$ rpki-client -vvf rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft File: 32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft (raw, json) Hash identifier: pxCp4DqAY02YYGKpN5FPPY66cYuCNZWF0BjT6XThoCs= Subject key identifier: AE:24:3E:AC:35:43:6B:AB:A0:4E:FE:64:3A:A5:1F:FD:AE:48:9B:89 Authority key identifier: 32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89 Certificate issuer: /CN=32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89 Certificate serial: 5BC5836E43651B96CC217437B2624E3082C6C412 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer Subject info access: rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft Manifest number: 0113 Signing time: Sat 23 Aug 2025 02:19:42 +0000 Manifest this update: Sat 23 Aug 2025 02:14:42 +0000 Manifest next update: Sun 24 Aug 2025 05:28:42 +0000 Files and hashes: 1: 34352e3138302e3232382e302f32322d3234203d3e20323639313531.roa (hash: xKpccbO2wzlbHbDV3ZJO8ATedkukSYGdQvi151j6L2o=) 2: 32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl (hash: d4OlRMAK+q1ppvDnWKZl3BwtS0RwJ0rjgLsiA0MKvd4=) 3: 323830343a363033303a3a2f33322d3438203d3e20323639313531.roa (hash: bustMz7M+5CMeM9CRQbzDoUPI+6nwA7yTMNCHpORS1E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 05:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c5:83:6e:43:65:1b:96:cc:21:74:37:b2:62:4e:30:82:c6:c4:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89 Validity Not Before: Aug 23 02:14:42 2025 GMT Not After : Aug 24 05:28:42 2025 GMT Subject: CN=AE243EAC35436BABA04EFE643AA51FFDAE489B89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ee:9b:eb:19:31:32:35:15:14:34:dc:04:e3: fe:71:17:90:46:a7:9b:d5:34:0f:2e:30:2c:4f:1d: d9:68:a2:64:cc:a8:5e:93:a7:30:c5:03:c7:e0:3a: 4d:9d:64:44:7b:96:1e:36:2c:13:a6:83:33:76:ff: aa:33:b0:63:06:fd:15:33:68:92:1e:36:fc:f2:4d: 4e:05:ca:2e:af:a5:d8:f6:38:4d:56:8a:77:38:db: 98:84:0b:df:f7:34:67:2d:dc:96:70:32:18:bb:e6: 24:de:73:f7:9f:13:7d:aa:32:c1:62:b7:20:ab:ce: 26:7b:bd:75:21:7d:60:fb:cf:35:7c:b6:4f:47:49: 18:c3:88:a0:cf:a4:c4:20:9c:f7:dc:7b:79:f8:c6: 71:67:80:7c:cc:65:f1:d1:d3:45:de:b9:12:6c:71: 35:b1:03:76:e5:7d:a9:3a:b1:de:d0:76:c5:b8:02: 63:78:23:ff:80:93:2d:53:db:54:92:4a:6d:40:26: f0:81:3b:d0:17:2c:5a:e4:a8:eb:2b:7a:f5:e7:4e: f2:fe:c8:21:23:3d:3e:81:68:f6:a6:86:c4:70:f4: 30:43:7f:86:a4:1a:bb:00:60:97:95:5c:47:65:a0: 68:05:ba:41:c0:a4:ee:61:5d:ee:46:87:9f:88:66: 4d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:24:3E:AC:35:43:6B:AB:A0:4E:FE:64:3A:A5:1F:FD:AE:48:9B:89 X509v3 Authority Key Identifier: keyid:32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:e5:e1:4d:3c:41:61:8b:fa:5b:16:09:b3:03:18:22:ec:a5: 02:32:3c:35:d7:6a:d7:7a:c7:9a:c9:07:1d:40:59:c2:72:f9: a1:f6:4c:63:e3:25:83:29:52:47:ba:b6:35:47:37:11:2e:15: 51:46:d4:84:43:18:00:63:3b:d9:d0:db:6c:1a:9b:63:96:59: a5:5a:80:65:25:1d:8b:b3:7a:db:67:f7:3d:84:33:b0:e5:38: 2c:29:e6:58:27:38:5c:b8:44:6c:15:44:4a:0e:6d:33:1d:c8: 5a:f7:fd:3c:f4:4f:1e:82:79:4a:35:8e:76:ec:21:fe:ae:12: 7a:83:77:8c:a1:7a:3f:e1:d6:87:ba:cf:1d:1e:06:38:4d:fd: dc:49:be:5f:06:a3:c4:5e:28:58:a7:6c:3e:f6:72:de:7e:72: b8:f0:17:bf:aa:4d:ee:58:51:e4:7b:c0:ce:ed:f5:b2:ea:28: c3:70:c4:fe:ae:0b:81:4b:c1:b4:8b:57:f1:26:96:e2:19:a7: 54:f7:55:ee:00:27:24:e7:d5:0d:c7:a8:ff:76:d8:1f:2f:66: a5:06:ba:82:21:72:a3:66:84:1c:17:7f:cb:f8:7d:c8:02:4a: f5:c1:e5:78:5c:4c:2b:7e:4c:a3:d1:08:08:9d:0e:2d:42:f8: 32:2d:e5:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUW8WDbkNlG5bMIXQ3smJOMILGxBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI1MjdFODJENjAzRkZCRTZEQTJFRjhFRDgyQzdCQjFG N0EzOUI4OTAeFw0yNTA4MjMwMjE0NDJaFw0yNTA4MjQwNTI4NDJaMDMxMTAvBgNV BAMTKEFFMjQzRUFDMzU0MzZCQUJBMDRFRkU2NDNBQTUxRkZEQUU0ODlCODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC77pvrGTEyNRUUNNwE4/5xF5BG p5vVNA8uMCxPHdloomTMqF6TpzDFA8fgOk2dZER7lh42LBOmgzN2/6ozsGMG/RUz aJIeNvzyTU4Fyi6vpdj2OE1Winc425iEC9/3NGct3JZwMhi75iTec/efE32qMsFi tyCrziZ7vXUhfWD7zzV8tk9HSRjDiKDPpMQgnPfce3n4xnFngHzMZfHR00XeuRJs cTWxA3blfak6sd7QdsW4AmN4I/+Aky1T21SSSm1AJvCBO9AXLFrkqOsrevXnTvL+ yCEjPT6BaPamhsRw9DBDf4akGrsAYJeVXEdloGgFukHApO5hXe5Gh5+IZk1vAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUriQ+rDVDa6ugTv5kOqUf/a5Im4kwHwYDVR0j BBgwFoAUMlJ+gtYD/75tou+O2Cx7sfejm4kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHBrQ05ZM2dTY2dRVjR4a0RLQVp0a3FLZGtxNk4zNjZHWXlDc1lrR05q UHYvMC8zMjUyN0U4MkQ2MDNGRkJFNkRBMkVGOEVEODJDN0JCMUY3QTM5Qjg5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyNTI3RTgyRDYwM0ZGQkU2 REEyRUY4RUQ4MkM3QkIxRjdBMzlCODkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHBrQ05ZM2dTY2dRVjR4a0RLQVp0a3FLZGtxNk4zNjZHWXlDc1lrR05qUHYvMC8z MjUyN0U4MkQ2MDNGRkJFNkRBMkVGOEVEODJDN0JCMUY3QTM5Qjg5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWOXhTTxBYYv6WxYJswMYIuylAjI8Nddq13rHmskHHUBZwnL5ofZMY+MlgylS R7q2NUc3ES4VUUbUhEMYAGM72dDbbBqbY5ZZpVqAZSUdi7N622f3PYQzsOU4LCnm WCc4XLhEbBVESg5tMx3IWvf9PPRPHoJ5SjWOduwh/q4SeoN3jKF6P+HWh7rPHR4G OE393Em+XwajxF4oWKdsPvZy3n5yuPAXv6pN7lhR5HvAzu31suoow3DE/q4LgUvB tItX8SaW4hmnVPdV7gAnJOfVDceo/3bYHy9mpQa6giFyo2aEHBd/y/h9yAJK9cHl eFxMK35Mo9EICJ0OLUL4Mi3lUA== -----END CERTIFICATE-----Generated at Sat Aug 23 12:41:57 2025 by rpki-client