$ rpki-client -vvf rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/01848C66A25335A0075484FBC32617363F3B8550.mft File: 01848C66A25335A0075484FBC32617363F3B8550.mft (raw, json) Hash identifier: mucjT5Euu2CWqWoL7DF8kuqxzDyj3aaYXd+yNrMNzEk= Subject key identifier: 2D:A4:45:4A:64:AB:AB:A3:8C:57:A5:80:D8:FE:0A:B6:A8:D6:BA:6B Authority key identifier: 01:84:8C:66:A2:53:35:A0:07:54:84:FB:C3:26:17:36:3F:3B:85:50 Certificate issuer: /CN=01848C66A25335A0075484FBC32617363F3B8550 Certificate serial: 49A55A54B336457E511804D103311673053263D6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01848C66A25335A0075484FBC32617363F3B8550.cer Subject info access: rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/01848C66A25335A0075484FBC32617363F3B8550.mft Manifest number: 0303 Signing time: Sat 23 Aug 2025 13:12:23 +0000 Manifest this update: Sat 23 Aug 2025 13:07:23 +0000 Manifest next update: Sun 24 Aug 2025 15:13:23 +0000 Files and hashes: 1: 01848C66A25335A0075484FBC32617363F3B8550.crl (hash: j0Q48TCNVd32gU4ookJJMBG+AULY4giDDzBrarVcVeg=) 2: 3230312e3138322e33322e302f32322d3234203d3e20323634343631.roa (hash: hItzbRYhhp0glI1YlztxX8nj2lnofI85Rl5h5PHa8n4=) 3: 3133322e3235352e32382e302f32322d3234203d3e20323634343631.roa (hash: jDwr9ejxKXg+DE9r6vnNIDUdYI2ulhvyfynCELP2/M4=) 4: 323830343a323030383a3a2f33322d3438203d3e20323634343631.roa (hash: 9PDoM2YCv2t3MbchGp0NG1oKFcKdMAwEFQUem7rtJ1g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/01848C66A25335A0075484FBC32617363F3B8550.crl rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/01848C66A25335A0075484FBC32617363F3B8550.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01848C66A25335A0075484FBC32617363F3B8550.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a5:5a:54:b3:36:45:7e:51:18:04:d1:03:31:16:73:05:32:63:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01848C66A25335A0075484FBC32617363F3B8550 Validity Not Before: Aug 23 13:07:23 2025 GMT Not After : Aug 24 15:13:23 2025 GMT Subject: CN=2DA4454A64ABABA38C57A580D8FE0AB6A8D6BA6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a8:9f:1e:d5:74:f8:6d:a8:0b:32:fa:39:be: c6:6d:5c:49:70:e4:0a:04:03:74:5f:99:ff:c0:34: 8f:64:8d:c8:2d:23:e1:d7:fc:95:54:c0:9b:c8:25: 9b:5a:9c:59:7c:9f:a8:da:11:fa:6c:ba:4f:0b:1f: 32:c2:d8:bf:6c:2c:b9:98:8a:04:c3:96:2e:78:ea: 9d:9b:e7:2e:41:3b:bc:fa:42:67:14:a8:ec:10:82: 14:ad:8e:d2:22:c4:97:38:a0:a6:6a:0b:38:57:e6: d7:08:e7:cf:b9:be:da:d0:6c:4b:fa:4d:c1:e6:31: 9d:b8:cf:ee:bd:df:eb:17:aa:70:70:3a:31:1f:0e: e6:5b:c7:ca:46:ae:d0:1c:0e:61:36:c6:4b:c7:a3: 1d:30:85:8e:4e:e2:48:04:d7:19:bc:30:dd:b1:0b: 40:87:95:b3:a1:e4:0d:39:1a:12:45:93:27:47:16: 54:4a:3a:87:25:80:ef:b2:d0:cf:d5:64:a0:6c:d2: fd:a9:0e:75:cd:b9:7d:8b:b5:13:89:ac:23:e9:66: 95:79:fd:27:68:c6:25:17:f9:f8:1e:39:44:72:7f: 3f:df:1b:0f:2d:96:8d:c6:f5:10:a9:b4:4b:ae:29: 5b:0d:cb:bf:b7:f4:f1:fa:ff:75:80:5e:3c:7f:c0: 1b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A4:45:4A:64:AB:AB:A3:8C:57:A5:80:D8:FE:0A:B6:A8:D6:BA:6B X509v3 Authority Key Identifier: keyid:01:84:8C:66:A2:53:35:A0:07:54:84:FB:C3:26:17:36:3F:3B:85:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/01848C66A25335A0075484FBC32617363F3B8550.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01848C66A25335A0075484FBC32617363F3B8550.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/01848C66A25335A0075484FBC32617363F3B8550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:74:23:35:ac:4f:94:c5:93:e3:45:47:6a:5e:3c:fb:87:ef: e1:cc:0d:49:fd:85:e4:ed:76:a8:29:2e:8e:67:6d:a0:67:68: 5a:a1:d7:ba:c8:45:56:a9:ff:d1:4f:11:7a:4c:f4:ab:f0:a2: 98:e7:b0:0b:90:46:98:ff:02:13:60:ad:9d:8d:8b:ca:c9:50: b7:55:ef:a7:4e:e4:af:7c:54:19:e5:a2:51:66:f2:c7:96:b9: 84:63:8d:7d:db:9d:18:1c:b6:46:64:09:b9:7a:72:3a:c8:18: 29:4e:42:25:d2:7c:af:47:10:43:0d:a6:5d:0d:6b:df:1d:77: 4a:57:2e:61:66:1e:b4:bb:17:6d:1d:45:47:3d:20:90:f4:16: b1:36:cf:eb:90:73:97:ef:a8:b5:2f:17:2b:a9:a9:83:df:f2: d6:9d:b3:1c:a1:f3:9a:54:7a:ec:d8:8e:f2:74:23:09:68:2d: 7e:63:44:d0:e3:14:93:58:b5:09:25:db:08:e5:08:8a:41:af: a1:c0:93:da:21:4d:b8:96:f0:37:6c:5a:62:5a:32:4d:10:74: 33:c2:0d:67:cd:48:69:2b:54:70:1e:1b:0b:51:bc:b8:b4:92: 3f:42:d7:45:b0:ea:76:4f:87:cc:6e:aa:18:af:1a:0b:23:07: 7c:3e:93:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSaVaVLM2RX5RGATRAzEWcwUyY9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE4NDhDNjZBMjUzMzVBMDA3NTQ4NEZCQzMyNjE3MzYz RjNCODU1MDAeFw0yNTA4MjMxMzA3MjNaFw0yNTA4MjQxNTEzMjNaMDMxMTAvBgNV BAMTKDJEQTQ0NTRBNjRBQkFCQTM4QzU3QTU4MEQ4RkUwQUI2QThENkJBNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYqJ8e1XT4bagLMvo5vsZtXElw 5AoEA3Rfmf/ANI9kjcgtI+HX/JVUwJvIJZtanFl8n6jaEfpsuk8LHzLC2L9sLLmY igTDli546p2b5y5BO7z6QmcUqOwQghStjtIixJc4oKZqCzhX5tcI58+5vtrQbEv6 TcHmMZ24z+693+sXqnBwOjEfDuZbx8pGrtAcDmE2xkvHox0whY5O4kgE1xm8MN2x C0CHlbOh5A05GhJFkydHFlRKOoclgO+y0M/VZKBs0v2pDnXNuX2LtROJrCPpZpV5 /SdoxiUX+fgeOURyfz/fGw8tlo3G9RCptEuuKVsNy7+39PH6/3WAXjx/wBupAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULaRFSmSrq6OMV6WA2P4KtqjWumswHwYDVR0j BBgwFoAUAYSMZqJTNaAHVIT7wyYXNj87hVAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQm9lQ2VWQmM0N2FVZjh3ZVFBQ1VrMlpvTm5hWFBjcVhKa1NpVGo2QmZ4 d2svMC8wMTg0OEM2NkEyNTMzNUEwMDc1NDg0RkJDMzI2MTczNjNGM0I4NTUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxODQ4QzY2QTI1MzM1QTAw NzU0ODRGQkMzMjYxNzM2M0YzQjg1NTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qm9lQ2VWQmM0N2FVZjh3ZVFBQ1VrMlpvTm5hWFBjcVhKa1NpVGo2QmZ4d2svMC8w MTg0OEM2NkEyNTMzNUEwMDc1NDg0RkJDMzI2MTczNjNGM0I4NTUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzXQjNaxPlMWT40VHal48+4fv4cwNSf2F5O12qCkujmdtoGdoWqHXushFVqn/ 0U8Rekz0q/CimOewC5BGmP8CE2CtnY2LyslQt1Xvp07kr3xUGeWiUWbyx5a5hGON fdudGBy2RmQJuXpyOsgYKU5CJdJ8r0cQQw2mXQ1r3x13SlcuYWYetLsXbR1FRz0g kPQWsTbP65Bzl++otS8XK6mpg9/y1p2zHKHzmlR67NiO8nQjCWgtfmNE0OMUk1i1 CSXbCOUIikGvocCT2iFNuJbwN2xaYloyTRB0M8INZ81IaStUcB4bC1G8uLSSP0LX RbDqdk+HzG6qGK8aCyMHfD6TAw== -----END CERTIFICATE-----Generated at Sat Aug 23 16:25:18 2025 by rpki-client