$ rpki-client -vvf rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft File: 849A24446B9E3C80503AA50B35CDFE864B50F299.mft (raw, json) Hash identifier: ViYtqXg9K0BRADCrCOslkrCUNTP6yCYi6H/VJw8b/uc= Subject key identifier: 2B:F8:74:43:95:97:05:98:D2:CB:5C:2C:D0:60:21:2A:FA:86:EB:92 Authority key identifier: 84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99 Certificate issuer: /CN=849A24446B9E3C80503AA50B35CDFE864B50F299 Certificate serial: 0832574264DC241869986A4F20D4C546A618BA58 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer Subject info access: rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft Manifest number: 02A5 Signing time: Fri 22 Aug 2025 18:14:52 +0000 Manifest this update: Fri 22 Aug 2025 18:09:52 +0000 Manifest next update: Sat 23 Aug 2025 19:34:52 +0000 Files and hashes: 1: 849A24446B9E3C80503AA50B35CDFE864B50F299.crl (hash: 0PSUP63I0995R5eqjdHdK6hTm4mkVqDq3I11XYNMx+w=) 2: 3137302e3234362e3231322e302f32322d3332203d3e20323633383737.roa (hash: EW0bF1u4bur/zPzPb4/jkaTrzF2NSPUcuwmp/N5eHog=) 3: 3133382e3138362e3137322e302f32322d3332203d3e20323633383737.roa (hash: F+6Q3rR9mW/bBvV3KMqzfE04ygqDKYoVUaMdkKLEkhA=) 4: 323830343a323731633a3a2f33322d313238203d3e20323633383737.roa (hash: 9czPyLHsQNqWtZD0T0xfr5722IdYCGLe69IPEwzSaLE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 19:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:32:57:42:64:dc:24:18:69:98:6a:4f:20:d4:c5:46:a6:18:ba:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849A24446B9E3C80503AA50B35CDFE864B50F299 Validity Not Before: Aug 22 18:09:52 2025 GMT Not After : Aug 23 19:34:52 2025 GMT Subject: CN=2BF8744395970598D2CB5C2CD060212AFA86EB92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:56:da:6b:d2:79:9d:65:fc:f1:e8:3f:f7:06: 3b:fe:e2:b3:69:fa:c5:be:74:98:b5:a8:8c:c0:a2: 07:c4:4a:1b:2f:bf:2e:87:cc:61:67:5d:45:8c:37: 7d:c3:5a:05:98:59:8a:71:bf:a1:b5:b8:4f:9b:7b: 1d:4c:ef:2b:04:5a:1c:73:0a:a7:78:d4:12:c0:10: 9e:4e:2d:1b:ff:49:32:de:6c:e4:88:7e:1d:43:00: 34:51:2a:76:a9:e5:09:b2:90:97:40:95:62:65:04: db:b2:fd:c0:c7:e0:b5:52:c3:ef:0f:1f:8c:ae:e9: 36:aa:69:74:b1:aa:3b:92:16:48:05:37:b2:5b:0c: 21:a0:45:67:54:90:ca:98:bf:1c:a0:45:a2:50:a9: 32:09:98:e2:75:76:14:6b:19:07:2a:d2:06:5f:45: fe:63:59:7c:7e:f1:8d:23:d5:8c:41:c4:36:65:32: 30:e0:1b:73:f0:99:b4:c4:aa:13:e5:a6:b7:d6:30: 10:85:33:76:a6:29:1b:73:0b:28:66:16:91:49:a1: 7c:f5:41:30:c3:ee:09:64:f3:88:79:03:a7:31:70: e8:ae:d3:84:c0:40:01:2c:ec:a5:e4:7c:49:6e:0f: 97:7e:6c:6d:bb:63:d4:8d:f2:1c:5d:72:c4:8a:b0: d4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F8:74:43:95:97:05:98:D2:CB:5C:2C:D0:60:21:2A:FA:86:EB:92 X509v3 Authority Key Identifier: keyid:84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:26:b3:93:13:92:4d:f6:5b:40:d6:bb:82:10:4f:29:8b:ed: 05:64:b2:d7:8d:1d:9a:17:82:aa:c6:e2:57:75:9d:d9:ec:a6: 97:33:79:b5:b3:96:80:11:fc:b6:2f:06:a0:5c:d5:6b:d8:a3: ff:0e:74:d5:f3:e0:19:ad:b3:83:c0:63:7d:2f:0d:0e:d0:93: 46:19:7d:70:4a:53:c5:89:aa:c0:d2:17:f3:b2:32:f4:b3:1e: a5:56:fe:25:c5:ad:04:fd:38:02:7d:bb:ff:88:f2:1e:a8:ee: 63:e0:7d:27:87:af:23:33:f8:dd:cc:77:ad:ae:9f:fc:2b:ef: dc:95:4d:ae:f1:a8:c3:52:16:c7:b7:4f:0e:9b:f7:3d:b0:e0: dc:06:e4:27:54:fe:20:4f:d8:f8:f3:3d:b7:54:74:68:96:53: 54:0c:cd:3d:71:b7:9f:10:f9:a6:6d:e1:b0:17:fa:a4:f1:ac: 1e:13:fc:13:87:f6:1f:bd:4e:b5:c0:82:c6:1a:29:a7:d1:b4: 2d:9c:bf:41:5e:37:3f:0d:15:e6:05:76:2c:fa:7d:40:a6:ca: 57:eb:b7:0d:b3:1a:7b:49:b9:3b:fa:68:aa:6f:d0:03:9d:ff: d5:69:79:fc:35:10:50:5c:16:a1:d7:de:74:f4:11:9d:da:dc: 6a:7c:a3:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCDJXQmTcJBhpmGpPINTFRqYYulgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5QTI0NDQ2QjlFM0M4MDUwM0FBNTBCMzVDREZFODY0 QjUwRjI5OTAeFw0yNTA4MjIxODA5NTJaFw0yNTA4MjMxOTM0NTJaMDMxMTAvBgNV BAMTKDJCRjg3NDQzOTU5NzA1OThEMkNCNUMyQ0QwNjAyMTJBRkE4NkVCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsVtpr0nmdZfzx6D/3Bjv+4rNp +sW+dJi1qIzAogfEShsvvy6HzGFnXUWMN33DWgWYWYpxv6G1uE+bex1M7ysEWhxz Cqd41BLAEJ5OLRv/STLebOSIfh1DADRRKnap5QmykJdAlWJlBNuy/cDH4LVSw+8P H4yu6TaqaXSxqjuSFkgFN7JbDCGgRWdUkMqYvxygRaJQqTIJmOJ1dhRrGQcq0gZf Rf5jWXx+8Y0j1YxBxDZlMjDgG3PwmbTEqhPlprfWMBCFM3amKRtzCyhmFpFJoXz1 QTDD7glk84h5A6cxcOiu04TAQAEs7KXkfEluD5d+bG27Y9SN8hxdcsSKsNRZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUK/h0Q5WXBZjSy1ws0GAhKvqG65IwHwYDVR0j BBgwFoAUhJokRGuePIBQOqULNc3+hktQ8pkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHVEZXQzZmthUGhiMUY1dEdmMTg4dXJZOUJETmt4b0RpSkRnVThCQTFy YzkvMS84NDlBMjQ0NDZCOUUzQzgwNTAzQUE1MEIzNUNERkU4NjRCNTBGMjk5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0OUEyNDQ0NkI5RTNDODA1 MDNBQTUwQjM1Q0RGRTg2NEI1MEYyOTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHVEZXQzZmthUGhiMUY1dEdmMTg4dXJZOUJETmt4b0RpSkRnVThCQTFyYzkvMS84 NDlBMjQ0NDZCOUUzQzgwNTAzQUE1MEIzNUNERkU4NjRCNTBGMjk5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAISazkxOSTfZbQNa7ghBPKYvtBWSy140dmheCqsbiV3Wd2eymlzN5tbOWgBH8 ti8GoFzVa9ij/w501fPgGa2zg8BjfS8NDtCTRhl9cEpTxYmqwNIX87Iy9LMepVb+ JcWtBP04An27/4jyHqjuY+B9J4evIzP43cx3ra6f/Cvv3JVNrvGow1IWx7dPDpv3 PbDg3AbkJ1T+IE/Y+PM9t1R0aJZTVAzNPXG3nxD5pm3hsBf6pPGsHhP8E4f2H71O tcCCxhopp9G0LZy/QV43Pw0V5gV2LPp9QKbKV+u3DbMae0m5O/poqm/QA53/1Wl5 /DUQUFwWodfedPQRndrcanyjvA== -----END CERTIFICATE-----Generated at Sat Aug 23 10:38:04 2025 by rpki-client