$ rpki-client -vvf rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft File: 1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft (raw, json) Hash identifier: JXrkflnlZGvSO6EqeKhWaAYr/WI3yx1axwOyxilkHOM= Subject key identifier: E0:BA:1A:48:99:3A:4C:B3:62:EB:8A:80:19:3F:FD:E7:4B:36:1C:AF Authority key identifier: 1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55 Certificate issuer: /CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555 Certificate serial: 63AE118024BD8C82B1E043723F8D503D5D8EC8E2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft Manifest number: 02A4 Signing time: Sat 23 Aug 2025 05:02:39 +0000 Manifest this update: Sat 23 Aug 2025 04:57:39 +0000 Manifest next update: Sun 24 Aug 2025 07:37:39 +0000 Files and hashes: 1: 3137372e33382e3136302e302f32312d3234203d3e20323632343038.roa (hash: WWQDaPRjLqL6gxa8oKBNJP8aA85LM8dmmWOF68n+4eM=) 2: 323830343a326430633a3a2f33322d3332203d3e20323632343038.roa (hash: I/xjLRtE0sns2aDZvy2RT2f40WrXsCM4pXsxx+HtLKQ=) 3: 3136382e302e3234302e302f32322d3234203d3e20323632343038.roa (hash: nc1KYLiIl6MQ2cB8LAaJ1Ei9pNJhoTR2e/w7ESX0VCI=) 4: 1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl (hash: DDl2eScA3htM/R5Kh9I7ZPP34Q2qS1L5wjy5K6XQLRA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 07:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ae:11:80:24:bd:8c:82:b1:e0:43:72:3f:8d:50:3d:5d:8e:c8:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555 Validity Not Before: Aug 23 04:57:39 2025 GMT Not After : Aug 24 07:37:39 2025 GMT Subject: CN=E0BA1A48993A4CB362EB8A80193FFDE74B361CAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:f3:9d:e4:c6:10:5b:6d:0a:b6:da:44:89: bd:26:db:46:56:a0:97:f1:02:9f:df:af:19:3c:79: 0d:0c:e6:56:a3:72:89:ad:91:81:37:e3:62:0c:3c: 53:d7:19:4c:29:75:2b:ea:b7:6e:98:d0:2c:96:ce: 6e:54:b6:1a:12:24:65:f5:fb:ba:d0:43:02:a8:4d: 39:09:68:7d:92:a6:42:b0:80:77:39:f4:5b:47:b4: ad:a8:76:c1:14:66:f9:97:49:5e:bb:75:b8:7d:a9: 6c:67:82:e4:b1:e1:6f:cc:84:f1:33:4b:6e:1d:a2: 9a:0d:59:48:c8:f7:f4:3c:61:13:98:85:6b:2a:08: 90:ae:a1:fc:ef:0b:86:e1:89:57:b7:cd:e9:94:69: 47:e9:cc:f1:22:f1:58:df:c3:89:dd:77:26:35:a1: 95:4f:a3:fa:fc:28:8e:b5:22:09:0b:5e:ad:53:b7: 16:bc:4f:15:d2:87:59:20:f6:62:c0:06:10:7b:5e: 45:d5:5f:8b:f8:f1:35:77:bb:cb:d2:d4:9a:07:0a: c2:9f:40:eb:c5:b4:24:2f:6d:57:5f:e0:10:52:44: 76:d0:04:87:f9:15:28:23:87:dd:8a:16:de:b2:52: d9:63:7b:50:d4:93:4c:13:d8:43:b2:fe:e2:34:e0: 13:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BA:1A:48:99:3A:4C:B3:62:EB:8A:80:19:3F:FD:E7:4B:36:1C:AF X509v3 Authority Key Identifier: keyid:1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c3:6c:c2:f0:53:db:da:1d:f2:7f:76:e0:bc:f4:a1:92:3f: 36:19:a2:b4:80:8d:f2:63:51:d2:3b:7a:d9:d9:29:f6:3f:4e: f0:45:54:38:6b:63:54:bf:86:00:cf:70:20:17:3b:72:3c:71: 0c:4f:40:05:34:c9:31:b5:1e:2d:c3:ed:89:6d:ae:73:1e:c0: 70:ad:47:51:69:3c:f2:0e:74:3d:c2:77:d9:af:d6:1b:0d:cb: cb:43:f8:e1:cc:48:4f:53:d6:f7:30:5b:30:89:be:1a:36:2b: eb:83:44:d7:be:74:81:5c:be:f9:66:cf:13:47:c9:5a:2e:ee: af:a2:2d:72:2a:ad:aa:38:51:be:32:fe:03:76:6c:71:fd:f0: 49:ee:bc:7b:1f:ea:51:94:09:6e:1b:1a:85:b4:49:0e:72:59: bb:87:0d:c1:27:93:eb:92:2e:a0:63:78:8d:0a:e8:bf:fe:ec: 89:1b:1f:cd:77:f6:b2:6f:54:41:63:e0:0b:bf:2b:bc:43:54: 09:a8:35:d9:e7:e9:2f:a5:64:c2:eb:bd:e3:90:72:c3:00:e7: 2f:d0:4c:3b:9b:4c:17:4a:6c:ff:74:79:01:55:4c:77:6d:8f: 74:8d:7b:7d:09:dc:21:55:7d:15:87:b1:62:e1:e4:4a:b7:85: 25:9d:a4:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUY64RgCS9jIKx4ENyP41QPV2OyOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFGRkZGMUUzM0VBQkYyOThFOUIwNUYxNzcxNjZDOTZG MkMzQjU1NTAeFw0yNTA4MjMwNDU3MzlaFw0yNTA4MjQwNzM3MzlaMDMxMTAvBgNV BAMTKEUwQkExQTQ4OTkzQTRDQjM2MkVCOEE4MDE5M0ZGREU3NEIzNjFDQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2XvOd5MYQW20KttpEib0m20ZW oJfxAp/frxk8eQ0M5lajcomtkYE342IMPFPXGUwpdSvqt26Y0CyWzm5UthoSJGX1 +7rQQwKoTTkJaH2SpkKwgHc59FtHtK2odsEUZvmXSV67dbh9qWxnguSx4W/MhPEz S24dopoNWUjI9/Q8YROYhWsqCJCuofzvC4bhiVe3zemUaUfpzPEi8Vjfw4nddyY1 oZVPo/r8KI61IgkLXq1Ttxa8TxXSh1kg9mLABhB7XkXVX4v48TV3u8vS1JoHCsKf QOvFtCQvbVdf4BBSRHbQBIf5FSgjh92KFt6yUtlje1DUk0wT2EOy/uI04BPZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4LoaSJk6TLNi64qAGT/950s2HK8wHwYDVR0j BBgwFoAUGv//HjPqvymOmwXxdxZslvLDtVUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmQzU1p5cXhlc2pMTUQ1QTd5R3dYZlA0WHBiNDh0QmpRcEZwa2NiRWQx c0MvMS8xQUZGRkYxRTMzRUFCRjI5OEU5QjA1RjE3NzE2NkM5NkYyQzNCNTU1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBRkZGRjFFMzNFQUJGMjk4 RTlCMDVGMTc3MTY2Qzk2RjJDM0I1NTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmQzU1p5cXhlc2pMTUQ1QTd5R3dYZlA0WHBiNDh0QmpRcEZwa2NiRWQxc0MvMS8x QUZGRkYxRTMzRUFCRjI5OEU5QjA1RjE3NzE2NkM5NkYyQzNCNTU1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn8NswvBT29od8n924Lz0oZI/NhmitICN8mNR0jt62dkp9j9O8EVUOGtjVL+G AM9wIBc7cjxxDE9ABTTJMbUeLcPtiW2ucx7AcK1HUWk88g50PcJ32a/WGw3Ly0P4 4cxIT1PW9zBbMIm+GjYr64NE1750gVy++WbPE0fJWi7ur6ItciqtqjhRvjL+A3Zs cf3wSe68ex/qUZQJbhsahbRJDnJZu4cNwSeT65IuoGN4jQrov/7siRsfzXf2sm9U QWPgC78rvENUCag12efpL6Vkwuu945BywwDnL9BMO5tMF0ps/3R5AVVMd22PdI17 fQncIVV9FYexYuHkSreFJZ2k6w== -----END CERTIFICATE-----Generated at Sat Aug 23 14:24:47 2025 by rpki-client