$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/EF9D370AB78E47ED988195E5BF641AC265AC0230.mft File: EF9D370AB78E47ED988195E5BF641AC265AC0230.mft (raw, json) Hash identifier: uKFzOc9WkxDqZxS9BBECg+W8gI9p3LIt7HmhDIQ+pFk= Subject key identifier: 3B:26:62:CA:2D:24:CF:3E:78:FA:7B:42:FE:26:46:18:F1:99:33:03 Authority key identifier: EF:9D:37:0A:B7:8E:47:ED:98:81:95:E5:BF:64:1A:C2:65:AC:02:30 Certificate issuer: /CN=EF9D370AB78E47ED988195E5BF641AC265AC0230 Certificate serial: 52A72407DE6780D80701DB142E7BED705F26D1A6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9D370AB78E47ED988195E5BF641AC265AC0230.cer Subject info access: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/EF9D370AB78E47ED988195E5BF641AC265AC0230.mft Manifest number: 25 Signing time: Sat 23 Aug 2025 04:25:36 +0000 Manifest this update: Sat 23 Aug 2025 04:20:36 +0000 Manifest next update: Sun 24 Aug 2025 06:50:36 +0000 Files and hashes: 1: 3139312e372e302e302f32332d3332203d3e20323733343331.roa (hash: iunrE3SBYmm+pYsI+FnplsHHxSBbDZeM3RxsRQjLbxo=) 2: EF9D370AB78E47ED988195E5BF641AC265AC0230.crl (hash: /jUQRz5jsMJaKzdel94hWd0ddTkNPtAnAMgTeN0wakc=) 3: 323830343a386538343a3a2f33322d313238203d3e20323733343331.roa (hash: 6x10PVZZuzVejBRD6Q7FVdxUl4HrhcL/zWS6xH6hbBE=) 4: 3138362e3232372e37362e302f32322d3332203d3e20323733343331.roa (hash: J/1m69/x8vy7bx2a1DCizUvrKeEgZVC8uLG/ePlI91k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/EF9D370AB78E47ED988195E5BF641AC265AC0230.crl rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/EF9D370AB78E47ED988195E5BF641AC265AC0230.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9D370AB78E47ED988195E5BF641AC265AC0230.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 04:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a7:24:07:de:67:80:d8:07:01:db:14:2e:7b:ed:70:5f:26:d1:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF9D370AB78E47ED988195E5BF641AC265AC0230 Validity Not Before: Aug 23 04:20:36 2025 GMT Not After : Aug 24 06:50:36 2025 GMT Subject: CN=3B2662CA2D24CF3E78FA7B42FE264618F1993303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5f:4f:b9:2b:00:ca:16:de:03:61:1e:15:be: f8:4c:fa:2b:2b:10:3d:82:2c:db:39:57:61:d3:e6: ec:92:8e:8d:08:49:40:9f:0a:20:ea:55:a3:4c:e7: d4:ae:24:3b:66:64:49:fb:4c:33:3f:79:b5:60:fd: b6:54:2f:d8:59:5a:b0:aa:9a:e1:3b:13:57:7b:79: 16:7d:0e:b7:2c:91:2c:83:20:8f:3c:02:44:2b:69: 2b:e8:3e:25:e8:db:d2:df:cb:11:e8:ae:82:0d:0b: 87:16:05:87:f3:2f:0f:cb:bb:e0:77:42:38:3f:c2: 0f:c3:65:fd:d6:0a:27:49:ea:de:ef:36:da:23:19: 8b:25:2e:43:e3:01:f8:42:9f:b5:5c:ed:d8:53:c3: 39:f7:1b:57:4a:14:f5:3e:08:41:53:22:73:a3:a4: cf:85:b4:3a:73:af:b2:34:f5:a1:71:e4:f4:20:67: 01:66:9f:54:fe:e8:d2:26:23:79:b6:c6:ce:7d:2c: da:3d:a4:42:6c:7b:d4:7a:d5:37:6a:cf:67:fc:2a: 66:0f:58:15:fe:52:58:f8:51:aa:b1:80:29:dc:7e: bd:82:a5:d5:8a:fc:57:b7:07:c0:33:ac:26:28:a9: a5:42:8d:4f:b2:a1:23:ff:64:4a:d1:a8:bf:44:2f: f1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:26:62:CA:2D:24:CF:3E:78:FA:7B:42:FE:26:46:18:F1:99:33:03 X509v3 Authority Key Identifier: keyid:EF:9D:37:0A:B7:8E:47:ED:98:81:95:E5:BF:64:1A:C2:65:AC:02:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/EF9D370AB78E47ED988195E5BF641AC265AC0230.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9D370AB78E47ED988195E5BF641AC265AC0230.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/EF9D370AB78E47ED988195E5BF641AC265AC0230.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:43:9a:6d:ca:5b:f2:08:07:d7:2f:90:fe:9b:7a:61:98:22: 25:12:a3:09:3d:7f:47:ac:b4:e2:20:34:08:82:41:43:99:b8: 17:d3:36:da:79:8a:4a:05:19:34:03:24:c3:23:b0:33:8e:cf: a1:77:a6:5b:f3:9f:89:5a:03:7e:16:2b:34:c5:8e:b3:63:48: 3b:e5:5b:1f:5b:68:e7:53:df:95:52:51:1b:04:df:ea:6f:f9: 76:b6:e5:27:d8:88:da:f0:f0:84:58:1c:78:5a:e1:72:9f:0b: 6d:9d:f3:4d:ca:40:05:e9:7d:ab:db:3a:88:c3:0d:40:4e:f7: d6:ce:3d:84:42:74:94:d5:9c:4c:27:52:60:0a:05:e7:01:44: f1:c0:b4:e8:23:cb:91:6c:48:d0:eb:41:fb:0d:ed:3f:3b:c8: 26:b8:c1:6e:d8:17:78:a7:ea:19:b0:0c:02:1b:f1:2c:5d:37: 50:e5:7a:bc:c1:2b:31:60:df:ed:ea:3b:09:42:c4:c2:81:4b: a2:f7:0f:1e:37:7c:6d:51:d6:6c:02:90:be:a5:58:1c:7b:65: 6e:ef:65:f8:1b:48:13:fd:28:b0:94:ac:08:8b:99:af:0f:40: f5:d7:95:f7:32:ac:dc:5f:32:d9:cb:5c:e9:0b:95:24:fe:b1: e4:d8:5f:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUqckB95ngNgHAdsULnvtcF8m0aYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY5RDM3MEFCNzhFNDdFRDk4ODE5NUU1QkY2NDFBQzI2 NUFDMDIzMDAeFw0yNTA4MjMwNDIwMzZaFw0yNTA4MjQwNjUwMzZaMDMxMTAvBgNV BAMTKDNCMjY2MkNBMkQyNENGM0U3OEZBN0I0MkZFMjY0NjE4RjE5OTMzMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoX0+5KwDKFt4DYR4VvvhM+isr ED2CLNs5V2HT5uySjo0ISUCfCiDqVaNM59SuJDtmZEn7TDM/ebVg/bZUL9hZWrCq muE7E1d7eRZ9DrcskSyDII88AkQraSvoPiXo29LfyxHoroINC4cWBYfzLw/Lu+B3 Qjg/wg/DZf3WCidJ6t7vNtojGYslLkPjAfhCn7Vc7dhTwzn3G1dKFPU+CEFTInOj pM+FtDpzr7I09aFx5PQgZwFmn1T+6NImI3m2xs59LNo9pEJse9R61Tdqz2f8KmYP WBX+Ulj4UaqxgCncfr2CpdWK/Fe3B8AzrCYoqaVCjU+yoSP/ZErRqL9EL/E5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOyZiyi0kzz54+ntC/iZGGPGZMwMwHwYDVR0j BBgwFoAU7503CreOR+2YgZXlv2QawmWsAjAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGlwazRlUWQ5elV1Y3lFeExrc0NZeHlLNFNxRWR2R1FzSkxMazlNc3Bt RlgvMC9FRjlEMzcwQUI3OEU0N0VEOTg4MTk1RTVCRjY0MUFDMjY1QUMwMjMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGOUQzNzBBQjc4RTQ3RUQ5 ODgxOTVFNUJGNjQxQUMyNjVBQzAyMzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGlwazRlUWQ5elV1Y3lFeExrc0NZeHlLNFNxRWR2R1FzSkxMazlNc3BtRlgvMC9F RjlEMzcwQUI3OEU0N0VEOTg4MTk1RTVCRjY0MUFDMjY1QUMwMjMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmEOabcpb8ggH1y+Q/pt6YZgiJRKjCT1/R6y04iA0CIJBQ5m4F9M22nmKSgUZ NAMkwyOwM47PoXemW/OfiVoDfhYrNMWOs2NIO+VbH1to51PflVJRGwTf6m/5drbl J9iI2vDwhFgceFrhcp8LbZ3zTcpABel9q9s6iMMNQE731s49hEJ0lNWcTCdSYAoF 5wFE8cC06CPLkWxI0OtB+w3tPzvIJrjBbtgXeKfqGbAMAhvxLF03UOV6vMErMWDf 7eo7CULEwoFLovcPHjd8bVHWbAKQvqVYHHtlbu9l+BtIE/0osJSsCIuZrw9A9deV 9zKs3F8y2ctc6QuVJP6x5NhfkQ== -----END CERTIFICATE-----Generated at Sat Aug 23 10:26:38 2025 by rpki-client