$ rpki-client -vvf rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft File: BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft (raw, json) Hash identifier: wAXQ+88BuXvBfnv60KuJ2k+DoxPfps6eh19IakrugrM= Subject key identifier: C8:D2:25:CD:D3:D4:B4:7A:24:5E:A3:C7:CF:D0:FD:26:63:6D:58:B4 Authority key identifier: BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4 Certificate issuer: /CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4 Certificate serial: 2B8720304585C54D443B830C37FA0FBEE8346430 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer Subject info access: rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft Manifest number: 0286 Signing time: Sat 23 Aug 2025 07:59:05 +0000 Manifest this update: Sat 23 Aug 2025 07:54:05 +0000 Manifest next update: Sun 24 Aug 2025 11:06:05 +0000 Files and hashes: 1: BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl (hash: 2/eeUcqiZMxjVCfBxz2WxgCrJZyeEqOOMiLc5lGG764=) 2: 323830343a353738303a3a2f33322d3438203d3e20323632373334.roa (hash: 6PmjmTg0qFj+Vpl+t8ICe23yuGtZx6ZXcO49cR71Yp8=) 3: 3138392e38342e3130362e302f32332d3234203d3e20323632373334.roa (hash: viidz0SzCgYo+ia6nn8hDFdjIUuWSnTz3zW/AEiDL+c=) 4: 3138362e3139352e302e302f32302d3234203d3e20323632373334.roa (hash: DhRxrtfQjT4NB8Bt8sfdP4LqhknKF3f3iI3zG7ssbkg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 11:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:87:20:30:45:85:c5:4d:44:3b:83:0c:37:fa:0f:be:e8:34:64:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4 Validity Not Before: Aug 23 07:54:05 2025 GMT Not After : Aug 24 11:06:05 2025 GMT Subject: CN=C8D225CDD3D4B47A245EA3C7CFD0FD26636D58B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:71:8b:eb:bd:b6:1d:e0:33:63:e7:fe:e6:88: 41:5c:4c:01:b1:c8:45:f9:af:41:7e:be:45:67:c7: b0:04:aa:a6:03:ca:15:cb:89:2e:0b:cd:8e:7c:f0: b4:3a:1a:07:4d:88:79:08:8f:2f:c1:c9:40:94:7d: 2d:40:a1:c7:80:24:5d:50:e1:29:ce:e3:73:19:82: c0:ff:82:a7:d7:1e:9a:ee:45:e1:d5:5e:1d:d1:6d: 58:2e:98:ca:6b:fb:88:fe:ca:08:bd:e2:3b:30:7e: 99:b4:22:ed:12:43:de:5e:3e:6c:ad:fb:7b:82:0f: 2c:e7:82:d5:a6:de:bc:f6:42:47:92:03:67:72:8d: 99:a9:38:31:e5:b7:ea:fa:21:97:06:56:5e:a3:7b: 9f:44:d9:d0:d5:0e:1c:1e:5c:79:95:8b:b8:38:cd: 50:b6:98:1e:43:28:5c:1e:17:ca:1e:e4:7d:b2:36: 32:45:c6:21:35:5a:96:7d:f1:8e:ed:83:9e:48:d4: b6:73:75:c8:8c:71:73:3e:73:70:da:76:a5:18:cf: b3:37:ec:7e:26:ce:cb:73:16:7e:05:16:35:87:3c: fb:09:fc:dd:f2:38:fb:67:4e:a2:61:4b:dd:a9:a3: aa:7d:be:32:78:2e:50:92:31:11:22:9f:37:51:51: 58:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D2:25:CD:D3:D4:B4:7A:24:5E:A3:C7:CF:D0:FD:26:63:6D:58:B4 X509v3 Authority Key Identifier: keyid:BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:74:ef:56:fd:2d:65:be:11:ca:17:30:e4:61:5f:38:52:34: 0a:c3:d8:51:13:bb:8a:55:c0:39:6b:e5:2d:1d:fd:57:06:b5: d7:08:56:ea:8b:d4:70:09:fd:2a:53:1b:fb:56:10:15:b4:79: b2:71:47:62:0c:59:e5:6b:b2:53:49:c7:83:bf:9e:1d:8a:0a: 05:19:ad:38:76:48:d9:23:ef:df:31:57:c3:73:a4:d3:11:20: 94:ad:2c:bc:57:c7:0e:ab:d4:bc:a5:ee:8e:25:df:22:bf:df: e3:e4:a7:73:0d:60:ac:11:37:ba:02:f4:06:73:d1:eb:c8:49: e2:e1:bf:37:11:4a:56:f6:65:dc:91:0c:02:fc:62:36:90:47: 9f:82:da:c2:f8:7b:20:72:e5:2a:bb:1e:99:82:0b:ea:f2:69: be:d1:f0:0d:e1:55:d3:12:6d:2a:a5:48:77:4a:aa:4b:e4:38: 25:9b:5b:a9:fd:04:9d:81:f3:2c:db:92:cb:60:d1:b8:86:af: 11:55:d9:eb:18:5e:83:2f:90:05:23:2b:53:cf:3e:f1:50:15: 8f:5e:fc:dc:05:ab:c9:c8:98:ba:e8:48:b8:8c:d8:40:a1:ca: 10:b4:09:0c:70:ac:01:83:c2:20:79:11:5a:11:d6:9c:a9:dc: 4d:80:a3:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUK4cgMEWFxU1EO4MMN/oPvug0ZDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRFQTNFMTRDMzJGMjlBQzgyRURBMTVCMkQ0RUQxQUQy NTA0RkZBNDAeFw0yNTA4MjMwNzU0MDVaFw0yNTA4MjQxMTA2MDVaMDMxMTAvBgNV BAMTKEM4RDIyNUNERDNENEI0N0EyNDVFQTNDN0NGRDBGRDI2NjM2RDU4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYcYvrvbYd4DNj5/7miEFcTAGx yEX5r0F+vkVnx7AEqqYDyhXLiS4LzY588LQ6GgdNiHkIjy/ByUCUfS1AoceAJF1Q 4SnO43MZgsD/gqfXHpruReHVXh3RbVgumMpr+4j+ygi94jswfpm0Iu0SQ95ePmyt +3uCDyzngtWm3rz2QkeSA2dyjZmpODHlt+r6IZcGVl6je59E2dDVDhweXHmVi7g4 zVC2mB5DKFweF8oe5H2yNjJFxiE1WpZ98Y7tg55I1LZzdciMcXM+c3DadqUYz7M3 7H4mzstzFn4FFjWHPPsJ/N3yOPtnTqJhS92po6p9vjJ4LlCSMREinzdRUVi5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyNIlzdPUtHokXqPHz9D9JmNtWLQwHwYDVR0j BBgwFoAUveo+FMMvKayC7aFbLU7RrSUE/6QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWF4ejVoM2lDcXRDc04yRXU4c2pMR0RLRHdYOWhSaFEyc3RNMk1OMkV1 UUEvMC9CREVBM0UxNEMzMkYyOUFDODJFREExNUIyRDRFRDFBRDI1MDRGRkE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERUEzRTE0QzMyRjI5QUM4 MkVEQTE1QjJENEVEMUFEMjUwNEZGQTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWF4ejVoM2lDcXRDc04yRXU4c2pMR0RLRHdYOWhSaFEyc3RNMk1OMkV1UUEvMC9C REVBM0UxNEMzMkYyOUFDODJFREExNUIyRDRFRDFBRDI1MDRGRkE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKnTvVv0tZb4Ryhcw5GFfOFI0CsPYURO7ilXAOWvlLR39Vwa11whW6ovUcAn9 KlMb+1YQFbR5snFHYgxZ5WuyU0nHg7+eHYoKBRmtOHZI2SPv3zFXw3Ok0xEglK0s vFfHDqvUvKXujiXfIr/f4+Sncw1grBE3ugL0BnPR68hJ4uG/NxFKVvZl3JEMAvxi NpBHn4Lawvh7IHLlKrsemYIL6vJpvtHwDeFV0xJtKqVId0qqS+Q4JZtbqf0EnYHz LNuSy2DRuIavEVXZ6xhegy+QBSMrU88+8VAVj1783AWryciYuuhIuIzYQKHKELQJ DHCsAYPCIHkRWhHWnKncTYCjsg== -----END CERTIFICATE-----Generated at Sat Aug 23 14:06:56 2025 by rpki-client