$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft File: 0688357ED433C0A60770FB474BDB2C72796B78BD.mft (raw, json) Hash identifier: z53mwSGCvvqCbEYjzS0bvzzZLMgKeMa842lAU/TwjL4= Subject key identifier: 2A:CE:65:3E:93:38:17:15:48:62:6E:C1:4D:3F:4A:FD:96:0C:9F:28 Authority key identifier: 06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD Certificate issuer: /CN=0688357ED433C0A60770FB474BDB2C72796B78BD Certificate serial: 64C9FBD362DD23904A22944D459CE5CB93929C1A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject info access: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft Manifest number: B0 Signing time: Sat 23 Aug 2025 07:46:58 +0000 Manifest this update: Sat 23 Aug 2025 07:41:58 +0000 Manifest next update: Sun 24 Aug 2025 08:23:58 +0000 Files and hashes: 1: 3133382e33362e3233322e302f32322d3332203d3e203631363936.roa (hash: 0PAGB5C8H6IcqwDv00MSTHzGTYgYIUYZIqOHywJKqvU=) 2: 323830343a316165303a3a2f33322d3634203d3e203631363936.roa (hash: MNi0hCQVw5LiwCn26uDAV8DWpcneKIoS1bbRQFE26gw=) 3: 3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa (hash: IaTZ4i3zNgWw2pTgrax+ua0Htv3rIzLefPo79rSHOwM=) 4: 0688357ED433C0A60770FB474BDB2C72796B78BD.crl (hash: 64DAEgmVP3SYr0seiot0ieu0HaCYJ+dZWAlqe1YxEQ8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 08:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c9:fb:d3:62:dd:23:90:4a:22:94:4d:45:9c:e5:cb:93:92:9c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0688357ED433C0A60770FB474BDB2C72796B78BD Validity Not Before: Aug 23 07:41:58 2025 GMT Not After : Aug 24 08:23:58 2025 GMT Subject: CN=2ACE653E9338171548626EC14D3F4AFD960C9F28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:74:3f:b6:ae:42:5c:10:45:3c:02:d8:2c:a6: 87:67:a9:f9:66:1e:67:94:6c:49:79:39:1a:3c:22: 09:34:b1:ce:5f:42:da:92:d2:94:ee:1a:38:3d:20: 6f:93:a5:b1:01:77:9f:82:f5:d0:2e:78:d4:36:38: ab:fd:74:af:44:7b:73:d7:d7:b7:3c:ed:19:11:b5: 5b:67:f3:35:14:94:4b:85:1a:5e:04:fd:24:d9:a9: f6:c6:f7:ff:8a:61:11:79:86:4a:6f:2b:80:1f:cf: 21:5b:00:45:69:c1:de:a5:ed:ab:02:fd:bf:40:74: 05:e3:7e:58:43:b1:63:bd:fe:fe:ef:d7:5e:ac:73: a3:01:6f:61:8a:ba:d6:ae:8d:25:56:14:b6:5e:7f: 6b:22:8c:5d:dc:ce:c9:5e:83:dd:08:6d:eb:ef:29: 96:30:81:4f:f5:e4:ed:e1:9d:2a:3f:11:4c:8c:ea: f0:3a:a5:07:1a:a3:32:f5:6a:ea:bd:c5:61:77:21: 3b:e9:f2:e3:72:51:ef:ae:9d:0f:be:48:81:58:ed: 18:51:16:1a:99:69:e6:0c:a4:47:e7:51:67:e3:39: 7b:dd:0c:3c:6a:30:34:3f:76:ea:4e:53:38:47:aa: df:7a:5b:59:ee:29:a2:6a:fb:83:db:55:f2:2c:1d: 3d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CE:65:3E:93:38:17:15:48:62:6E:C1:4D:3F:4A:FD:96:0C:9F:28 X509v3 Authority Key Identifier: keyid:06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:da:3e:79:51:39:fa:59:10:10:c9:59:fc:55:21:b6:6d:16: ca:de:27:6f:94:40:d5:22:7b:7a:1a:fb:e1:a9:34:71:36:65: 61:99:74:32:34:a4:2d:61:2d:40:62:c6:48:73:ea:63:01:b4: d7:3b:b0:79:93:f5:c7:9f:53:29:d9:91:ca:a8:e0:c9:f7:0c: c2:89:56:08:45:c3:bb:fe:71:a0:18:dd:5f:29:01:4d:24:1f: 21:f8:41:ab:4c:30:03:bb:80:d3:08:bb:de:01:c4:29:db:58: 0c:51:3d:b5:88:da:bf:63:0d:4a:a9:a5:69:6a:46:39:2f:7d: 86:f6:75:af:df:e4:36:50:c8:fb:f9:2f:58:ac:22:d3:e7:05: d0:41:8c:e9:6d:70:30:49:8a:31:7d:ea:ad:40:bb:4e:e4:6b: 55:6e:1f:d4:d1:43:97:61:c8:78:a0:d7:cb:da:0e:3e:e0:8e: 2d:92:95:4d:e3:68:27:9d:43:80:3f:eb:43:a7:a9:ff:5e:42: 86:11:69:da:af:45:06:c8:4f:3f:33:75:24:0c:df:9d:14:5f: ad:10:bd:d4:31:fc:09:3e:bc:66:b9:ee:2b:5b:d8:e9:96:73: 95:64:48:83:7a:97:c7:e6:21:a3:ee:12:75:91:43:d3:06:93: 50:e1:54:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZMn702LdI5BKIpRNRZzly5OSnBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4ODM1N0VENDMzQzBBNjA3NzBGQjQ3NEJEQjJDNzI3 OTZCNzhCRDAeFw0yNTA4MjMwNzQxNThaFw0yNTA4MjQwODIzNThaMDMxMTAvBgNV BAMTKDJBQ0U2NTNFOTMzODE3MTU0ODYyNkVDMTREM0Y0QUZEOTYwQzlGMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDddD+2rkJcEEU8Atgspodnqflm HmeUbEl5ORo8Igk0sc5fQtqS0pTuGjg9IG+TpbEBd5+C9dAueNQ2OKv9dK9Ee3PX 17c87RkRtVtn8zUUlEuFGl4E/STZqfbG9/+KYRF5hkpvK4AfzyFbAEVpwd6l7asC /b9AdAXjflhDsWO9/v7v116sc6MBb2GKutaujSVWFLZef2sijF3czsleg90Ibevv KZYwgU/15O3hnSo/EUyM6vA6pQcaozL1auq9xWF3ITvp8uNyUe+unQ++SIFY7RhR FhqZaeYMpEfnUWfjOXvdDDxqMDQ/dupOUzhHqt96W1nuKaJq+4PbVfIsHT3DAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKs5lPpM4FxVIYm7BTT9K/ZYMnygwHwYDVR0j BBgwFoAUBog1ftQzwKYHcPtHS9sscnlreL0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNX c3gvMC8wNjg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODgzNTdFRDQzM0MwQTYw NzcwRkI0NzRCREIyQzcyNzk2Qjc4QkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNXc3gvMC8w Njg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuto+eVE5+lkQEMlZ/FUhtm0Wyt4nb5RA1SJ7ehr74ak0cTZlYZl0MjSkLWEt QGLGSHPqYwG01zuweZP1x59TKdmRyqjgyfcMwolWCEXDu/5xoBjdXykBTSQfIfhB q0wwA7uA0wi73gHEKdtYDFE9tYjav2MNSqmlaWpGOS99hvZ1r9/kNlDI+/kvWKwi 0+cF0EGM6W1wMEmKMX3qrUC7TuRrVW4f1NFDl2HIeKDXy9oOPuCOLZKVTeNoJ51D gD/rQ6ep/15ChhFp2q9FBshPPzN1JAzfnRRfrRC91DH8CT68ZrnuK1vY6ZZzlWRI g3qXx+Yho+4SdZFD0waTUOFUdA== -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:48 2025 by rpki-client