$ rpki-client -vvf rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft File: 114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft (raw, json) Hash identifier: H8FKrFJxhwiXWo/5ZabSgAcP3Xhx25qgYUD0sdvjInY= Subject key identifier: DE:36:7C:75:21:3F:CD:8C:21:FD:40:46:DE:22:80:F7:C0:B5:A9:C8 Authority key identifier: 11:4C:34:E7:02:D6:B3:C7:8D:B6:AD:0C:8B:6A:12:A4:F6:C9:62:F2 Certificate issuer: /CN=114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2 Certificate serial: 67A1782490D2A9E6EB42795F6454003750EDA556 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft Manifest number: FB Signing time: Sat 23 Aug 2025 03:27:29 +0000 Manifest this update: Sat 23 Aug 2025 03:22:29 +0000 Manifest next update: Sun 24 Aug 2025 05:38:29 +0000 Files and hashes: 1: 114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.crl (hash: WMukQSaAGjBsxOVWqZ0fB24HgTpKBwcaZPOFXdJEKbg=) 2: 323830343a383534633a3a2f33322d313238203d3e20323732353730.roa (hash: /jjNTYdHgGu54/KsbvfYxBSxmVomJOu/7haHE2jkFo8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.crl rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 05:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:a1:78:24:90:d2:a9:e6:eb:42:79:5f:64:54:00:37:50:ed:a5:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2 Validity Not Before: Aug 23 03:22:29 2025 GMT Not After : Aug 24 05:38:29 2025 GMT Subject: CN=DE367C75213FCD8C21FD4046DE2280F7C0B5A9C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3c:4a:6b:28:bf:11:f9:37:62:40:01:fb:20: 95:1f:9f:8e:4c:16:29:90:8c:88:14:9b:ae:4f:64: a6:f0:1c:f5:bc:d3:31:12:0a:86:b2:6b:95:e7:8e: b4:c5:8a:57:f8:be:67:7e:47:69:c2:7c:b1:96:4a: eb:ce:26:e2:a6:c7:f5:93:13:2f:0c:d6:c0:07:5c: 02:8c:57:d6:bb:8f:5d:f9:99:19:7c:45:58:50:5d: e6:19:eb:ad:f4:60:f2:c0:61:e6:12:59:98:2d:0b: 73:12:c7:23:27:21:5f:79:ef:b6:a2:65:b3:76:1a: da:44:b2:a3:e0:d3:81:a2:ed:79:d9:b1:da:49:df: db:ab:6b:86:91:72:a9:b3:70:e2:af:03:bd:1c:55: 93:f8:31:63:5a:07:bc:58:bc:cf:91:1d:db:de:a6: 00:fd:9e:4f:aa:94:de:66:f4:f0:f3:ce:58:99:d3: 64:9f:82:c0:78:b9:9c:9b:3b:47:1a:37:db:25:87: 92:7f:a0:4a:f3:d6:bd:7f:5a:1e:07:7c:9f:2e:ef: 0f:f9:20:cb:45:0d:f4:d5:23:40:d3:f2:6a:02:c8: c9:53:1b:6f:b2:dc:60:39:67:87:81:04:c2:e3:d5: 1b:a7:e4:8f:f5:0a:dc:f1:7c:0a:b2:a0:d6:de:31: 6f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:36:7C:75:21:3F:CD:8C:21:FD:40:46:DE:22:80:F7:C0:B5:A9:C8 X509v3 Authority Key Identifier: keyid:11:4C:34:E7:02:D6:B3:C7:8D:B6:AD:0C:8B:6A:12:A4:F6:C9:62:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:40:03:94:25:fc:fe:bd:f4:8e:c4:ae:6e:3f:45:a0:c3:0d: b5:08:5b:7e:32:85:58:d6:e9:88:cf:27:4c:3c:0a:b8:0d:5e: 36:e2:d7:a5:2f:87:03:7c:ba:b1:f6:27:53:00:46:3a:8e:ae: 6c:80:28:02:5b:80:4e:c6:13:93:4f:ff:74:88:11:7d:0b:f3: cd:90:ff:0b:9b:88:bb:ea:00:be:88:c4:88:ff:e8:f5:9f:0a: 4c:e2:c6:29:6e:60:9b:49:4b:99:77:30:d3:1f:db:3b:dd:fd: 2e:9c:e6:d7:c8:75:e5:0d:19:71:8e:e7:aa:41:40:9f:c4:99: 49:3e:e0:1b:4c:09:fc:bc:a6:d6:df:4e:d1:ff:96:be:24:90: e5:61:53:42:a7:26:2e:60:a2:16:ac:7d:36:0e:f2:e0:c5:b6: 0c:1e:6c:f9:52:d3:10:09:b4:89:da:2d:06:a8:0d:fe:40:36: 33:f6:a5:8d:d8:32:38:ca:61:5f:5f:f0:43:94:ef:95:cb:1d: 54:e2:ac:12:15:80:29:93:af:e6:be:81:74:f8:d4:a6:0c:06: c9:09:2e:2b:0f:00:80:9f:67:b2:d3:49:1b:78:55:ac:e0:81: 31:e4:72:70:94:da:41:57:d7:4e:76:36:4c:37:56:bd:b9:dc: bd:fe:6b:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZ6F4JJDSqebrQnlfZFQAN1DtpVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0QzM0RTcwMkQ2QjNDNzhEQjZBRDBDOEI2QTEyQTRG NkM5NjJGMjAeFw0yNTA4MjMwMzIyMjlaFw0yNTA4MjQwNTM4MjlaMDMxMTAvBgNV BAMTKERFMzY3Qzc1MjEzRkNEOEMyMUZENDA0NkRFMjI4MEY3QzBCNUE5QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPPEprKL8R+TdiQAH7IJUfn45M FimQjIgUm65PZKbwHPW80zESCoaya5XnjrTFilf4vmd+R2nCfLGWSuvOJuKmx/WT Ey8M1sAHXAKMV9a7j135mRl8RVhQXeYZ6630YPLAYeYSWZgtC3MSxyMnIV9577ai ZbN2GtpEsqPg04Gi7XnZsdpJ39ura4aRcqmzcOKvA70cVZP4MWNaB7xYvM+RHdve pgD9nk+qlN5m9PDzzliZ02SfgsB4uZybO0caN9slh5J/oErz1r1/Wh4HfJ8u7w/5 IMtFDfTVI0DT8moCyMlTG2+y3GA5Z4eBBMLj1Run5I/1CtzxfAqyoNbeMW8fAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3jZ8dSE/zYwh/UBG3iKA98C1qcgwHwYDVR0j BBgwFoAUEUw05wLWs8eNtq0Mi2oSpPbJYvIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1FWWGY0aHhHRmNtWXR5NEg2NjhlV3JxdWdnOFZya0Qzc0RBSDlxcFBv eFgvMS8xMTRDMzRFNzAyRDZCM0M3OERCNkFEMEM4QjZBMTJBNEY2Qzk2MkYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExNEMzNEU3MDJENkIzQzc4 REI2QUQwQzhCNkExMkE0RjZDOTYyRjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1FWWGY0aHhHRmNtWXR5NEg2NjhlV3JxdWdnOFZya0Qzc0RBSDlxcFBveFgvMS8x MTRDMzRFNzAyRDZCM0M3OERCNkFEMEM4QjZBMTJBNEY2Qzk2MkYyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK0ADlCX8/r30jsSubj9FoMMNtQhbfjKFWNbpiM8nTDwKuA1eNuLXpS+HA3y6 sfYnUwBGOo6ubIAoAluATsYTk0//dIgRfQvzzZD/C5uIu+oAvojEiP/o9Z8KTOLG KW5gm0lLmXcw0x/bO939Lpzm18h15Q0ZcY7nqkFAn8SZST7gG0wJ/Lym1t9O0f+W viSQ5WFTQqcmLmCiFqx9Ng7y4MW2DB5s+VLTEAm0idotBqgN/kA2M/aljdgyOMph X1/wQ5TvlcsdVOKsEhWAKZOv5r6BdPjUpgwGyQkuKw8AgJ9nstNJG3hVrOCBMeRy cJTaQVfXTnY2TDdWvbncvf5r5A== -----END CERTIFICATE-----Generated at Sat Aug 23 19:34:34 2025 by rpki-client