$ rpki-client -vvf rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft File: D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft (raw, json) Hash identifier: Ejlsvbv8OWfGfgyYsGhJkYjJudH4gZF5OqgaBDj6j+I= Subject key identifier: 04:11:79:C9:EE:70:E5:86:12:75:6E:12:CB:02:F5:8E:33:05:F2:20 Authority key identifier: D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8 Certificate issuer: /CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8 Certificate serial: 2E4C9CBE269ED88B80EF67C03C41ED8B57E38109 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft Manifest number: 02A3 Signing time: Sat 23 Aug 2025 14:17:16 +0000 Manifest this update: Sat 23 Aug 2025 14:12:16 +0000 Manifest next update: Sun 24 Aug 2025 14:50:16 +0000 Files and hashes: 1: D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl (hash: I3AUDcOLgTgKDjN0RDaM+Q6+7fb9NoiLQysqjsS/br4=) 2: 3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa (hash: HehrNIzW8YIj50NZzvz1VRN/ThMuVHcdZYg24/SmLgI=) 3: 3138362e3231392e3136332e302f32342d3234203d3e20323632373534.roa (hash: lpESvqoVhwYOSjN4Vj1yVDNhsu54LQTMAxhBhXWO+2I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:4c:9c:be:26:9e:d8:8b:80:ef:67:c0:3c:41:ed:8b:57:e3:81:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8 Validity Not Before: Aug 23 14:12:16 2025 GMT Not After : Aug 24 14:50:16 2025 GMT Subject: CN=041179C9EE70E58612756E12CB02F58E3305F220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3d:82:76:e0:f0:32:17:5f:1f:f1:32:3e:64: ea:23:22:9a:4b:87:0e:cb:81:68:11:3e:84:68:ca: e5:28:33:e2:23:70:a7:43:37:8b:15:3f:a0:55:50: c5:f7:2f:4b:e2:43:5a:0d:7e:73:16:70:db:29:74: ea:67:8c:31:09:2f:b9:b0:1e:30:08:96:4e:af:63: 54:1d:16:fb:cd:21:89:a8:db:ae:9f:11:ab:d7:85: a6:93:42:a3:b5:23:76:e1:d3:17:b3:4f:e2:b0:34: b6:23:b6:82:c9:e4:8e:cf:27:b4:28:4f:66:20:24: d0:44:7d:29:27:d9:3c:96:6a:6f:81:cb:df:b7:8b: 8a:ee:71:05:83:c8:3d:50:54:f6:d6:f1:09:e7:88: f9:91:ea:e5:10:09:ad:a0:e3:d2:e4:cf:24:29:b2: 9c:f8:82:7e:e8:2b:b6:15:b7:c8:f8:9e:e7:2d:ec: d7:62:cf:b1:a7:10:23:ff:93:74:6f:02:30:4f:1b: 15:93:57:26:ba:64:2f:ce:34:7c:4c:2d:2f:ac:ad: 4b:fd:bf:62:f1:47:fe:5d:8a:73:64:19:04:14:97: 86:f9:7d:e3:1b:49:b8:a6:bc:c4:38:66:09:0c:be: 49:fc:ae:a9:66:e4:dc:ad:64:23:4b:a5:dc:c3:d9: c9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:11:79:C9:EE:70:E5:86:12:75:6E:12:CB:02:F5:8E:33:05:F2:20 X509v3 Authority Key Identifier: keyid:D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:6f:d5:ca:9f:e9:d8:2b:de:54:f7:a6:ab:88:1c:ff:3d:05: 1a:9f:9a:91:a2:37:4b:3c:5e:5e:1f:bd:a6:e6:f9:d6:30:65: 8b:8d:73:09:f8:d5:b6:b4:10:86:45:90:a7:fb:c6:bc:e2:59: 76:18:f8:06:c5:19:19:9f:8e:cf:5f:c0:94:16:8c:11:7c:3d: 2a:72:6c:59:ff:0e:9b:aa:25:fd:65:f5:7a:73:ff:c8:fb:32: a8:08:05:27:1b:33:51:45:d8:f3:f9:0b:5f:5c:ee:16:f5:49: dd:21:3b:f2:e6:88:76:cc:40:ec:c8:b3:8e:98:7c:26:ec:60: ca:04:87:60:fc:d6:78:b3:85:94:96:1c:69:81:82:fb:a6:45: 0d:f8:d1:4a:d8:fc:07:33:8d:d7:d0:7a:1d:bc:d2:cf:f3:07: 45:2c:c1:93:09:5f:00:b5:b1:d5:08:5b:22:2c:ab:7d:c5:8e: 98:28:fa:e8:72:ed:24:49:0f:3b:d7:59:32:61:c7:a2:2f:25: a7:7a:d5:94:b2:e7:33:3a:63:90:dd:7a:81:3c:7b:26:20:94: 14:6d:fb:94:4d:46:3f:d9:52:e9:44:19:27:20:08:8a:37:e1: dd:fa:ac:fb:ed:08:0a:66:14:7c:3f:f4:e5:89:59:2a:ce:a2: ca:b4:47:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULkycviae2IuA72fAPEHti1fjgQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRCQTVDQ0ZCN0JGRTA5NEZDM0E0QTZBRTdENTI3RDM4 RkM2MDhEODAeFw0yNTA4MjMxNDEyMTZaFw0yNTA4MjQxNDUwMTZaMDMxMTAvBgNV BAMTKDA0MTE3OUM5RUU3MEU1ODYxMjc1NkUxMkNCMDJGNThFMzMwNUYyMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaPYJ24PAyF18f8TI+ZOojIppL hw7LgWgRPoRoyuUoM+IjcKdDN4sVP6BVUMX3L0viQ1oNfnMWcNspdOpnjDEJL7mw HjAIlk6vY1QdFvvNIYmo266fEavXhaaTQqO1I3bh0xezT+KwNLYjtoLJ5I7PJ7Qo T2YgJNBEfSkn2TyWam+By9+3i4rucQWDyD1QVPbW8QnniPmR6uUQCa2g49LkzyQp spz4gn7oK7YVt8j4nuct7Ndiz7GnECP/k3RvAjBPGxWTVya6ZC/ONHxMLS+srUv9 v2LxR/5dinNkGQQUl4b5feMbSbimvMQ4ZgkMvkn8rqlm5NytZCNLpdzD2cl5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBBF5ye5w5YYSdW4SywL1jjMF8iAwHwYDVR0j BBgwFoAU1Lpcz7e/4JT8Okpq59Un04/GCNgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHZMRVIzQXBpbkpMRWRUOXB5UFdRYlAzbVZmQmlDc1ljZkZnc1NucXpI M2kvMS9ENEJBNUNDRkI3QkZFMDk0RkMzQTRBNkFFN0Q1MjdEMzhGQzYwOEQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0QkE1Q0NGQjdCRkUwOTRG QzNBNEE2QUU3RDUyN0QzOEZDNjA4RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHZMRVIzQXBpbkpMRWRUOXB5UFdRYlAzbVZmQmlDc1ljZkZnc1NucXpIM2kvMS9E NEJBNUNDRkI3QkZFMDk0RkMzQTRBNkFFN0Q1MjdEMzhGQzYwOEQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOW/Vyp/p2CveVPemq4gc/z0FGp+akaI3SzxeXh+9pub51jBli41zCfjVtrQQ hkWQp/vGvOJZdhj4BsUZGZ+Oz1/AlBaMEXw9KnJsWf8Om6ol/WX1enP/yPsyqAgF JxszUUXY8/kLX1zuFvVJ3SE78uaIdsxA7Mizjph8JuxgygSHYPzWeLOFlJYcaYGC +6ZFDfjRStj8BzON19B6HbzSz/MHRSzBkwlfALWx1QhbIiyrfcWOmCj66HLtJEkP O9dZMmHHoi8lp3rVlLLnMzpjkN16gTx7JiCUFG37lE1GP9lS6UQZJyAIijfh3fqs ++0ICmYUfD/05YlZKs6iyrRH6A== -----END CERTIFICATE-----Generated at Sat Aug 23 16:02:00 2025 by rpki-client