$ rpki-client -vvf rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft File: CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft (raw, json) Hash identifier: 0QC5iC8WBx98URHtEnppAM4jTABqwTZV5CF3bGFMIfw= Subject key identifier: 76:56:4B:7A:16:7A:6B:A0:F0:C2:D9:48:C3:F0:97:E8:65:05:9E:2E Authority key identifier: CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF Certificate issuer: /CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF Certificate serial: 2A2F3D7E90C5337D656B1B2D6B6905B84E2B985E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer Subject info access: rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft Manifest number: 01CC Signing time: Sat 23 Aug 2025 03:24:55 +0000 Manifest this update: Sat 23 Aug 2025 03:19:55 +0000 Manifest next update: Sun 24 Aug 2025 04:44:55 +0000 Files and hashes: 1: CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl (hash: 3qQRozCrKDoxSzryWKQkJ88zCz9fAT4/I5F255PfGOM=) 2: 3230302e35302e3230302e302f32322d3234203d3e20323730343637.roa (hash: qR6iS5F06BWnuM8HyC9ItrpXDfvJvjlt1MMd4yffj18=) 3: 323830343a366336633a3a2f33322d3438203d3e20323730343637.roa (hash: 8gZng/LcYVjRvdKcIWLphoxYezlVpCWANLcyK6msRE4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 04:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:2f:3d:7e:90:c5:33:7d:65:6b:1b:2d:6b:69:05:b8:4e:2b:98:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF Validity Not Before: Aug 23 03:19:55 2025 GMT Not After : Aug 24 04:44:55 2025 GMT Subject: CN=76564B7A167A6BA0F0C2D948C3F097E865059E2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fb:f2:65:23:38:fc:b0:27:e5:e6:ee:06:d3: 62:ac:b8:c7:96:42:ca:87:c2:49:cb:d7:8e:7e:9c: 0d:d3:2b:68:02:8f:40:e0:90:e9:3a:08:f3:ab:1e: a6:b9:a9:94:03:b4:4d:2a:a1:4c:24:a9:1f:12:81: f8:bb:e5:c7:d3:ba:ee:76:6e:5e:c2:ae:0e:f0:0e: 42:37:b5:e1:9d:9d:5c:79:29:64:8b:be:4f:70:ee: 7b:4a:5c:12:c1:32:c6:4d:13:8c:e6:90:4a:7c:ab: 8d:f1:6f:eb:a7:ed:bf:03:b9:d6:13:22:c7:66:97: 32:72:73:c8:1f:41:57:67:c1:c8:67:de:df:7d:b4: 11:4f:e8:bb:63:a6:10:56:61:74:ba:5d:04:65:85: 02:c2:a0:69:73:10:42:d7:8f:04:1e:af:f1:ab:14: 26:c5:d7:c2:da:56:0f:41:f5:ad:19:40:0a:9b:1e: b5:87:0e:20:ba:19:60:4d:b5:42:dc:13:12:aa:27: 84:79:36:78:7a:ea:0e:b6:0e:81:6f:3f:74:ce:2f: 59:0b:2a:af:77:eb:a1:b8:4e:89:1d:86:03:b7:6c: f4:d7:d6:19:91:1e:f3:7f:40:62:ed:f6:ff:0a:c8: eb:00:59:ad:27:67:bb:12:41:ca:49:2c:dd:20:cc: 7e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:56:4B:7A:16:7A:6B:A0:F0:C2:D9:48:C3:F0:97:E8:65:05:9E:2E X509v3 Authority Key Identifier: keyid:CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:e3:5e:1d:f0:c9:d9:a5:b8:04:1a:a3:46:1b:dc:ef:9d:12: 73:b7:ff:f1:b9:b2:23:17:0d:83:ef:97:02:15:1c:c7:1d:9c: 5b:a7:34:6b:cd:56:bd:53:fa:77:3d:2a:c7:c3:ae:24:a6:12: dd:f0:17:23:a2:85:02:04:20:f0:b2:98:a8:a6:e1:2d:bd:74: 78:53:2b:53:a6:aa:7b:42:51:61:b1:94:5a:75:ad:c4:2b:5d: 07:ea:1c:45:4e:c4:cc:96:93:59:c9:0b:88:99:1c:4b:35:76: 2a:b1:e0:54:5a:0c:f8:fb:ba:61:8f:95:cb:2c:7b:27:a5:72: 0f:6f:44:d0:1a:51:43:50:3a:c1:53:89:9b:b0:fc:87:86:1a: 05:54:f7:df:b5:96:e2:eb:c1:26:45:9f:05:90:5c:59:78:c5: dc:1c:63:bb:05:82:bf:e5:07:09:e9:ea:64:0f:90:cd:3b:1e: 4e:bd:57:65:55:b7:d7:74:d6:4d:6c:67:8d:a8:d1:c4:92:5a: e9:d8:66:65:3f:da:41:89:49:bc:12:ff:b8:23:b1:cf:03:94: 50:e1:71:35:72:ae:23:dd:f9:45:bb:2d:6b:6a:2e:fb:f0:cf: c1:20:ba:83:38:d3:7f:6a:75:89:fd:b4:6b:94:c2:73:6f:a6: c2:f5:5d:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKi89fpDFM31laxsta2kFuE4rmF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGNTIwNEI0MTE2OUNCQkYyRjY4QTUwMEUwMzZGQkE2 QzNDM0JFRjAeFw0yNTA4MjMwMzE5NTVaFw0yNTA4MjQwNDQ0NTVaMDMxMTAvBgNV BAMTKDc2NTY0QjdBMTY3QTZCQTBGMEMyRDk0OEMzRjA5N0U4NjUwNTlFMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA+/JlIzj8sCfl5u4G02KsuMeW QsqHwknL145+nA3TK2gCj0DgkOk6CPOrHqa5qZQDtE0qoUwkqR8Sgfi75cfTuu52 bl7Crg7wDkI3teGdnVx5KWSLvk9w7ntKXBLBMsZNE4zmkEp8q43xb+un7b8DudYT IsdmlzJyc8gfQVdnwchn3t99tBFP6LtjphBWYXS6XQRlhQLCoGlzEELXjwQer/Gr FCbF18LaVg9B9a0ZQAqbHrWHDiC6GWBNtULcExKqJ4R5Nnh66g62DoFvP3TOL1kL Kq9366G4TokdhgO3bPTX1hmRHvN/QGLt9v8KyOsAWa0nZ7sSQcpJLN0gzH5JAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdlZLehZ6a6DwwtlIw/CX6GUFni4wHwYDVR0j BBgwFoAUyvUgS0EWnLvy9opQDgNvumw8O+8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDVnZGczakZpaWJzdjlIMnhqcjFVN3pkdkNYc3NHaGFnYmFSd3JIVzZK RTkvMC9DQUY1MjA0QjQxMTY5Q0JCRjJGNjhBNTAwRTAzNkZCQTZDM0MzQkVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBRjUyMDRCNDExNjlDQkJG MkY2OEE1MDBFMDM2RkJBNkMzQzNCRUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NDVnZGczakZpaWJzdjlIMnhqcjFVN3pkdkNYc3NHaGFnYmFSd3JIVzZKRTkvMC9D QUY1MjA0QjQxMTY5Q0JCRjJGNjhBNTAwRTAzNkZCQTZDM0MzQkVGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1ONeHfDJ2aW4BBqjRhvc750Sc7f/8bmyIxcNg++XAhUcxx2cW6c0a81WvVP6 dz0qx8OuJKYS3fAXI6KFAgQg8LKYqKbhLb10eFMrU6aqe0JRYbGUWnWtxCtdB+oc RU7EzJaTWckLiJkcSzV2KrHgVFoM+Pu6YY+Vyyx7J6VyD29E0BpRQ1A6wVOJm7D8 h4YaBVT337WW4uvBJkWfBZBcWXjF3BxjuwWCv+UHCenqZA+QzTseTr1XZVW313TW TWxnjajRxJJa6dhmZT/aQYlJvBL/uCOxzwOUUOFxNXKuI935Rbsta2ou+/DPwSC6 gzjTf2p1if20a5TCc2+mwvVdEw== -----END CERTIFICATE-----Generated at Sat Aug 23 12:39:58 2025 by rpki-client