$ rpki-client -vvf rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft File: 4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft (raw, json) Hash identifier: 50I8sZayj7LwmYRXbsMDNUKJ+b6rb1VPiXEYEG/3bdg= Subject key identifier: EE:79:AB:B4:B2:CF:52:94:85:CB:D2:17:59:CE:CE:84:4C:C1:60:5C Authority key identifier: 4B:FC:C6:54:DB:42:48:ED:9C:C8:AF:C7:D6:1B:71:F7:0A:48:70:7E Certificate issuer: /CN=4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E Certificate serial: 311AFE3B0B4683ABC2952FA841E38730E24F5A11 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer Subject info access: rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft Manifest number: 028D Signing time: Fri 08 Aug 2025 19:23:28 +0000 Manifest this update: Fri 08 Aug 2025 19:18:28 +0000 Manifest next update: Sat 09 Aug 2025 20:59:28 +0000 Files and hashes: 1: 4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl (hash: lwzuYtIYlWC86zQ8jzltnizpv4SKpHGVRn+i865BJ0U=) 2: 323830343a363033383a3a2f33322d3438203d3e20323639313533.roa (hash: T4iUaekwa7W+wWBiZBhsMW92NOY/WFlQgDoo76BdH1c=) 3: 34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa (hash: tmAwqMhIhrFuqc+nYdV33Pa6/YiDFGZ4qnEWgs1O00c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 20:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:1a:fe:3b:0b:46:83:ab:c2:95:2f:a8:41:e3:87:30:e2:4f:5a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E Validity Not Before: Aug 8 19:18:28 2025 GMT Not After : Aug 9 20:59:28 2025 GMT Subject: CN=EE79ABB4B2CF529485CBD21759CECE844CC1605C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a6:8a:58:ab:1b:95:99:d6:02:86:62:0d:2d: 20:2d:c5:b7:b6:3b:09:73:f8:86:9b:7e:25:b8:d5: ef:a3:cb:50:f7:ea:a0:05:87:e1:4d:1e:c4:e1:9b: c7:eb:4b:71:2e:f4:61:a3:42:01:91:82:69:ca:94: 77:8e:d5:7b:2d:07:99:9d:e1:e8:58:98:17:aa:84: e8:5a:f5:03:22:1f:d0:68:43:a1:4b:18:d2:f6:b1: 64:6b:7a:79:51:fa:75:fb:07:0f:f5:3d:c3:36:e7: 99:a3:4d:11:d0:e9:ed:79:db:de:81:80:b5:80:4c: 8f:bf:ca:3b:4b:15:ac:e1:ba:02:74:0f:aa:03:4b: ec:b1:96:54:a5:ae:c0:44:96:71:ca:5e:08:42:92: 70:e9:70:cc:bb:66:d3:d5:8f:85:53:57:2e:c3:35: cc:7f:71:05:f7:86:4b:5e:34:1a:f9:48:8f:58:bb: 65:70:9f:7f:e1:d5:8f:e0:e4:b2:db:85:b8:22:24: 38:38:fd:54:d6:c9:3d:f7:51:ae:20:23:dc:2e:6d: e1:72:88:73:66:13:6c:81:51:58:11:1e:b5:22:76: 57:33:ef:3b:8d:fa:5a:b5:dd:ed:9f:90:e5:01:56: 51:dd:69:da:2b:2b:7f:07:97:c3:a7:a2:da:f2:bc: ef:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:79:AB:B4:B2:CF:52:94:85:CB:D2:17:59:CE:CE:84:4C:C1:60:5C X509v3 Authority Key Identifier: keyid:4B:FC:C6:54:DB:42:48:ED:9C:C8:AF:C7:D6:1B:71:F7:0A:48:70:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:89:e1:1d:17:32:bc:ec:7d:56:a2:5b:23:da:5d:ad:9a:e1: 64:10:e1:20:ca:b3:c1:a0:58:43:44:4d:e4:57:7d:7d:fd:b3: c2:b7:97:53:17:9c:63:67:52:fe:d9:cb:02:91:de:f6:b1:ef: a9:fd:01:e9:6d:4c:91:1a:64:5d:58:bc:58:5d:d6:0c:d3:06: 60:fd:bb:6c:fc:42:df:24:8d:22:a7:72:e5:db:99:fb:3c:c8: 3c:d0:55:5c:bc:1c:f9:d3:03:11:1e:94:19:a9:92:0f:a6:55: 77:4b:1f:fd:fd:fc:b3:01:bc:63:ba:f0:e8:5f:75:17:f0:c1: 7f:c1:6b:cc:4e:c2:61:87:43:1d:84:d0:37:c3:92:5b:27:5a: c4:ec:ad:bb:3d:97:a3:c5:0c:70:39:dc:ae:bd:34:a3:c8:87: 28:e9:dd:b5:45:82:f1:76:5a:6a:5f:da:12:96:a7:f2:4c:72: 18:3d:6f:09:87:c9:4a:dd:2d:22:12:25:ed:da:f6:02:f7:a3: c2:38:f3:65:1c:97:c5:56:18:9d:6e:57:58:93:f6:70:63:20: 0e:0b:73:66:65:1b:e6:1b:b4:57:23:ab:e7:00:aa:c6:2a:2b: 0a:be:36:5a:e0:46:7c:83:d8:2c:7a:21:c7:74:86:26:a4:9b: 43:bb:5c:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMRr+OwtGg6vClS+oQeOHMOJPWhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGQ0M2NTREQjQyNDhFRDlDQzhBRkM3RDYxQjcxRjcw QTQ4NzA3RTAeFw0yNTA4MDgxOTE4MjhaFw0yNTA4MDkyMDU5MjhaMDMxMTAvBgNV BAMTKEVFNzlBQkI0QjJDRjUyOTQ4NUNCRDIxNzU5Q0VDRTg0NENDMTYwNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0popYqxuVmdYChmINLSAtxbe2 Owlz+IabfiW41e+jy1D36qAFh+FNHsThm8frS3Eu9GGjQgGRgmnKlHeO1XstB5md 4ehYmBeqhOha9QMiH9BoQ6FLGNL2sWRrenlR+nX7Bw/1PcM255mjTRHQ6e15296B gLWATI+/yjtLFazhugJ0D6oDS+yxllSlrsBElnHKXghCknDpcMy7ZtPVj4VTVy7D Ncx/cQX3hkteNBr5SI9Yu2Vwn3/h1Y/g5LLbhbgiJDg4/VTWyT33Ua4gI9wubeFy iHNmE2yBUVgRHrUidlcz7zuN+lq13e2fkOUBVlHdadorK38Hl8OnotryvO9NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7nmrtLLPUpSFy9IXWc7OhEzBYFwwHwYDVR0j BBgwFoAUS/zGVNtCSO2cyK/H1htx9wpIcH4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3JaWHpmd2EyUDFpQzJVNmVNTVlGU1VrQnJmQzRDc2JVUjZ3QTJQVFZa QWgvMS80QkZDQzY1NERCNDI0OEVEOUNDOEFGQzdENjFCNzFGNzBBNDg3MDdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCRkNDNjU0REI0MjQ4RUQ5 Q0M4QUZDN0Q2MUI3MUY3MEE0ODcwN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3JaWHpmd2EyUDFpQzJVNmVNTVlGU1VrQnJmQzRDc2JVUjZ3QTJQVFZaQWgvMS80 QkZDQzY1NERCNDI0OEVEOUNDOEFGQzdENjFCNzFGNzBBNDg3MDdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIYnhHRcyvOx9VqJbI9pdrZrhZBDhIMqzwaBYQ0RN5Fd9ff2zwreXUxecY2dS /tnLApHe9rHvqf0B6W1MkRpkXVi8WF3WDNMGYP27bPxC3ySNIqdy5duZ+zzIPNBV XLwc+dMDER6UGamSD6ZVd0sf/f38swG8Y7rw6F91F/DBf8FrzE7CYYdDHYTQN8OS WydaxOytuz2Xo8UMcDncrr00o8iHKOndtUWC8XZaal/aEpan8kxyGD1vCYfJSt0t IhIl7dr2AvejwjjzZRyXxVYYnW5XWJP2cGMgDgtzZmUb5hu0VyOr5wCqxiorCr42 WuBGfIPYLHohx3SGJqSbQ7tcrg== -----END CERTIFICATE-----Generated at Sat Aug 9 10:47:38 2025 by rpki-client