$ rpki-client -vvf rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft File: C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft (raw, json) Hash identifier: bXIZVowL592YmJS9URBqDrqGanGG95LXWYCCL437zWQ= Subject key identifier: 2A:33:F7:53:48:6F:6D:45:36:9F:06:8F:95:4A:0A:C4:E5:54:F6:EF Authority key identifier: C0:04:F2:CC:C9:AC:B9:EC:01:A2:6E:FA:FF:53:A1:5B:B3:09:EC:E3 Certificate issuer: /CN=C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3 Certificate serial: 1AC32AB3A10AF82C4B40E6F3256FC1DB8141CB0F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer Subject info access: rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft Manifest number: 0103 Signing time: Tue 05 Aug 2025 23:39:23 +0000 Manifest this update: Tue 05 Aug 2025 23:34:23 +0000 Manifest next update: Thu 07 Aug 2025 02:42:23 +0000 Files and hashes: 1: 34352e3139312e34302e302f32322d3234203d3e20323730323534.roa (hash: +ELc/cdHA6pm2kddxyuB8cT9ZxmW8xhCo1C9X8j7nOc=) 2: C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl (hash: noHTLIQnwJL3ar4133S24BoPN1GlEJYmBoqC3PLT2m4=) 3: 323830343a363933303a3a2f33322d3338203d3e20323730323534.roa (hash: Vi58jILCPaGdfjCNKSlfegkMsczPE3KoQ/bs4WgeL5s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 07 Aug 2025 02:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c3:2a:b3:a1:0a:f8:2c:4b:40:e6:f3:25:6f:c1:db:81:41:cb:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3 Validity Not Before: Aug 5 23:34:23 2025 GMT Not After : Aug 7 02:42:23 2025 GMT Subject: CN=2A33F753486F6D45369F068F954A0AC4E554F6EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:79:7c:b8:f8:07:1c:b7:67:9d:6a:f2:70:e0: 66:02:f1:90:44:47:9a:83:67:34:c2:18:c5:a5:a3: ea:8d:6e:02:1f:d7:da:c7:a8:67:54:f5:bc:41:bd: 97:b8:e9:bc:3e:f7:c8:5e:96:0b:e4:62:7d:2d:6c: 01:e5:07:8f:b5:25:a5:d6:68:0d:d9:06:a2:ef:71: 07:c8:ab:7c:9c:4a:16:a7:46:1a:13:93:6d:8a:79: 78:31:4f:84:fb:64:67:e0:cd:1f:71:1f:f0:cd:7b: 11:e6:aa:c4:a0:8e:fc:ec:1d:81:5d:7e:0b:4a:1f: 12:ad:ef:a8:ce:ad:c0:33:b0:a1:cc:da:29:36:a1: e5:1b:f9:69:1a:7d:1e:a1:63:f1:1b:dc:3d:e5:26: e2:e0:48:d5:c7:23:62:bb:1f:da:4e:84:e1:b8:e4: 1c:32:b4:6c:21:c3:ec:e5:0b:33:a5:66:2d:ad:c0: b2:e2:2f:9a:89:92:5c:ce:a0:2e:68:80:d4:b4:34: c6:d3:79:cd:c9:b7:85:ef:fc:38:a3:33:e9:8d:1a: cc:01:76:c4:ef:53:8d:ca:58:c1:62:42:70:48:f5: 62:9f:ed:f6:0a:06:e1:e9:7d:28:4d:9f:05:c0:a3: d1:13:06:a8:ad:ad:02:67:a6:06:27:2c:1f:d0:2a: 90:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:33:F7:53:48:6F:6D:45:36:9F:06:8F:95:4A:0A:C4:E5:54:F6:EF X509v3 Authority Key Identifier: keyid:C0:04:F2:CC:C9:AC:B9:EC:01:A2:6E:FA:FF:53:A1:5B:B3:09:EC:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2c:00:cf:ff:c0:36:99:74:7d:66:18:8c:b6:ec:c6:e7:23: 9b:7a:b3:91:a4:2f:c0:e3:7c:1f:25:48:90:d1:4a:48:7d:b1: 61:14:b1:2a:2e:30:cb:cb:17:ea:3c:11:8f:42:d9:89:63:d8: 6c:ad:57:0f:24:97:52:65:4c:e3:4c:34:dc:19:cf:af:a3:d6: d8:34:c8:8d:bb:09:7d:a1:05:c6:37:0a:8c:08:c5:55:6a:4f: 4c:0c:8b:a3:72:73:fa:0e:c1:b5:0c:70:ca:2f:1c:7f:58:e0: 22:2a:35:77:63:68:ec:b3:f7:eb:ac:a2:2b:15:2d:ab:7f:b7: 53:5e:33:21:9f:a6:8d:ec:59:9a:e2:f6:3b:37:9d:c6:74:27: 91:7d:42:d6:0d:5a:ea:74:a4:08:55:ff:6c:2d:4e:93:84:4e: 92:99:39:46:6f:78:c8:a8:9a:58:6e:7f:9d:8c:43:86:8d:45: 9d:3d:2b:b1:97:e4:22:f6:83:eb:03:74:ca:98:bc:2b:e7:a0: 59:16:2c:3d:00:57:93:8a:ec:31:0c:dc:5d:ff:a4:7c:46:38: 90:1e:ce:dd:ad:d1:0f:09:c7:d2:a7:db:0d:e7:62:a2:c9:4f: 06:57:b2:26:b1:7b:3f:88:9a:7e:83:39:92:93:01:5a:32:64: 56:fa:47:17 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUGsMqs6EK+CxLQObzJW/B24FByw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNEYyQ0NDOUFDQjlFQzAxQTI2RUZBRkY1M0ExNUJC MzA5RUNFMzAeFw0yNTA4MDUyMzM0MjNaFw0yNTA4MDcwMjQyMjNaMDMxMTAvBgNV BAMTKDJBMzNGNzUzNDg2RjZENDUzNjlGMDY4Rjk1NEEwQUM0RTU1NEY2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQeXy4+Acct2edavJw4GYC8ZBE R5qDZzTCGMWlo+qNbgIf19rHqGdU9bxBvZe46bw+98helgvkYn0tbAHlB4+1JaXW aA3ZBqLvcQfIq3ycShanRhoTk22KeXgxT4T7ZGfgzR9xH/DNexHmqsSgjvzsHYFd fgtKHxKt76jOrcAzsKHM2ik2oeUb+WkafR6hY/Eb3D3lJuLgSNXHI2K7H9pOhOG4 5BwytGwhw+zlCzOlZi2twLLiL5qJklzOoC5ogNS0NMbTec3Jt4Xv/DijM+mNGswB dsTvU43KWMFiQnBI9WKf7fYKBuHpfShNnwXAo9ETBqitrQJnpgYnLB/QKpCnAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUKjP3U0hvbUU2nwaPlUoKxOVU9u8wHwYDVR0j BBgwFoAUwATyzMmsuewBom76/1OhW7MJ7OMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YRHZicVQ4RmdoUEJ4NVBMTlpFUDNkMndrNDd4N1o2ZG9DZ1hWOGlrZktz LzAvQzAwNEYyQ0NDOUFDQjlFQzAxQTI2RUZBRkY1M0ExNUJCMzA5RUNFMy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DMDA0RjJDQ0M5QUNCOUVDMDFB MjZFRkFGRjUzQTE1QkIzMDlFQ0UzLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1hE dmJxVDhGZ2hQQng1UExOWkVQM2Qyd2s0N3g3WjZkb0NnWFY4aWtmS3MvMC9DMDA0 RjJDQ0M5QUNCOUVDMDFBMjZFRkFGRjUzQTE1QkIzMDlFQ0UzLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA miwAz//ANpl0fWYYjLbsxucjm3qzkaQvwON8HyVIkNFKSH2xYRSxKi4wy8sX6jwR j0LZiWPYbK1XDySXUmVM40w03BnPr6PW2DTIjbsJfaEFxjcKjAjFVWpPTAyLo3Jz +g7BtQxwyi8cf1jgIio1d2No7LP366yiKxUtq3+3U14zIZ+mjexZmuL2OzedxnQn kX1C1g1a6nSkCFX/bC1Ok4ROkpk5Rm94yKiaWG5/nYxDho1FnT0rsZfkIvaD6wN0 ypi8K+egWRYsPQBXk4rsMQzcXf+kfEY4kB7O3a3RDwnH0qfbDedioslPBleyJrF7 P4iafoM5kpMBWjJkVvpHFw== -----END CERTIFICATE-----Generated at Wed Aug 6 11:03:18 2025 by rpki-client