$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft File: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft (raw, json) Hash identifier: 5E9I+mwklSTJpJK3c/6u+5To/UyMCvsczmLSYbcTK9o= Subject key identifier: 2A:67:1E:5C:61:68:04:A9:49:8F:E7:FA:28:E3:FF:20:B9:28:E0:79 Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE Certificate issuer: /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Certificate serial: 6B84E50F2F4AF9D16DF4A0C9AEAFBD87928BC914 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft Manifest number: 029A Signing time: Sat 23 Aug 2025 10:23:41 +0000 Manifest this update: Sat 23 Aug 2025 10:18:41 +0000 Manifest next update: Sun 24 Aug 2025 13:31:41 +0000 Files and hashes: 1: 323830343a323762633a3a2f33322d3438203d3e20323633393139.roa (hash: o5soZhe+dlhemRC6K331qQOeiYKJedndqQuOLBx6nRk=) 2: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl (hash: hIu/3qccbhRg1xHIhgRQ+aVLMtq6TUbCBxFq9Wft5/U=) 3: 3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (hash: daKi2XN6iI/5shlbC2ws+WpCE+eRSaaM95sbtBClTTE=) 4: 3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa (hash: 9lrgdFqXcmk1aveRypR0nwRoxN6RAu5lewGudgo7m5A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:84:e5:0f:2f:4a:f9:d1:6d:f4:a0:c9:ae:af:bd:87:92:8b:c9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Validity Not Before: Aug 23 10:18:41 2025 GMT Not After : Aug 24 13:31:41 2025 GMT Subject: CN=2A671E5C616804A9498FE7FA28E3FF20B928E079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f4:71:70:d8:a4:ec:13:cd:09:b6:79:53:ee: 43:c4:87:a3:dd:63:33:e2:6b:f7:f5:e4:4e:33:4e: 25:65:c6:92:e2:eb:d6:6b:aa:64:5f:48:c3:eb:15: 17:22:70:2f:90:02:fa:56:5d:9d:01:81:04:58:1b: ff:cb:1d:6e:b1:2b:98:3d:42:60:88:78:dc:87:2e: 00:0f:fe:0d:1f:39:89:f9:2c:0d:2c:36:04:13:e5: 3b:90:01:aa:85:30:78:56:e2:ae:3f:fd:03:ae:1a: 32:d8:ad:fb:47:1d:8f:20:e8:4f:05:12:0e:68:53: f8:74:11:86:c9:f0:d6:dc:82:be:2b:72:d9:81:c8: 73:93:6b:d4:79:92:cd:7a:a2:61:71:9a:63:95:19: 1d:fd:07:c8:9a:81:91:ad:3c:45:72:46:7f:7f:11: c1:73:56:ff:9e:e4:a6:2d:fd:6c:f5:31:ec:4f:36: 7f:ad:64:a0:92:5a:5e:cb:9f:72:f2:40:a8:01:d0: ed:30:87:95:62:c8:5a:46:8b:b2:3c:4d:8e:5e:df: 9d:7b:c6:3c:3a:75:6f:0d:5e:e6:d3:e8:a1:2e:65: cb:40:95:2a:69:50:df:75:ab:36:24:f3:bc:c3:85: 4a:fe:fc:e4:e7:07:2e:48:0a:36:6c:f6:30:c8:d3: 37:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:67:1E:5C:61:68:04:A9:49:8F:E7:FA:28:E3:FF:20:B9:28:E0:79 X509v3 Authority Key Identifier: keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:2e:8f:37:c1:f0:2b:da:f5:84:5a:22:8a:d5:ff:49:d0:74: 32:01:15:51:63:d2:27:e4:1f:b2:91:7f:ac:7a:06:a4:3d:6a: 78:50:0e:56:6b:e9:fd:fe:64:75:ae:61:37:d7:ec:3f:c9:e4: 37:6a:32:51:84:12:93:ed:89:10:46:6e:b6:23:30:98:a0:0c: e9:72:bf:7f:3d:aa:35:b9:a0:85:8b:1f:48:31:21:f4:1c:97: d4:e4:f5:4e:3a:63:20:57:be:ff:8f:3c:9f:ef:81:ca:0b:9f: 89:52:9f:af:a9:c9:b6:26:df:90:10:88:c1:1e:96:11:b6:01: c5:6c:bb:28:71:3e:f7:88:a7:1a:7a:da:c7:64:8d:ce:90:97: 20:31:9c:6a:1a:75:f7:b6:9c:ed:d6:52:88:bd:01:b1:12:4c: 05:d9:16:c1:dc:4d:91:81:79:36:ba:63:74:00:63:33:05:b2: 16:71:8e:50:b1:36:1e:14:e4:93:7e:d2:36:af:2c:ed:4f:9f: 03:f5:ee:2d:d8:28:96:25:be:a4:7d:72:5a:9e:c0:58:0d:cf: f4:88:82:13:70:47:1c:97:49:76:88:ca:5f:c6:bf:78:ca:90: e1:ae:c7:51:e2:d2:c3:ac:7c:3a:e7:99:39:b5:58:ab:ff:71: 7b:d9:7e:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUa4TlDy9K+dFt9KDJrq+9h5KLyRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRTlDOTBFQkM1MDgyRjgwMjA1NUVGQUE2MzYwQzY2 MUJGODVDRTAeFw0yNTA4MjMxMDE4NDFaFw0yNTA4MjQxMzMxNDFaMDMxMTAvBgNV BAMTKDJBNjcxRTVDNjE2ODA0QTk0OThGRTdGQTI4RTNGRjIwQjkyOEUwNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb9HFw2KTsE80JtnlT7kPEh6Pd YzPia/f15E4zTiVlxpLi69ZrqmRfSMPrFRcicC+QAvpWXZ0BgQRYG//LHW6xK5g9 QmCIeNyHLgAP/g0fOYn5LA0sNgQT5TuQAaqFMHhW4q4//QOuGjLYrftHHY8g6E8F Eg5oU/h0EYbJ8Nbcgr4rctmByHOTa9R5ks16omFxmmOVGR39B8iagZGtPEVyRn9/ EcFzVv+e5KYt/Wz1MexPNn+tZKCSWl7Ln3LyQKgB0O0wh5ViyFpGi7I8TY5e3517 xjw6dW8NXubT6KEuZctAlSppUN91qzYk87zDhUr+/OTnBy5ICjZs9jDI0zfzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKmceXGFoBKlJj+f6KOP/ILko4HkwHwYDVR0j BBgwFoAUi66ckOvFCC+AIFXvqmNgxmG/hc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNL ODUvMS84QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQUU5QzkwRUJDNTA4MkY4 MDIwNTVFRkFBNjM2MEM2NjFCRjg1Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNLODUvMS84 QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXC6PN8HwK9r1hFoiitX/SdB0MgEVUWPSJ+QfspF/rHoGpD1qeFAOVmvp/f5k da5hN9fsP8nkN2oyUYQSk+2JEEZutiMwmKAM6XK/fz2qNbmghYsfSDEh9ByX1OT1 TjpjIFe+/488n++BygufiVKfr6nJtibfkBCIwR6WEbYBxWy7KHE+94inGnrax2SN zpCXIDGcahp197ac7dZSiL0BsRJMBdkWwdxNkYF5NrpjdABjMwWyFnGOULE2HhTk k37SNq8s7U+fA/XuLdgoliW+pH1yWp7AWA3P9IiCE3BHHJdJdojKX8a/eMqQ4a7H UeLSw6x8OueZObVYq/9xe9l+Ag== -----END CERTIFICATE-----Generated at Sat Aug 23 22:17:45 2025 by rpki-client