$ rpki-client -vvf rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.mft File: C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.mft (raw, json) Hash identifier: V+XQ30Qup3Lt7hJvH8YvKmJlw8yTUtoRXssbowcN0YQ= Subject key identifier: 7C:F1:88:4D:01:53:D2:42:17:E9:DF:9C:A2:89:A6:7C:B1:6F:A9:50 Authority key identifier: C3:29:B9:ED:4E:5F:36:AA:39:0B:AE:0F:D9:C5:41:28:D4:90:DC:4F Certificate issuer: /CN=C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F Certificate serial: 5D23293781857972F5B2DD4582380D1AE7869CF0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.cer Subject info access: rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.mft Manifest number: 0127 Signing time: Sat 23 Aug 2025 15:56:22 +0000 Manifest this update: Sat 23 Aug 2025 15:51:22 +0000 Manifest next update: Sun 24 Aug 2025 19:49:22 +0000 Files and hashes: 1: 3137302e38332e3139362e302f32322d3234203d3e20323636343736.roa (hash: 2OZaK3XVHDYJW95YQoRuXz+veAnFcZdofQ9N3sdy+d4=) 2: C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.crl (hash: aI/kgqncGkkCnDDt5MTyRtAl3y5t0T+1AUBYavu4bRU=) 3: 323830343a333836633a3a2f33322d3336203d3e20323636343736.roa (hash: 2GvlRynMXEvu3A0kCDLQB+Gp55iYyLUR7ENalGcUhBc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.crl rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 17:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:23:29:37:81:85:79:72:f5:b2:dd:45:82:38:0d:1a:e7:86:9c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F Validity Not Before: Aug 23 15:51:22 2025 GMT Not After : Aug 24 19:49:22 2025 GMT Subject: CN=7CF1884D0153D24217E9DF9CA289A67CB16FA950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bf:1a:74:17:12:87:48:d2:bb:bb:f6:c8:5a: 81:f5:11:dd:10:73:a5:df:68:d7:4a:eb:05:d8:e0: d8:69:f2:f5:9d:99:15:e8:53:b9:9f:6b:8a:7d:3b: 1c:a6:68:9e:33:22:74:ad:65:5c:bc:6d:f1:14:43: 56:bf:5b:31:08:9d:93:37:42:04:3e:ef:95:a6:01: c8:b0:48:42:db:65:30:32:10:e1:a9:78:00:9c:9d: 7f:be:93:b5:6f:70:72:92:42:fd:a0:74:32:2c:05: 58:41:27:82:1b:a8:45:86:d9:67:38:ad:82:70:ad: be:90:8c:f9:e8:1d:e7:fc:50:37:bf:a6:75:47:26: 3f:e9:10:93:e5:73:fb:50:fa:cb:d3:1b:88:93:f4: 1b:a3:27:46:bb:b1:46:d1:b5:41:e8:81:1c:f1:0a: 9f:60:be:0f:f9:85:55:95:00:a7:61:fa:be:d7:09: 8b:38:d8:80:d8:6e:24:46:a8:9f:9c:c0:24:32:af: fd:33:5e:7a:50:06:d3:54:cc:14:e3:22:e3:91:2e: 63:09:9a:29:ee:f3:0f:7d:f5:14:a1:b9:55:86:df: a3:04:f6:48:4f:88:c0:26:70:87:5d:d8:c2:bf:a2: 60:08:4c:86:a1:d7:f7:e7:78:d3:1a:d7:5a:aa:b2: 0a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F1:88:4D:01:53:D2:42:17:E9:DF:9C:A2:89:A6:7C:B1:6F:A9:50 X509v3 Authority Key Identifier: keyid:C3:29:B9:ED:4E:5F:36:AA:39:0B:AE:0F:D9:C5:41:28:D4:90:DC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:89:5b:55:f5:5a:fd:6f:fd:1f:64:a2:4d:ec:a2:4e:53:67: 64:f3:50:7f:48:5c:6b:0d:12:4a:33:89:20:da:1d:a1:46:5c: c3:a0:64:58:73:00:42:59:e9:9d:e2:9f:54:0e:98:3b:8f:ba: 50:17:0b:01:49:e9:19:0a:bf:cc:ff:81:74:95:e3:1a:c7:2a: 4d:b3:32:12:9e:d0:bc:b5:01:94:a8:3b:c8:84:e9:50:e1:e8: 0c:40:16:59:ea:11:3d:20:88:ea:6b:be:37:9c:ef:ab:d7:07: cc:5b:d2:31:64:27:e9:ee:f6:eb:9f:fd:a4:1b:2a:75:ba:08: 35:fd:19:09:35:8f:4f:55:77:ed:74:8d:5d:43:8a:53:30:80: 5d:6b:a4:57:b4:fd:30:40:cf:04:64:85:b8:93:a1:91:fb:52: 1c:04:8e:1f:9d:90:dc:a7:a4:50:6a:85:f5:dd:4b:30:34:b8: e5:bf:17:a5:ac:aa:28:a0:9a:29:f2:c4:4b:67:64:49:8f:2f: e8:a5:c6:db:46:98:2d:f6:41:35:e4:67:e6:be:94:0d:a7:d5: ad:5c:1c:c7:60:c2:e6:99:ad:66:29:71:2b:3c:0e:b4:93:ae: 31:c8:b9:49:00:4d:db:0b:ab:85:dd:b8:22:ac:ba:a5:f4:c1: 13:78:37:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXSMpN4GFeXL1st1FgjgNGueGnPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMyOUI5RUQ0RTVGMzZBQTM5MEJBRTBGRDlDNTQxMjhE NDkwREM0RjAeFw0yNTA4MjMxNTUxMjJaFw0yNTA4MjQxOTQ5MjJaMDMxMTAvBgNV BAMTKDdDRjE4ODREMDE1M0QyNDIxN0U5REY5Q0EyODlBNjdDQjE2RkE5NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrvxp0FxKHSNK7u/bIWoH1Ed0Q c6XfaNdK6wXY4Nhp8vWdmRXoU7mfa4p9OxymaJ4zInStZVy8bfEUQ1a/WzEInZM3 QgQ+75WmAciwSELbZTAyEOGpeACcnX++k7VvcHKSQv2gdDIsBVhBJ4IbqEWG2Wc4 rYJwrb6QjPnoHef8UDe/pnVHJj/pEJPlc/tQ+svTG4iT9BujJ0a7sUbRtUHogRzx Cp9gvg/5hVWVAKdh+r7XCYs42IDYbiRGqJ+cwCQyr/0zXnpQBtNUzBTjIuORLmMJ minu8w999RShuVWG36ME9khPiMAmcIdd2MK/omAITIah1/fneNMa11qqsgoRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfPGITQFT0kIX6d+coommfLFvqVAwHwYDVR0j BBgwFoAUwym57U5fNqo5C64P2cVBKNSQ3E8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQjlRSnk0ckQ3WXNQcnNSUVFOQ1k4c2FBYTJocU5ReXlncVJCM3pGcGRY cnAvMC9DMzI5QjlFRDRFNUYzNkFBMzkwQkFFMEZEOUM1NDEyOEQ0OTBEQzRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzMjlCOUVENEU1RjM2QUEz OTBCQUUwRkQ5QzU0MTI4RDQ5MERDNEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QjlRSnk0ckQ3WXNQcnNSUVFOQ1k4c2FBYTJocU5ReXlncVJCM3pGcGRYcnAvMC9D MzI5QjlFRDRFNUYzNkFBMzkwQkFFMEZEOUM1NDEyOEQ0OTBEQzRGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARYlbVfVa/W/9H2SiTeyiTlNnZPNQf0hcaw0SSjOJINodoUZcw6BkWHMAQlnp neKfVA6YO4+6UBcLAUnpGQq/zP+BdJXjGscqTbMyEp7QvLUBlKg7yITpUOHoDEAW WeoRPSCI6mu+N5zvq9cHzFvSMWQn6e7265/9pBsqdboINf0ZCTWPT1V37XSNXUOK UzCAXWukV7T9MEDPBGSFuJOhkftSHASOH52Q3KekUGqF9d1LMDS45b8XpayqKKCa KfLES2dkSY8v6KXG20aYLfZBNeRn5r6UDafVrVwcx2DC5pmtZilxKzwOtJOuMci5 SQBN2wurhd24Iqy6pfTBE3g33Q== -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:08 2025 by rpki-client