$ rpki-client -vvf rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7.mft File: 674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7.mft (raw, json) Hash identifier: ihwmkS+0TJ+kbKe9yJWHQUFhD4cs/xWYEAs9NOWvZXw= Subject key identifier: 1F:1D:86:1E:1D:06:50:D6:D6:A4:AB:77:91:72:D0:62:DD:4A:9E:9B Authority key identifier: 67:4C:1E:AE:06:0D:B7:41:75:3B:E7:24:DC:3E:ED:CF:E1:ED:A7:E7 Certificate issuer: /CN=674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7 Certificate serial: 3B7F798C51749BC4AABAC7837E40394E5451ABC6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7.cer Subject info access: rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7.mft Manifest number: 23 Signing time: Sat 23 Aug 2025 18:54:43 +0000 Manifest this update: Sat 23 Aug 2025 18:49:43 +0000 Manifest next update: Sun 24 Aug 2025 22:17:43 +0000 Files and hashes: 1: 674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7.crl (hash: SB0okh3cJgoHFAhb33lG7SKiQaqZSRqPyF2JCC/UqjQ=) 2: 323830343a336337383a3a2f33322d313238203d3e20323636323134.roa (hash: UtCnfsLlLq839LX7kGQtJL6DnboWPQyew/fMqu4Kfsg=) 3: 3139302e3132332e3230342e302f32322d3332203d3e20323636323134.roa (hash: kDITKnC+lJTSqSZ/KgOvBPKUKe7OmOt+6GVrO3qY9ng=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7.crl rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 22:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:7f:79:8c:51:74:9b:c4:aa:ba:c7:83:7e:40:39:4e:54:51:ab:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7 Validity Not Before: Aug 23 18:49:43 2025 GMT Not After : Aug 24 22:17:43 2025 GMT Subject: CN=1F1D861E1D0650D6D6A4AB779172D062DD4A9E9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:89:84:d9:01:0a:c3:1f:f3:98:16:eb:27:ea: 33:d4:eb:61:74:d1:29:ee:9d:98:d1:c6:32:dc:81: f1:74:d8:51:7c:cb:ac:ba:ae:20:c3:99:47:01:ee: b4:28:83:be:61:12:db:9a:1d:7d:7c:d3:19:cc:c4: b2:2b:43:c2:e8:7f:c7:3b:aa:5a:ba:22:71:d8:2a: 94:ab:fb:b9:cd:7b:85:45:bb:df:16:69:94:5e:8c: 73:cd:06:5a:05:4a:cb:d9:51:02:ec:06:31:73:60: 87:4d:7a:83:24:0f:62:9d:b6:a2:f1:f9:1d:d3:06: 2b:df:14:6a:47:b0:b2:3d:cb:e6:27:b6:f5:c6:ad: 73:9b:4c:f8:cf:4d:45:8a:19:d5:93:d8:d4:8e:26: e2:1f:08:bd:8a:32:c0:39:9f:5c:29:bf:b4:ac:ac: 81:62:8e:87:45:e3:ed:69:a0:7d:63:4e:cc:b7:55: 0f:23:09:1d:9e:a5:60:a2:96:8a:02:10:f8:1c:bf: 37:75:d6:a0:cb:f1:5a:d6:c0:2f:af:28:b9:40:14: 5a:eb:8b:da:8f:2e:6a:35:d2:45:1e:02:b5:6b:ff: b3:74:5b:f8:bc:58:7c:31:93:82:8a:81:33:84:37: aa:9c:38:58:e4:71:5f:e2:66:73:84:e3:78:d4:1e: ef:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1D:86:1E:1D:06:50:D6:D6:A4:AB:77:91:72:D0:62:DD:4A:9E:9B X509v3 Authority Key Identifier: keyid:67:4C:1E:AE:06:0D:B7:41:75:3B:E7:24:DC:3E:ED:CF:E1:ED:A7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:55:c0:ab:43:40:7d:38:ad:39:0f:da:66:89:1c:65:c9:1d: 34:74:a8:27:a1:35:ac:9f:65:73:75:2e:57:78:27:26:b8:6f: 21:83:cb:eb:c8:2e:16:dd:b1:3a:19:9d:76:2c:f0:21:64:3e: 73:06:57:3c:5d:6d:64:aa:70:2e:4d:73:82:6d:44:1c:c0:b1: b2:11:e1:30:41:3a:da:e9:7c:60:30:a4:e7:8e:42:9d:4b:24: d2:95:67:fb:30:8a:a0:f0:cb:68:4f:ee:47:7a:2f:b1:ef:d5: db:87:11:11:3d:b3:48:96:8c:07:e6:9a:14:bc:6f:f4:28:33: 61:6a:63:5d:45:62:37:80:ac:b1:cd:04:c2:66:57:7f:f5:79: a2:de:40:26:97:73:c5:9a:ea:f9:19:1e:5c:6e:ce:0b:74:ec: 60:e9:8e:16:2b:9a:b2:5a:a1:ce:00:de:29:14:ce:f5:8a:aa: ff:1a:e2:ef:5c:3f:cd:25:07:9c:f4:af:23:68:57:3b:fe:6c: 36:77:d2:55:85:e9:ee:30:b6:dd:85:7a:81:a7:64:fa:30:1a: 15:3d:52:c2:3c:78:b1:1e:5e:81:99:c8:3b:79:83:12:46:c7: df:96:c7:fa:b6:1d:65:b2:00:f5:38:b8:52:4a:0d:65:9e:f7: a0:ed:52:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO395jFF0m8SquseDfkA5TlRRq8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc0QzFFQUUwNjBEQjc0MTc1M0JFNzI0REMzRUVEQ0ZF MUVEQTdFNzAeFw0yNTA4MjMxODQ5NDNaFw0yNTA4MjQyMjE3NDNaMDMxMTAvBgNV BAMTKDFGMUQ4NjFFMUQwNjUwRDZENkE0QUI3NzkxNzJEMDYyREQ0QTlFOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbiYTZAQrDH/OYFusn6jPU62F0 0SnunZjRxjLcgfF02FF8y6y6riDDmUcB7rQog75hEtuaHX180xnMxLIrQ8Lof8c7 qlq6InHYKpSr+7nNe4VFu98WaZRejHPNBloFSsvZUQLsBjFzYIdNeoMkD2KdtqLx +R3TBivfFGpHsLI9y+YntvXGrXObTPjPTUWKGdWT2NSOJuIfCL2KMsA5n1wpv7Ss rIFijodF4+1poH1jTsy3VQ8jCR2epWCilooCEPgcvzd11qDL8VrWwC+vKLlAFFrr i9qPLmo10kUeArVr/7N0W/i8WHwxk4KKgTOEN6qcOFjkcV/iZnOE43jUHu/vAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHx2GHh0GUNbWpKt3kXLQYt1KnpswHwYDVR0j BBgwFoAUZ0wergYNt0F1O+ck3D7tz+Htp+cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODlSYUd6WlVHaW03TFhRcFNCdEROclBGM3Brb1YydExWaGRUUkhmVWh1 RE4vMC82NzRDMUVBRTA2MERCNzQxNzUzQkU3MjREQzNFRURDRkUxRURBN0U3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3NEMxRUFFMDYwREI3NDE3 NTNCRTcyNERDM0VFRENGRTFFREE3RTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODlSYUd6WlVHaW03TFhRcFNCdEROclBGM3Brb1YydExWaGRUUkhmVWh1RE4vMC82 NzRDMUVBRTA2MERCNzQxNzUzQkU3MjREQzNFRURDRkUxRURBN0U3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPFXAq0NAfTitOQ/aZokcZckdNHSoJ6E1rJ9lc3UuV3gnJrhvIYPL68guFt2x OhmddizwIWQ+cwZXPF1tZKpwLk1zgm1EHMCxshHhMEE62ul8YDCk545CnUsk0pVn +zCKoPDLaE/uR3ovse/V24cRET2zSJaMB+aaFLxv9CgzYWpjXUViN4Cssc0EwmZX f/V5ot5AJpdzxZrq+RkeXG7OC3TsYOmOFiuaslqhzgDeKRTO9Yqq/xri71w/zSUH nPSvI2hXO/5sNnfSVYXp7jC23YV6gadk+jAaFT1Swjx4sR5egZnIO3mDEkbH35bH +rYdZbIA9Ti4UkoNZZ73oO1SAg== -----END CERTIFICATE-----Generated at Sun Aug 24 03:05:27 2025 by rpki-client