$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.mft File: 2E32AC81A60DECBD55792A2594C40A5D7742559E.mft (raw, json) Hash identifier: 15HgKVYKsDr3SpbrpxJgWFkXMzgadpzUSIB+acSgmEo= Subject key identifier: 96:D1:6E:95:3C:DD:A2:49:C6:AF:D9:78:59:93:A0:D3:9C:2B:E5:DE Authority key identifier: 2E:32:AC:81:A6:0D:EC:BD:55:79:2A:25:94:C4:0A:5D:77:42:55:9E Certificate issuer: /CN=2E32AC81A60DECBD55792A2594C40A5D7742559E Certificate serial: 1258079364050CCB14F46735EF16493BC0336EC1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E32AC81A60DECBD55792A2594C40A5D7742559E.cer Subject info access: rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.mft Manifest number: 0219 Signing time: Sat 23 Aug 2025 10:00:25 +0000 Manifest this update: Sat 23 Aug 2025 09:55:25 +0000 Manifest next update: Sun 24 Aug 2025 13:57:25 +0000 Files and hashes: 1: 3137372e36362e3232342e302f32302d3234203d3e20323632353035.roa (hash: ZfflK9mVa55VVJo4hZ4pHt+l614ed/7TljqBpueAHAQ=) 2: 3137372e35352e3134342e302f32302d3234203d3e20323632353035.roa (hash: NSqflAza/vFcpd9DQCLUhlT5m+9PAroZmk4snUNDqUE=) 3: 2E32AC81A60DECBD55792A2594C40A5D7742559E.crl (hash: WKuksGtqg9qGNegTJxZotXkpRneXaswx97gYvelsqiU=) 4: 323830343a3534343a3a2f33322d3438203d3e20323632353035.roa (hash: 3F9grsuFThw37CawGIAIqTj469VfJBShGwREgs0m5CE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.crl rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E32AC81A60DECBD55792A2594C40A5D7742559E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:58:07:93:64:05:0c:cb:14:f4:67:35:ef:16:49:3b:c0:33:6e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E32AC81A60DECBD55792A2594C40A5D7742559E Validity Not Before: Aug 23 09:55:25 2025 GMT Not After : Aug 24 13:57:25 2025 GMT Subject: CN=96D16E953CDDA249C6AFD9785993A0D39C2BE5DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3b:b2:0c:a0:fc:1b:1a:52:c3:32:70:db:27: 0a:1d:b3:16:11:ed:48:a6:a8:46:7f:b2:b3:b5:fa: 20:fc:7b:e9:40:4f:11:b2:3a:60:87:50:76:58:b6: 71:5e:37:74:6e:f4:29:a0:a5:cc:71:5e:31:af:35: 9d:c9:43:4f:78:30:2e:d8:b2:54:d4:36:d6:1a:34: 83:3d:60:67:bb:bc:ac:df:05:5a:80:dc:0c:b4:3a: 19:a9:4d:cb:92:15:53:a2:a3:c4:18:1e:29:19:ca: ee:03:c0:4a:25:9b:e1:52:6c:d4:85:66:f9:8f:c9: 32:91:32:1d:a1:04:6d:11:bb:99:d7:10:42:2c:5f: f6:64:d2:f4:40:26:79:c5:73:97:9e:a6:d7:89:13: 42:c0:66:51:7e:d5:92:16:ab:00:71:40:ef:71:c8: 7a:3f:23:0c:39:f3:e4:1b:bd:d9:73:d3:c9:e8:cb: a3:72:a5:c3:09:e9:02:9d:4a:68:c4:d6:4e:45:40: cc:cb:0c:8e:ec:fd:b1:7d:d6:bd:14:9c:a4:30:cb: 01:2f:df:46:cb:82:bd:28:26:b5:94:1d:d9:70:8b: 99:a8:64:b0:41:3a:7b:66:ab:1f:89:4a:65:21:b6: 13:8d:09:c4:5e:91:b4:98:71:d9:23:fc:cc:01:df: 51:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D1:6E:95:3C:DD:A2:49:C6:AF:D9:78:59:93:A0:D3:9C:2B:E5:DE X509v3 Authority Key Identifier: keyid:2E:32:AC:81:A6:0D:EC:BD:55:79:2A:25:94:C4:0A:5D:77:42:55:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E32AC81A60DECBD55792A2594C40A5D7742559E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:98:aa:1a:9f:e9:66:1d:e7:c1:1a:6d:33:7f:fd:58:db:28: 5e:9c:3e:93:33:45:91:6e:02:0a:3c:34:49:a3:16:8c:04:67: 42:9c:a9:ed:52:88:03:a2:fc:80:12:08:8f:ba:1e:fb:58:6b: 16:e9:91:74:f6:66:42:d2:4c:eb:9a:4a:22:39:16:db:aa:ac: d9:de:75:c1:8d:72:89:a2:68:4d:9d:62:1d:69:2d:f6:9c:38: ce:4e:c3:7d:28:9c:98:47:ac:f7:02:ff:b8:38:ba:65:2d:45: 96:0a:0f:e3:2d:59:db:05:e7:78:1c:11:4b:34:01:05:46:b1: 32:0b:ac:4b:4c:b7:fe:ce:b5:7f:ac:f3:aa:45:5a:0a:77:72: d0:db:00:36:d8:51:ee:4a:02:85:b8:a1:37:0c:07:7d:58:87: 81:f1:8b:42:2e:a5:53:23:eb:c5:1f:0d:35:5e:db:2d:7a:84: 5f:9a:d6:5f:8b:68:78:34:f4:53:c8:f4:7b:4d:1f:b1:a8:83: 4d:e1:da:23:93:a3:7a:8d:27:53:b1:35:f6:1d:ee:f0:1d:cf: ed:61:0d:69:ad:b8:d0:61:d4:bf:83:2f:21:78:82:a3:71:79: b9:c7:33:7e:4d:22:88:b4:d5:cc:96:5d:47:a3:ec:dd:f8:6f: 9f:04:11:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUElgHk2QFDMsU9Gc17xZJO8AzbsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUzMkFDODFBNjBERUNCRDU1NzkyQTI1OTRDNDBBNUQ3 NzQyNTU5RTAeFw0yNTA4MjMwOTU1MjVaFw0yNTA4MjQxMzU3MjVaMDMxMTAvBgNV BAMTKDk2RDE2RTk1M0NEREEyNDlDNkFGRDk3ODU5OTNBMEQzOUMyQkU1REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQO7IMoPwbGlLDMnDbJwodsxYR 7UimqEZ/srO1+iD8e+lATxGyOmCHUHZYtnFeN3Ru9CmgpcxxXjGvNZ3JQ094MC7Y slTUNtYaNIM9YGe7vKzfBVqA3Ay0OhmpTcuSFVOio8QYHikZyu4DwEolm+FSbNSF ZvmPyTKRMh2hBG0Ru5nXEEIsX/Zk0vRAJnnFc5eepteJE0LAZlF+1ZIWqwBxQO9x yHo/Iww58+Qbvdlz08noy6NypcMJ6QKdSmjE1k5FQMzLDI7s/bF91r0UnKQwywEv 30bLgr0oJrWUHdlwi5moZLBBOntmqx+JSmUhthONCcRekbSYcdkj/MwB31HdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUltFulTzdoknGr9l4WZOg05wr5d4wHwYDVR0j BBgwFoAULjKsgaYN7L1VeSollMQKXXdCVZ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1ZKemdkSkNqNXZHdjZXQXFXTGsyTG9naVRQVFl6ZERkODJmcTZMTTdp NUMvMC8yRTMyQUM4MUE2MERFQ0JENTU3OTJBMjU5NEM0MEE1RDc3NDI1NTlFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFMzJBQzgxQTYwREVDQkQ1 NTc5MkEyNTk0QzQwQTVENzc0MjU1OUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1ZKemdkSkNqNXZHdjZXQXFXTGsyTG9naVRQVFl6ZERkODJmcTZMTTdpNUMvMC8y RTMyQUM4MUE2MERFQ0JENTU3OTJBMjU5NEM0MEE1RDc3NDI1NTlFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0piqGp/pZh3nwRptM3/9WNsoXpw+kzNFkW4CCjw0SaMWjARnQpyp7VKIA6L8 gBIIj7oe+1hrFumRdPZmQtJM65pKIjkW26qs2d51wY1yiaJoTZ1iHWkt9pw4zk7D fSicmEes9wL/uDi6ZS1FlgoP4y1Z2wXneBwRSzQBBUaxMgusS0y3/s61f6zzqkVa Cndy0NsANthR7koChbihNwwHfViHgfGLQi6lUyPrxR8NNV7bLXqEX5rWX4toeDT0 U8j0e00fsaiDTeHaI5Ojeo0nU7E19h3u8B3P7WENaa240GHUv4MvIXiCo3F5uccz fk0iiLTVzJZdR6Ps3fhvnwQRKQ== -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:51 2025 by rpki-client