$ rpki-client -vvf rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft File: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft (raw, json) Hash identifier: typC48aN3rhhRBzFXYYvRXx39vwvj9kxZKxG+I2Rxco= Subject key identifier: DE:38:D2:F6:F5:E3:CA:72:53:07:C4:80:78:06:BF:F1:A0:66:02:99 Authority key identifier: D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0 Certificate issuer: /CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0 Certificate serial: 2BD311C763B9BFD1AF0C08214F05C125AFF9A03F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer Subject info access: rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft Manifest number: 0223 Signing time: Sat 23 Aug 2025 12:50:17 +0000 Manifest this update: Sat 23 Aug 2025 12:45:17 +0000 Manifest next update: Sun 24 Aug 2025 16:31:17 +0000 Files and hashes: 1: 3139302e3132332e3139322e302f32322d3234203d3e20323636323533.roa (hash: lEGRwhg9phXl2q/TNnF7j2kv/C2pVxAJLq4sIptatEQ=) 2: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl (hash: uF237Bb8aBaUH0eW0+BbTLaKPcvSVMGCHWiORGV85ng=) 3: 323830343a336431383a3a2f33322d3438203d3e20323636323533.roa (hash: q5JF9UY+MTB4Mlfj2lWL8AvBvbFDkXWD3ksggtStp3k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 16:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d3:11:c7:63:b9:bf:d1:af:0c:08:21:4f:05:c1:25:af:f9:a0:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0 Validity Not Before: Aug 23 12:45:17 2025 GMT Not After : Aug 24 16:31:17 2025 GMT Subject: CN=DE38D2F6F5E3CA725307C4807806BFF1A0660299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b1:0e:65:e2:65:02:bb:27:70:68:7a:a9:7d: 24:27:e4:f2:25:c2:06:1b:20:83:f0:46:13:1e:03: d0:ee:04:1f:91:56:93:22:e9:f6:81:2d:87:91:15: 52:31:c5:8b:f0:d8:b3:8e:35:9c:0a:af:16:aa:61: 1c:0c:7d:26:78:fe:43:a5:9a:40:72:d8:dd:ac:f1: 1c:14:f7:d3:f5:a9:4e:0b:97:7f:d0:9f:42:47:e4: ce:c3:e3:63:ab:d2:ed:2a:d7:fd:98:43:2d:af:1d: 73:f5:91:04:29:60:9a:c1:43:73:4e:4f:12:89:d4: e1:3f:d3:2c:82:3c:7b:83:95:c5:35:7e:3d:a6:d1: 72:b6:5f:65:e7:af:8a:54:cc:00:47:d3:f9:9b:ae: 37:65:9a:97:54:dc:c7:ab:f6:5d:43:c4:65:23:f2: 72:2d:9a:bd:6c:cf:a4:6c:c4:19:b1:a3:db:b2:16: e1:99:50:de:71:62:42:03:07:96:00:61:11:cf:93: 1a:02:a2:20:34:a8:3f:56:9b:25:e4:be:2d:0a:bf: 2c:4b:6d:73:8f:43:ba:e9:b5:ff:4f:b9:fe:d0:e3: fc:a4:ae:be:3f:f3:01:1f:15:2f:08:36:3a:2f:8b: 0d:c6:02:08:4a:10:79:4c:38:f4:27:a9:37:15:dc: e7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:38:D2:F6:F5:E3:CA:72:53:07:C4:80:78:06:BF:F1:A0:66:02:99 X509v3 Authority Key Identifier: keyid:D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:b6:59:bf:c2:ab:5b:2b:f8:7d:05:52:80:c5:be:66:89:f4: 5f:7d:70:e7:d6:92:cd:26:16:fe:7f:5c:f8:77:c9:d1:67:5a: 97:4e:de:32:a0:d2:6e:d7:b0:28:48:15:47:ff:e2:f9:33:69: e1:ef:68:88:ec:9d:b8:e1:28:26:e4:a6:6e:11:41:b4:3a:28: a2:c2:44:22:95:60:8c:42:2f:54:0c:f8:62:45:61:c5:2c:c8: 26:9e:6f:e4:13:cf:e9:fc:71:47:c6:95:aa:ab:91:ba:12:ff: 99:86:24:bf:ae:e1:40:2e:74:e3:c4:91:07:cb:f9:6c:8c:e1: a4:17:d5:b1:c3:ba:99:17:00:b8:58:bb:33:08:5c:8b:9b:92: 74:7e:41:b5:46:64:95:04:73:77:f9:ed:3a:66:5c:77:5e:5c: 34:5b:d3:12:4b:a6:67:84:ca:02:dc:ac:62:67:43:af:a0:eb: 78:38:2a:1e:ce:85:71:f6:79:77:2e:37:c8:8e:80:6a:69:85: 89:ce:55:36:a9:c0:40:d6:e8:29:f6:a6:7f:af:2a:e2:ca:b2: 4e:6b:f7:df:bd:d1:a0:89:3c:44:e6:eb:db:f7:09:3c:e6:4c: 93:63:76:1b:fd:82:6f:f6:75:66:ae:b7:36:6c:1f:fe:39:eb: 55:f3:63:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUK9MRx2O5v9GvDAghTwXBJa/5oD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJCRTQwQzY2QTBCMEVGOTc0N0FDQzlEMkMzQTBGNDVC Q0JEODhEMDAeFw0yNTA4MjMxMjQ1MTdaFw0yNTA4MjQxNjMxMTdaMDMxMTAvBgNV BAMTKERFMzhEMkY2RjVFM0NBNzI1MzA3QzQ4MDc4MDZCRkYxQTA2NjAyOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZsQ5l4mUCuydwaHqpfSQn5PIl wgYbIIPwRhMeA9DuBB+RVpMi6faBLYeRFVIxxYvw2LOONZwKrxaqYRwMfSZ4/kOl mkBy2N2s8RwU99P1qU4Ll3/Qn0JH5M7D42Or0u0q1/2YQy2vHXP1kQQpYJrBQ3NO TxKJ1OE/0yyCPHuDlcU1fj2m0XK2X2Xnr4pUzABH0/mbrjdlmpdU3Mer9l1DxGUj 8nItmr1sz6RsxBmxo9uyFuGZUN5xYkIDB5YAYRHPkxoCoiA0qD9WmyXkvi0KvyxL bXOPQ7rptf9Puf7Q4/ykrr4/8wEfFS8INjoviw3GAghKEHlMOPQnqTcV3OdXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3jjS9vXjynJTB8SAeAa/8aBmApkwHwYDVR0j BBgwFoAU0r5AxmoLDvl0esydLDoPRby9iNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUxoYTZyNmR6TFRiRzZqWDRUSHBIRjV3dk12bllxU0FWTnM3cXJqdk5l NnIvMC9EMkJFNDBDNjZBMEIwRUY5NzQ3QUNDOUQyQzNBMEY0NUJDQkQ4OEQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyQkU0MEM2NkEwQjBFRjk3 NDdBQ0M5RDJDM0EwRjQ1QkNCRDg4RDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUxoYTZyNmR6TFRiRzZqWDRUSHBIRjV3dk12bllxU0FWTnM3cXJqdk5lNnIvMC9E MkJFNDBDNjZBMEIwRUY5NzQ3QUNDOUQyQzNBMEY0NUJDQkQ4OEQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF7ZZv8KrWyv4fQVSgMW+Zon0X31w59aSzSYW/n9c+HfJ0Wdal07eMqDSbtew KEgVR//i+TNp4e9oiOyduOEoJuSmbhFBtDooosJEIpVgjEIvVAz4YkVhxSzIJp5v 5BPP6fxxR8aVqquRuhL/mYYkv67hQC5048SRB8v5bIzhpBfVscO6mRcAuFi7Mwhc i5uSdH5BtUZklQRzd/ntOmZcd15cNFvTEkumZ4TKAtysYmdDr6DreDgqHs6FcfZ5 dy43yI6AammFic5VNqnAQNboKfamf68q4sqyTmv3373RoIk8RObr2/cJPOZMk2N2 G/2Cb/Z1Zq63Nmwf/jnrVfNjzw== -----END CERTIFICATE-----Generated at Sat Aug 23 20:30:05 2025 by rpki-client