$ rpki-client -vvf rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft File: 46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft (raw, json) Hash identifier: IRZVpMGhzGvbp+BtD7r4R7TFBLezUyxeYd1QZ1+Xg08= Subject key identifier: 14:FD:0F:32:1F:2C:1D:9A:DA:AD:32:DB:33:BC:2D:C0:18:C1:B0:E8 Authority key identifier: 46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17 Certificate issuer: /CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17 Certificate serial: 37C8C53974F1069B73083A8920AF7433367E6E69 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer Subject info access: rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft Manifest number: 0293 Signing time: Sat 23 Aug 2025 10:44:05 +0000 Manifest this update: Sat 23 Aug 2025 10:39:05 +0000 Manifest next update: Sun 24 Aug 2025 12:14:05 +0000 Files and hashes: 1: 46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl (hash: lZ6m+n6OVVEIftabbjnxoQ/CUANvbCCQjgGLezF3YfI=) 2: 323830343a313733343a3a2f33322d3438203d3e203532383639.roa (hash: 74BdjGN3yA4ht22QxCqslkKGevvn+bBlN5pFgMtvUxk=) 3: 3137372e3132382e36342e302f32312d3234203d3e203532383639.roa (hash: 8gzEWDF8i42eHf686Ra5Hy4/vvSVtAxDn3ySTpNWsmo=) 4: 3137372e39332e3138342e302f32322d3234203d3e203532383639.roa (hash: tvRic0kMMAl10dH+h0klz4g3tSflPxU0EbeB037XKr0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 12:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c8:c5:39:74:f1:06:9b:73:08:3a:89:20:af:74:33:36:7e:6e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17 Validity Not Before: Aug 23 10:39:05 2025 GMT Not After : Aug 24 12:14:05 2025 GMT Subject: CN=14FD0F321F2C1D9ADAAD32DB33BC2DC018C1B0E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c6:6b:c4:b8:95:97:ac:95:bf:99:e2:45:57: 67:5d:33:71:98:cb:6f:47:79:55:7f:21:da:49:6a: ab:ab:0e:4b:0c:47:88:2b:94:39:bb:15:80:d9:38: 90:10:f2:b1:ff:03:00:83:6d:e5:9f:1b:de:a1:ad: 4c:3d:f6:22:0d:d1:8d:d9:52:f3:65:40:d9:5c:c0: 5b:0f:ce:a5:65:7f:c2:03:38:8a:40:41:20:08:de: e3:65:8c:5f:ec:1f:55:f9:af:81:80:6b:fe:99:04: 7d:7b:a5:f8:75:96:5e:55:b9:4a:77:a3:c2:17:de: 21:28:70:d3:37:fc:17:74:cb:7d:4d:a8:95:db:77: c5:a6:7a:8d:27:00:ca:3f:be:bc:6b:bd:26:64:19: e5:ac:b2:32:1c:0e:fe:53:43:0d:65:48:d7:a6:f7: 92:89:d2:ee:6e:68:db:f5:9a:86:8a:9e:d7:09:17: 1e:7e:d0:75:6a:78:4b:ef:88:aa:75:b7:77:72:a4: 31:f8:cb:71:8b:20:17:14:2f:a4:21:0d:63:eb:a1: 3b:69:3d:39:0f:b9:e9:71:cb:a8:cd:e9:fc:5b:77: be:ef:c2:dd:89:71:70:92:48:ee:b9:8f:a9:eb:9e: a0:5f:46:82:46:ba:c5:93:64:2d:0d:31:d7:e9:4f: c9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FD:0F:32:1F:2C:1D:9A:DA:AD:32:DB:33:BC:2D:C0:18:C1:B0:E8 X509v3 Authority Key Identifier: keyid:46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:33:da:cc:f0:46:4c:48:59:ba:92:68:51:31:2a:78:cc:1a: 7b:4a:09:12:82:de:26:f5:f2:57:4d:59:53:33:9e:1f:42:1c: 17:60:5b:3f:6c:dd:b2:cb:cb:c8:33:39:11:59:10:9a:1a:65: fc:81:3c:c2:63:66:77:db:2e:f2:f3:5e:7c:93:de:76:b6:dc: b4:08:1e:a4:3c:ae:fb:a8:17:99:8f:ea:c2:7d:9b:e1:8c:de: aa:37:68:f6:d7:be:3e:87:5e:96:e8:4e:c4:f4:16:8b:6b:21: 86:58:14:a6:15:a3:59:c2:a1:28:03:f4:53:f6:89:bb:e5:e3: df:7e:87:05:2d:ee:47:34:e5:0e:57:7c:64:e2:43:e4:7c:4b: 8a:e4:3d:cb:a2:2d:c5:47:e0:bd:21:f9:d9:d3:c5:0e:eb:b4: 55:27:39:8c:c8:01:07:4e:5c:81:24:df:43:07:9d:07:d9:a2: a9:44:67:a3:0e:8c:82:3d:b5:1a:81:a5:97:f9:96:69:09:2e: 07:b2:8b:8b:03:ff:bc:de:48:b7:41:15:b5:f1:3c:e6:a4:4e: d1:65:dd:f1:25:95:8d:6d:3a:de:84:89:69:68:e4:a8:59:ed: 8b:9a:6a:2d:fd:b7:92:04:c7:58:69:d7:f3:cd:37:4b:96:3f: 90:30:27:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN8jFOXTxBptzCDqJIK90MzZ+bmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY0MzVDMDdCREVGOUVGNjZFQTNGOUFDNTE2QjM5OEZF NDg3QUYxNzAeFw0yNTA4MjMxMDM5MDVaFw0yNTA4MjQxMjE0MDVaMDMxMTAvBgNV BAMTKDE0RkQwRjMyMUYyQzFEOUFEQUFEMzJEQjMzQkMyREMwMThDMUIwRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcxmvEuJWXrJW/meJFV2ddM3GY y29HeVV/IdpJaqurDksMR4grlDm7FYDZOJAQ8rH/AwCDbeWfG96hrUw99iIN0Y3Z UvNlQNlcwFsPzqVlf8IDOIpAQSAI3uNljF/sH1X5r4GAa/6ZBH17pfh1ll5VuUp3 o8IX3iEocNM3/Bd0y31NqJXbd8Wmeo0nAMo/vrxrvSZkGeWssjIcDv5TQw1lSNem 95KJ0u5uaNv1moaKntcJFx5+0HVqeEvviKp1t3dypDH4y3GLIBcUL6QhDWProTtp PTkPuelxy6jN6fxbd77vwt2JcXCSSO65j6nrnqBfRoJGusWTZC0NMdfpT8lRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFP0PMh8sHZrarTLbM7wtwBjBsOgwHwYDVR0j BBgwFoAURkNcB73vnvZuo/msUWs5j+SHrxcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjg0WlhwcldGNlF6N1M1QmJqM1pHcG5iRlJIclFVbTlLWDRVckhDNWNT UGsvMS80NjQzNUMwN0JERUY5RUY2NkVBM0Y5QUM1MTZCMzk4RkU0ODdBRjE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2NDM1QzA3QkRFRjlFRjY2 RUEzRjlBQzUxNkIzOThGRTQ4N0FGMTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mjg0WlhwcldGNlF6N1M1QmJqM1pHcG5iRlJIclFVbTlLWDRVckhDNWNTUGsvMS80 NjQzNUMwN0JERUY5RUY2NkVBM0Y5QUM1MTZCMzk4RkU0ODdBRjE3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhTPazPBGTEhZupJoUTEqeMwae0oJEoLeJvXyV01ZUzOeH0IcF2BbP2zdssvL yDM5EVkQmhpl/IE8wmNmd9su8vNefJPedrbctAgepDyu+6gXmY/qwn2b4Yzeqjdo 9te+PodeluhOxPQWi2shhlgUphWjWcKhKAP0U/aJu+Xj336HBS3uRzTlDld8ZOJD 5HxLiuQ9y6ItxUfgvSH52dPFDuu0VSc5jMgBB05cgSTfQwedB9miqURnow6Mgj21 GoGll/mWaQkuB7KLiwP/vN5It0EVtfE85qRO0WXd8SWVjW063oSJaWjkqFnti5pq Lf23kgTHWGnX8803S5Y/kDAn9g== -----END CERTIFICATE-----Generated at Sat Aug 23 18:56:52 2025 by rpki-client