$ rpki-client -vvf rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft File: 8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft (raw, json) Hash identifier: /TCBqrcVwVAqMZfDkvhlSHCiyv+9xHPeJr7IUouT3Zw= Subject key identifier: B1:FF:77:6A:D2:35:BB:C5:A8:E2:F8:B6:D1:AD:26:B7:23:17:D7:FF Authority key identifier: 8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10 Certificate issuer: /CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810 Certificate serial: 46FB067D3D0D5B97C61B68F299EFE525D3A4F8A7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer Subject info access: rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft Manifest number: 0223 Signing time: Sat 23 Aug 2025 11:27:29 +0000 Manifest this update: Sat 23 Aug 2025 11:22:29 +0000 Manifest next update: Sun 24 Aug 2025 14:48:29 +0000 Files and hashes: 1: 323830343a313735633a3a2f33322d313238203d3e20323633313430.roa (hash: LcxgBvhys26dh3eN+AkNblIZ169BBg5L/bmL0RHyz5I=) 2: 8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl (hash: eccic7dlr/7pFXmP0qbshgEt7H7F9iTM85FrH/2v3Tw=) 3: 3136382e3230352e3134342e302f32322d3332203d3e20323633313430.roa (hash: bg8Dvb5gyNofKjWKDnAjbZaTOGuSl+Au6niFij0wNQI=) 4: 3139312e362e3134302e302f32322d3332203d3e20323633313430.roa (hash: YR3iwTv8fmQASNA9FOgQAa+ECLErkEz/btJcdJNxQ2k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 14:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:fb:06:7d:3d:0d:5b:97:c6:1b:68:f2:99:ef:e5:25:d3:a4:f8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810 Validity Not Before: Aug 23 11:22:29 2025 GMT Not After : Aug 24 14:48:29 2025 GMT Subject: CN=B1FF776AD235BBC5A8E2F8B6D1AD26B72317D7FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:2f:65:03:55:06:86:8c:02:ee:1d:a4:62: b6:52:01:4b:35:6c:58:a0:1c:61:29:b6:e8:ad:72: 99:13:4a:4b:14:51:18:1b:69:f2:e3:70:e7:dd:91: d2:f4:15:6f:79:53:b6:b3:31:7c:93:22:ac:a0:24: e2:99:6d:a2:6d:61:a1:e4:e2:30:6e:8d:41:45:50: 9a:38:83:7b:c0:3c:8f:6e:f8:1a:d0:9b:97:bb:20: 9f:63:06:aa:41:50:67:3c:88:b6:cf:90:56:df:fc: 04:2e:cc:43:86:53:d3:98:54:e5:dd:b0:e7:51:0f: 05:8d:9a:c6:4f:14:89:92:23:73:25:97:e4:68:33: 7c:1e:c3:b4:b8:96:a2:10:ab:c4:69:44:32:0d:61: 81:db:c4:4f:a5:00:a2:03:74:1e:59:0d:f0:a8:f6: 79:03:2d:c3:e2:c8:d9:c7:21:34:b6:21:51:8b:19: 48:01:54:c0:d1:0d:43:51:41:f5:c9:16:9c:3e:4f: 31:02:19:62:36:78:36:99:64:b0:f2:e9:97:dc:68: 11:c6:26:23:8b:84:1a:e3:73:09:bf:59:e5:30:38: f3:14:e5:96:76:f1:b4:5c:06:78:a0:49:b4:8a:85: d8:cb:98:d6:5c:db:d2:42:dd:ee:0e:21:a2:fd:89: 6d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FF:77:6A:D2:35:BB:C5:A8:E2:F8:B6:D1:AD:26:B7:23:17:D7:FF X509v3 Authority Key Identifier: keyid:8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fa:bb:44:69:44:5b:92:d3:52:44:6b:f7:e5:ff:4d:13:82: 4e:cf:64:e8:c7:bf:da:cf:9b:d7:b7:3b:81:da:d0:09:fd:6d: 00:cd:3e:f6:c3:6f:72:f1:7f:b5:58:04:6e:71:be:ba:3e:bc: 62:06:31:5c:38:65:03:c6:b3:88:fa:a0:5a:e2:9f:a0:53:db: 9a:79:22:46:bc:e3:34:58:14:9e:5e:11:9f:08:7f:c9:0d:53: 61:11:0c:69:b6:13:dd:c7:6d:52:ab:56:f6:ff:69:43:ec:77: 95:89:dc:2a:4f:c6:95:26:9d:92:bf:e0:56:f6:00:81:d1:99: d2:78:ba:2d:69:d9:3e:d9:09:10:29:58:1e:f7:08:f1:9e:de: 58:9b:e0:87:c9:28:37:73:e2:f6:22:68:8b:6c:f9:11:63:11: 4e:5d:29:46:a5:d5:fc:b6:6a:12:d4:7a:40:c7:d1:1a:2f:3f: 64:be:6e:46:a4:6b:b7:02:6e:21:21:2e:04:6d:29:b3:cc:d1: be:27:97:3d:06:fb:06:d9:5d:1e:85:60:39:8d:66:bd:3c:2d: 79:32:ee:96:0c:41:8d:66:06:49:dd:66:1e:31:c6:16:20:ce: a5:66:a9:a4:9d:95:d7:e7:c4:62:de:6c:3d:61:68:88:84:bc: a9:82:06:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURvsGfT0NW5fGG2jyme/lJdOk+KcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYzMjdGRUZBNEU4Nzg4RkZDRkRDRDdDNkQxOTA2NDBG OEE2MjgxMDAeFw0yNTA4MjMxMTIyMjlaFw0yNTA4MjQxNDQ4MjlaMDMxMTAvBgNV BAMTKEIxRkY3NzZBRDIzNUJCQzVBOEUyRjhCNkQxQUQyNkI3MjMxN0Q3RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2wy9lA1UGhowC7h2kYrZSAUs1 bFigHGEptuitcpkTSksUURgbafLjcOfdkdL0FW95U7azMXyTIqygJOKZbaJtYaHk 4jBujUFFUJo4g3vAPI9u+BrQm5e7IJ9jBqpBUGc8iLbPkFbf/AQuzEOGU9OYVOXd sOdRDwWNmsZPFImSI3Mll+RoM3wew7S4lqIQq8RpRDINYYHbxE+lAKIDdB5ZDfCo 9nkDLcPiyNnHITS2IVGLGUgBVMDRDUNRQfXJFpw+TzECGWI2eDaZZLDy6ZfcaBHG JiOLhBrjcwm/WeUwOPMU5ZZ28bRcBnigSbSKhdjLmNZc29JC3e4OIaL9iW2lAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsf93atI1u8Wo4vi20a0mtyMX1/8wHwYDVR0j BBgwFoAUjzJ/76ToeI/8/c18bRkGQPimKBAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnpWUjI5bmhrRkFyam0zYm9HNnhySkNWUFEzNmI1RGFlVnN5bjQ0U1p0 QUIvMC84RjMyN0ZFRkE0RTg3ODhGRkNGRENEN0M2RDE5MDY0MEY4QTYyODEwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGMzI3RkVGQTRFODc4OEZG Q0ZEQ0Q3QzZEMTkwNjQwRjhBNjI4MTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnpWUjI5bmhrRkFyam0zYm9HNnhySkNWUFEzNmI1RGFlVnN5bjQ0U1p0QUIvMC84 RjMyN0ZFRkE0RTg3ODhGRkNGRENEN0M2RDE5MDY0MEY4QTYyODEwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO/q7RGlEW5LTUkRr9+X/TROCTs9k6Me/2s+b17c7gdrQCf1tAM0+9sNvcvF/ tVgEbnG+uj68YgYxXDhlA8aziPqgWuKfoFPbmnkiRrzjNFgUnl4Rnwh/yQ1TYREM abYT3cdtUqtW9v9pQ+x3lYncKk/GlSadkr/gVvYAgdGZ0ni6LWnZPtkJEClYHvcI 8Z7eWJvgh8koN3Pi9iJoi2z5EWMRTl0pRqXV/LZqEtR6QMfRGi8/ZL5uRqRrtwJu ISEuBG0ps8zRvieXPQb7BtldHoVgOY1mvTwteTLulgxBjWYGSd1mHjHGFiDOpWap pJ2V1+fEYt5sPWFoiIS8qYIG9g== -----END CERTIFICATE-----Generated at Sat Aug 23 19:28:38 2025 by rpki-client