$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft File: 8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft (raw, json) Hash identifier: 6JeqrmermjkWN+jDKxzJ2/VbO3g1kO2gflkEft9IuU8= Subject key identifier: 0B:F1:53:18:9D:44:4A:45:48:43:50:FC:3D:B9:21:5D:6C:32:F7:B1 Authority key identifier: 8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD Certificate issuer: /CN=8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD Certificate serial: 045A0F66F44C2C17F87A984D07895872D22DA3A6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer Subject info access: rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft Manifest number: 0221 Signing time: Sat 23 Aug 2025 00:31:03 +0000 Manifest this update: Sat 23 Aug 2025 00:26:03 +0000 Manifest next update: Sun 24 Aug 2025 02:31:03 +0000 Files and hashes: 1: 3230302e37312e37322e302f32322d3332203d3e20323636323136.roa (hash: YvegZmyo9sJ4pcNnNHBjTBF2t5WeDgSktWpePZYDq0g=) 2: 323830343a336338303a3a2f33322d313238203d3e20323636323136.roa (hash: Joy2sepoO+FIC2vMr6AO34cX5OproAo288/h6AiK80Q=) 3: 8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl (hash: xDNi8/WnLRA2OXrnwXNYUIo3TRtA2j72ZvseWt00IJ4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 02:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5a:0f:66:f4:4c:2c:17:f8:7a:98:4d:07:89:58:72:d2:2d:a3:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD Validity Not Before: Aug 23 00:26:03 2025 GMT Not After : Aug 24 02:31:03 2025 GMT Subject: CN=0BF153189D444A45484350FC3DB9215D6C32F7B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8a:c5:91:f5:a2:8f:68:c6:4e:fc:ca:24:66: a0:33:1f:97:e4:de:f6:9c:a7:29:0f:9a:be:55:68: 6e:ab:e0:7f:5b:54:f7:3b:4a:3f:26:ac:02:c2:1b: ce:9c:ad:f7:2f:84:09:71:90:c9:42:85:7c:73:b2: ed:8e:51:08:2f:a2:90:3c:74:a1:6e:ef:95:01:31: da:45:ea:93:9b:70:68:d6:2c:06:ba:25:14:2e:ba: 1d:55:46:91:ad:64:1b:24:29:ce:c0:fb:e2:c9:25: b5:1a:6c:ab:22:0f:3c:6f:48:54:70:ca:73:5c:bc: 96:7b:cf:1e:06:00:8a:af:85:bb:f6:ab:f4:ad:02: 10:8d:39:6c:87:95:56:59:d5:6f:75:be:67:44:c3: a8:18:e2:79:e3:ed:1d:90:d0:43:f8:ff:0b:39:9f: ee:33:77:35:b1:71:79:5b:1c:b8:16:8c:31:5e:88: e5:67:ec:24:cf:bd:7d:a3:8d:63:04:33:57:23:91: 62:c4:33:76:83:54:14:dd:aa:ed:c6:cc:17:61:2f: 03:44:be:7b:2e:80:e5:e1:2d:2b:23:e1:d8:50:b1: ad:76:d5:48:1c:e1:b8:55:a9:92:8b:e5:bc:e1:a8: 56:17:b9:a8:2b:65:08:82:69:af:6e:75:ba:56:7d: ed:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F1:53:18:9D:44:4A:45:48:43:50:FC:3D:B9:21:5D:6C:32:F7:B1 X509v3 Authority Key Identifier: keyid:8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:8d:9b:bf:2f:86:75:7c:4b:e0:a2:a9:6e:f9:0a:91:4d:e0: 38:62:00:b3:0f:42:14:da:52:9d:d3:77:44:33:7a:d3:35:d7: 38:87:59:ce:49:82:ac:cc:3a:8e:a3:91:89:18:ca:cf:0e:ca: 57:22:9f:c7:68:36:ac:e5:db:61:e0:e0:cf:68:87:f7:f1:e4: 9d:4f:27:5e:4d:ed:89:a6:63:48:f9:30:8f:67:15:50:79:21: 49:a9:0c:06:b4:97:10:fc:90:ef:da:db:22:1d:18:57:b0:31: 7a:a2:bd:70:b1:d2:49:68:ee:20:06:81:2f:ba:b6:bf:8c:da: cc:b8:79:59:3f:72:b8:73:57:2e:89:47:5d:35:44:c0:69:d7: 90:0d:88:a0:b2:d8:e2:9d:3f:0c:0f:6b:36:4f:4d:22:7d:9d: c6:f1:79:9d:91:b5:b1:79:ab:24:1d:db:6a:1f:79:62:21:d5: 3e:b8:f7:47:37:64:19:2e:48:b5:ff:39:d1:6f:76:6e:7d:c7: be:b3:40:2b:96:df:7d:6e:67:94:e6:33:dc:5c:d8:ea:91:d1: 46:82:e0:5a:cd:ae:81:94:87:d0:4a:17:6d:0d:cc:17:cf:50: 50:8f:0c:c6:2f:b3:58:5a:2f:fa:d4:55:40:9d:3b:41:f4:f6: 53:c8:9f:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBFoPZvRMLBf4ephNB4lYctIto6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFMUVCRjRFRTMzNDQ1RTM5OEJGNTVDN0JGQkIwNTRF ODU0NkZGRDAeFw0yNTA4MjMwMDI2MDNaFw0yNTA4MjQwMjMxMDNaMDMxMTAvBgNV BAMTKDBCRjE1MzE4OUQ0NDRBNDU0ODQzNTBGQzNEQjkyMTVENkMzMkY3QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXisWR9aKPaMZO/MokZqAzH5fk 3vacpykPmr5VaG6r4H9bVPc7Sj8mrALCG86crfcvhAlxkMlChXxzsu2OUQgvopA8 dKFu75UBMdpF6pObcGjWLAa6JRQuuh1VRpGtZBskKc7A++LJJbUabKsiDzxvSFRw ynNcvJZ7zx4GAIqvhbv2q/StAhCNOWyHlVZZ1W91vmdEw6gY4nnj7R2Q0EP4/ws5 n+4zdzWxcXlbHLgWjDFeiOVn7CTPvX2jjWMEM1cjkWLEM3aDVBTdqu3GzBdhLwNE vnsugOXhLSsj4dhQsa121Ugc4bhVqZKL5bzhqFYXuagrZQiCaa9udbpWfe3bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUC/FTGJ1ESkVIQ1D8PbkhXWwy97EwHwYDVR0j BBgwFoAUjeHr9O4zRF45i/Vce/uwVOhUb/0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOG5YZDduZzVEQUtWNzh0bkhWeHdKQXFETExMaHd2WW5UbzdFOFNGdlQ2 clYvMC84REUxRUJGNEVFMzM0NDVFMzk4QkY1NUM3QkZCQjA1NEU4NTQ2RkZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhERTFFQkY0RUUzMzQ0NUUz OThCRjU1QzdCRkJCMDU0RTg1NDZGRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OG5YZDduZzVEQUtWNzh0bkhWeHdKQXFETExMaHd2WW5UbzdFOFNGdlQ2clYvMC84 REUxRUJGNEVFMzM0NDVFMzk4QkY1NUM3QkZCQjA1NEU4NTQ2RkZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhI2bvy+GdXxL4KKpbvkKkU3gOGIAsw9CFNpSndN3RDN60zXXOIdZzkmCrMw6 jqORiRjKzw7KVyKfx2g2rOXbYeDgz2iH9/HknU8nXk3tiaZjSPkwj2cVUHkhSakM BrSXEPyQ79rbIh0YV7AxeqK9cLHSSWjuIAaBL7q2v4zazLh5WT9yuHNXLolHXTVE wGnXkA2IoLLY4p0/DA9rNk9NIn2dxvF5nZG1sXmrJB3bah95YiHVPrj3RzdkGS5I tf850W92bn3HvrNAK5bffW5nlOYz3FzY6pHRRoLgWs2ugZSH0EoXbQ3MF89QUI8M xi+zWFov+tRVQJ07QfT2U8ifdA== -----END CERTIFICATE-----Generated at Sat Aug 23 12:39:59 2025 by rpki-client