$ rpki-client -vvf rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.mft File: D027A3C3905699BE1B01BC2FAF77686EEA66C20A.mft (raw, json) Hash identifier: ptrxd7Se3Yo0jcMTD1zD/FdhV9IkGB4a8otmi9X17T0= Subject key identifier: 98:DE:52:35:ED:91:46:34:5D:87:51:56:34:4E:F0:44:E9:AD:47:20 Authority key identifier: D0:27:A3:C3:90:56:99:BE:1B:01:BC:2F:AF:77:68:6E:EA:66:C2:0A Certificate issuer: /CN=D027A3C3905699BE1B01BC2FAF77686EEA66C20A Certificate serial: 41B9A2C4A9127652868AD3FB1109FB27E04ADE2E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.cer Subject info access: rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.mft Manifest number: 8A Signing time: Wed 02 Jul 2025 15:45:04 +0000 Manifest this update: Wed 02 Jul 2025 15:40:04 +0000 Manifest next update: Thu 03 Jul 2025 18:25:04 +0000 Files and hashes: 1: D027A3C3905699BE1B01BC2FAF77686EEA66C20A.crl (hash: A5Nh0/VtdBOe68YnhSpmK9W75ZCWsROuf1XEM6wiUVY=) 2: 323830343a363531343a3a2f33322d313238203d3e20323639343637.roa (hash: nesYwlq+tPtmEyn0qFNn08s93URusWUJ4VYahxx4SFA=) 3: 34352e3138372e3134302e302f32322d3332203d3e20323639343637.roa (hash: 9HOolzBoXLsUuFMv6PED/vkvzNRIIY/qZDKarqxMqas=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.crl rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 18:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b9:a2:c4:a9:12:76:52:86:8a:d3:fb:11:09:fb:27:e0:4a:de:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D027A3C3905699BE1B01BC2FAF77686EEA66C20A Validity Not Before: Jul 2 15:40:04 2025 GMT Not After : Jul 3 18:25:04 2025 GMT Subject: CN=98DE5235ED9146345D875156344EF044E9AD4720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:3c:b6:7a:21:b7:05:66:80:ba:cc:e9:83: 0c:d4:2c:2b:b1:36:9c:de:20:77:78:98:90:6e:d5: 50:54:c1:01:9e:6d:7d:01:98:db:e3:56:de:64:e2: 71:1a:ac:1a:bf:62:ca:6e:bf:63:46:c8:4e:b8:5e: bd:77:2a:40:92:8f:f1:99:2f:df:ac:ba:5f:05:9a: 22:bd:29:2d:3c:2a:f3:5d:a3:95:d4:49:e1:e2:b8: 3e:da:c7:2e:aa:0b:08:c0:23:68:c7:07:70:68:d8: 0b:ca:31:c1:aa:61:22:d2:81:d2:80:6f:ea:6a:4d: ad:ec:12:86:b5:c2:6e:53:32:cd:d5:51:cc:90:cd: 1a:04:5d:0f:a6:84:4a:91:95:2c:36:d0:f3:03:e7: 4a:85:c9:49:05:f1:4b:d6:2c:cd:ce:fb:c6:30:dd: c6:8f:73:49:3e:14:d5:32:74:4e:4f:a7:67:ad:ee: 72:e4:45:bc:26:2a:b3:0d:1d:94:5f:c5:a0:cd:1d: 4e:fb:9e:a5:f3:8d:ad:f0:a6:a5:9d:c3:ad:ab:54: 14:02:16:46:06:b5:d6:7e:dd:fe:1d:7c:df:cb:16: ca:79:6a:5d:8e:1b:cc:9b:21:35:db:c6:eb:f2:89: 11:73:cd:72:b2:66:40:11:fb:cf:ea:40:73:4f:1b: 58:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DE:52:35:ED:91:46:34:5D:87:51:56:34:4E:F0:44:E9:AD:47:20 X509v3 Authority Key Identifier: keyid:D0:27:A3:C3:90:56:99:BE:1B:01:BC:2F:AF:77:68:6E:EA:66:C2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ca:50:3d:40:a8:04:76:2a:d6:b9:a0:fe:79:c3:e6:c2:e1: a0:52:4f:13:7e:27:da:df:ee:b1:24:a7:b0:84:05:a3:3b:16: 94:1d:f9:42:b1:a4:8e:a1:fe:3a:af:56:df:03:94:67:66:a8: 0f:a3:92:a9:ef:87:a7:10:ad:18:a6:76:5b:fa:4a:38:05:55: 77:ac:3e:3d:9f:34:c6:38:60:38:87:e9:d7:7a:a7:81:a9:94: 47:d1:9a:64:8e:d3:84:e4:b6:dc:0b:e0:84:0c:b5:c7:04:b1: 4e:70:f2:b7:ca:fd:40:d6:71:7f:05:b1:81:ad:39:e3:0f:28: cc:f9:75:55:cd:10:fb:1f:00:b5:23:8d:e7:d7:c9:b9:0a:00: d4:54:40:7c:4a:2c:91:2a:48:7c:0b:58:26:35:06:42:bd:f9: 2d:b2:5c:00:1c:45:56:12:1c:58:0b:4c:5d:51:60:9c:e8:41: 7b:b4:d7:f8:a4:cf:18:fd:9f:01:79:45:43:c4:2a:01:fa:f0: b9:aa:9d:fa:92:dd:f9:7f:9c:e4:45:09:05:49:ef:5d:70:6c: 8e:68:b4:09:71:d6:6d:92:c1:ad:18:bc:3e:44:5e:bb:9b:2e: 62:7a:ae:4c:b1:37:91:77:bb:ff:4a:a7:55:ed:96:29:66:ed: 17:93:b0:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQbmixKkSdlKGitP7EQn7J+BK3i4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAyN0EzQzM5MDU2OTlCRTFCMDFCQzJGQUY3NzY4NkVF QTY2QzIwQTAeFw0yNTA3MDIxNTQwMDRaFw0yNTA3MDMxODI1MDRaMDMxMTAvBgNV BAMTKDk4REU1MjM1RUQ5MTQ2MzQ1RDg3NTE1NjM0NEVGMDQ0RTlBRDQ3MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Lzy2eiG3BWaAuszpgwzULCux NpzeIHd4mJBu1VBUwQGebX0BmNvjVt5k4nEarBq/Yspuv2NGyE64Xr13KkCSj/GZ L9+sul8FmiK9KS08KvNdo5XUSeHiuD7axy6qCwjAI2jHB3Bo2AvKMcGqYSLSgdKA b+pqTa3sEoa1wm5TMs3VUcyQzRoEXQ+mhEqRlSw20PMD50qFyUkF8UvWLM3O+8Yw 3caPc0k+FNUydE5Pp2et7nLkRbwmKrMNHZRfxaDNHU77nqXzja3wpqWdw62rVBQC FkYGtdZ+3f4dfN/LFsp5al2OG8ybITXbxuvyiRFzzXKyZkAR+8/qQHNPG1ghAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmN5SNe2RRjRdh1FWNE7wROmtRyAwHwYDVR0j BBgwFoAU0Cejw5BWmb4bAbwvr3dobupmwgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2Myc0FWSFl2QnhuTnBWREFBMjhlYW5tSjlvZWdTWUNYVUc3NUtQR0h1 d2svMC9EMDI3QTNDMzkwNTY5OUJFMUIwMUJDMkZBRjc3Njg2RUVBNjZDMjBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwMjdBM0MzOTA1Njk5QkUx QjAxQkMyRkFGNzc2ODZFRUE2NkMyMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2Myc0FWSFl2QnhuTnBWREFBMjhlYW5tSjlvZWdTWUNYVUc3NUtQR0h1d2svMC9E MDI3QTNDMzkwNTY5OUJFMUIwMUJDMkZBRjc3Njg2RUVBNjZDMjBBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgspQPUCoBHYq1rmg/nnD5sLhoFJPE34n2t/usSSnsIQFozsWlB35QrGkjqH+ Oq9W3wOUZ2aoD6OSqe+HpxCtGKZ2W/pKOAVVd6w+PZ80xjhgOIfp13qngamUR9Ga ZI7ThOS23AvghAy1xwSxTnDyt8r9QNZxfwWxga054w8ozPl1Vc0Q+x8AtSON59fJ uQoA1FRAfEoskSpIfAtYJjUGQr35LbJcABxFVhIcWAtMXVFgnOhBe7TX+KTPGP2f AXlFQ8QqAfrwuaqd+pLd+X+c5EUJBUnvXXBsjmi0CXHWbZLBrRi8PkReu5suYnqu TLE3kXe7/0qnVe2WKWbtF5OwGQ== -----END CERTIFICATE-----Generated at Thu Jul 3 04:42:08 2025 by rpki-client