$ rpki-client -vvf rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft File: 43230BA37049255C04E85C87D9F4BDD3B9313605.mft (raw, json) Hash identifier: EOVew7NFtVqPnkB7TjZpk2DYu2GoRKtIhd3P2FPwNuI= Subject key identifier: 69:9E:EC:97:40:E5:CD:08:57:38:71:21:A8:FD:AC:A3:D5:3C:55:A5 Authority key identifier: 43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05 Certificate issuer: /CN=43230BA37049255C04E85C87D9F4BDD3B9313605 Certificate serial: 385974A9C8E4A49CEA9B35AB33BFC99116A28946 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer Subject info access: rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft Manifest number: 028D Signing time: Fri 08 Aug 2025 08:31:59 +0000 Manifest this update: Fri 08 Aug 2025 08:26:59 +0000 Manifest next update: Sat 09 Aug 2025 12:19:59 +0000 Files and hashes: 1: 323830343a313435303a3a2f33322d3438203d3e20323632383631.roa (hash: 5Q9tiHGVOVDCj3G898IWOLh8INUElXpH3eiyHIywpQs=) 2: 43230BA37049255C04E85C87D9F4BDD3B9313605.crl (hash: FNauEkjLsYS/UdqjE8f5Tz6Lfhg81CF4FR+/4W01g3E=) 3: 3137372e31302e3232342e302f32312d3234203d3e20323632383631.roa (hash: yDvjRXifxWYJIZTut8sX9MAq2K/UFlRpCJxUt7efohI=) 4: 3139312e372e3136382e302f32312d3234203d3e20323632383631.roa (hash: 3UlOIp1JXcdTOtyXGjmZSygtLX1mH1cA31Z6zmF/6yE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 12:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:59:74:a9:c8:e4:a4:9c:ea:9b:35:ab:33:bf:c9:91:16:a2:89:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43230BA37049255C04E85C87D9F4BDD3B9313605 Validity Not Before: Aug 8 08:26:59 2025 GMT Not After : Aug 9 12:19:59 2025 GMT Subject: CN=699EEC9740E5CD0857387121A8FDACA3D53C55A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:dc:46:53:d2:86:57:94:89:3a:82:a9:10:ef: cd:1e:53:4c:81:ec:86:18:56:7a:17:75:bd:58:01: df:11:53:cd:6e:26:05:d9:40:9c:b6:cb:72:d5:5b: f3:93:49:45:73:8f:0a:66:db:79:54:0a:0e:15:0b: f4:b4:aa:b5:a0:84:09:67:a6:e1:dd:12:68:f4:6f: 28:39:8b:7d:63:72:b8:c3:3e:3e:04:bd:de:b3:9e: b0:b8:e3:53:45:46:55:81:8e:71:88:ad:30:cc:7c: f6:05:ad:36:3c:a7:51:57:fe:9b:04:96:ff:c6:c9: c2:15:55:3d:3e:df:7c:21:97:51:f1:0f:fb:02:a1: 61:90:74:e3:a6:fe:b6:23:51:e7:d3:05:11:52:da: 63:33:00:b2:b1:bb:81:0f:b4:29:56:70:4b:06:33: 34:6f:f2:4c:e5:9d:72:4a:77:05:41:9c:38:bd:8d: ce:7d:03:c5:4b:29:95:d9:56:48:05:e1:1e:0d:dc: 45:6c:6b:69:97:c9:5f:3d:a1:22:ed:93:6f:24:ca: ae:30:f8:46:9f:d3:ab:4f:21:9e:bf:3d:16:32:e8: b6:1f:c0:2b:d2:13:ac:a6:90:ce:8f:b5:a5:67:8c: 4f:15:d5:5b:b4:c1:f2:4f:0c:49:d9:0c:6b:21:1d: d6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9E:EC:97:40:E5:CD:08:57:38:71:21:A8:FD:AC:A3:D5:3C:55:A5 X509v3 Authority Key Identifier: keyid:43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:1a:f6:a0:b6:ce:72:eb:e1:0b:71:3b:1f:4f:bb:1e:06:1e: 35:55:9e:2d:06:db:03:50:9c:4c:a1:fd:a6:ab:ae:8d:45:14: 3d:cd:3c:9f:d1:97:33:9c:a9:e0:5e:88:79:13:df:ee:61:90: bb:e9:12:49:66:31:5c:db:bf:93:89:9b:24:a4:0c:be:8d:c1: 03:b6:41:79:95:67:1d:35:99:16:09:14:b1:95:31:2d:85:4b: 3f:fb:6f:b6:8d:c9:30:ac:d9:e4:6d:00:03:47:0d:4b:db:e2: d6:8d:07:ad:f3:7f:eb:08:3a:68:ec:fe:bd:fa:5f:b6:22:f3: c8:02:cf:50:c4:17:38:68:1b:db:51:b8:3a:96:d8:3e:6d:85: 3f:4b:69:dc:f2:64:74:96:0e:08:2e:76:d6:d0:e6:64:9f:40: 7d:ad:b8:57:b3:5d:f3:6e:1d:8e:a6:86:cb:a5:e0:ff:e3:fd: 18:a2:3d:ce:6f:b8:db:2f:17:c2:03:70:99:7b:a2:b0:4f:51: b5:ac:09:c8:c5:39:e5:61:a1:26:36:96:32:27:d0:15:41:c7: fc:8f:a1:5a:a3:20:d5:41:ac:68:33:23:33:b6:89:25:da:3e: dc:63:74:36:57:ce:17:49:bc:6a:e4:d9:9f:00:d4:63:fd:e9: 29:78:a9:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOFl0qcjkpJzqmzWrM7/JkRaiiUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMyMzBCQTM3MDQ5MjU1QzA0RTg1Qzg3RDlGNEJERDNC OTMxMzYwNTAeFw0yNTA4MDgwODI2NTlaFw0yNTA4MDkxMjE5NTlaMDMxMTAvBgNV BAMTKDY5OUVFQzk3NDBFNUNEMDg1NzM4NzEyMUE4RkRBQ0EzRDUzQzU1QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT3EZT0oZXlIk6gqkQ780eU0yB 7IYYVnoXdb1YAd8RU81uJgXZQJy2y3LVW/OTSUVzjwpm23lUCg4VC/S0qrWghAln puHdEmj0byg5i31jcrjDPj4Evd6znrC441NFRlWBjnGIrTDMfPYFrTY8p1FX/psE lv/GycIVVT0+33whl1HxD/sCoWGQdOOm/rYjUefTBRFS2mMzALKxu4EPtClWcEsG MzRv8kzlnXJKdwVBnDi9jc59A8VLKZXZVkgF4R4N3EVsa2mXyV89oSLtk28kyq4w +Eaf06tPIZ6/PRYy6LYfwCvSE6ymkM6PtaVnjE8V1Vu0wfJPDEnZDGshHdZrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaZ7sl0DlzQhXOHEhqP2so9U8VaUwHwYDVR0j BBgwFoAUQyMLo3BJJVwE6FyH2fS907kxNgUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHR3V0Rpa2R2UjFZWWpVTExCemtFMkJCQlFadVdITGdQdHgxTGgyWUpz cWcvMS80MzIzMEJBMzcwNDkyNTVDMDRFODVDODdEOUY0QkREM0I5MzEzNjA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzMjMwQkEzNzA0OTI1NUMw NEU4NUM4N0Q5RjRCREQzQjkzMTM2MDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHR3V0Rpa2R2UjFZWWpVTExCemtFMkJCQlFadVdITGdQdHgxTGgyWUpzcWcvMS80 MzIzMEJBMzcwNDkyNTVDMDRFODVDODdEOUY0QkREM0I5MzEzNjA1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPxr2oLbOcuvhC3E7H0+7HgYeNVWeLQbbA1CcTKH9pquujUUUPc08n9GXM5yp 4F6IeRPf7mGQu+kSSWYxXNu/k4mbJKQMvo3BA7ZBeZVnHTWZFgkUsZUxLYVLP/tv to3JMKzZ5G0AA0cNS9vi1o0HrfN/6wg6aOz+vfpftiLzyALPUMQXOGgb21G4OpbY Pm2FP0tp3PJkdJYOCC521tDmZJ9Afa24V7Nd824djqaGy6Xg/+P9GKI9zm+42y8X wgNwmXuisE9RtawJyMU55WGhJjaWMifQFUHH/I+hWqMg1UGsaDMjM7aJJdo+3GN0 NlfOF0m8auTZnwDUY/3pKXipEQ== -----END CERTIFICATE-----Generated at Fri Aug 8 20:51:16 2025 by rpki-client