$ rpki-client -vvf rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.mft File: CE199B761AB444E82DC4918B4D38917C16AEC7B8.mft (raw, json) Hash identifier: 9IZlXY8ZogWDjk4bUCHgCi1nabfGsQaU9kYzYfN1hxk= Subject key identifier: 0D:43:0C:CB:48:50:7C:72:3D:C9:84:57:80:F1:5A:3D:7C:53:B6:81 Authority key identifier: CE:19:9B:76:1A:B4:44:E8:2D:C4:91:8B:4D:38:91:7C:16:AE:C7:B8 Certificate issuer: /CN=CE199B761AB444E82DC4918B4D38917C16AEC7B8 Certificate serial: 7A4221B191DB62A777BED898606A44574672F115 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE199B761AB444E82DC4918B4D38917C16AEC7B8.cer Subject info access: rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.mft Manifest number: 0184 Signing time: Sat 23 Aug 2025 07:45:41 +0000 Manifest this update: Sat 23 Aug 2025 07:40:41 +0000 Manifest next update: Sun 24 Aug 2025 10:15:41 +0000 Files and hashes: 1: 3133382e39392e35362e302f32322d3234203d3e203532383737.roa (hash: Yzth8WaJ/Si+p5dwB+WvkDTB34KymN1TWZusJ9ccrhA=) 2: CE199B761AB444E82DC4918B4D38917C16AEC7B8.crl (hash: vkh/hOEdUX8LNI/q2vSZSPTpKaJ7xQLwe1oqg3ZQEjs=) 3: 3138362e3233322e37322e302f32322d3234203d3e203532383737.roa (hash: zub4m9O3iAabg9aQp3eIDRUo6sHMfuZ9hai4+YQV/7o=) 4: 323830343a3931633a3a2f33322d3634203d3e203532383737.roa (hash: khHTmwgfxVxQDCoIYMTK91B7VSTNBzqRbnZWqMjgmRM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.crl rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE199B761AB444E82DC4918B4D38917C16AEC7B8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 10:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:42:21:b1:91:db:62:a7:77:be:d8:98:60:6a:44:57:46:72:f1:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE199B761AB444E82DC4918B4D38917C16AEC7B8 Validity Not Before: Aug 23 07:40:41 2025 GMT Not After : Aug 24 10:15:41 2025 GMT Subject: CN=0D430CCB48507C723DC9845780F15A3D7C53B681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c8:c3:93:95:b1:b0:1c:37:5f:cf:db:50:e5: f2:7e:b4:2f:19:bf:a0:96:54:c3:bd:49:6d:c9:17: 6f:4c:4b:ec:29:8b:e6:75:d6:5e:c6:36:d4:da:be: 14:3e:a7:d0:b1:9a:78:81:b6:fd:20:43:35:f9:e0: 05:0b:ea:29:80:fd:24:10:49:96:5d:81:f3:e9:3a: d6:c4:81:c8:2a:02:fa:ca:e0:ef:2f:83:44:a8:66: 9f:21:d2:5f:a6:a9:c9:ab:dc:c7:d4:73:f3:6e:ca: 27:a8:3e:89:99:9e:1f:85:e1:e4:5e:67:dc:15:7f: b6:0e:ed:e3:89:15:d9:2d:6f:8f:e7:01:dc:46:f6: 7d:a6:3b:f0:5e:8e:fb:1c:48:7c:86:b3:80:6e:60: d4:a1:16:30:de:17:69:99:ca:87:58:2a:b6:b3:89: bf:5b:21:2b:eb:a2:9e:4e:5d:b9:79:27:99:2e:64: af:ab:6b:20:29:62:96:b3:a2:86:33:ba:63:56:aa: 67:8d:24:08:e1:85:a1:86:1d:e0:ff:1b:8d:11:a9: 0c:c7:c1:23:4a:06:69:27:77:d2:56:be:56:dd:0d: 46:6f:3e:1a:cb:f0:1e:3b:60:ca:4f:66:ed:f0:9d: 04:93:7c:f9:47:fd:b4:15:e3:3a:02:f8:38:5b:5a: 30:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:43:0C:CB:48:50:7C:72:3D:C9:84:57:80:F1:5A:3D:7C:53:B6:81 X509v3 Authority Key Identifier: keyid:CE:19:9B:76:1A:B4:44:E8:2D:C4:91:8B:4D:38:91:7C:16:AE:C7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE199B761AB444E82DC4918B4D38917C16AEC7B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:1f:13:e6:90:ae:66:a4:2e:34:13:59:bd:75:cf:1a:68:89: ba:ec:10:06:bc:03:c3:42:e4:f7:f7:f8:f4:f1:11:81:8f:c3: 5e:06:1a:d5:27:35:db:c5:96:cf:58:59:aa:e3:f2:f2:75:3e: 48:c0:94:70:70:26:48:0e:38:db:8a:f6:49:8f:97:ef:b1:c3: e2:a0:64:88:85:80:8a:e8:ba:1b:59:bf:e3:86:05:96:7f:15: 44:c2:85:f7:70:af:61:a0:ad:8b:0d:76:3c:cc:38:5a:ee:68: ef:1b:28:1b:35:7b:54:bc:b7:d2:96:3f:8d:57:5e:a5:68:6b: 8b:f7:73:d2:0b:3b:42:23:92:28:d5:60:f0:44:86:8f:ff:0a: b9:ee:f2:61:5f:6c:4c:7b:2a:d3:ca:e2:88:21:be:19:6d:7f: 02:37:d0:3d:08:fe:28:f6:70:66:8d:4e:94:0c:9e:7f:79:46: dc:31:5e:e5:39:f2:bb:34:33:01:12:a5:a3:61:99:a8:d3:ec: 04:9d:1f:de:f2:39:2a:91:d0:ef:0c:c2:0b:71:be:4e:5f:0f: f8:67:44:32:e5:67:c2:21:11:20:40:e8:e4:b3:c0:00:8a:3e: 08:00:bb:56:97:3a:72:8b:82:a1:fb:33:3e:a3:84:82:ca:a4: e0:fb:2b:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUekIhsZHbYqd3vtiYYGpEV0Zy8RUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxOTlCNzYxQUI0NDRFODJEQzQ5MThCNEQzODkxN0Mx NkFFQzdCODAeFw0yNTA4MjMwNzQwNDFaFw0yNTA4MjQxMDE1NDFaMDMxMTAvBgNV BAMTKDBENDMwQ0NCNDg1MDdDNzIzREM5ODQ1NzgwRjE1QTNEN0M1M0I2ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+yMOTlbGwHDdfz9tQ5fJ+tC8Z v6CWVMO9SW3JF29MS+wpi+Z11l7GNtTavhQ+p9CxmniBtv0gQzX54AUL6imA/SQQ SZZdgfPpOtbEgcgqAvrK4O8vg0SoZp8h0l+mqcmr3MfUc/NuyieoPomZnh+F4eRe Z9wVf7YO7eOJFdktb4/nAdxG9n2mO/BejvscSHyGs4BuYNShFjDeF2mZyodYKraz ib9bISvrop5OXbl5J5kuZK+rayApYpazooYzumNWqmeNJAjhhaGGHeD/G40RqQzH wSNKBmknd9JWvlbdDUZvPhrL8B47YMpPZu3wnQSTfPlH/bQV4zoC+DhbWjAbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDUMMy0hQfHI9yYRXgPFaPXxTtoEwHwYDVR0j BBgwFoAUzhmbdhq0ROgtxJGLTTiRfBaux7gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHh0YVl6OFpkYmcyTWp3eUdEOXhTUWdUV2NnTXRDdmNUUkpKc1NyTGlq R2QvMC9DRTE5OUI3NjFBQjQ0NEU4MkRDNDkxOEI0RDM4OTE3QzE2QUVDN0I4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFMTk5Qjc2MUFCNDQ0RTgy REM0OTE4QjREMzg5MTdDMTZBRUM3QjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHh0YVl6OFpkYmcyTWp3eUdEOXhTUWdUV2NnTXRDdmNUUkpKc1NyTGlqR2QvMC9D RTE5OUI3NjFBQjQ0NEU4MkRDNDkxOEI0RDM4OTE3QzE2QUVDN0I4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKB8T5pCuZqQuNBNZvXXPGmiJuuwQBrwDw0Lk9/f49PERgY/DXgYa1Sc128WW z1hZquPy8nU+SMCUcHAmSA4424r2SY+X77HD4qBkiIWAiui6G1m/44YFln8VRMKF 93CvYaCtiw12PMw4Wu5o7xsoGzV7VLy30pY/jVdepWhri/dz0gs7QiOSKNVg8ESG j/8Kue7yYV9sTHsq08riiCG+GW1/AjfQPQj+KPZwZo1OlAyef3lG3DFe5TnyuzQz ARKlo2GZqNPsBJ0f3vI5KpHQ7wzCC3G+Tl8P+GdEMuVnwiERIEDo5LPAAIo+CAC7 Vpc6couCofszPqOEgsqk4PsrfQ== -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:20 2025 by rpki-client