$ rpki-client -vvf rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft File: 1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft (raw, json) Hash identifier: WcAGUxlobuM6jfaiqXQPs2HeVYK1fCUHp7ZPXX64jHk= Subject key identifier: D1:07:8B:D1:96:AB:71:23:D7:13:FD:C0:5D:AE:A3:C2:D8:F0:3F:FF Authority key identifier: 1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14 Certificate issuer: /CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14 Certificate serial: 3A3AC97DFD67234F836D0936B2E590F04ACABF15 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer Subject info access: rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft Manifest number: AE Signing time: Fri 22 Aug 2025 18:05:56 +0000 Manifest this update: Fri 22 Aug 2025 18:00:56 +0000 Manifest next update: Sat 23 Aug 2025 20:25:56 +0000 Files and hashes: 1: 3137302e38342e3139362e302f32322d3332203d3e20323635303138.roa (hash: GMqVz+pNv4jlVq8AM/MysXTepHhSdbVZyc7Np+Ty+wo=) 2: 1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl (hash: FsGVxOhqZjTlsNiNJZO3sJG3kGfrPQSgDMUYCDyvkII=) 3: 3136302e3233382e3230302e302f32322d3332203d3e20323635303138.roa (hash: hv7rV0YAjf7OIxTmW4CmSIfCjHYfqZrGrG5y4H2smTY=) 4: 323830343a333137633a3a2f33322d3634203d3e20323635303138.roa (hash: ez+ajbN41gMQLCvCNkwbbF7k57+fkGAT5m28gVygc5E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 20:25:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:3a:c9:7d:fd:67:23:4f:83:6d:09:36:b2:e5:90:f0:4a:ca:bf:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14 Validity Not Before: Aug 22 18:00:56 2025 GMT Not After : Aug 23 20:25:56 2025 GMT Subject: CN=D1078BD196AB7123D713FDC05DAEA3C2D8F03FFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1b:28:a1:f0:8d:90:e7:67:e2:9f:7b:b1:bc: ee:28:6e:8c:86:33:85:9b:5a:d9:3a:28:5b:9f:b2: 1f:57:26:50:97:29:6d:39:4d:ef:b0:c3:29:c5:8d: 8a:f1:01:52:a3:7b:40:56:c4:20:4e:83:7a:63:c0: e9:86:93:29:3e:0a:bd:b4:38:52:31:39:01:82:34: 12:85:ae:e3:9b:7b:b7:a8:96:29:ce:00:4f:ab:7b: 71:99:d4:74:2a:dc:fc:4e:dc:74:73:c8:df:4b:4c: 0a:d7:79:8d:70:9f:ee:2c:d3:5c:10:6d:fd:63:7c: c1:0e:0f:45:53:6e:d4:dc:96:51:6d:1a:bc:64:10: d4:ab:d9:f8:13:7d:da:09:6f:5c:82:e0:9a:2b:8f: 47:79:7c:79:3f:e2:db:b7:5f:6e:47:e5:38:62:1f: ea:ec:41:d1:af:f5:bf:f6:c9:9b:27:44:92:64:1f: 49:35:50:7d:64:61:75:a1:67:1a:95:c0:02:4d:7f: ed:ff:0e:5b:76:de:a6:c9:65:50:bc:3d:c7:f0:bf: 1b:e6:f7:2e:ee:6e:a9:81:ef:03:85:b9:fa:4e:24: a8:e2:4d:3d:ec:fe:5f:bc:4c:e4:c9:35:58:5d:a1: 36:87:28:00:17:74:77:3d:8d:40:6e:b9:b1:71:42: 3a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:07:8B:D1:96:AB:71:23:D7:13:FD:C0:5D:AE:A3:C2:D8:F0:3F:FF X509v3 Authority Key Identifier: keyid:1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:56:19:b2:b6:86:b7:8d:3c:7a:19:ad:40:8c:11:f6:82:93: 86:e5:14:37:1b:08:7d:43:4c:84:7b:9b:72:da:8c:ac:00:a5: 39:52:55:9e:b0:cf:3b:11:55:cb:a8:ae:c0:95:92:c7:09:c8: f7:9a:2d:8a:1e:86:4a:7d:af:90:65:6e:cc:98:0e:37:a3:64: 3f:7a:7a:44:18:b4:ac:0a:b7:25:9e:be:4f:c2:0a:0e:b6:d2: 42:45:aa:be:da:8b:67:54:57:57:63:55:1f:1a:60:8f:78:dd: a3:33:d7:87:79:e1:e9:b3:f6:c9:f7:2d:70:1b:b5:e9:91:5d: fe:d8:0d:eb:97:5c:50:74:06:06:1e:24:f3:a8:5e:52:7b:14: 4e:d8:20:31:46:b2:2e:13:ad:19:3a:b1:28:8a:e1:b7:7e:9e: 11:08:42:c0:0b:4d:61:90:3b:cf:d8:41:ff:00:bc:2b:31:94: 83:6e:7c:a8:7f:6c:11:70:38:9c:8e:f9:52:6d:01:87:38:04: 72:29:2e:63:09:ab:6b:b8:e3:6b:96:3e:c6:ed:b8:7b:9b:06: ab:e4:9d:78:e6:49:b4:23:e8:81:8f:0e:2c:e5:2b:97:ac:5c: 24:fe:f9:83:22:d0:99:11:93:bd:d7:b2:d7:38:5a:5b:e4:a9: 22:16:11:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOjrJff1nI0+DbQk2suWQ8ErKvxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2MEZBNzY5MDUxOUE5M0RGNjlEQjhFQUNDOUVEQjAz ODBCMkIxNDAeFw0yNTA4MjIxODAwNTZaFw0yNTA4MjMyMDI1NTZaMDMxMTAvBgNV BAMTKEQxMDc4QkQxOTZBQjcxMjNENzEzRkRDMDVEQUVBM0MyRDhGMDNGRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfGyih8I2Q52fin3uxvO4oboyG M4WbWtk6KFufsh9XJlCXKW05Te+wwynFjYrxAVKje0BWxCBOg3pjwOmGkyk+Cr20 OFIxOQGCNBKFruObe7eolinOAE+re3GZ1HQq3PxO3HRzyN9LTArXeY1wn+4s01wQ bf1jfMEOD0VTbtTcllFtGrxkENSr2fgTfdoJb1yC4Jorj0d5fHk/4tu3X25H5Thi H+rsQdGv9b/2yZsnRJJkH0k1UH1kYXWhZxqVwAJNf+3/Dlt23qbJZVC8Pcfwvxvm 9y7ubqmB7wOFufpOJKjiTT3s/l+8TOTJNVhdoTaHKAAXdHc9jUBuubFxQjrBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0QeL0ZarcSPXE/3AXa6jwtjwP/8wHwYDVR0j BBgwFoAUHmD6dpBRmpPfaduOrMntsDgLKxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2p2WUFxOFlNN3JpUnR4bWJ6WVlzNVQ2MzY1aUVnOUFpZUVENmRVQTRH a1ovMC8xRTYwRkE3NjkwNTE5QTkzREY2OURCOEVBQ0M5RURCMDM4MEIyQjE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFNjBGQTc2OTA1MTlBOTNE RjY5REI4RUFDQzlFREIwMzgwQjJCMTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2p2WUFxOFlNN3JpUnR4bWJ6WVlzNVQ2MzY1aUVnOUFpZUVENmRVQTRHa1ovMC8x RTYwRkE3NjkwNTE5QTkzREY2OURCOEVBQ0M5RURCMDM4MEIyQjE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkVYZsraGt408ehmtQIwR9oKThuUUNxsIfUNMhHubctqMrAClOVJVnrDPOxFV y6iuwJWSxwnI95otih6GSn2vkGVuzJgON6NkP3p6RBi0rAq3JZ6+T8IKDrbSQkWq vtqLZ1RXV2NVHxpgj3jdozPXh3nh6bP2yfctcBu16ZFd/tgN65dcUHQGBh4k86he UnsUTtggMUayLhOtGTqxKIrht36eEQhCwAtNYZA7z9hB/wC8KzGUg258qH9sEXA4 nI75Um0BhzgEcikuYwmra7jja5Y+xu24e5sGq+SdeOZJtCPogY8OLOUrl6xcJP75 gyLQmRGTvdey1zhaW+SpIhYR9Q== -----END CERTIFICATE-----Generated at Sat Aug 23 10:43:26 2025 by rpki-client