$ rpki-client -vvf rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.mft File: 9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.mft (raw, json) Hash identifier: R4FPcKM+apWtyE3R/6tvArZJXCaO6HzY0m7Iw/7Rhy8= Subject key identifier: D5:70:EA:A4:E3:5A:77:45:B1:75:60:7C:24:0E:D4:4E:3E:0B:94:C5 Authority key identifier: 9B:E8:4B:7D:CA:4C:AC:C2:C9:FC:D8:CB:3F:9E:B4:F2:AE:30:67:AF Certificate issuer: /CN=9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF Certificate serial: 68714C2A1D1A6443727ABDF87D25E1FC7C2A2F80 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.cer Subject info access: rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.mft Manifest number: CA Signing time: Sat 23 Aug 2025 12:34:21 +0000 Manifest this update: Sat 23 Aug 2025 12:29:21 +0000 Manifest next update: Sun 24 Aug 2025 14:11:21 +0000 Files and hashes: 1: 9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.crl (hash: rcVk6Ka24TRcfaexMllt7eLuxQJmAW5hFiZKgv5bdJo=) 2: 3230312e3138322e3134342e302f32322d3234203d3e20323637353339.roa (hash: hFRV97wA8T/QDnmF7Ijr8alWrMcuht4PcO84oSwDwus=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.crl rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 14:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:71:4c:2a:1d:1a:64:43:72:7a:bd:f8:7d:25:e1:fc:7c:2a:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF Validity Not Before: Aug 23 12:29:21 2025 GMT Not After : Aug 24 14:11:21 2025 GMT Subject: CN=D570EAA4E35A7745B175607C240ED44E3E0B94C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5d:48:75:94:08:25:43:ec:da:b6:13:c5:ca: 3e:94:4d:04:df:66:e3:9a:21:a3:f8:67:9c:10:60: 12:3a:07:86:3a:0c:0f:26:e9:3c:99:23:77:c3:59: db:b2:98:84:41:1f:f8:31:ea:c8:0c:06:48:f3:13: 1c:48:5f:18:df:74:da:c7:d4:35:6a:bd:8d:7c:9d: c6:5b:57:ef:40:6f:7f:55:6b:59:a2:7e:c9:1b:d6: 74:2a:4b:30:9f:0c:8b:1e:9c:e1:6a:f6:be:b5:0f: bb:a2:d6:54:6d:e9:c8:3a:ed:5d:13:52:75:3b:ca: f7:45:36:30:52:3a:f7:2e:a6:7b:a5:71:0b:60:e9: ab:d3:8f:39:c5:84:d2:40:31:15:4b:c7:f9:81:28: e6:95:5c:ed:ea:c9:93:92:f5:4a:0c:32:c4:5e:cf: a9:9c:ba:6f:f3:93:df:c8:6d:c1:70:e2:ff:0b:9c: 33:ad:72:76:17:c1:a8:22:43:20:b3:08:f9:41:d5: fd:bf:f9:a5:31:a4:4c:82:c9:d2:b7:1f:9e:56:09: 65:37:37:6d:d2:dc:70:a1:ca:c3:b6:87:6e:e4:70: 65:5c:59:0b:34:95:00:37:53:a1:c1:ce:0a:0f:e0: 3e:6c:3c:9a:5e:f1:d2:56:0e:99:45:22:d8:03:48: 48:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:70:EA:A4:E3:5A:77:45:B1:75:60:7C:24:0E:D4:4E:3E:0B:94:C5 X509v3 Authority Key Identifier: keyid:9B:E8:4B:7D:CA:4C:AC:C2:C9:FC:D8:CB:3F:9E:B4:F2:AE:30:67:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:2a:c1:8e:13:db:b6:15:50:d1:fd:2e:36:33:e7:6b:04:20: 5e:3a:34:86:72:0e:25:a0:73:d4:2b:fb:88:54:df:60:e0:a4: f9:a4:c2:ef:2e:24:08:49:9c:77:1b:77:b4:5f:9b:2b:5e:90: 35:8b:ce:f7:06:0c:e4:0e:26:b4:ab:d2:ec:56:b9:91:ea:48: f0:b6:b0:13:d3:4f:a0:cb:c6:f2:70:65:25:0c:9a:06:5d:5d: ce:98:62:0a:bd:af:86:a0:16:c7:a4:2a:2a:2d:52:0f:62:85: ff:a5:ac:43:4e:93:43:3b:c5:5a:91:41:28:3c:c3:0a:80:6a: f7:f8:ec:44:79:b3:6f:30:67:48:2f:2b:95:83:61:d2:e5:88: 96:b7:aa:34:45:1b:ec:d1:81:c0:7e:18:c5:e6:8d:f5:cc:68: 89:6e:46:86:d5:21:0c:71:67:a2:16:fb:75:01:b4:81:72:c6: fc:7f:c9:b0:e3:30:bd:ea:e3:31:64:35:70:ee:3b:80:98:a9: 78:34:16:b7:c3:90:ff:ea:e4:09:ca:7f:a7:ac:85:d3:9d:87: 93:d3:c2:74:e7:3b:1f:5b:c3:fd:06:e8:04:ea:fb:e7:df:ff: d0:94:9b:2f:22:0f:e8:6f:80:84:c7:29:07:cd:79:33:9b:fb: b0:b7:80:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaHFMKh0aZENyer34fSXh/HwqL4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFODRCN0RDQTRDQUNDMkM5RkNEOENCM0Y5RUI0RjJB RTMwNjdBRjAeFw0yNTA4MjMxMjI5MjFaFw0yNTA4MjQxNDExMjFaMDMxMTAvBgNV BAMTKEQ1NzBFQUE0RTM1QTc3NDVCMTc1NjA3QzI0MEVENDRFM0UwQjk0QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVXUh1lAglQ+zathPFyj6UTQTf ZuOaIaP4Z5wQYBI6B4Y6DA8m6TyZI3fDWduymIRBH/gx6sgMBkjzExxIXxjfdNrH 1DVqvY18ncZbV+9Ab39Va1mifskb1nQqSzCfDIsenOFq9r61D7ui1lRt6cg67V0T UnU7yvdFNjBSOvcupnulcQtg6avTjznFhNJAMRVLx/mBKOaVXO3qyZOS9UoMMsRe z6mcum/zk9/IbcFw4v8LnDOtcnYXwagiQyCzCPlB1f2/+aUxpEyCydK3H55WCWU3 N23S3HChysO2h27kcGVcWQs0lQA3U6HBzgoP4D5sPJpe8dJWDplFItgDSEifAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1XDqpONad0WxdWB8JA7UTj4LlMUwHwYDVR0j BBgwFoAUm+hLfcpMrMLJ/NjLP5608q4wZ68wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEd4NHMyQjQzZ1VqZHRrTFF3dUVwYVF1dkc1Qlh3VUVuV0t3REVRTm5u TG8vMC85QkU4NEI3RENBNENBQ0MyQzlGQ0Q4Q0IzRjlFQjRGMkFFMzA2N0FGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCRTg0QjdEQ0E0Q0FDQzJD OUZDRDhDQjNGOUVCNEYyQUUzMDY3QUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEd4NHMyQjQzZ1VqZHRrTFF3dUVwYVF1dkc1Qlh3VUVuV0t3REVRTm5uTG8vMC85 QkU4NEI3RENBNENBQ0MyQzlGQ0Q4Q0IzRjlFQjRGMkFFMzA2N0FGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdSrBjhPbthVQ0f0uNjPnawQgXjo0hnIOJaBz1Cv7iFTfYOCk+aTC7y4kCEmc dxt3tF+bK16QNYvO9wYM5A4mtKvS7Fa5kepI8LawE9NPoMvG8nBlJQyaBl1dzphi Cr2vhqAWx6QqKi1SD2KF/6WsQ06TQzvFWpFBKDzDCoBq9/jsRHmzbzBnSC8rlYNh 0uWIlreqNEUb7NGBwH4YxeaN9cxoiW5GhtUhDHFnohb7dQG0gXLG/H/JsOMwverj MWQ1cO47gJipeDQWt8OQ/+rkCcp/p6yF052Hk9PCdOc7H1vD/QboBOr759//0JSb LyIP6G+AhMcpB815M5v7sLeA/g== -----END CERTIFICATE-----Generated at Sun Aug 24 07:02:31 2025 by rpki-client