$ rpki-client -vvf rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft File: CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft (raw, json) Hash identifier: ECgQY3hIUtwREt6oRy+COslYYs5Wn252T3XqKIKWjRo= Subject key identifier: D9:D7:1C:5E:69:E6:5C:D4:78:AC:15:59:6E:37:77:C6:42:74:17:A4 Authority key identifier: CE:69:E0:90:A3:A3:C4:5C:3E:E3:F4:A2:A4:06:8B:58:94:8D:C9:94 Certificate issuer: /CN=CE69E090A3A3C45C3EE3F4A2A4068B58948DC994 Certificate serial: 01F05A76E6C6B7660D64801B2C88E734D6898BB1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.cer Subject info access: rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft Manifest number: 021A Signing time: Sat 23 Aug 2025 05:19:12 +0000 Manifest this update: Sat 23 Aug 2025 05:14:12 +0000 Manifest next update: Sun 24 Aug 2025 08:21:12 +0000 Files and hashes: 1: CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.crl (hash: JYAWulv8jJB3MvpqbqG9t1sg85fr1snRlLBu5RIaAvM=) 2: 323830343a366261383a3a2f33322d3438203d3e20323730343135.roa (hash: Gemcb4V5qPaojkbRamJOllDbJN0znPPuJTFFrmwzhmY=) 3: 3139302e3130372e3136302e302f32322d3234203d3e20323730343135.roa (hash: A8kWvaltxYyvbnah0osFRp6KjhjI7+SK/5dGPfcjeoE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.crl rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 08:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f0:5a:76:e6:c6:b7:66:0d:64:80:1b:2c:88:e7:34:d6:89:8b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE69E090A3A3C45C3EE3F4A2A4068B58948DC994 Validity Not Before: Aug 23 05:14:12 2025 GMT Not After : Aug 24 08:21:12 2025 GMT Subject: CN=D9D71C5E69E65CD478AC15596E3777C6427417A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:81:20:38:8d:2e:bf:8d:53:f8:8d:6f:59:cf: ec:b6:7f:b0:e4:41:9b:c8:ab:7b:1c:5f:f2:6f:d0: 7f:cc:19:9a:05:cb:03:03:8b:4c:53:68:de:e2:74: c6:75:d1:9f:c3:19:b2:e4:0c:ed:5e:52:87:a6:86: c3:3a:17:08:f6:be:67:04:98:76:26:95:f7:25:fa: 18:a9:cb:ca:41:c3:32:03:fa:6e:b3:02:11:d2:ac: 7d:ce:d2:31:a1:11:e8:4d:a8:24:9c:c6:52:19:e2: d1:2e:10:80:7d:c9:b9:3d:1b:c2:4a:fc:f2:38:1d: 71:8e:ba:e8:d3:73:81:03:7a:7c:95:b7:05:b1:71: ac:91:19:8c:c1:be:2d:41:cd:e9:23:fa:33:7b:f7: c1:a5:66:46:d3:f6:30:98:18:af:64:f1:78:0f:7d: 72:ea:f6:d6:5e:d3:ee:9b:a0:31:ee:e1:cc:5e:eb: 70:4b:29:8e:15:80:3a:6b:96:c1:ca:06:5d:c4:7d: 77:bc:51:47:df:7c:b1:69:ed:7a:9b:5a:ae:9f:00: 8c:5d:cc:d9:54:ac:5b:7e:1e:ff:0c:2b:9b:ca:fb: 76:7e:31:5a:71:c7:4a:fe:99:ea:8d:72:6c:9e:52: 69:07:0b:dc:e4:c1:1c:64:13:82:42:bc:75:e4:26: d1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D7:1C:5E:69:E6:5C:D4:78:AC:15:59:6E:37:77:C6:42:74:17:A4 X509v3 Authority Key Identifier: keyid:CE:69:E0:90:A3:A3:C4:5C:3E:E3:F4:A2:A4:06:8B:58:94:8D:C9:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:55:21:24:75:e2:e9:c9:a3:6f:c8:db:a9:18:27:83:4c:25: bc:d2:4b:30:65:10:19:41:e2:49:c6:94:37:1e:8f:2a:fe:b9: 8f:7a:ba:60:40:34:68:a8:e8:00:58:ed:f8:50:3a:59:23:d0: 8d:71:b0:fc:ab:1d:8a:77:1e:bc:24:36:df:36:08:fc:bf:a9: 54:c1:f1:dd:ef:dc:f4:bc:73:81:3e:ad:72:0e:e9:17:d7:9f: d8:ab:b1:0d:33:c0:21:c1:3f:4e:08:b9:52:48:a8:a0:19:60: bf:ea:8b:3a:31:aa:93:29:e3:e7:ae:19:1c:22:8e:a0:24:03: fd:0f:f0:8a:48:ed:8e:dd:19:3a:48:79:e4:fe:39:bb:1a:27: 41:92:3b:3a:8c:c0:8b:a3:fc:ae:ab:76:98:4f:9b:09:05:2d: 23:dc:5e:f9:d6:4b:9f:dc:c7:06:6f:61:ee:cc:7d:28:c6:98: e3:c7:29:16:66:3b:e3:f0:cc:6d:39:8e:0c:02:17:63:43:c1: a5:11:b2:fb:9e:30:24:7e:d1:e0:0d:0c:09:d8:b4:e7:1f:3f: b1:e6:e4:5f:f1:c9:1e:0b:4a:c7:d8:c4:58:db:5c:dd:78:cf: 5c:5d:40:4d:1b:80:16:10:6e:5a:b5:37:af:52:03:b5:da:fb: 92:5f:bc:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAfBadubGt2YNZIAbLIjnNNaJi7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U2OUUwOTBBM0EzQzQ1QzNFRTNGNEEyQTQwNjhCNTg5 NDhEQzk5NDAeFw0yNTA4MjMwNTE0MTJaFw0yNTA4MjQwODIxMTJaMDMxMTAvBgNV BAMTKEQ5RDcxQzVFNjlFNjVDRDQ3OEFDMTU1OTZFMzc3N0M2NDI3NDE3QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTgSA4jS6/jVP4jW9Zz+y2f7Dk QZvIq3scX/Jv0H/MGZoFywMDi0xTaN7idMZ10Z/DGbLkDO1eUoemhsM6Fwj2vmcE mHYmlfcl+hipy8pBwzID+m6zAhHSrH3O0jGhEehNqCScxlIZ4tEuEIB9ybk9G8JK /PI4HXGOuujTc4EDenyVtwWxcayRGYzBvi1Bzekj+jN798GlZkbT9jCYGK9k8XgP fXLq9tZe0+6boDHu4cxe63BLKY4VgDprlsHKBl3EfXe8UUfffLFp7XqbWq6fAIxd zNlUrFt+Hv8MK5vK+3Z+MVpxx0r+meqNcmyeUmkHC9zkwRxkE4JCvHXkJtHjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2dccXmnmXNR4rBVZbjd3xkJ0F6QwHwYDVR0j BBgwFoAUzmngkKOjxFw+4/SipAaLWJSNyZQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1hoeWFDdXFHVjJHZHZYOGZZeUI2dTFDSFR2Um1NYTlnVmZuS0JVZXBp S2ovMC9DRTY5RTA5MEEzQTNDNDVDM0VFM0Y0QTJBNDA2OEI1ODk0OERDOTk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNjlFMDkwQTNBM0M0NUMz RUUzRjRBMkE0MDY4QjU4OTQ4REM5OTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1hoeWFDdXFHVjJHZHZYOGZZeUI2dTFDSFR2Um1NYTlnVmZuS0JVZXBpS2ovMC9D RTY5RTA5MEEzQTNDNDVDM0VFM0Y0QTJBNDA2OEI1ODk0OERDOTk0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq1UhJHXi6cmjb8jbqRgng0wlvNJLMGUQGUHiScaUNx6PKv65j3q6YEA0aKjo AFjt+FA6WSPQjXGw/KsdincevCQ23zYI/L+pVMHx3e/c9LxzgT6tcg7pF9ef2Kux DTPAIcE/Tgi5UkiooBlgv+qLOjGqkynj564ZHCKOoCQD/Q/wikjtjt0ZOkh55P45 uxonQZI7OozAi6P8rqt2mE+bCQUtI9xe+dZLn9zHBm9h7sx9KMaY48cpFmY74/DM bTmODAIXY0PBpRGy+54wJH7R4A0MCdi05x8/sebkX/HJHgtKx9jEWNtc3XjPXF1A TRuAFhBuWrU3r1IDtdr7kl+8ww== -----END CERTIFICATE-----Generated at Sun Aug 24 00:09:13 2025 by rpki-client