$ rpki-client -vvf rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft File: 9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft (raw, json) Hash identifier: Ws8by0Gnn3J4hAoWWmybaejLpMS0qQG5p7zSfMkhDcU= Subject key identifier: 75:EF:B0:48:3F:0A:27:5B:8F:EB:B6:6F:A9:96:1A:3C:91:4C:F8:8B Authority key identifier: 93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9 Certificate issuer: /CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9 Certificate serial: 502F5E5BF795AFE98892E6608405F20DB994ED27 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer Subject info access: rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft Manifest number: 01DA Signing time: Fri 22 Aug 2025 18:04:02 +0000 Manifest this update: Fri 22 Aug 2025 17:59:02 +0000 Manifest next update: Sat 23 Aug 2025 21:19:02 +0000 Files and hashes: 1: 3137392e3130392e36342e302f32302d3332203d3e20323633353738.roa (hash: Q1uNYyBjGbyIhtDBLHYu22N+qGJlESCPootyri/UJWg=) 2: 323830343a6634633a3a2f33322d313238203d3e20323633353738.roa (hash: tnjJpaX42qhrNEfwxFNIHRMECda6natWe4mEIY7HkLY=) 3: 9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl (hash: fOVHck+SAkTuvh4yyusSWcns7xHBu0nEoIeKT07Lt20=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 21:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:2f:5e:5b:f7:95:af:e9:88:92:e6:60:84:05:f2:0d:b9:94:ed:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9 Validity Not Before: Aug 22 17:59:02 2025 GMT Not After : Aug 23 21:19:02 2025 GMT Subject: CN=75EFB0483F0A275B8FEBB66FA9961A3C914CF88B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:21:30:93:07:e9:36:69:e1:a9:15:c3:f0:e9: 50:61:d1:08:99:94:56:ac:64:57:0f:af:90:91:dc: c2:28:00:00:c1:f0:70:16:69:5e:76:e6:64:49:c1: 2b:71:6b:af:90:74:40:dd:e6:95:1b:f7:23:43:54: 26:9d:dc:52:01:9c:d1:d6:00:db:76:dd:7d:a7:37: 8e:23:9f:10:60:fa:b1:2b:b9:40:7b:a1:44:1f:8e: 74:da:26:cd:fa:18:c8:3c:7e:1a:dd:6e:b5:5b:00: 37:21:ed:01:c1:53:9f:cc:17:81:9e:31:8c:5a:58: be:9a:1b:3a:6b:98:0f:26:56:28:2f:e3:67:e4:03: 79:ac:57:7b:22:79:41:db:08:fe:6d:aa:96:ae:e7: cc:c6:ef:e5:46:81:25:eb:48:d5:96:94:3d:5c:4e: 45:4d:86:b1:25:9b:4c:b9:7c:44:e8:a3:40:bc:15: 65:b6:f4:40:14:52:3b:64:4e:82:a7:f7:18:18:11: 2c:19:4a:f0:75:f2:ba:82:e2:bd:c3:b2:68:c5:36: 68:27:88:b8:30:ab:dd:13:f4:da:0a:4b:fe:b2:6c: 7d:52:a3:40:e2:fc:5c:ef:5d:1f:2b:1d:70:0c:5e: 02:ee:cf:b3:49:d8:d2:1c:97:2e:04:4b:cd:ef:ed: 73:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EF:B0:48:3F:0A:27:5B:8F:EB:B6:6F:A9:96:1A:3C:91:4C:F8:8B X509v3 Authority Key Identifier: keyid:93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:6f:3d:ee:78:a1:bb:b0:92:7c:37:66:5e:5d:f9:4c:61:7d: ca:ec:59:9d:33:6a:fc:91:cd:ca:82:3e:d2:29:31:04:01:5e: a9:42:9e:a2:da:80:ce:57:41:60:4d:c9:df:1f:a7:c5:55:62: 96:0b:c9:4d:c1:73:67:cd:bf:28:41:5c:40:44:1a:d1:a1:28: f7:b5:78:f1:92:44:48:c3:cd:a8:a1:ba:1b:3e:6a:87:a3:1c: 8a:52:9e:cd:c5:f3:85:54:22:bd:d9:91:07:bb:86:48:a8:93: 99:e1:d1:92:a4:c9:36:dc:09:fd:4b:21:88:af:12:ef:67:9e: c5:81:85:a0:54:bc:bb:e8:4e:66:bb:8f:ca:76:e9:68:a1:57: 9b:c4:38:18:f7:f2:2e:1e:7a:26:b3:ef:b5:2a:91:db:06:5b: 4d:a8:4d:56:f8:6c:d1:73:e0:4f:4e:d3:68:ac:ce:2a:73:4e: fc:7b:2a:ba:15:24:3f:5d:92:2a:aa:dd:e2:27:4f:29:f3:48: 04:6b:66:71:a4:81:48:02:a6:e0:24:ce:3a:85:63:51:88:f4: a6:53:c4:bb:60:97:ae:db:0d:a7:3a:88:39:87:08:c5:b9:d4: e1:68:ee:24:3e:3b:f9:0f:69:5a:db:2d:55:28:a1:2b:6a:4b: 3e:d0:59:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUC9eW/eVr+mIkuZghAXyDbmU7ScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM5N0MyOEUzMDY1RkJFNDgxMjU0QUE4QzBDRUY2OTA2 RjY2QUJFOTAeFw0yNTA4MjIxNzU5MDJaFw0yNTA4MjMyMTE5MDJaMDMxMTAvBgNV BAMTKDc1RUZCMDQ4M0YwQTI3NUI4RkVCQjY2RkE5OTYxQTNDOTE0Q0Y4OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ITCTB+k2aeGpFcPw6VBh0QiZ lFasZFcPr5CR3MIoAADB8HAWaV525mRJwStxa6+QdEDd5pUb9yNDVCad3FIBnNHW ANt23X2nN44jnxBg+rEruUB7oUQfjnTaJs36GMg8fhrdbrVbADch7QHBU5/MF4Ge MYxaWL6aGzprmA8mVigv42fkA3msV3sieUHbCP5tqpau58zG7+VGgSXrSNWWlD1c TkVNhrElm0y5fEToo0C8FWW29EAUUjtkToKn9xgYESwZSvB18rqC4r3DsmjFNmgn iLgwq90T9NoKS/6ybH1So0Di/FzvXR8rHXAMXgLuz7NJ2NIcly4ES83v7XMRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUde+wSD8KJ1uP67ZvqZYaPJFM+IswHwYDVR0j BBgwFoAUk5fCjjBl++SBJUqowM72kG9mq+kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXNoalRieHhpa2N3dk4yS0V4d0NGaGREaEJ0VjdEV0pKTGM2NUMxMUFU aHUvMC85Mzk3QzI4RTMwNjVGQkU0ODEyNTRBQThDMENFRjY5MDZGNjZBQkU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzOTdDMjhFMzA2NUZCRTQ4 MTI1NEFBOEMwQ0VGNjkwNkY2NkFCRTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXNoalRieHhpa2N3dk4yS0V4d0NGaGREaEJ0VjdEV0pKTGM2NUMxMUFUaHUvMC85 Mzk3QzI4RTMwNjVGQkU0ODEyNTRBQThDMENFRjY5MDZGNjZBQkU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJm897nihu7CSfDdmXl35TGF9yuxZnTNq/JHNyoI+0ikxBAFeqUKeotqAzldB YE3J3x+nxVVilgvJTcFzZ82/KEFcQEQa0aEo97V48ZJESMPNqKG6Gz5qh6McilKe zcXzhVQivdmRB7uGSKiTmeHRkqTJNtwJ/UshiK8S72eexYGFoFS8u+hOZruPynbp aKFXm8Q4GPfyLh56JrPvtSqR2wZbTahNVvhs0XPgT07TaKzOKnNO/HsquhUkP12S Kqrd4idPKfNIBGtmcaSBSAKm4CTOOoVjUYj0plPEu2CXrtsNpzqIOYcIxbnU4Wju JD47+Q9pWtstVSihK2pLPtBZhg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:00 2025 by rpki-client