$ rpki-client -vvf rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft File: CA9298E26EC7D83F990DD29EFD395097A928590F.mft (raw, json) Hash identifier: 57+n4x7pPs+wIUwgaLiIXPsTX4nYVx7wnswjdB1YMqE= Subject key identifier: 0F:B0:24:0E:55:C4:43:7D:46:8B:EF:84:93:73:69:C5:69:CC:D7:99 Authority key identifier: CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F Certificate issuer: /CN=CA9298E26EC7D83F990DD29EFD395097A928590F Certificate serial: 6EF9C680D87B79788BF5CE91C2FAA2FC4C1FBA8D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer Subject info access: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft Manifest number: 01CA Signing time: Sat 23 Aug 2025 00:53:22 +0000 Manifest this update: Sat 23 Aug 2025 00:48:22 +0000 Manifest next update: Sun 24 Aug 2025 04:28:22 +0000 Files and hashes: 1: 3133312e302e3136342e302f32322d3234203d3e203631363938.roa (hash: wtyTmXZbRgRsfoJNHLj8NWX0CbM90+xKZ4dA+uKkbSs=) 2: CA9298E26EC7D83F990DD29EFD395097A928590F.crl (hash: 09LDtBOQT+rfyCXulM3A+tselo8fn8r9bcTp6Oh4Av4=) 3: 323830343a316165633a3a2f33322d3438203d3e203631363938.roa (hash: IFrUYpuj0d1bgr14YmgI4By335jGYf5cwE1I2H0w90A=) 4: 3136382e3232372e38302e302f32322d3234203d3e203631363938.roa (hash: S1X3FDjegEq67IqZtyansbQSwefFYc5W5CadNAvGNo4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 04:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:f9:c6:80:d8:7b:79:78:8b:f5:ce:91:c2:fa:a2:fc:4c:1f:ba:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA9298E26EC7D83F990DD29EFD395097A928590F Validity Not Before: Aug 23 00:48:22 2025 GMT Not After : Aug 24 04:28:22 2025 GMT Subject: CN=0FB0240E55C4437D468BEF84937369C569CCD799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d9:80:a1:d0:f6:a9:0f:41:5e:0f:3f:9c:4d: 9a:62:87:36:dc:c4:c5:06:7f:e7:03:07:63:f0:67: b2:5a:96:64:bd:da:9d:5e:10:fa:15:07:27:0c:c9: 6e:08:20:f2:68:e8:fa:1f:2e:23:43:38:cb:39:19: 05:06:c3:50:e5:ce:85:32:b0:92:a9:8f:92:e5:f7: 30:b0:47:a8:11:82:cb:71:5e:ce:15:56:1f:c5:19: d5:9f:10:6f:60:9e:1e:6a:fc:3a:3d:fc:74:0e:eb: 23:25:45:74:d2:47:b3:65:8c:7f:3e:34:a7:0d:dd: 4b:cb:8b:8a:e0:b4:41:53:5a:75:ca:eb:2a:47:22: 10:b8:8a:d9:8a:3b:7f:2d:26:95:21:47:c3:b5:08: ea:8c:eb:2d:bf:7d:b0:a9:f8:fc:e7:d0:b8:93:d2: fc:93:24:ee:d1:02:f7:62:c3:9d:ae:ed:3b:32:06: b7:74:06:f5:24:79:59:2a:b9:c7:6c:15:28:2a:52: da:fc:2f:5a:20:f0:ca:dd:d7:a9:b1:ee:5a:c2:6d: dc:c5:27:05:59:f2:f4:40:1a:2e:8b:d0:1c:f8:a5: 9f:10:9c:c9:6d:18:08:87:a1:7d:03:d9:1a:5e:ad: 52:c7:1c:9c:34:05:ff:ed:9b:f6:37:ef:a2:d6:a9: 37:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B0:24:0E:55:C4:43:7D:46:8B:EF:84:93:73:69:C5:69:CC:D7:99 X509v3 Authority Key Identifier: keyid:CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:8a:cb:01:b5:9d:ab:07:7e:59:c7:3a:85:55:03:82:b2:83: 14:d5:f9:19:b8:44:dd:7b:ba:f8:79:0a:12:57:93:8e:dc:02: b2:62:26:5e:fd:0b:7d:b8:8d:55:e9:68:9f:0e:8a:9a:0b:c9: e4:a3:54:0e:e3:bb:dc:0c:d5:bf:70:13:85:28:f1:c5:ec:26: 53:fd:e5:f7:8d:e5:a8:4a:96:4a:a1:4c:7d:ed:1e:83:d9:e5: 89:64:80:3d:c4:d3:90:a1:ac:b5:2d:77:c8:b6:ab:71:87:42: 61:da:d9:c1:96:f0:44:f6:5f:32:d9:e3:dd:8a:bf:a5:99:e9: 4a:b7:2c:87:40:cc:67:66:64:aa:0e:1b:fa:f9:bb:a1:39:b9: 44:64:f3:85:08:0a:69:c7:1c:8c:99:63:ae:24:fe:6b:b9:29: 46:b7:eb:79:5d:b0:60:83:5b:3f:c4:14:2d:e7:f1:15:10:92: 60:b5:89:3e:05:34:c7:a1:c2:d9:c2:60:11:22:ae:e1:47:56: 3c:30:16:f1:15:fb:c9:67:c6:ea:71:6d:76:69:3c:26:69:47: 36:96:68:48:5c:55:09:dc:a5:31:2b:0c:86:ca:1f:f4:b5:a9: 63:78:e5:f9:c8:2c:35:75:2d:a4:58:c1:fd:24:9e:00:d0:fc: 01:ba:46:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbvnGgNh7eXiL9c6Rwvqi/Ewfuo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5Mjk4RTI2RUM3RDgzRjk5MEREMjlFRkQzOTUwOTdB OTI4NTkwRjAeFw0yNTA4MjMwMDQ4MjJaFw0yNTA4MjQwNDI4MjJaMDMxMTAvBgNV BAMTKDBGQjAyNDBFNTVDNDQzN0Q0NjhCRUY4NDkzNzM2OUM1NjlDQ0Q3OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF2YCh0PapD0FeDz+cTZpihzbc xMUGf+cDB2PwZ7JalmS92p1eEPoVBycMyW4IIPJo6PofLiNDOMs5GQUGw1DlzoUy sJKpj5Ll9zCwR6gRgstxXs4VVh/FGdWfEG9gnh5q/Do9/HQO6yMlRXTSR7NljH8+ NKcN3UvLi4rgtEFTWnXK6ypHIhC4itmKO38tJpUhR8O1COqM6y2/fbCp+Pzn0LiT 0vyTJO7RAvdiw52u7TsyBrd0BvUkeVkqucdsFSgqUtr8L1og8Mrd16mx7lrCbdzF JwVZ8vRAGi6L0Bz4pZ8QnMltGAiHoX0D2RperVLHHJw0Bf/tm/Y376LWqTerAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUD7AkDlXEQ31Gi++Ek3NpxWnM15kwHwYDVR0j BBgwFoAUypKY4m7H2D+ZDdKe/TlQl6koWQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmloa2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZm emovMC9DQTkyOThFMjZFQzdEODNGOTkwREQyOUVGRDM5NTA5N0E5Mjg1OTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBOTI5OEUyNkVDN0Q4M0Y5 OTBERDI5RUZEMzk1MDk3QTkyODU5MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qmloa2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZmemovMC9D QTkyOThFMjZFQzdEODNGOTkwREQyOUVGRDM5NTA5N0E5Mjg1OTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXIrLAbWdqwd+Wcc6hVUDgrKDFNX5GbhE3Xu6+HkKEleTjtwCsmImXv0LfbiN Velonw6KmgvJ5KNUDuO73AzVv3AThSjxxewmU/3l943lqEqWSqFMfe0eg9nliWSA PcTTkKGstS13yLarcYdCYdrZwZbwRPZfMtnj3Yq/pZnpSrcsh0DMZ2Zkqg4b+vm7 oTm5RGTzhQgKacccjJljriT+a7kpRrfreV2wYINbP8QULefxFRCSYLWJPgU0x6HC 2cJgESKu4UdWPDAW8RX7yWfG6nFtdmk8JmlHNpZoSFxVCdylMSsMhsof9LWpY3jl +cgsNXUtpFjB/SSeAND8AbpGzQ== -----END CERTIFICATE-----Generated at Sat Aug 23 10:54:38 2025 by rpki-client