$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft File: 7A509BA48E79904F69690722D65AADB9AD3A47AB.mft (raw, json) Hash identifier: E1sFjoPkNuWWl/aC+3t7dUi10xQreyrlGn+CrEWSLZA= Subject key identifier: C1:D4:E5:89:29:71:AA:76:57:4B:75:57:13:76:08:3F:F1:0E:94:60 Authority key identifier: 7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB Certificate issuer: /CN=7A509BA48E79904F69690722D65AADB9AD3A47AB Certificate serial: 3D3F184A23DFF7452DAD930222E30C0015DFF88B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer Subject info access: rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft Manifest number: 028E Signing time: Mon 04 Aug 2025 17:10:00 +0000 Manifest this update: Mon 04 Aug 2025 17:05:00 +0000 Manifest next update: Tue 05 Aug 2025 20:58:00 +0000 Files and hashes: 1: 7A509BA48E79904F69690722D65AADB9AD3A47AB.crl (hash: WKJmubKuRrFA56Ncxt1CX1bKQTNnVDca3xdwRaaq1so=) 2: 323830343a323633343a3a2f33322d3438203d3e20323634333332.roa (hash: Ka+OlyvDYWNhX7z9FvJAz94zf3Wqeaw7Eay01YWxeq4=) 3: 3133382e3138352e32302e302f32322d3332203d3e20323634333332.roa (hash: rx5Zu0sL+XVwDW8gwYzOP+H4x5J1EEfuLondo22zp8Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 05 Aug 2025 20:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:3f:18:4a:23:df:f7:45:2d:ad:93:02:22:e3:0c:00:15:df:f8:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A509BA48E79904F69690722D65AADB9AD3A47AB Validity Not Before: Aug 4 17:05:00 2025 GMT Not After : Aug 5 20:58:00 2025 GMT Subject: CN=C1D4E5892971AA76574B75571376083FF10E9460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:07:34:eb:4b:7c:1c:74:18:61:28:73:77:7c: da:89:dd:2e:da:6a:64:af:39:f3:1a:dc:a0:26:94: c9:9e:68:82:5f:0d:c9:57:17:04:47:d5:5f:39:06: 2b:94:52:a0:03:9b:9e:41:4e:ca:cf:2f:ab:31:28: 7c:61:74:ab:91:46:8d:f5:43:2a:0b:93:5e:13:d2: 7f:8a:b8:27:cc:99:36:c6:d9:67:74:8c:9e:bd:19: 63:ce:69:23:9c:cd:72:41:ad:77:68:97:64:a2:27: 0c:77:b3:7e:0d:32:45:e5:90:a4:f1:5a:ec:d2:62: 14:d9:e9:ee:8f:a8:fa:ec:a4:47:3c:06:f6:83:cf: 74:65:29:c1:6a:1c:1a:ad:3f:a6:05:0f:23:b0:4b: 1f:7d:84:a9:25:81:2f:14:09:f9:db:0c:55:e6:2e: ed:8c:79:0c:dd:b0:48:c7:0a:42:de:9d:24:6e:60: e6:41:86:4e:ee:b0:31:50:3f:25:cb:71:5c:3b:05: 90:58:d6:8d:4f:ef:4a:3a:fa:c2:fd:63:05:5a:8a: 4b:3e:a5:3d:eb:57:14:61:66:7f:de:95:07:a1:b0: 4b:df:cc:60:57:f0:57:7b:4f:43:b8:c8:ef:60:d1: 0d:03:19:63:1b:3d:f5:51:de:42:d7:d8:42:e6:a3: 56:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D4:E5:89:29:71:AA:76:57:4B:75:57:13:76:08:3F:F1:0E:94:60 X509v3 Authority Key Identifier: keyid:7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ab:4a:0b:48:5c:1f:52:f1:59:88:96:a7:c1:cd:fe:e9:28: 1b:c2:8b:85:d3:cd:1b:cc:2d:d5:02:c1:37:49:2c:e4:82:6b: 04:54:da:87:49:67:c9:00:e0:73:21:cd:ce:62:4a:5e:44:4d: ef:61:f1:ec:ca:b9:de:27:e4:c8:27:e3:2d:10:b7:24:80:41: 23:33:0f:d8:a9:b3:0e:61:3e:47:62:f6:ad:8a:08:e3:93:05: c5:4f:4b:d4:b4:67:7f:c2:9c:03:7b:fd:bd:5d:36:ec:19:97: 79:72:bd:6c:b4:f4:fb:25:95:6e:a8:cf:b8:8a:f4:f2:02:d8: 4f:83:c8:94:c6:ef:42:7b:86:45:f6:09:e1:b0:3e:ff:74:7c: c9:3c:b9:a0:d0:0b:71:28:2e:9b:9e:ed:49:e0:a2:47:13:05: 87:fa:11:2b:2e:60:33:65:44:b7:2a:2b:87:8e:f5:a9:74:8e: 3e:f5:a0:b0:02:37:77:3a:5e:6e:76:b8:2b:94:10:b3:f8:2a: 80:a9:d1:b3:c8:56:2d:3d:0d:1e:49:e1:75:85:37:7c:1d:b8: 22:7d:69:3a:f5:9d:f5:b8:1c:bb:8c:d6:1f:90:66:52:cb:92: ca:4f:d3:ff:6a:f8:4e:8a:12:b7:d6:8b:29:ca:93:0e:e7:64: 3c:7f:82:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPT8YSiPf90UtrZMCIuMMABXf+IswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E1MDlCQTQ4RTc5OTA0RjY5NjkwNzIyRDY1QUFEQjlB RDNBNDdBQjAeFw0yNTA4MDQxNzA1MDBaFw0yNTA4MDUyMDU4MDBaMDMxMTAvBgNV BAMTKEMxRDRFNTg5Mjk3MUFBNzY1NzRCNzU1NzEzNzYwODNGRjEwRTk0NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLBzTrS3wcdBhhKHN3fNqJ3S7a amSvOfMa3KAmlMmeaIJfDclXFwRH1V85BiuUUqADm55BTsrPL6sxKHxhdKuRRo31 QyoLk14T0n+KuCfMmTbG2Wd0jJ69GWPOaSOczXJBrXdol2SiJwx3s34NMkXlkKTx WuzSYhTZ6e6PqPrspEc8BvaDz3RlKcFqHBqtP6YFDyOwSx99hKklgS8UCfnbDFXm Lu2MeQzdsEjHCkLenSRuYOZBhk7usDFQPyXLcVw7BZBY1o1P70o6+sL9YwVaiks+ pT3rVxRhZn/elQehsEvfzGBX8Fd7T0O4yO9g0Q0DGWMbPfVR3kLX2ELmo1bFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwdTliSlxqnZXS3VXE3YIP/EOlGAwHwYDVR0j BBgwFoAUelCbpI55kE9paQci1lqtua06R6swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzlOUGZaZWJxZ0hvUDV5TkN6VXhhM0pNU1BqS1ROZURmeFFRdmtwUEpO Rk0vMS83QTUwOUJBNDhFNzk5MDRGNjk2OTA3MjJENjVBQURCOUFEM0E0N0FCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBNTA5QkE0OEU3OTkwNEY2 OTY5MDcyMkQ2NUFBREI5QUQzQTQ3QUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzlOUGZaZWJxZ0hvUDV5TkN6VXhhM0pNU1BqS1ROZURmeFFRdmtwUEpORk0vMS83 QTUwOUJBNDhFNzk5MDRGNjk2OTA3MjJENjVBQURCOUFEM0E0N0FCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOqtKC0hcH1LxWYiWp8HN/ukoG8KLhdPNG8wt1QLBN0ks5IJrBFTah0lnyQDg cyHNzmJKXkRN72Hx7Mq53ifkyCfjLRC3JIBBIzMP2KmzDmE+R2L2rYoI45MFxU9L 1LRnf8KcA3v9vV027BmXeXK9bLT0+yWVbqjPuIr08gLYT4PIlMbvQnuGRfYJ4bA+ /3R8yTy5oNALcSgum57tSeCiRxMFh/oRKy5gM2VEtyorh471qXSOPvWgsAI3dzpe bna4K5QQs/gqgKnRs8hWLT0NHknhdYU3fB24In1pOvWd9bgcu4zWH5BmUsuSyk/T /2r4TooSt9aLKcqTDudkPH+CNw== -----END CERTIFICATE-----Generated at Mon Aug 4 22:18:08 2025 by rpki-client