB4yub0p/3H0Oxrf RAcLzRmj4CGCTTGgXpdGPy267Tv3oieLCkZMZK0neZgl1Toq7qYgqxiOIDU3Jonw Z2avT9+8npRmdrk6MDDiTgiXiXSJBp8ZlJ5GaT6nyqn0P21Rk9TpEPgDT7VqGRRC iLt8nQVGJ35ATmHQ4tl656AwggZLjQnk9nYdwNg6CAqU5aN5RELaFCl+65DzAtD2 IkcEYpeXTHwHA6fG4ak5DrYxFlNYM8FmXmzPe7Rlfeln1Z4hmZskPPsoe4WPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnOQINKOSJFpt7kSYcny0PRVB7Q4wHwYDVR0j BBgwFoAUifM2CeKxGMjtmhBVSNLQH9bjhykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4 ekUvMS84OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RjMzNjA5RTJCMTE4QzhF RDlBMTA1NTQ4RDJEMDFGRDZFMzg3MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4ekUvMS84 OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWNpgPMcZra9C+0ikLv7WZdrisH3HUUAcoVGEYI9ScHLH0GguO2IY/bClauz6 ai3LUfzZ+X3xWxwI/KAdxKdDIOeMHbBBteVXDPXgfhj4aahLrMjR5GmbiLhN/wgh mx2dnWkbzyNm/2ASNjj0JxYYpQfW4M1GfSlllDEoDgH0JwbfmKXWxIPnT7YqPwBa FAUHiofND/ooCV56TfUAR6fYB/yaY7b1qvIROlue/4npiQebqMKGIu2DQFinFMyK UDH4R/VX3IEDvpeRXNhWBRMBnS1vyjkPU1d4hQGjdwiT7goHnBLnV20OyXl3OvE0 Q3n1upcC1Qp624jOdO/S9txz2w== -----END CERTIFICATE-----Generated at Wed Aug 6 10:09:33 2025 by rpki-client