$ rpki-client -vvf rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft File: 484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft (raw, json) Hash identifier: EBr5mLPmSeZNDhIr7191H5Lv0y5A0YSOsRg4j95EPec= Subject key identifier: 00:97:7F:4E:C2:B6:5E:4D:F8:51:CC:3D:D5:5B:7E:A4:A9:A9:67:AB Authority key identifier: 48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3 Certificate issuer: /CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3 Certificate serial: 4307AB27D0AF210E4AFD18048337962E32F7B088 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer Subject info access: rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft Manifest number: 029E Signing time: Fri 22 Aug 2025 21:42:11 +0000 Manifest this update: Fri 22 Aug 2025 21:37:11 +0000 Manifest next update: Sat 23 Aug 2025 22:30:11 +0000 Files and hashes: 1: 323830343a383034303a3a2f33322d3332203d3e20323731373339.roa (hash: k8/Tw+SgoiL84ZsrYLWHWBEWIwVDj1v9BVLZaSH4bik=) 2: 484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl (hash: i3JlRwZfiYwnrj0cRI2Z0Hd2+8FoN+Mhuk5+hQdNWNI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 22:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:07:ab:27:d0:af:21:0e:4a:fd:18:04:83:37:96:2e:32:f7:b0:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3 Validity Not Before: Aug 22 21:37:11 2025 GMT Not After : Aug 23 22:30:11 2025 GMT Subject: CN=00977F4EC2B65E4DF851CC3DD55B7EA4A9A967AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:4a:7c:e0:37:8d:28:48:bb:00:d2:5d:7a: a2:54:94:2c:66:0b:9e:19:39:f0:95:aa:41:bc:77: e4:2a:24:18:f1:91:99:b4:d1:f7:bd:6d:b3:6b:25: 5e:bb:83:e3:21:18:90:be:c8:31:7f:0a:95:0e:77: f4:8b:1a:f0:85:5d:54:8a:f1:4b:54:e4:a1:42:b7: 22:91:87:a0:d1:c3:ea:21:6e:cf:4d:8f:5b:8a:ef: 98:45:a9:93:0f:13:4a:dc:77:3f:8a:93:f8:e1:f3: 68:66:8a:67:ef:3d:6e:d0:07:9c:b5:ed:8b:ae:45: 15:cd:b6:e5:b4:d9:be:04:ff:42:5e:00:48:21:c3: b0:97:8c:c6:89:0b:27:59:d3:8a:5d:9f:42:70:9e: 28:06:7b:e6:b6:9a:d6:ed:b2:5d:4c:03:44:88:39: 0a:d9:ef:1f:aa:1e:9a:66:75:84:3b:d3:67:31:d9: 0f:4a:cf:e4:ff:9c:b4:37:ed:55:ad:1a:90:2f:c2: 89:4e:1f:f8:3c:fe:4d:0b:1c:c5:ff:93:c1:7a:db: aa:1f:3a:26:63:66:d4:b9:af:80:c0:68:27:5d:36: 67:b9:93:72:b6:9c:a4:89:66:0a:40:4f:56:28:c1: 2f:0a:9b:04:b0:db:97:ca:72:6a:4b:93:5c:4e:33: f3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:97:7F:4E:C2:B6:5E:4D:F8:51:CC:3D:D5:5B:7E:A4:A9:A9:67:AB X509v3 Authority Key Identifier: keyid:48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e5:e1:84:e1:49:97:bb:d3:fa:13:fd:25:48:c0:b4:14:36: fe:1e:72:c7:42:b2:a4:e3:7e:42:7f:ff:71:09:6c:7b:da:3b: 6f:f9:4e:26:2c:3b:89:0e:4e:30:a0:07:2c:d8:c1:4c:2c:6f: 63:22:b6:16:4b:42:71:83:3b:13:d4:43:b0:33:49:e9:f0:13: 63:b3:de:bc:e1:ee:a7:95:23:c2:86:f6:9a:df:22:d6:e0:b7: 86:f0:6d:85:7e:06:a6:36:c7:c8:f4:da:c1:19:ad:ae:6a:4e: 9e:8d:42:80:1b:1a:18:07:14:94:76:87:75:0a:f2:43:7f:c0: 84:19:b3:86:88:d8:39:d1:55:0e:f1:73:f1:0a:eb:f1:97:9e: 14:aa:e6:45:b7:ce:02:95:30:4b:dd:62:9e:15:3f:38:87:8a: c6:61:a3:ee:22:fa:a0:e6:2a:91:c2:45:68:b7:c8:66:33:5b: 2b:48:8a:8f:e5:57:f8:f7:f4:6b:54:13:a9:63:54:b2:e4:43: 9f:03:6c:e0:33:27:3d:f3:0c:99:df:96:65:df:43:29:35:bd: 1c:53:d9:a5:34:3e:c3:57:74:bb:92:ee:d5:ac:57:6e:f3:1a: 14:dc:c1:9f:1e:99:6d:b9:2f:2d:e0:35:f1:72:0b:5f:ef:e7: 39:e3:40:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQwerJ9CvIQ5K/RgEgzeWLjL3sIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg0Q0FGRUQxN0QwMkM0NTU1RTVENDU4NjlGMzBFQ0FB N0UxRTVFMzAeFw0yNTA4MjIyMTM3MTFaFw0yNTA4MjMyMjMwMTFaMDMxMTAvBgNV BAMTKDAwOTc3RjRFQzJCNjVFNERGODUxQ0MzREQ1NUI3RUE0QTlBOTY3QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88kp84DeNKEi7ANJdeqJUlCxm C54ZOfCVqkG8d+QqJBjxkZm00fe9bbNrJV67g+MhGJC+yDF/CpUOd/SLGvCFXVSK 8UtU5KFCtyKRh6DRw+ohbs9Nj1uK75hFqZMPE0rcdz+Kk/jh82hmimfvPW7QB5y1 7YuuRRXNtuW02b4E/0JeAEghw7CXjMaJCydZ04pdn0JwnigGe+a2mtbtsl1MA0SI OQrZ7x+qHppmdYQ702cx2Q9Kz+T/nLQ37VWtGpAvwolOH/g8/k0LHMX/k8F626of OiZjZtS5r4DAaCddNme5k3K2nKSJZgpAT1YowS8KmwSw25fKcmpLk1xOM/MNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAJd/TsK2Xk34Ucw91Vt+pKmpZ6swHwYDVR0j BBgwFoAUSEyv7RfQLEVV5dRYafMOyqfh5eMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGhUeVptaE1CcEN2TUJ1REhOVmZzSldvUnR5dE5aUjhQWUNQUU52Zktv S0cvMS80ODRDQUZFRDE3RDAyQzQ1NTVFNUQ0NTg2OUYzMEVDQUE3RTFFNUUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4NENBRkVEMTdEMDJDNDU1 NUU1RDQ1ODY5RjMwRUNBQTdFMUU1RTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGhUeVptaE1CcEN2TUJ1REhOVmZzSldvUnR5dE5aUjhQWUNQUU52ZktvS0cvMS80 ODRDQUZFRDE3RDAyQzQ1NTVFNUQ0NTg2OUYzMEVDQUE3RTFFNUUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAOXhhOFJl7vT+hP9JUjAtBQ2/h5yx0KypON+Qn//cQlse9o7b/lOJiw7iQ5O MKAHLNjBTCxvYyK2FktCcYM7E9RDsDNJ6fATY7PevOHup5Ujwob2mt8i1uC3hvBt hX4GpjbHyPTawRmtrmpOno1CgBsaGAcUlHaHdQryQ3/AhBmzhojYOdFVDvFz8Qrr 8ZeeFKrmRbfOApUwS91inhU/OIeKxmGj7iL6oOYqkcJFaLfIZjNbK0iKj+VX+Pf0 a1QTqWNUsuRDnwNs4DMnPfMMmd+WZd9DKTW9HFPZpTQ+w1d0u5Lu1axXbvMaFNzB nx6ZbbkvLeA18XILX+/nOeNAIQ== -----END CERTIFICATE-----Generated at Sat Aug 23 15:41:08 2025 by rpki-client