$ rpki-client -vvf rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/2/8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A.mft File: 8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A.mft (raw, json) Hash identifier: GclFfnQOCiWo4ef7115aOaV9Bxa+iNNjXrcIGAXfnug= Subject key identifier: 19:C2:43:94:A1:6C:DB:69:5A:CC:35:F5:90:2F:DE:00:1B:E6:64:E0 Authority key identifier: 88:86:BA:0B:7E:A7:A5:EE:DD:66:D0:C1:4C:E0:FD:0F:9B:8C:87:8A Certificate issuer: /CN=8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A Certificate serial: 63AF4E2CAB871D0CDF960CC4471A782BBE89813D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A.cer Subject info access: rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/2/8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A.mft Manifest number: B1 Signing time: Wed 02 Jul 2025 07:11:06 +0000 Manifest this update: Wed 02 Jul 2025 07:06:06 +0000 Manifest next update: Thu 03 Jul 2025 09:32:06 +0000 Files and hashes: 1: 323830343a333139303a3a2f33322d3438203d3e203533303937.roa (hash: ubg+jA3GJlOU4m+E6yZWqzIzL5YRjki/5VP4cjC7m8Y=) 2: 8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A.crl (hash: Zi+FF2pKgtu4fxamwjtwguXwBh6H2gfg7nuXbq1+gIU=) 3: 3138372e36332e3230382e302f32302d3234203d3e203533303937.roa (hash: V/2doQOw0GwCQVupNF+lz0jfjC1q/Orhu3tKE0OC7cA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/2/8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A.crl rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/2/8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 09:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:af:4e:2c:ab:87:1d:0c:df:96:0c:c4:47:1a:78:2b:be:89:81:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A Validity Not Before: Jul 2 07:06:06 2025 GMT Not After : Jul 3 09:32:06 2025 GMT Subject: CN=19C24394A16CDB695ACC35F5902FDE001BE664E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6c:b7:30:68:66:0f:ec:be:d7:a0:17:22:cf: a5:49:09:d2:88:b3:45:d9:5f:3a:5c:25:fc:b8:02: 3b:2f:90:6f:00:2d:5c:fb:a5:24:e6:1c:56:f7:c8: 5e:ba:d1:fa:a2:fc:5c:55:35:08:6a:fe:7a:29:18: d9:0f:76:e9:fc:fc:e8:e8:04:6e:43:68:7c:ed:87: 59:c3:38:bd:ff:b1:b9:16:b2:89:ef:4d:e4:d4:af: b5:d0:ca:50:c6:2e:26:7c:4d:32:bc:58:4c:6a:b0: a8:66:f0:72:39:32:ff:23:d4:b4:08:f8:22:18:52: 68:e5:80:06:8d:6b:20:86:d0:7f:4f:bf:2a:57:e4: 8b:86:45:91:72:cb:ca:49:76:44:44:96:46:b3:84: cc:a9:b4:58:06:56:32:1a:7a:77:85:fe:be:95:32: bb:05:34:c6:70:11:37:ee:55:33:55:d2:3e:71:0c: e6:61:4c:ad:4d:15:b8:e8:aa:17:cf:de:66:94:97: f6:1e:ea:81:c4:f5:d6:11:d6:c3:d9:f1:c3:c1:02: 5b:56:dc:46:9b:d6:2e:ab:c5:4d:24:50:0b:0a:c1: fb:2e:83:cc:2d:65:e1:3e:1a:13:62:90:7c:06:77: ee:90:4d:f1:ff:b3:e4:e9:bb:28:6b:5b:16:2b:bf: a7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C2:43:94:A1:6C:DB:69:5A:CC:35:F5:90:2F:DE:00:1B:E6:64:E0 X509v3 Authority Key Identifier: keyid:88:86:BA:0B:7E:A7:A5:EE:DD:66:D0:C1:4C:E0:FD:0F:9B:8C:87:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/2/8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/2/8886BA0B7EA7A5EEDD66D0C14CE0FD0F9B8C878A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:21:b8:27:13:e0:a0:2b:c2:a3:6e:17:3b:37:49:06:c4:3c: 77:b3:0b:82:b1:88:2d:94:cf:05:cd:ab:7c:65:77:48:59:b7: f0:22:e7:2f:4f:72:8e:49:ce:cd:70:dc:0c:41:14:a7:a6:35: 6b:83:d9:6f:87:0f:c6:46:30:9e:f6:d4:69:6f:ef:d3:51:df: 86:24:a1:57:86:6e:cf:d4:76:c7:3d:8d:76:84:26:09:3b:ba: 82:a0:01:d8:d9:ee:f8:d1:cb:33:30:2e:a1:16:56:b2:36:32: 46:f3:0a:bd:51:d3:42:fa:4b:5c:57:8a:51:10:52:09:8b:7f: 37:b4:71:4c:0b:da:59:51:23:87:3e:99:27:f8:34:5b:b9:4b: 6a:e4:ea:10:b7:54:2f:c7:14:ca:64:38:6c:f1:1a:4d:60:22: 8a:4e:51:58:de:26:03:da:ec:c4:ac:23:a5:06:0e:05:8b:70: 5e:de:06:87:07:5f:28:20:78:74:ac:bc:f9:d1:37:02:23:99: ec:51:f4:62:b5:dd:bb:b5:d2:df:73:7d:d3:89:39:fc:e8:ad: 45:16:e9:30:03:d5:0b:23:ab:5a:f5:32:18:6a:90:4e:5f:24: 09:cd:c0:e3:ac:25:18:43:f9:03:33:ff:04:ee:72:d5:77:77: 8f:c3:f3:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUY69OLKuHHQzflgzERxp4K76JgT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg4NkJBMEI3RUE3QTVFRURENjZEMEMxNENFMEZEMEY5 QjhDODc4QTAeFw0yNTA3MDIwNzA2MDZaFw0yNTA3MDMwOTMyMDZaMDMxMTAvBgNV BAMTKDE5QzI0Mzk0QTE2Q0RCNjk1QUNDMzVGNTkwMkZERTAwMUJFNjY0RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxbLcwaGYP7L7XoBciz6VJCdKI s0XZXzpcJfy4AjsvkG8ALVz7pSTmHFb3yF660fqi/FxVNQhq/nopGNkPdun8/Ojo BG5DaHzth1nDOL3/sbkWsonvTeTUr7XQylDGLiZ8TTK8WExqsKhm8HI5Mv8j1LQI +CIYUmjlgAaNayCG0H9PvypX5IuGRZFyy8pJdkRElkazhMyptFgGVjIaeneF/r6V MrsFNMZwETfuVTNV0j5xDOZhTK1NFbjoqhfP3maUl/Ye6oHE9dYR1sPZ8cPBAltW 3Eab1i6rxU0kUAsKwfsug8wtZeE+GhNikHwGd+6QTfH/s+TpuyhrWxYrv6e7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGcJDlKFs22lazDX1kC/eABvmZOAwHwYDVR0j BBgwFoAUiIa6C36npe7dZtDBTOD9D5uMh4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkRSY1VXTmF5R1E5dDdNblJCVFZBWVRSazNjNFZtZExTYTRIN0tnWGFo UHIvMi84ODg2QkEwQjdFQTdBNUVFREQ2NkQwQzE0Q0UwRkQwRjlCOEM4NzhBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4ODZCQTBCN0VBN0E1RUVE RDY2RDBDMTRDRTBGRDBGOUI4Qzg3OEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkRSY1VXTmF5R1E5dDdNblJCVFZBWVRSazNjNFZtZExTYTRIN0tnWGFoUHIvMi84 ODg2QkEwQjdFQTdBNUVFREQ2NkQwQzE0Q0UwRkQwRjlCOEM4NzhBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMyG4JxPgoCvCo24XOzdJBsQ8d7MLgrGILZTPBc2rfGV3SFm38CLnL09yjknO zXDcDEEUp6Y1a4PZb4cPxkYwnvbUaW/v01HfhiShV4Zuz9R2xz2NdoQmCTu6gqAB 2Nnu+NHLMzAuoRZWsjYyRvMKvVHTQvpLXFeKURBSCYt/N7RxTAvaWVEjhz6ZJ/g0 W7lLauTqELdUL8cUymQ4bPEaTWAiik5RWN4mA9rsxKwjpQYOBYtwXt4GhwdfKCB4 dKy8+dE3AiOZ7FH0YrXdu7XS33N904k5/OitRRbpMAPVCyOrWvUyGGqQTl8kCc3A 46wlGEP5AzP/BO5y1Xd3j8PzyA== -----END CERTIFICATE-----Generated at Wed Jul 2 22:43:26 2025 by rpki-client