$ rpki-client -vvf rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.mft File: 883F9EED8D520E746FE5A46BDE2594C335F2E812.mft (raw, json) Hash identifier: nSzbGuTSOY6CVLBDM8r/uZst7KghD0N+3YX9tGcNVic= Subject key identifier: 23:84:44:C2:49:1D:04:64:6B:FC:5B:92:74:7C:66:30:B3:5E:EB:E2 Authority key identifier: 88:3F:9E:ED:8D:52:0E:74:6F:E5:A4:6B:DE:25:94:C3:35:F2:E8:12 Certificate issuer: /CN=883F9EED8D520E746FE5A46BDE2594C335F2E812 Certificate serial: 58CA4EBDD339931BE93D33CC4ED7F6AAEE7EB6B5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/883F9EED8D520E746FE5A46BDE2594C335F2E812.cer Subject info access: rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.mft Manifest number: C3 Signing time: Sat 23 Aug 2025 09:50:41 +0000 Manifest this update: Sat 23 Aug 2025 09:45:41 +0000 Manifest next update: Sun 24 Aug 2025 11:05:41 +0000 Files and hashes: 1: 323830343a3936343a3a2f33322d3634203d3e20323633303830.roa (hash: B0HrhdJpYTo2VYADD+2Ul9NZVStdBga+S+kuIKD5omA=) 2: 883F9EED8D520E746FE5A46BDE2594C335F2E812.crl (hash: JRrJ/GmC+y8K/qxg+2SiDd8VaxqrjKSjlL/Qhc3LQiI=) 3: 3138392e3230312e3230382e302f32302d3234203d3e20323633303830.roa (hash: Nls0y4Zm2DiLu/Zj4q9kms0N+iZxmgUscd9aftaApbU=) 4: 3138372e33332e34382e302f32312d3234203d3e20323633303830.roa (hash: mYE0cTsJ4b+O16hTXdYIKlsMEZPCXMwpI8c/O4aS7gI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.crl rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/883F9EED8D520E746FE5A46BDE2594C335F2E812.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 11:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ca:4e:bd:d3:39:93:1b:e9:3d:33:cc:4e:d7:f6:aa:ee:7e:b6:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883F9EED8D520E746FE5A46BDE2594C335F2E812 Validity Not Before: Aug 23 09:45:41 2025 GMT Not After : Aug 24 11:05:41 2025 GMT Subject: CN=238444C2491D04646BFC5B92747C6630B35EEBE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:46:f2:e7:20:15:f9:c1:0a:21:44:63:91:ee: 4f:36:b2:d5:7c:81:cf:57:ea:ce:4f:93:ee:45:d7: 86:c9:ad:bf:5c:9a:09:2a:1e:f1:ab:20:a3:80:b7: 05:34:f1:6c:8c:7e:01:b3:50:39:67:0f:9a:5b:31: 8b:5f:fe:db:2b:3d:54:57:f3:82:4f:59:79:b3:b1: 22:3f:b8:15:c6:87:1e:e0:bd:95:9e:21:ee:c8:6f: 08:15:9f:dc:24:8a:a7:81:5d:14:ce:17:b2:4b:03: e7:6c:c0:85:0b:7b:b2:22:dc:a0:9e:5d:39:69:1b: d4:39:66:f4:fc:41:5d:b1:f4:7c:f6:95:36:d0:70: c0:88:e0:0b:64:1e:bf:6a:6f:64:83:f9:85:53:97: df:88:56:e4:30:8e:df:e0:d7:b9:31:15:9b:59:7b: 45:79:b8:7c:ac:2c:41:b9:18:56:32:cb:65:27:df: b7:1b:89:9b:4c:ae:8f:ef:33:8f:b7:9a:7f:36:c1: e2:65:73:8d:8e:a5:73:1c:88:f3:28:ab:4b:63:49: e1:ac:17:a6:ac:2d:f4:17:58:c9:76:0d:36:80:06: 58:7a:1e:68:f3:be:77:a3:ac:e8:1c:04:ad:17:e0: cd:c8:16:41:c7:eb:da:47:93:c6:1e:74:6a:61:3c: 66:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:84:44:C2:49:1D:04:64:6B:FC:5B:92:74:7C:66:30:B3:5E:EB:E2 X509v3 Authority Key Identifier: keyid:88:3F:9E:ED:8D:52:0E:74:6F:E5:A4:6B:DE:25:94:C3:35:F2:E8:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/883F9EED8D520E746FE5A46BDE2594C335F2E812.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:d5:49:36:ae:49:11:c2:41:cd:cb:b0:eb:f0:51:d5:f7:6e: 6b:da:06:88:13:16:8e:c1:86:02:32:5f:2d:64:b5:fe:70:f6: b2:1c:f0:9e:b8:fc:e4:40:a0:ec:43:f7:86:ec:d4:44:16:27: 47:84:0b:09:d9:a4:82:46:b0:37:d6:94:ef:cd:e3:be:bd:bc: bf:d3:e2:7f:eb:6f:ac:2e:20:49:65:74:f8:1d:2d:05:9e:cd: ca:07:f1:6d:19:8e:43:30:01:5a:01:8f:71:a1:8a:75:da:03: 2e:21:14:a5:07:1e:28:1c:33:6f:36:68:4c:cf:8a:18:46:f9: ce:05:c4:fe:ef:e7:04:75:96:46:3d:3e:13:f9:16:5a:6f:ea: e8:43:c0:bd:21:3c:c6:14:15:6c:40:9d:16:65:fb:eb:8a:19: bb:ce:a1:7a:c4:97:28:24:57:db:0a:a1:98:cf:69:61:ea:0c: 86:49:1a:37:ee:08:fc:99:f8:fe:38:b2:1c:68:44:8c:a1:34: b0:30:6a:19:bf:3c:01:79:a5:f9:37:e1:fd:15:77:ba:58:dd: ca:49:2e:36:ef:35:d4:5a:92:1d:a8:f1:b5:13:a2:4e:bf:99: 06:a8:4d:b7:f8:72:97:57:6a:aa:0e:c9:eb:65:2d:a5:84:44: b6:44:dd:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWMpOvdM5kxvpPTPMTtf2qu5+trUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgzRjlFRUQ4RDUyMEU3NDZGRTVBNDZCREUyNTk0QzMz NUYyRTgxMjAeFw0yNTA4MjMwOTQ1NDFaFw0yNTA4MjQxMTA1NDFaMDMxMTAvBgNV BAMTKDIzODQ0NEMyNDkxRDA0NjQ2QkZDNUI5Mjc0N0M2NjMwQjM1RUVCRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmRvLnIBX5wQohRGOR7k82stV8 gc9X6s5Pk+5F14bJrb9cmgkqHvGrIKOAtwU08WyMfgGzUDlnD5pbMYtf/tsrPVRX 84JPWXmzsSI/uBXGhx7gvZWeIe7IbwgVn9wkiqeBXRTOF7JLA+dswIULe7Ii3KCe XTlpG9Q5ZvT8QV2x9Hz2lTbQcMCI4AtkHr9qb2SD+YVTl9+IVuQwjt/g17kxFZtZ e0V5uHysLEG5GFYyy2Un37cbiZtMro/vM4+3mn82weJlc42OpXMciPMoq0tjSeGs F6asLfQXWMl2DTaABlh6HmjzvnejrOgcBK0X4M3IFkHH69pHk8YedGphPGYpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUI4REwkkdBGRr/FuSdHxmMLNe6+IwHwYDVR0j BBgwFoAUiD+e7Y1SDnRv5aRr3iWUwzXy6BIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkFCN1kzVGdTQk5EMVlmTUdDSmFMbUc1UmR3NnV6RWh3bW9Ca05LdnJR VFIvMC84ODNGOUVFRDhENTIwRTc0NkZFNUE0NkJERTI1OTRDMzM1RjJFODEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4M0Y5RUVEOEQ1MjBFNzQ2 RkU1QTQ2QkRFMjU5NEMzMzVGMkU4MTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkFCN1kzVGdTQk5EMVlmTUdDSmFMbUc1UmR3NnV6RWh3bW9Ca05LdnJRVFIvMC84 ODNGOUVFRDhENTIwRTc0NkZFNUE0NkJERTI1OTRDMzM1RjJFODEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApdVJNq5JEcJBzcuw6/BR1fdua9oGiBMWjsGGAjJfLWS1/nD2shzwnrj85ECg 7EP3huzURBYnR4QLCdmkgkawN9aU783jvr28v9Pif+tvrC4gSWV0+B0tBZ7Nygfx bRmOQzABWgGPcaGKddoDLiEUpQceKBwzbzZoTM+KGEb5zgXE/u/nBHWWRj0+E/kW Wm/q6EPAvSE8xhQVbECdFmX764oZu86hesSXKCRX2wqhmM9pYeoMhkkaN+4I/Jn4 /jiyHGhEjKE0sDBqGb88AXml+Tfh/RV3uljdykkuNu811FqSHajxtROiTr+ZBqhN t/hyl1dqqg7J62UtpYREtkTd8Q== -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:28 2025 by rpki-client