$ rpki-client -vvf rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft File: 425279A675F326D0577BF774BBB20A14508381AD.mft (raw, json) Hash identifier: VQr9nwwV3XUH+VT2vPX8suuSKgDmqf2jb/IKJl+8Z54= Subject key identifier: 61:21:5B:6A:E3:5E:13:65:FC:AF:7A:E5:98:96:4A:12:3D:A9:95:0F Authority key identifier: 42:52:79:A6:75:F3:26:D0:57:7B:F7:74:BB:B2:0A:14:50:83:81:AD Certificate issuer: /CN=425279A675F326D0577BF774BBB20A14508381AD Certificate serial: 59706FFB32F7300E436C1C3C611B4D779DACC91C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer Subject info access: rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft Manifest number: 02A0 Signing time: Sat 23 Aug 2025 08:50:22 +0000 Manifest this update: Sat 23 Aug 2025 08:45:22 +0000 Manifest next update: Sun 24 Aug 2025 10:37:22 +0000 Files and hashes: 1: 3138392e35302e34302e302f32312d3234203d3e203238333236.roa (hash: kDpmKtJF4mGWfac+atxrTauaGW3uTc73uitca/OTWLI=) 2: 323830343a383865303a3a2f33322d3438203d3e203238333236.roa (hash: 0+SKyRuS8vJuXq7MWE/epWSyK2AeWtwCEDU99XSAo6E=) 3: 425279A675F326D0577BF774BBB20A14508381AD.crl (hash: h9uwqol8WZJfIV8XtqcJ1eyE7wgTBHxJ3hFP8+Px3M4=) 4: 3138392e35302e34382e302f32322d3234203d3e203238333236.roa (hash: mNHi88NZLBtau030tdBn9V/OmWy/tYOVyhjXlqlljXs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.crl rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 10:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:70:6f:fb:32:f7:30:0e:43:6c:1c:3c:61:1b:4d:77:9d:ac:c9:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=425279A675F326D0577BF774BBB20A14508381AD Validity Not Before: Aug 23 08:45:22 2025 GMT Not After : Aug 24 10:37:22 2025 GMT Subject: CN=61215B6AE35E1365FCAF7AE598964A123DA9950F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a1:71:6a:ab:f0:4d:18:e3:f7:29:42:19:ec: 7b:d5:7b:fb:5f:c6:2e:7d:ac:58:2d:4a:6a:97:2f: 27:73:a1:8e:83:1b:e3:71:21:69:95:e4:d4:7c:42: 33:3e:3f:fb:6f:8b:a7:e6:70:f1:c8:51:d3:3c:77: 23:99:69:52:81:9a:fb:ce:de:c8:c2:54:1d:8e:5d: e6:20:b7:62:a8:49:25:34:49:a2:59:23:b8:6e:3b: 5c:e7:ad:b2:a8:ee:7f:c4:26:fd:2b:05:ad:7c:a0: 3a:20:83:af:7e:0e:01:73:8c:e4:23:db:a0:4d:4e: 14:b7:12:67:63:25:4c:ba:74:de:cf:6d:82:af:8d: f8:9c:0a:e8:17:7c:f3:ba:94:7b:3d:6b:ff:f5:68: a0:6e:32:9d:9d:30:5b:ef:bd:9b:64:30:d4:8a:48: b0:42:c0:77:bb:94:a0:82:db:55:7f:b0:f9:7f:50: 11:97:10:cc:e0:91:1b:7b:20:ae:6b:44:65:52:1b: 37:cc:75:32:18:28:8b:23:4a:fb:ef:cf:c5:22:6c: e8:03:ce:e5:fe:b0:da:d3:8f:d2:8a:c0:86:4a:ff: d5:2a:be:16:7f:6b:48:60:53:66:ed:ce:4a:27:0b: 37:36:3d:d0:d5:65:df:0e:07:8e:48:db:5e:20:9b: 27:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:21:5B:6A:E3:5E:13:65:FC:AF:7A:E5:98:96:4A:12:3D:A9:95:0F X509v3 Authority Key Identifier: keyid:42:52:79:A6:75:F3:26:D0:57:7B:F7:74:BB:B2:0A:14:50:83:81:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:d6:c8:1f:8a:25:72:e8:51:8d:2e:56:85:9b:ee:1a:ef:e0: 61:b1:25:1b:f4:15:4c:f7:85:97:6d:53:ca:86:73:21:dc:04: 4c:4d:49:b5:46:5b:bf:1d:05:f7:29:24:af:59:22:94:bc:cd: 25:4f:e7:77:69:b8:b1:92:f5:57:65:f6:00:52:84:3f:cf:81: 9a:03:e8:37:f3:3a:28:94:74:68:ec:7c:fc:77:31:b7:90:16: b9:f2:ce:eb:e4:a5:1c:d1:23:ff:56:2e:b9:32:2a:d8:d4:30: b0:ee:02:6f:96:55:36:70:03:cc:fa:ce:81:23:8a:ac:3b:6c: 3f:73:90:fc:3d:3f:d8:1c:d8:56:23:52:3d:81:7f:5a:dc:3f: d1:97:07:ce:d0:63:4b:d7:f7:84:da:0f:1f:83:ba:f2:8f:3f: 82:6a:fc:79:e2:95:6a:24:f5:12:0f:00:ca:b6:a5:5f:fd:42: 24:07:53:db:9a:cc:f9:cf:2d:cc:fa:a7:4e:49:5c:8e:a5:be: 3a:80:4f:a9:aa:4d:41:e7:ea:64:98:e2:66:a8:d8:bd:1c:9f: cd:86:69:68:d9:79:10:55:c8:59:34:43:15:a0:43:32:f9:4a: 09:e7:3f:6e:90:08:7d:ce:89:61:54:51:0c:29:e6:43:52:9f: 1a:8d:bb:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWXBv+zL3MA5DbBw8YRtNd52syRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI1Mjc5QTY3NUYzMjZEMDU3N0JGNzc0QkJCMjBBMTQ1 MDgzODFBRDAeFw0yNTA4MjMwODQ1MjJaFw0yNTA4MjQxMDM3MjJaMDMxMTAvBgNV BAMTKDYxMjE1QjZBRTM1RTEzNjVGQ0FGN0FFNTk4OTY0QTEyM0RBOTk1MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpoXFqq/BNGOP3KUIZ7HvVe/tf xi59rFgtSmqXLydzoY6DG+NxIWmV5NR8QjM+P/tvi6fmcPHIUdM8dyOZaVKBmvvO 3sjCVB2OXeYgt2KoSSU0SaJZI7huO1znrbKo7n/EJv0rBa18oDogg69+DgFzjOQj 26BNThS3EmdjJUy6dN7PbYKvjficCugXfPO6lHs9a//1aKBuMp2dMFvvvZtkMNSK SLBCwHe7lKCC21V/sPl/UBGXEMzgkRt7IK5rRGVSGzfMdTIYKIsjSvvvz8UibOgD zuX+sNrTj9KKwIZK/9UqvhZ/a0hgU2btzkonCzc2PdDVZd8OB45I214gmyf5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYSFbauNeE2X8r3rlmJZKEj2plQ8wHwYDVR0j BBgwFoAUQlJ5pnXzJtBXe/d0u7IKFFCDga0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWNSeVlrQWU3QjgxSG1oOFJwRFFQcm1DbjZHek1NVGRKQnlUcVBNanli bWEvMS80MjUyNzlBNjc1RjMyNkQwNTc3QkY3NzRCQkIyMEExNDUwODM4MUFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyNTI3OUE2NzVGMzI2RDA1 NzdCRjc3NEJCQjIwQTE0NTA4MzgxQUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWNSeVlrQWU3QjgxSG1oOFJwRFFQcm1DbjZHek1NVGRKQnlUcVBNanlibWEvMS80 MjUyNzlBNjc1RjMyNkQwNTc3QkY3NzRCQkIyMEExNDUwODM4MUFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAedbIH4olcuhRjS5WhZvuGu/gYbElG/QVTPeFl21TyoZzIdwETE1JtUZbvx0F 9ykkr1kilLzNJU/nd2m4sZL1V2X2AFKEP8+BmgPoN/M6KJR0aOx8/Hcxt5AWufLO 6+SlHNEj/1YuuTIq2NQwsO4Cb5ZVNnADzPrOgSOKrDtsP3OQ/D0/2BzYViNSPYF/ Wtw/0ZcHztBjS9f3hNoPH4O68o8/gmr8eeKVaiT1Eg8AyralX/1CJAdT25rM+c8t zPqnTklcjqW+OoBPqapNQefqZJjiZqjYvRyfzYZpaNl5EFXIWTRDFaBDMvlKCec/ bpAIfc6JYVRRDCnmQ1KfGo27DA== -----END CERTIFICATE-----Generated at Sat Aug 23 12:49:48 2025 by rpki-client