$ rpki-client -vvf rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft File: C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft (raw, json) Hash identifier: HuEf5xSdWCjT0onqWx5qV44xkGwmJm9WGzK/GprfWI0= Subject key identifier: E2:7F:2F:12:A2:80:3C:5E:CF:61:FD:4F:07:B1:9D:C0:0B:6E:C9:AE Authority key identifier: C7:D8:F4:A5:EC:FE:5B:25:53:F6:AA:F2:A1:04:DD:C9:7F:20:54:98 Certificate issuer: /CN=C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498 Certificate serial: 08FCED773D688A657FA3E289EF3FD3F7099FA4E3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer Subject info access: rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft Manifest number: 0194 Signing time: Fri 22 Aug 2025 23:36:07 +0000 Manifest this update: Fri 22 Aug 2025 23:31:07 +0000 Manifest next update: Sun 24 Aug 2025 01:29:07 +0000 Files and hashes: 1: 34352e3136392e3133322e302f32322d3234203d3e20323636363134.roa (hash: w0zwCJmuq2Rx2LHRDcsgGFVuwfU5JaDpcYN6BlkRFxk=) 2: C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.crl (hash: qSgJiuY0tvsXWwT0q3Iuc87WuzZY12rHqBed7cVTX5E=) 3: 323830343a336561633a3a2f33322d3336203d3e20323636363134.roa (hash: A4ecR9vAgS5CiKSAYwfCotm8CVJBNgZvk5nFjxTh6Bs=) 4: 34352e372e3230302e302f32322d3234203d3e20323636363134.roa (hash: ZOMpNQQFAOvKLXhCdW+85iyzxpwZ11NO+4/XyI4bgpw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.crl rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 01:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:fc:ed:77:3d:68:8a:65:7f:a3:e2:89:ef:3f:d3:f7:09:9f:a4:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498 Validity Not Before: Aug 22 23:31:07 2025 GMT Not After : Aug 24 01:29:07 2025 GMT Subject: CN=E27F2F12A2803C5ECF61FD4F07B19DC00B6EC9AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0b:20:30:8d:d1:37:1f:66:a4:de:c1:3d:b3: 49:6c:6f:6e:13:f9:9c:01:4b:15:6d:13:79:ad:5f: 7c:04:ea:15:1c:11:bc:5c:60:ba:b8:64:e3:09:49: 85:e3:88:f8:7c:3e:d8:85:ad:a7:bc:f8:34:08:8b: f4:cb:bf:9a:31:a8:0b:28:86:ef:ee:fd:f9:dd:47: bc:ac:f7:e4:5b:96:45:ae:e0:54:90:89:08:34:ed: ae:e6:88:10:e3:3d:59:f5:a8:ff:a5:11:d2:63:c9: 0b:f9:e6:ff:9e:bc:20:4d:14:e4:0a:3b:38:fb:48: c9:1c:10:89:5f:a4:24:37:a3:a5:bb:91:35:fd:8c: 9f:91:35:d6:f8:8d:b0:5b:d0:3b:e4:e2:52:01:10: fa:5e:20:d2:51:3d:fa:13:78:33:59:0d:07:a9:03: b1:34:22:63:7a:00:b7:e9:cd:bb:e4:78:05:dd:65: 55:5c:97:b8:58:ac:7f:12:b2:42:9a:d2:07:f5:47: 63:6b:b7:9a:8e:32:67:ea:bb:0c:17:0f:2a:16:07: 29:e4:7f:4e:0e:15:3b:02:ff:32:70:f3:f1:b3:c0: b3:51:52:ee:05:ff:7f:4c:05:61:39:9c:7b:d0:63: 6d:6e:d7:69:0c:79:ee:6a:c6:6c:93:d5:7c:dc:1e: a9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7F:2F:12:A2:80:3C:5E:CF:61:FD:4F:07:B1:9D:C0:0B:6E:C9:AE X509v3 Authority Key Identifier: keyid:C7:D8:F4:A5:EC:FE:5B:25:53:F6:AA:F2:A1:04:DD:C9:7F:20:54:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b3:ae:db:be:a0:fd:bd:ca:71:48:d1:7b:2c:98:31:70:40: 29:7b:da:59:00:11:9f:6a:35:7b:11:a5:aa:c2:2c:70:82:b9: 00:68:be:6d:09:64:a7:49:04:73:b6:79:3a:db:8f:13:e4:69: 98:eb:aa:f9:40:69:9a:3b:eb:af:27:af:03:a1:69:41:02:c3: 0b:44:b5:2d:ba:ba:c7:4a:7d:be:43:f5:15:c9:ce:3d:99:16: bb:f2:30:2d:49:54:88:e0:96:4d:bc:63:af:ee:a9:cf:08:e8: 9a:2c:b8:30:05:96:03:f6:92:7b:3f:c3:cc:3e:87:fe:9e:6e: 8a:53:12:e5:22:1b:82:67:e5:39:67:f3:25:0b:c8:03:30:4e: 64:55:62:82:6c:cd:71:d0:89:1e:ac:db:f2:59:0c:7c:97:59: 7f:97:56:20:d7:4e:36:48:2a:bf:b8:d3:ce:1e:08:9c:db:7e: 93:a0:f6:1a:f0:5a:6c:0c:11:05:a7:84:c7:69:fa:56:ba:4d: df:1f:f3:16:5d:f5:fa:6e:42:ab:fc:66:f0:1f:66:c0:00:11: 43:ee:db:b2:ae:2e:39:7b:fe:47:1b:08:d2:22:78:81:99:de: 2a:3b:57:ca:82:31:c1:9d:9f:61:52:24:a5:f6:e8:a0:da:53: f3:af:44:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCPztdz1oimV/o+KJ7z/T9wmfpOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdEOEY0QTVFQ0ZFNUIyNTUzRjZBQUYyQTEwNEREQzk3 RjIwNTQ5ODAeFw0yNTA4MjIyMzMxMDdaFw0yNTA4MjQwMTI5MDdaMDMxMTAvBgNV BAMTKEUyN0YyRjEyQTI4MDNDNUVDRjYxRkQ0RjA3QjE5REMwMEI2RUM5QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFCyAwjdE3H2ak3sE9s0lsb24T +ZwBSxVtE3mtX3wE6hUcEbxcYLq4ZOMJSYXjiPh8PtiFrae8+DQIi/TLv5oxqAso hu/u/fndR7ys9+RblkWu4FSQiQg07a7miBDjPVn1qP+lEdJjyQv55v+evCBNFOQK Ozj7SMkcEIlfpCQ3o6W7kTX9jJ+RNdb4jbBb0Dvk4lIBEPpeINJRPfoTeDNZDQep A7E0ImN6ALfpzbvkeAXdZVVcl7hYrH8SskKa0gf1R2Nrt5qOMmfquwwXDyoWBynk f04OFTsC/zJw8/GzwLNRUu4F/39MBWE5nHvQY21u12kMee5qxmyT1XzcHqntAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4n8vEqKAPF7PYf1PB7GdwAtuya4wHwYDVR0j BBgwFoAUx9j0pez+WyVT9qryoQTdyX8gVJgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGNaaWNTZ2l2cDRSVlpvVm9yVFNNMW1lcm5Lcll4MVkxOFF5WjlScEtu MlkvMC9DN0Q4RjRBNUVDRkU1QjI1NTNGNkFBRjJBMTA0RERDOTdGMjA1NDk4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3RDhGNEE1RUNGRTVCMjU1 M0Y2QUFGMkExMDREREM5N0YyMDU0OTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGNaaWNTZ2l2cDRSVlpvVm9yVFNNMW1lcm5Lcll4MVkxOFF5WjlScEtuMlkvMC9D N0Q4RjRBNUVDRkU1QjI1NTNGNkFBRjJBMTA0RERDOTdGMjA1NDk4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANrOu276g/b3KcUjReyyYMXBAKXvaWQARn2o1exGlqsIscIK5AGi+bQlkp0kE c7Z5OtuPE+RpmOuq+UBpmjvrryevA6FpQQLDC0S1Lbq6x0p9vkP1FcnOPZkWu/Iw LUlUiOCWTbxjr+6pzwjomiy4MAWWA/aSez/DzD6H/p5uilMS5SIbgmflOWfzJQvI AzBOZFVigmzNcdCJHqzb8lkMfJdZf5dWINdONkgqv7jTzh4InNt+k6D2GvBabAwR BaeEx2n6VrpN3x/zFl31+m5Cq/xm8B9mwAARQ+7bsq4uOXv+RxsI0iJ4gZneKjtX yoIxwZ2fYVIkpfbooNpT869ESQ== -----END CERTIFICATE-----Generated at Sat Aug 23 10:42:00 2025 by rpki-client