$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft File: D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json) Hash identifier: dRRTMr/k+WaxYx1CA4SEMC4vEYztSPEGURApmVW25FM= Subject key identifier: 46:88:C5:FB:32:F1:F0:6C:23:1D:23:87:9D:69:2E:10:61:9A:9E:8F Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 Certificate issuer: /CN=D2991FF0EF094685597EA5146C4730F0270A9201 Certificate serial: 68487C4D51CEDB8030AFEBF4BD850A9302768DE1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft Manifest number: 0179 Signing time: Sat 23 Aug 2025 05:33:01 +0000 Manifest this update: Sat 23 Aug 2025 05:28:01 +0000 Manifest next update: Sun 24 Aug 2025 08:08:01 +0000 Files and hashes: 1: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: 9L90NnrkBEPcTOQkQ9C2mKerMbs+BIiGQ8v0CCn+a5I=) 2: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: KTNEcC6Y2VHqLL+qb3kt3ywe3wmftinMc6r4trZIlnw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 08:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:48:7c:4d:51:ce:db:80:30:af:eb:f4:bd:85:0a:93:02:76:8d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201 Validity Not Before: Aug 23 05:28:01 2025 GMT Not After : Aug 24 08:08:01 2025 GMT Subject: CN=4688C5FB32F1F06C231D23879D692E10619A9E8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1b:e4:b8:49:f5:b6:11:f6:0c:52:19:f5:e9: 3a:95:2b:b4:6f:87:f4:bf:56:65:a4:04:46:26:1e: 36:bc:08:bb:f6:31:94:db:9f:1d:45:c5:a0:44:ab: 0f:9a:a4:65:27:9d:36:92:25:9f:ee:b4:d9:ef:aa: 4e:04:7b:25:40:e3:8c:92:d3:25:08:5e:de:0e:94: 0d:6c:e1:6b:07:c8:f2:cb:f2:21:55:35:4e:70:45: e2:25:c9:95:4f:bd:6b:c6:ed:b4:08:5d:6d:b1:0b: a2:35:aa:24:68:81:f1:2f:74:38:c8:c8:37:bf:fa: 7b:41:95:13:1f:eb:50:a9:d2:ff:a1:2f:aa:9a:c0: 6e:4c:86:9a:88:43:ce:f4:a5:66:63:56:ea:93:a5: 80:d9:b9:42:b5:fd:a0:f2:ef:d6:dc:d1:22:97:e6: 6c:6f:86:08:7a:62:43:b1:19:1b:4f:bb:1f:ac:be: 2d:4d:97:0f:27:d9:28:a7:8b:36:e2:27:cd:4c:0c: 92:49:f1:d9:df:e4:55:45:e6:cd:1e:f9:69:78:ea: c0:09:c4:3b:77:d9:03:e2:7f:e9:7b:c2:7f:06:cf: 12:7e:eb:5e:b2:b4:7a:54:b9:ee:78:f6:9c:d3:ff: 5a:2a:51:e3:09:5b:d7:f2:59:98:94:e9:d4:a8:4a: 04:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:88:C5:FB:32:F1:F0:6C:23:1D:23:87:9D:69:2E:10:61:9A:9E:8F X509v3 Authority Key Identifier: keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:91:14:b4:b0:e0:5f:84:f4:f5:63:f4:00:c8:3f:08:c9:9a: 08:17:4f:38:0a:fc:8f:62:87:8e:74:c1:85:bf:7c:18:f4:07: 2b:28:c1:07:26:3c:a1:12:27:e2:89:7c:5b:a3:8b:e4:ec:37: 5a:89:16:38:26:c3:fa:a7:c8:e1:c0:3d:15:cc:16:33:ec:5a: 87:b6:ce:31:27:aa:07:6f:0c:02:87:d0:9c:42:c2:f3:1e:69: 63:d1:4d:07:85:a6:16:3a:3f:39:87:07:a5:bd:80:48:a8:83: 38:42:54:fe:74:d6:06:55:b3:e9:92:29:4d:b4:bf:cb:19:23: 0f:9d:6d:72:dc:a3:7c:1b:16:7d:e7:ff:f9:7a:90:50:c9:be: 0b:9b:e0:4e:74:3e:e7:a4:fe:58:e0:4a:b4:5a:1d:5f:94:c9: c8:51:fd:64:fe:5c:d2:b6:cd:ba:04:fa:14:7e:46:b8:f5:30: 10:ba:cd:8c:d9:8c:ae:da:66:d1:8a:5d:97:eb:a3:07:29:62: 4e:5a:bc:e9:f0:f9:b0:0c:28:2c:92:a4:0f:84:b4:03:8a:76: 05:18:4d:f5:5c:9f:3b:df:1f:46:0b:22:e8:7f:f5:c5:e1:3e: 24:01:19:4f:85:fc:7b:ec:85:65:9c:80:84:f7:e9:12:8e:1a: cb:20:fe:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaEh8TVHO24Awr+v0vYUKkwJ2jeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5OTFGRjBFRjA5NDY4NTU5N0VBNTE0NkM0NzMwRjAy NzBBOTIwMTAeFw0yNTA4MjMwNTI4MDFaFw0yNTA4MjQwODA4MDFaMDMxMTAvBgNV BAMTKDQ2ODhDNUZCMzJGMUYwNkMyMzFEMjM4NzlENjkyRTEwNjE5QTlFOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNG+S4SfW2EfYMUhn16TqVK7Rv h/S/VmWkBEYmHja8CLv2MZTbnx1FxaBEqw+apGUnnTaSJZ/utNnvqk4EeyVA44yS 0yUIXt4OlA1s4WsHyPLL8iFVNU5wReIlyZVPvWvG7bQIXW2xC6I1qiRogfEvdDjI yDe/+ntBlRMf61Cp0v+hL6qawG5MhpqIQ870pWZjVuqTpYDZuUK1/aDy79bc0SKX 5mxvhgh6YkOxGRtPux+svi1Nlw8n2SinizbiJ81MDJJJ8dnf5FVF5s0e+Wl46sAJ xDt32QPif+l7wn8GzxJ+616ytHpUue549pzT/1oqUeMJW9fyWZiU6dSoSgTtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURojF+zLx8GwjHSOHnWkuEGGano8wHwYDVR0j BBgwFoAU0pkf8O8JRoVZfqUUbEcw8CcKkgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRW RnovMC9EMjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTkxRkYwRUYwOTQ2ODU1 OTdFQTUxNDZDNDczMEYwMjcwQTkyMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRWRnovMC9E Mjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOpEUtLDgX4T09WP0AMg/CMmaCBdPOAr8j2KHjnTBhb98GPQHKyjBByY8oRIn 4ol8W6OL5Ow3WokWOCbD+qfI4cA9FcwWM+xah7bOMSeqB28MAofQnELC8x5pY9FN B4WmFjo/OYcHpb2ASKiDOEJU/nTWBlWz6ZIpTbS/yxkjD51tctyjfBsWfef/+XqQ UMm+C5vgTnQ+56T+WOBKtFodX5TJyFH9ZP5c0rbNugT6FH5GuPUwELrNjNmMrtpm 0Ypdl+ujByliTlq86fD5sAwoLJKkD4S0A4p2BRhN9VyfO98fRgsi6H/1xeE+JAEZ T4X8e+yFZZyAhPfpEo4ayyD+kg== -----END CERTIFICATE-----Generated at Sat Aug 23 10:44:42 2025 by rpki-client