$ rpki-client -vvf rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft File: 1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft (raw, json) Hash identifier: jZr1SWh1SxNrnJlTtqDodse4wWru4PE0y0MV4rrlLBU= Subject key identifier: AE:41:51:FB:D3:DC:90:C6:C8:FB:7F:36:20:3C:C7:74:F0:38:1B:43 Authority key identifier: 1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F Certificate issuer: /CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F Certificate serial: 4296B0A6969D2B0E107472172C55799F7A59A6D3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft Manifest number: 8C Signing time: Tue 05 Aug 2025 22:49:22 +0000 Manifest this update: Tue 05 Aug 2025 22:44:22 +0000 Manifest next update: Wed 06 Aug 2025 23:09:22 +0000 Files and hashes: 1: 323830343a386534343a3a2f33322d3438203d3e20323733343134.roa (hash: NpcxWvXzal1YKXgip4gJbMKKp8E5cO//NlFEyag8Gr0=) 2: 34352e3138322e3134382e302f32322d3234203d3e20323733343134.roa (hash: dbbmdVzbgg93YC+/yC7kPmE+pyR0GJJ9WJLl+Jcl/IY=) 3: 1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl (hash: 8w1uWpJISaLm6sYwI0CWwxqzBSixN/g1uGrScuSFFvc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 23:09:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:96:b0:a6:96:9d:2b:0e:10:74:72:17:2c:55:79:9f:7a:59:a6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F Validity Not Before: Aug 5 22:44:22 2025 GMT Not After : Aug 6 23:09:22 2025 GMT Subject: CN=AE4151FBD3DC90C6C8FB7F36203CC774F0381B43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2e:fa:65:60:9f:2e:39:40:99:b8:c7:99:45: d4:63:ad:7d:1e:c8:e8:4b:f6:e4:13:87:d8:93:b0: 6c:85:8c:d2:0c:50:72:b7:94:03:72:43:ab:7c:2b: b2:3d:50:8c:59:1c:37:18:5e:5b:c7:99:d5:93:06: 05:b8:8c:1c:59:d0:0c:97:a0:c4:c6:14:76:2e:cb: 32:45:0d:3d:43:6a:e4:ff:21:a1:2b:55:af:24:44: 57:bf:8c:9b:f9:35:ed:89:cb:12:f7:c5:f5:a3:5e: c3:97:ab:d3:0e:30:1a:50:c0:4d:8f:65:61:3a:07: b0:3e:83:f7:cb:c0:e4:c6:42:e7:fa:3a:a2:d0:84: 51:e8:a4:c8:7f:89:5b:3b:a7:1f:5a:98:e5:1c:6e: 4d:d4:68:4d:ef:f1:42:16:bf:d4:56:ea:f3:e0:7a: 29:50:9b:b2:83:6d:b1:71:5b:de:c0:e5:bb:01:8e: ea:31:7e:1f:0b:45:56:b2:e1:9c:1d:cf:b6:a0:cb: 78:77:87:60:bb:91:f4:3a:5a:4e:6f:7a:d9:b0:e0: e1:1f:45:e4:0e:81:b2:56:94:b5:34:c8:b8:9e:f9: 7e:01:fb:47:1a:cd:e4:16:78:b5:d0:3c:9f:4a:d3: d0:64:dd:b8:5b:6a:87:c9:5b:8d:4c:0b:92:ce:54: cc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:41:51:FB:D3:DC:90:C6:C8:FB:7F:36:20:3C:C7:74:F0:38:1B:43 X509v3 Authority Key Identifier: keyid:1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:68:39:5f:01:d7:57:bb:22:3b:43:7d:cb:6b:f4:59:10:59: 90:df:b6:51:95:22:3d:7b:f4:02:e3:ad:44:78:73:cd:ba:1b: 0f:c1:9d:98:db:ee:c0:ab:f0:a9:7b:7a:30:07:0b:09:31:d6: b1:15:6a:da:ec:c1:38:af:40:39:de:17:c9:90:1b:c1:9e:81: c9:76:00:0f:2e:79:a5:72:a3:db:19:f9:a2:85:0d:68:6f:c3: d9:ba:c1:9f:46:0f:24:5d:01:6a:ba:73:8c:5b:6e:7c:bf:14: 04:a9:0a:6e:3b:7a:db:71:d6:92:f1:a1:78:17:d8:45:cf:55: 35:e5:e3:42:ec:9a:62:ff:20:00:b2:d0:62:ce:e9:33:35:31: 53:11:30:6a:de:65:b1:d8:1d:42:61:7a:2b:79:64:38:26:97: c0:f4:cf:b1:98:56:37:37:83:28:7a:57:8e:48:61:0c:b0:20: d9:a4:07:a1:49:9e:40:22:48:00:9b:cf:0c:5c:08:bb:4a:3c: ba:4d:60:d8:03:b5:99:3e:88:93:89:bd:71:99:24:94:39:45: 6e:45:c4:5e:2e:c8:81:79:68:6b:03:42:92:fd:77:8d:49:7c: 10:69:7b:00:07:33:3c:c1:9b:f1:f0:fc:cd:fc:71:3b:7f:69: 2f:0e:52:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQpawppadKw4QdHIXLFV5n3pZptMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRkRDQTcwMzI5QjlEQ0QyMTc2MDlCRDlDRTU5NDJG RTFDNkEyRjAeFw0yNTA4MDUyMjQ0MjJaFw0yNTA4MDYyMzA5MjJaMDMxMTAvBgNV BAMTKEFFNDE1MUZCRDNEQzkwQzZDOEZCN0YzNjIwM0NDNzc0RjAzODFCNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLvplYJ8uOUCZuMeZRdRjrX0e yOhL9uQTh9iTsGyFjNIMUHK3lANyQ6t8K7I9UIxZHDcYXlvHmdWTBgW4jBxZ0AyX oMTGFHYuyzJFDT1DauT/IaErVa8kRFe/jJv5Ne2JyxL3xfWjXsOXq9MOMBpQwE2P ZWE6B7A+g/fLwOTGQuf6OqLQhFHopMh/iVs7px9amOUcbk3UaE3v8UIWv9RW6vPg eilQm7KDbbFxW97A5bsBjuoxfh8LRVay4Zwdz7agy3h3h2C7kfQ6Wk5vetmw4OEf ReQOgbJWlLU0yLie+X4B+0cazeQWeLXQPJ9K09Bk3bhbaofJW41MC5LOVMxDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrkFR+9PckMbI+382IDzHdPA4G0MwHwYDVR0j BBgwFoAUHO/cpwMpudzSF2Cb2c5ZQv4cai8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzVHOUhjVXpQQURjZGF4TnlDVE5KS1RhTUg2U0N4eWNpOTFQVlg1WGFt Q1gvMC8xQ0VGRENBNzAzMjlCOURDRDIxNzYwOUJEOUNFNTk0MkZFMUM2QTJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDRUZEQ0E3MDMyOUI5RENE MjE3NjA5QkQ5Q0U1OTQyRkUxQzZBMkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzVHOUhjVXpQQURjZGF4TnlDVE5KS1RhTUg2U0N4eWNpOTFQVlg1WGFtQ1gvMC8x Q0VGRENBNzAzMjlCOURDRDIxNzYwOUJEOUNFNTk0MkZFMUM2QTJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhGg5XwHXV7siO0N9y2v0WRBZkN+2UZUiPXv0AuOtRHhzzbobD8GdmNvuwKvw qXt6MAcLCTHWsRVq2uzBOK9AOd4XyZAbwZ6ByXYADy55pXKj2xn5ooUNaG/D2brB n0YPJF0BarpzjFtufL8UBKkKbjt623HWkvGheBfYRc9VNeXjQuyaYv8gALLQYs7p MzUxUxEwat5lsdgdQmF6K3lkOCaXwPTPsZhWNzeDKHpXjkhhDLAg2aQHoUmeQCJI AJvPDFwIu0o8uk1g2AO1mT6Ik4m9cZkklDlFbkXEXi7IgXloawNCkv13jUl8EGl7 AAczPMGb8fD8zfxxO39pLw5S5w== -----END CERTIFICATE-----Generated at Wed Aug 6 04:14:19 2025 by rpki-client