$ rpki-client -vvf rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.mft File: 76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.mft (raw, json) Hash identifier: CncxH607V/RR9e1B+1GJmverHvoEvpOAfDXQWAtKwgo= Subject key identifier: E7:E7:FC:AB:30:22:A9:B4:52:82:16:DE:0D:BB:BD:47:48:E8:F8:A4 Authority key identifier: 76:E1:86:84:CB:0B:1A:07:9E:D2:43:90:8D:2E:3D:3D:2B:78:A1:AF Certificate issuer: /CN=76E18684CB0B1A079ED243908D2E3D3D2B78A1AF Certificate serial: 1F3624659C0AC70965438DA35E3ED1CAD559696A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.cer Subject info access: rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.mft Manifest number: 029C Signing time: Sat 23 Aug 2025 13:33:41 +0000 Manifest this update: Sat 23 Aug 2025 13:28:41 +0000 Manifest next update: Sun 24 Aug 2025 13:57:41 +0000 Files and hashes: 1: 3230302e3130382e3138302e302f32322d3234203d3e20323730323634.roa (hash: esiVIInGXQ5QZnISKPvp/sUojxHI61JmSN+fdzfgBWs=) 2: 76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.crl (hash: ELJshj33U4QgWu0lMd8ErUsDQDrp+DMlnuyWdE++2A4=) 3: 323830343a363935383a3a2f33322d3438203d3e20323730323634.roa (hash: SR2W8h4SV/40VjilEKA/G/ccqoUTrXIpAajPwjzc3qw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.crl rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:36:24:65:9c:0a:c7:09:65:43:8d:a3:5e:3e:d1:ca:d5:59:69:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76E18684CB0B1A079ED243908D2E3D3D2B78A1AF Validity Not Before: Aug 23 13:28:41 2025 GMT Not After : Aug 24 13:57:41 2025 GMT Subject: CN=E7E7FCAB3022A9B4528216DE0DBBBD4748E8F8A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5f:45:79:98:40:24:ac:52:5c:79:d4:a8:10: 35:53:05:56:0b:88:5d:56:64:49:5b:aa:80:18:7b: ef:34:77:c8:78:03:28:1f:f1:d5:20:ce:48:d6:5b: 1e:9d:62:21:00:b8:77:12:ec:57:ae:de:d8:c5:84: c3:96:a5:cd:1e:f3:18:55:00:09:f7:c9:4a:60:58: 31:9a:db:bc:a9:1a:5c:ec:df:21:65:a3:98:cc:e0: 82:da:96:ff:cc:f0:9a:c2:7b:e4:78:95:14:72:65: 88:21:25:85:73:16:60:5b:d3:b9:c2:fb:c4:da:db: 11:71:ba:a0:fc:b6:1c:5c:5f:0b:06:04:86:6d:31: 91:e9:5b:89:d6:55:48:9d:07:c8:cf:0e:fb:c9:9a: 9d:b6:e9:eb:11:a9:e4:53:da:66:42:22:46:ba:1a: 0c:2f:aa:ba:3a:a8:df:fe:a2:da:7d:55:0e:4b:1e: fa:7e:39:29:8d:c1:90:50:88:e7:c6:99:00:63:60: 61:1c:c5:5e:e2:c3:f5:ea:19:e5:5c:f9:67:fe:32: f9:f9:89:78:93:4d:b5:ba:ab:3d:20:4e:6d:f3:1a: e8:ff:7e:87:ea:78:c8:df:d2:38:b6:dd:1c:56:10: ee:d6:6c:f5:d0:bc:7e:9e:03:d4:d5:d4:8f:3c:16: 59:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E7:FC:AB:30:22:A9:B4:52:82:16:DE:0D:BB:BD:47:48:E8:F8:A4 X509v3 Authority Key Identifier: keyid:76:E1:86:84:CB:0B:1A:07:9E:D2:43:90:8D:2E:3D:3D:2B:78:A1:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:29:8f:b7:61:db:54:8b:87:eb:91:68:c5:8c:d2:95:d3:eb: ef:97:9a:7a:56:49:69:55:5f:e6:d8:b4:d1:19:e5:1b:87:b9: c5:de:3b:c1:24:cc:62:f4:c6:42:df:f0:7f:a5:53:5b:75:36: 4a:71:b6:91:50:27:7f:20:11:e8:18:b7:9a:42:f4:6f:14:4e: 55:7f:e7:81:22:e7:de:d8:9f:7d:55:c5:e0:e6:07:08:b5:a6: 0c:71:f9:bc:9c:f9:09:e5:66:07:6d:fe:d5:61:1c:77:d5:26: 45:dc:bc:71:b9:22:32:24:1b:07:8f:99:90:af:de:a1:50:e3: a0:13:af:b2:7e:86:9e:d5:1b:4e:3d:05:e6:41:c4:36:f6:f3: 6b:f8:18:af:01:73:fe:f1:28:d8:ba:b5:bd:b6:49:68:a3:b2: 18:e0:d9:84:5a:da:d7:2d:8b:14:64:67:26:66:4d:8b:6a:5b: 01:33:d7:d3:e1:b3:31:f1:1f:20:44:f6:da:4e:68:18:24:60: 8e:1c:64:e5:eb:b1:aa:20:d5:55:14:f8:36:08:3e:e3:c2:3d: 69:f4:b6:ce:39:6f:07:fe:d4:7f:82:62:72:05:c9:8b:fd:79: cf:ff:d4:6a:5c:8b:2b:52:e7:82:73:37:f5:83:54:ba:ce:a7: 12:f7:f8:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHzYkZZwKxwllQ42jXj7RytVZaWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzZFMTg2ODRDQjBCMUEwNzlFRDI0MzkwOEQyRTNEM0Qy Qjc4QTFBRjAeFw0yNTA4MjMxMzI4NDFaFw0yNTA4MjQxMzU3NDFaMDMxMTAvBgNV BAMTKEU3RTdGQ0FCMzAyMkE5QjQ1MjgyMTZERTBEQkJCRDQ3NDhFOEY4QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1X0V5mEAkrFJcedSoEDVTBVYL iF1WZElbqoAYe+80d8h4Aygf8dUgzkjWWx6dYiEAuHcS7Feu3tjFhMOWpc0e8xhV AAn3yUpgWDGa27ypGlzs3yFlo5jM4ILalv/M8JrCe+R4lRRyZYghJYVzFmBb07nC +8Ta2xFxuqD8thxcXwsGBIZtMZHpW4nWVUidB8jPDvvJmp226esRqeRT2mZCIka6 Ggwvqro6qN/+otp9VQ5LHvp+OSmNwZBQiOfGmQBjYGEcxV7iw/XqGeVc+Wf+Mvn5 iXiTTbW6qz0gTm3zGuj/fofqeMjf0ji23RxWEO7WbPXQvH6eA9TV1I88FlkZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5+f8qzAiqbRSghbeDbu9R0jo+KQwHwYDVR0j BBgwFoAUduGGhMsLGgee0kOQjS49PSt4oa8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMm9ZTXE5Tm9OOE04NmlUTTlvUHB2TlFMeFFYOEdFdVBMc01OS3lVRkJo QWUvMS83NkUxODY4NENCMEIxQTA3OUVEMjQzOTA4RDJFM0QzRDJCNzhBMUFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2RTE4Njg0Q0IwQjFBMDc5 RUQyNDM5MDhEMkUzRDNEMkI3OEExQUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mm9ZTXE5Tm9OOE04NmlUTTlvUHB2TlFMeFFYOEdFdVBMc01OS3lVRkJoQWUvMS83 NkUxODY4NENCMEIxQTA3OUVEMjQzOTA4RDJFM0QzRDJCNzhBMUFGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADCmPt2HbVIuH65FoxYzSldPr75eaelZJaVVf5ti00RnlG4e5xd47wSTMYvTG Qt/wf6VTW3U2SnG2kVAnfyAR6Bi3mkL0bxROVX/ngSLn3tiffVXF4OYHCLWmDHH5 vJz5CeVmB23+1WEcd9UmRdy8cbkiMiQbB4+ZkK/eoVDjoBOvsn6GntUbTj0F5kHE Nvbza/gYrwFz/vEo2Lq1vbZJaKOyGODZhFra1y2LFGRnJmZNi2pbATPX0+GzMfEf IET22k5oGCRgjhxk5euxqiDVVRT4Ngg+48I9afS2zjlvB/7Uf4JicgXJi/15z//U alyLK1LngnM39YNUus6nEvf4Tg== -----END CERTIFICATE-----Generated at Sat Aug 23 19:57:44 2025 by rpki-client