$ rpki-client -vvf rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft File: 8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft (raw, json) Hash identifier: WrZjj58f9RfQbyuDBhv0L5UAH/aZR1zF1b8/dPLhSJ4= Subject key identifier: 50:3C:2C:32:9E:55:8E:2C:0E:A6:B6:CC:D1:FF:85:0B:19:B4:1D:EA Authority key identifier: 8A:87:3C:3D:C0:61:82:1F:FE:F1:C2:0E:64:84:51:B8:FE:64:6F:AE Certificate issuer: /CN=8A873C3DC061821FFEF1C20E648451B8FE646FAE Certificate serial: 56560681995C8ED25CDEEAAFF2A1B038A211E176 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer Subject info access: rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft Manifest number: C4 Signing time: Wed 02 Jul 2025 14:28:21 +0000 Manifest this update: Wed 02 Jul 2025 14:23:21 +0000 Manifest next update: Thu 03 Jul 2025 18:17:21 +0000 Files and hashes: 1: 323830343a393266383a3a2f33322d3438203d3e20323734373436.roa (hash: 5fhRq321I9L3kTTV+fwC5X89HSpGKCAld/CiGq3rZfQ=) 2: 8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl (hash: jaaGylGCG1y2xAUNewCmdSHRky+lO6fxs5ETtT2pEjw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 18:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:56:06:81:99:5c:8e:d2:5c:de:ea:af:f2:a1:b0:38:a2:11:e1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A873C3DC061821FFEF1C20E648451B8FE646FAE Validity Not Before: Jul 2 14:23:21 2025 GMT Not After : Jul 3 18:17:21 2025 GMT Subject: CN=503C2C329E558E2C0EA6B6CCD1FF850B19B41DEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7a:51:2a:ce:70:97:e9:fd:7e:04:f4:5f:33: 7c:3b:91:01:4e:95:d1:67:2d:ae:ed:bd:e0:a8:9b: 60:3e:57:b4:7e:ec:b9:34:72:15:de:95:e0:ee:36: 24:5c:ca:64:42:71:11:96:c1:43:7c:f8:ae:f1:03: 3b:b7:36:87:63:0b:cc:ea:16:a8:05:f7:d4:ab:eb: 1f:aa:2e:dd:26:b9:e5:f1:c4:4c:7e:a1:d5:bc:2e: 4a:eb:ce:bd:bd:64:be:fe:1d:9c:cd:8a:05:23:4b: f2:0f:8a:b3:61:2b:82:3b:41:5e:c4:dd:b1:ff:11: bb:c7:8f:14:36:f6:fb:e6:42:b4:c1:e3:70:51:17: 16:f0:29:07:d4:db:d6:94:4f:03:86:35:f7:86:63: 0a:56:85:b9:38:39:af:85:f4:39:16:14:f2:64:fb: 73:bb:42:5e:fb:55:40:12:17:81:74:e9:ae:38:ab: c9:30:2b:8c:16:a4:c7:e7:4b:4f:fb:79:65:99:94: 34:b9:e9:b8:7a:92:7a:db:a8:eb:09:cb:41:5a:75: 1f:50:b4:de:d0:89:05:54:8c:78:6a:8d:41:f1:9f: a7:6b:c4:9c:13:c3:b5:cd:83:46:7b:b4:f8:81:44: 58:3d:13:88:97:55:36:04:8a:80:f2:cb:24:50:00: 40:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3C:2C:32:9E:55:8E:2C:0E:A6:B6:CC:D1:FF:85:0B:19:B4:1D:EA X509v3 Authority Key Identifier: keyid:8A:87:3C:3D:C0:61:82:1F:FE:F1:C2:0E:64:84:51:B8:FE:64:6F:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ac:bb:df:a8:20:04:8a:cc:1a:00:bf:e2:2c:5c:06:00:cf: 4a:39:36:12:be:ab:56:1a:8a:58:32:eb:a5:47:95:d9:64:1e: 34:80:f3:5d:a5:15:13:a8:15:c6:a9:bb:f1:8f:6b:a4:57:c5: e5:a5:90:92:49:e5:f3:45:59:8f:1e:1b:68:7a:1a:a1:fd:f8: 47:0a:d5:ef:b9:26:f6:54:7f:05:77:d9:e8:97:05:7a:06:0b: af:67:da:fa:e7:fc:ec:3d:55:79:3d:27:27:e2:23:d4:43:a8: 3d:bd:8b:9c:e5:26:52:e3:30:28:67:72:f2:b1:c7:7c:01:c3: a7:11:28:21:73:82:3b:12:cd:1c:9e:f5:98:ef:98:50:7f:0a: 38:87:01:f3:4d:c1:eb:58:48:e7:51:76:54:25:31:96:a9:ca: b5:c2:fd:c4:03:45:6a:4e:0e:4f:cb:3d:8f:63:c8:2d:d3:51: e3:bf:08:9e:7a:c2:00:45:24:cb:fd:66:79:45:e0:03:7c:10: ac:c2:e6:ba:f1:00:41:44:ed:38:5c:78:1a:3d:ad:9e:bb:ad: 19:b3:eb:a8:2c:ed:cf:00:42:1a:5d:8f:87:b8:b3:03:a1:15: f9:c6:94:e5:44:36:ed:d1:4a:18:03:cf:33:ea:c3:f3:7b:c7: 87:a4:ee:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVlYGgZlcjtJc3uqv8qGwOKIR4XYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4NzNDM0RDMDYxODIxRkZFRjFDMjBFNjQ4NDUxQjhG RTY0NkZBRTAeFw0yNTA3MDIxNDIzMjFaFw0yNTA3MDMxODE3MjFaMDMxMTAvBgNV BAMTKDUwM0MyQzMyOUU1NThFMkMwRUE2QjZDQ0QxRkY4NTBCMTlCNDFERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwelEqznCX6f1+BPRfM3w7kQFO ldFnLa7tveCom2A+V7R+7Lk0chXeleDuNiRcymRCcRGWwUN8+K7xAzu3NodjC8zq FqgF99Sr6x+qLt0mueXxxEx+odW8Lkrrzr29ZL7+HZzNigUjS/IPirNhK4I7QV7E 3bH/EbvHjxQ29vvmQrTB43BRFxbwKQfU29aUTwOGNfeGYwpWhbk4Oa+F9DkWFPJk +3O7Ql77VUASF4F06a44q8kwK4wWpMfnS0/7eWWZlDS56bh6knrbqOsJy0FadR9Q tN7QiQVUjHhqjUHxn6drxJwTw7XNg0Z7tPiBRFg9E4iXVTYEioDyyyRQAEB9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUDwsMp5VjiwOprbM0f+FCxm0HeowHwYDVR0j BBgwFoAUioc8PcBhgh/+8cIOZIRRuP5kb64wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXpRNHhzTm1KcnU1WWFkaUhCOGgxYWVGNUdTcEtzZ0JzdllTNmFLQTFh a2UvMC84QTg3M0MzREMwNjE4MjFGRkVGMUMyMEU2NDg0NTFCOEZFNjQ2RkFFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBODczQzNEQzA2MTgyMUZG RUYxQzIwRTY0ODQ1MUI4RkU2NDZGQUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXpRNHhzTm1KcnU1WWFkaUhCOGgxYWVGNUdTcEtzZ0JzdllTNmFLQTFha2UvMC84 QTg3M0MzREMwNjE4MjFGRkVGMUMyMEU2NDg0NTFCOEZFNjQ2RkFFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe6y736ggBIrMGgC/4ixcBgDPSjk2Er6rVhqKWDLrpUeV2WQeNIDzXaUVE6gV xqm78Y9rpFfF5aWQkknl80VZjx4baHoaof34RwrV77km9lR/BXfZ6JcFegYLr2fa +uf87D1VeT0nJ+Ij1EOoPb2LnOUmUuMwKGdy8rHHfAHDpxEoIXOCOxLNHJ71mO+Y UH8KOIcB803B61hI51F2VCUxlqnKtcL9xANFak4OT8s9j2PILdNR478InnrCAEUk y/1meUXgA3wQrMLmuvEAQUTtOFx4Gj2tnrutGbPrqCztzwBCGl2Ph7izA6EV+caU 5UQ27dFKGAPPM+rD83vHh6TupA== -----END CERTIFICATE-----Generated at Wed Jul 2 19:54:13 2025 by rpki-client