$ rpki-client -vvf rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft File: 203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft (raw, json) Hash identifier: KwI0ob8QqPaPDPacFA1L9YMJEVNXzzP6vpaYGarhlmY= Subject key identifier: 1C:8E:46:09:CE:C3:C7:90:90:89:58:4E:6B:03:40:99:1E:26:80:9A Authority key identifier: 20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7 Certificate issuer: /CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7 Certificate serial: 1EACB303A84AFBFECDF9D484390DEC341DE046D4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer Subject info access: rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft Manifest number: 028D Signing time: Wed 06 Aug 2025 06:38:01 +0000 Manifest this update: Wed 06 Aug 2025 06:33:01 +0000 Manifest next update: Thu 07 Aug 2025 09:05:01 +0000 Files and hashes: 1: 3137372e35342e3234382e302f32312d3234203d3e20323632323939.roa (hash: J9JKS/uOVSTf4lxE2/X712ak1j9CChp3U8mi1+Az2NM=) 2: 3137372e35342e3234302e302f32312d3234203d3e20323632323939.roa (hash: zzuAYXVxZSPy90ckTABafh3wBDFSIA6yCF8t1bKcPTw=) 3: 323830343a6138633a3a2f33322d3438203d3e20323632323939.roa (hash: EeO9rj+ZkVIkb2Nu0/KE+IFQ8hNAOE0eB+Vu/g/K8/8=) 4: 203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl (hash: kVHsS82rlIjOvAucB98EF7Z3T8JM0EF8cNsy3k11plI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 07 Aug 2025 08:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ac:b3:03:a8:4a:fb:fe:cd:f9:d4:84:39:0d:ec:34:1d:e0:46:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7 Validity Not Before: Aug 6 06:33:01 2025 GMT Not After : Aug 7 09:05:01 2025 GMT Subject: CN=1C8E4609CEC3C7909089584E6B0340991E26809A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cf:b9:51:92:d5:9c:09:d5:9e:d3:48:66:7b: d5:ac:ac:a5:49:77:b5:f2:b5:1a:82:a2:6c:59:41: 49:53:13:1f:3d:61:f9:91:6c:56:b1:1b:c8:58:3f: 5d:62:27:cf:63:39:6e:86:8f:39:ec:dc:8f:8a:64: 97:43:89:6e:7c:e6:2b:a2:64:66:58:06:2a:62:6f: 9b:c3:44:dc:fd:df:f4:f6:7f:44:6b:de:87:74:7c: 29:1b:72:4e:04:5f:0d:4a:ef:30:8c:fc:7f:1e:b4: cc:d8:7a:c7:11:32:3f:1e:ce:38:05:bc:d9:98:22: 30:8d:77:3c:a7:5a:33:42:2f:30:9c:93:08:77:a6: 95:3b:44:f9:3c:7e:a5:eb:22:bc:b9:4d:96:f2:d7: d8:89:ed:4c:ad:9f:84:5f:e9:eb:e7:ea:dc:d4:fe: 23:e0:ff:91:82:22:f5:41:f8:84:7f:df:88:49:56: 5b:cb:28:0e:8c:71:23:ad:fa:cc:3d:ff:d6:d2:54: 18:37:c2:4f:91:b3:f8:b5:12:7c:d0:50:ff:0a:a2: 88:32:72:a0:68:49:c9:56:da:d7:11:da:36:ae:6f: 8e:d1:75:77:90:25:05:60:6f:9e:54:07:89:85:74: 70:5a:fd:1b:be:61:ea:6d:cd:d7:e8:40:b3:1c:36: 81:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8E:46:09:CE:C3:C7:90:90:89:58:4E:6B:03:40:99:1E:26:80:9A X509v3 Authority Key Identifier: keyid:20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:21:42:e1:1c:f3:9a:1e:b3:75:1d:a8:b4:b9:af:c1:41:30: a6:d4:3b:7c:56:76:0d:63:6c:bd:3a:92:03:8a:f2:d2:9c:18: 95:d2:cf:cd:35:fc:eb:91:72:90:a9:bd:a2:a0:74:f2:f5:3c: 40:10:5d:56:29:23:31:af:0c:98:23:9d:0c:84:e9:2e:5a:94: ab:26:05:ca:a1:32:c4:18:2c:e7:e0:3d:af:51:c6:5b:0f:81: 70:16:27:f0:94:95:dc:99:ac:d2:4f:83:bb:78:b7:07:e9:21: 2c:25:35:4c:69:74:59:ba:83:ec:9b:c1:6b:54:4d:55:dc:b2: 6c:cb:18:85:75:2e:02:d6:de:ce:a9:9f:ca:1d:39:8f:c0:d9: d5:0e:70:00:b6:68:62:61:7a:0e:35:f5:b5:94:ac:6b:d3:51: 30:70:9c:ec:39:71:a4:30:0a:6a:24:eb:f4:8e:52:bb:12:a4: 4b:ea:42:45:99:20:0e:1d:58:01:ef:44:86:d4:aa:86:88:14: 85:49:fd:94:bc:88:d7:fc:d2:0a:3a:e7:be:8b:57:e8:cb:c5: 11:4e:c5:89:e1:7f:97:7a:3d:d1:c1:36:e5:8c:e2:22:f4:b3: 95:77:6f:86:3c:7e:45:8a:8a:b7:7a:3b:3f:91:eb:b6:42:e1: 0d:15:f8:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHqyzA6hK+/7N+dSEOQ3sNB3gRtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAzRENDQTdERTc5QzhDNERBQkFBMTBBNkNBOUU5M0VB N0QzOURGNzAeFw0yNTA4MDYwNjMzMDFaFw0yNTA4MDcwOTA1MDFaMDMxMTAvBgNV BAMTKDFDOEU0NjA5Q0VDM0M3OTA5MDg5NTg0RTZCMDM0MDk5MUUyNjgwOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQz7lRktWcCdWe00hme9WsrKVJ d7XytRqComxZQUlTEx89YfmRbFaxG8hYP11iJ89jOW6Gjzns3I+KZJdDiW585iui ZGZYBipib5vDRNz93/T2f0Rr3od0fCkbck4EXw1K7zCM/H8etMzYescRMj8ezjgF vNmYIjCNdzynWjNCLzCckwh3ppU7RPk8fqXrIry5TZby19iJ7Uytn4Rf6evn6tzU /iPg/5GCIvVB+IR/34hJVlvLKA6McSOt+sw9/9bSVBg3wk+Rs/i1EnzQUP8Koogy cqBoSclW2tcR2jaub47RdXeQJQVgb55UB4mFdHBa/Ru+YeptzdfoQLMcNoFxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHI5GCc7Dx5CQiVhOawNAmR4mgJowHwYDVR0j BBgwFoAUID3Mp955yMTauqEKbKnpPqfTnfcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkJ4dUxwQ2YzeWFlOU1HZUIyYzZUQzlheEJaR1pEVjV3Y1E1dmZGb3BH U0UvMS8yMDNEQ0NBN0RFNzlDOEM0REFCQUExMEE2Q0E5RTkzRUE3RDM5REY3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwM0RDQ0E3REU3OUM4QzRE QUJBQTEwQTZDQTlFOTNFQTdEMzlERjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkJ4dUxwQ2YzeWFlOU1HZUIyYzZUQzlheEJaR1pEVjV3Y1E1dmZGb3BHU0UvMS8y MDNEQ0NBN0RFNzlDOEM0REFCQUExMEE2Q0E5RTkzRUE3RDM5REY3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqiFC4Rzzmh6zdR2otLmvwUEwptQ7fFZ2DWNsvTqSA4ry0pwYldLPzTX865Fy kKm9oqB08vU8QBBdVikjMa8MmCOdDITpLlqUqyYFyqEyxBgs5+A9r1HGWw+BcBYn 8JSV3Jms0k+Du3i3B+khLCU1TGl0WbqD7JvBa1RNVdyybMsYhXUuAtbezqmfyh05 j8DZ1Q5wALZoYmF6DjX1tZSsa9NRMHCc7DlxpDAKaiTr9I5SuxKkS+pCRZkgDh1Y Ae9EhtSqhogUhUn9lLyI1/zSCjrnvotX6MvFEU7FieF/l3o90cE25YziIvSzlXdv hjx+RYqKt3o7P5HrtkLhDRX4FA== -----END CERTIFICATE-----Generated at Wed Aug 6 09:34:59 2025 by rpki-client