$ rpki-client -vvf rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft File: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft (raw, json) Hash identifier: q+OZRHEhJc/E+To4lsOM9QSFhmmFCcaQbvhUKtMqRzo= Subject key identifier: 3D:11:91:FF:DB:B1:CA:FF:C6:8C:3E:AC:12:6F:8D:75:B4:AC:9F:00 Authority key identifier: CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D Certificate issuer: /CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D Certificate serial: 0C8D5CB6E23DBD24C3A2F5501A677F3725EE9D18 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft Manifest number: 0288 Signing time: Sat 23 Aug 2025 14:46:29 +0000 Manifest this update: Sat 23 Aug 2025 14:41:29 +0000 Manifest next update: Sun 24 Aug 2025 17:11:29 +0000 Files and hashes: 1: 3137392e39372e31362e302f32312d3234203d3e203238313831.roa (hash: h2W8XM2at3NYFJYnufJYaTXSX9GJvpJOp/TMajp4JtE=) 2: 323830343a6461633a3a2f33322d3438203d3e203238313831.roa (hash: JvwegUUzqtOYrCDplzNKYzOOoU16ChE9rMTQfVBPQa0=) 3: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl (hash: gZdi4hcIcsiwMYiP1E2tgW/+lU68oKJzqWOWykn3tI0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 17:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:8d:5c:b6:e2:3d:bd:24:c3:a2:f5:50:1a:67:7f:37:25:ee:9d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D Validity Not Before: Aug 23 14:41:29 2025 GMT Not After : Aug 24 17:11:29 2025 GMT Subject: CN=3D1191FFDBB1CAFFC68C3EAC126F8D75B4AC9F00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ac:fc:22:3d:a2:77:4e:be:95:94:55:1d:f9: 40:3b:f7:da:22:ed:b8:f2:01:d8:c5:ea:57:b3:12: 02:8c:cb:d4:09:00:84:ed:56:a4:80:cc:81:95:c3: 4f:1f:b0:ed:17:b5:ef:15:86:52:ae:61:17:b1:fd: c3:76:17:80:bb:8a:27:03:4d:9c:aa:98:c4:c9:f2: 54:0d:66:4e:d9:27:4b:96:58:0f:f9:7c:79:06:55: 13:61:7b:10:86:57:18:63:b0:b1:df:88:17:c3:2c: c9:5c:43:52:c6:20:54:95:ce:d3:0e:65:69:53:26: af:dc:cc:99:7b:93:a5:e8:d1:a5:d9:ed:45:71:57: 79:5c:0b:cf:4b:7d:ad:39:68:0b:6b:f2:9e:59:87: cb:f5:14:a8:70:e1:b3:c5:f0:94:be:e8:c1:82:ce: 8e:a2:df:97:7f:27:5d:eb:3f:f6:a7:c4:ff:1f:53: c4:df:df:a4:27:ad:f1:39:0e:70:ce:8d:5e:4a:b1: 27:17:67:a6:69:86:e7:70:fb:ca:dc:17:e6:71:9e: 0f:21:ff:0e:f6:be:33:26:0f:7a:fc:31:b9:61:ad: 95:c2:d0:2c:6c:cd:69:52:24:c4:54:dc:9b:0e:93: 7b:41:80:2b:c6:02:e7:23:a2:83:a8:9a:19:a9:e9: 45:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:11:91:FF:DB:B1:CA:FF:C6:8C:3E:AC:12:6F:8D:75:B4:AC:9F:00 X509v3 Authority Key Identifier: keyid:CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c5:ed:5d:60:54:43:c3:69:d8:e1:f8:b7:c2:95:f7:b5:82: 26:1b:54:f6:dd:ce:3f:24:5b:cf:9b:98:07:bf:3e:ed:bd:56: 92:10:b1:cf:77:5b:4f:7a:90:52:d4:c9:00:f1:9e:5d:f8:0b: 71:5f:cc:b2:34:bd:39:db:ec:8b:0d:99:70:c3:b0:ad:21:c2: 9b:4f:09:8d:c8:a9:6f:4e:9f:5a:4c:67:b1:29:ac:c4:ae:bc: c0:5e:1e:ac:76:23:94:94:e1:55:35:0e:0a:c4:f5:38:ad:97: 1e:dd:82:38:20:7f:85:7d:18:9e:2d:8d:ae:3f:6a:2a:80:c3: c3:03:cb:c0:f7:06:c2:3c:06:18:7a:64:30:69:93:97:6e:bc: f0:4c:af:e3:dd:aa:82:c3:58:6a:82:4e:a4:1f:84:40:51:d5: a4:7a:b6:ba:e7:71:3b:61:eb:e6:c0:5e:0f:0e:59:18:89:c7: c3:a7:bf:bf:0e:1b:4e:6f:08:c4:6f:f4:d6:40:3b:3e:27:9b: 9f:86:85:84:67:f4:b2:4f:35:c2:33:b1:28:62:88:6b:b0:3b: d9:25:40:a0:6b:e2:9e:65:da:57:43:3a:80:6f:e7:1c:e4:6e: 09:3f:ae:c3:b3:bb:28:7f:64:c3:b8:d2:9e:fd:94:21:e3:e3: dc:68:13:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDI1ctuI9vSTDovVQGmd/NyXunRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyMEVGQzBCOTlBOEE4NkI0QjRDRkExMDdCMDAxRDUw OEI3MjkwRDAeFw0yNTA4MjMxNDQxMjlaFw0yNTA4MjQxNzExMjlaMDMxMTAvBgNV BAMTKDNEMTE5MUZGREJCMUNBRkZDNjhDM0VBQzEyNkY4RDc1QjRBQzlGMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCirPwiPaJ3Tr6VlFUd+UA799oi 7bjyAdjF6lezEgKMy9QJAITtVqSAzIGVw08fsO0Xte8VhlKuYRex/cN2F4C7iicD TZyqmMTJ8lQNZk7ZJ0uWWA/5fHkGVRNhexCGVxhjsLHfiBfDLMlcQ1LGIFSVztMO ZWlTJq/czJl7k6Xo0aXZ7UVxV3lcC89Lfa05aAtr8p5Zh8v1FKhw4bPF8JS+6MGC zo6i35d/J13rP/anxP8fU8Tf36QnrfE5DnDOjV5KsScXZ6Zphudw+8rcF+Zxng8h /w72vjMmD3r8MblhrZXC0CxszWlSJMRU3JsOk3tBgCvGAucjooOomhmp6UU7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPRGR/9uxyv/GjD6sEm+NdbSsnwAwHwYDVR0j BBgwFoAUyiDvwLmaioa0tM+hB7AB1Qi3KQ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9Y R0cvMC9DQTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMjBFRkMwQjk5QThBODZC NEI0Q0ZBMTA3QjAwMUQ1MDhCNzI5MEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9YR0cvMC9D QTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACsXtXWBUQ8Np2OH4t8KV97WCJhtU9t3OPyRbz5uYB78+7b1WkhCxz3dbT3qQ UtTJAPGeXfgLcV/MsjS9Odvsiw2ZcMOwrSHCm08Jjcipb06fWkxnsSmsxK68wF4e rHYjlJThVTUOCsT1OK2XHt2COCB/hX0Yni2Nrj9qKoDDwwPLwPcGwjwGGHpkMGmT l2688Eyv492qgsNYaoJOpB+EQFHVpHq2uudxO2Hr5sBeDw5ZGInHw6e/vw4bTm8I xG/01kA7Piebn4aFhGf0sk81wjOxKGKIa7A72SVAoGvinmXaV0M6gG/nHORuCT+u w7O7KH9kw7jSnv2UIePj3GgTJw== -----END CERTIFICATE-----Generated at Sun Aug 24 00:00:28 2025 by rpki-client