$ rpki-client -vvf rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.mft File: 70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.mft (raw, json) Hash identifier: Ce3epWK8jWTI8DjYRZbjPvTyp7VGtxR7yLyfKih6AWM= Subject key identifier: 65:4A:F6:31:78:E6:FE:59:C7:03:3B:7E:8D:5F:D7:44:BA:73:8C:96 Authority key identifier: 70:22:3A:16:AD:3B:0A:41:AB:8D:AE:3E:BC:7A:95:3A:9C:8F:33:4D Certificate issuer: /CN=70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D Certificate serial: 45FA97D47D17C7BA302DB1ACB589BB21772D6C2F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.cer Subject info access: rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.mft Manifest number: 77 Signing time: Sat 23 Aug 2025 10:07:26 +0000 Manifest this update: Sat 23 Aug 2025 10:02:26 +0000 Manifest next update: Sun 24 Aug 2025 12:24:26 +0000 Files and hashes: 1: 34352e342e3133322e302f32322d3234203d3e20323636303632.roa (hash: hg4Pm0EbDY/iWODtioTWTWp/IGSoxMd1Rjvcv3JDf7k=) 2: 323830343a333966383a3a2f33322d3438203d3e20323636303632.roa (hash: pg8tszNCvNEb7xkcd+iWygWpZOdy2lv/1W5Ktjs9OaU=) 3: 70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.crl (hash: rzHgEQpIQrZ0j6bIlvT6e9GI45HV9UgNpgiH7aJKPgk=) 4: 34352e362e3132382e302f32322d3234203d3e20323636303632.roa (hash: UwrB4PYZnVsTXnVGkOXnLOjv89DKTZ26pmpB8/AFHuA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.crl rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 12:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:fa:97:d4:7d:17:c7:ba:30:2d:b1:ac:b5:89:bb:21:77:2d:6c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D Validity Not Before: Aug 23 10:02:26 2025 GMT Not After : Aug 24 12:24:26 2025 GMT Subject: CN=654AF63178E6FE59C7033B7E8D5FD744BA738C96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:96:ad:4e:f6:62:57:bf:2e:c1:93:88:66:00: f5:28:67:d0:4f:d1:ad:b0:73:a3:e7:08:b6:e1:de: 39:9a:d2:be:e7:65:ce:f7:28:3f:a6:55:63:fa:0a: e6:1f:8e:a2:14:cf:09:34:60:91:39:de:c2:f9:4f: a8:11:59:c5:c9:5d:83:d2:10:a2:b4:03:ab:6f:3d: 3b:42:cc:d0:e1:90:d7:05:97:b9:91:ed:5c:3e:5b: fc:45:dc:6e:3e:4f:98:7b:80:b6:f1:f9:2b:6e:1e: eb:df:1c:a9:38:81:5f:17:e0:9d:f4:c4:7f:9b:fd: d2:7a:27:8d:0c:f9:e8:8e:a1:f8:3b:a1:3d:a2:8f: 8e:cd:73:6b:69:dd:c3:e9:96:10:be:91:ca:77:b4: 22:46:21:ca:0e:b4:de:fa:bd:b5:7d:c6:cc:9d:a5: 4a:1b:c9:33:fc:dc:ea:83:b2:06:32:eb:d5:26:4e: 7a:85:e9:73:39:e2:58:09:b9:f5:ce:a6:7f:1b:6e: 4a:e9:2e:28:30:97:40:55:9f:33:e3:bd:48:e9:70: 9b:e1:b7:56:61:6e:87:a8:51:68:f3:35:ba:b9:e5: 33:50:6c:1e:be:2a:da:18:b1:f0:c4:9b:d2:6b:be: c2:0d:ba:be:c1:a0:3c:e7:32:3a:bb:ab:ac:ab:41: 81:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4A:F6:31:78:E6:FE:59:C7:03:3B:7E:8D:5F:D7:44:BA:73:8C:96 X509v3 Authority Key Identifier: keyid:70:22:3A:16:AD:3B:0A:41:AB:8D:AE:3E:BC:7A:95:3A:9C:8F:33:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/70223A16AD3B0A41AB8DAE3EBC7A953A9C8F334D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:d4:a4:ba:b8:67:81:4a:ba:cf:5a:b2:58:f9:1d:87:57:29: 52:08:a8:e5:b8:5e:59:bb:95:a6:9b:c1:f8:45:51:2e:ab:a2: d5:f6:ab:82:6b:a3:88:44:ef:1b:16:d6:ad:42:96:f3:21:7e: 7a:56:78:ce:bd:e3:d4:f3:8f:4d:13:a5:bf:60:28:5c:92:4f: 64:1a:6e:62:24:1b:75:a5:8b:65:cc:3a:f0:11:0c:49:67:c5: cd:f9:a9:b7:71:af:a4:76:63:85:4a:68:31:cc:d8:59:c7:19: 02:af:0e:96:c5:79:fa:31:c3:de:bb:bd:1a:74:57:2d:41:5c: 50:49:4e:00:39:37:81:79:38:a1:2e:38:60:f5:f7:91:df:12: 10:6f:31:d7:24:52:8b:de:f2:64:17:f5:20:a6:ce:1d:a1:6a: 3e:58:6b:48:f9:d0:5e:cc:2a:57:23:f6:22:e9:06:d8:91:d6: ad:f2:e6:e7:1d:81:6b:46:65:1e:b1:5b:62:26:10:67:cf:33: 2b:cf:e1:f8:39:27:1b:68:43:be:b5:21:52:ca:90:0b:94:c8: 01:a3:8b:52:7a:bb:1e:28:7b:b9:7c:a7:6a:dc:a3:ac:f1:dd: 66:b7:ab:c6:9b:d9:67:3d:0f:2c:a6:b7:32:7a:c5:a9:84:35: b7:12:04:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURfqX1H0Xx7owLbGstYm7IXctbC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyMjNBMTZBRDNCMEE0MUFCOERBRTNFQkM3QTk1M0E5 QzhGMzM0RDAeFw0yNTA4MjMxMDAyMjZaFw0yNTA4MjQxMjI0MjZaMDMxMTAvBgNV BAMTKDY1NEFGNjMxNzhFNkZFNTlDNzAzM0I3RThENUZENzQ0QkE3MzhDOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUlq1O9mJXvy7Bk4hmAPUoZ9BP 0a2wc6PnCLbh3jma0r7nZc73KD+mVWP6CuYfjqIUzwk0YJE53sL5T6gRWcXJXYPS EKK0A6tvPTtCzNDhkNcFl7mR7Vw+W/xF3G4+T5h7gLbx+StuHuvfHKk4gV8X4J30 xH+b/dJ6J40M+eiOofg7oT2ij47Nc2tp3cPplhC+kcp3tCJGIcoOtN76vbV9xsyd pUobyTP83OqDsgYy69UmTnqF6XM54lgJufXOpn8bbkrpLigwl0BVnzPjvUjpcJvh t1ZhboeoUWjzNbq55TNQbB6+KtoYsfDEm9JrvsINur7BoDznMjq7q6yrQYEHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZUr2MXjm/lnHAzt+jV/XRLpzjJYwHwYDVR0j BBgwFoAUcCI6Fq07CkGrja4+vHqVOpyPM00wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOTlIeXJlbnNqZUxSUjZSMzhoTGo1TVFNczJLdll2TkNXRlh4aTlWWDV4 bVMvMC83MDIyM0ExNkFEM0IwQTQxQUI4REFFM0VCQzdBOTUzQTlDOEYzMzRELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwMjIzQTE2QUQzQjBBNDFB QjhEQUUzRUJDN0E5NTNBOUM4RjMzNEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OTlIeXJlbnNqZUxSUjZSMzhoTGo1TVFNczJLdll2TkNXRlh4aTlWWDV4bVMvMC83 MDIyM0ExNkFEM0IwQTQxQUI4REFFM0VCQzdBOTUzQTlDOEYzMzRELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuNSkurhngUq6z1qyWPkdh1cpUgio5bheWbuVppvB+EVRLqui1fargmujiETv GxbWrUKW8yF+elZ4zr3j1POPTROlv2AoXJJPZBpuYiQbdaWLZcw68BEMSWfFzfmp t3GvpHZjhUpoMczYWccZAq8OlsV5+jHD3ru9GnRXLUFcUElOADk3gXk4oS44YPX3 kd8SEG8x1yRSi97yZBf1IKbOHaFqPlhrSPnQXswqVyP2IukG2JHWrfLm5x2Ba0Zl HrFbYiYQZ88zK8/h+DknG2hDvrUhUsqQC5TIAaOLUnq7Hih7uXynatyjrPHdZrer xpvZZz0PLKa3MnrFqYQ1txIEEw== -----END CERTIFICATE-----Generated at Sat Aug 23 18:22:15 2025 by rpki-client