$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft File: 9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft (raw, json) Hash identifier: eT8w4Kny3mKAU2mosfIo9z7vrpwHWbj3U0DdwNXPZL0= Subject key identifier: EE:B2:7F:73:1F:44:D7:E4:DC:9B:B8:6C:D1:80:EF:5A:D0:79:0E:90 Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2 Certificate issuer: /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2 Certificate serial: 2DE69844883CDA3E0FD4DA4DDB43ACBE1B966DC6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft Manifest number: 0111 Signing time: Sat 23 Aug 2025 04:24:23 +0000 Manifest this update: Sat 23 Aug 2025 04:19:23 +0000 Manifest next update: Sun 24 Aug 2025 08:11:23 +0000 Files and hashes: 1: 3139302e3131322e3135362e302f32322d3234203d3e20323639373132.roa (hash: XsvSwhJsvhiN3zT4zP/EO47T43tGtKD9SfW4Q24OOT4=) 2: 323830343a363862633a3a2f33322d3334203d3e20323639373132.roa (hash: 8RPnTiQ7wXRMCXsqv1axTDou5GdSXQ84NpnMqja7IR4=) 3: 9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl (hash: S+E/1NmeYxsCjFkY22x2JU7aSZbsFXV6eSgwsAq5/kg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 08:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e6:98:44:88:3c:da:3e:0f:d4:da:4d:db:43:ac:be:1b:96:6d:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2 Validity Not Before: Aug 23 04:19:23 2025 GMT Not After : Aug 24 08:11:23 2025 GMT Subject: CN=EEB27F731F44D7E4DC9BB86CD180EF5AD0790E90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:61:b9:41:4e:92:a2:16:19:4c:2f:df:cb:03: aa:42:30:1b:c1:c6:1a:a1:01:59:bb:d5:7f:aa:79: 74:a7:02:49:21:71:72:17:ec:7f:fa:e9:a2:60:9a: 01:40:46:d4:0e:b8:c8:e3:07:3e:0e:94:2d:59:46: 35:e2:f1:0d:a4:96:84:5a:56:7c:b0:59:c5:63:21: 92:03:ba:19:b1:b0:5f:30:d4:e7:5a:fc:77:90:79: 9b:c7:e2:62:8f:7b:2f:f6:66:7c:ff:19:9d:0c:6f: bf:69:10:8f:ae:d5:2b:b1:1a:5d:de:ca:fc:6b:37: cf:be:5b:8e:54:15:b3:31:7f:52:54:b8:c9:ae:86: af:53:c0:33:5c:ef:b8:b7:55:e8:19:4c:7b:aa:db: 28:6c:d7:58:44:d1:68:55:69:e7:3c:36:d9:8d:9f: 6a:59:37:15:1f:5e:e8:47:37:9b:8c:f3:6b:79:73: c4:ff:be:b1:20:39:2e:28:69:90:ad:f7:56:90:f3: 42:07:77:cc:2e:17:e7:70:f2:5a:9f:2f:36:c2:f1: 90:62:74:33:61:16:6c:1c:ac:f3:0a:b4:84:c9:73: d5:00:76:17:8c:36:8a:69:d6:24:ee:3c:de:6d:3e: 4a:e8:1b:6a:67:7e:fb:ca:23:b2:d2:e2:1a:c7:82: f2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B2:7F:73:1F:44:D7:E4:DC:9B:B8:6C:D1:80:EF:5A:D0:79:0E:90 X509v3 Authority Key Identifier: keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:a5:5c:52:c6:14:65:ba:d9:64:69:9e:17:de:5c:00:87:b3: 51:21:2b:a1:72:d4:00:8d:1b:31:c5:c5:cf:4c:7c:00:f0:62: 04:77:60:c6:3c:a3:6d:31:21:6d:56:82:38:ca:aa:45:fb:bf: 69:b4:ee:29:69:0e:bc:26:4e:38:37:6f:ca:b6:4c:4b:f7:1e: 95:07:39:4d:8e:05:5d:e8:c8:08:0c:fc:93:9f:95:d6:56:f3: 11:32:c9:af:a6:25:fb:bf:df:7d:ee:67:28:23:bf:79:2f:77: e8:61:e5:62:3b:b4:9d:2f:a6:5e:b6:d4:6d:55:17:5a:ba:00: 88:f6:3d:3e:0a:a6:9d:e4:98:2f:e5:35:79:6a:15:83:3a:4f: cc:5f:e1:f6:69:4e:e4:06:33:d7:8c:b9:7f:1e:f5:c5:10:0d: 5a:f5:46:86:c2:9b:73:e7:c5:7e:12:83:23:55:50:38:42:3f: b5:be:70:91:2a:d9:3c:e3:ba:b9:c9:70:fd:35:5c:46:d1:bd: 96:5a:8d:fd:fe:93:7f:40:a3:fc:84:ed:7a:c7:e6:c2:7e:15: a1:39:a1:3e:49:41:ae:b7:87:85:73:ad:0e:3a:e1:6d:a8:b6: a5:73:f6:d5:2d:5a:47:7d:39:54:c8:86:e5:9b:ee:1c:57:4b: 89:ce:04:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULeaYRIg82j4P1NpN20OsvhuWbcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI0MEMyQ0MxM0VBQjUwMzQ1RURBQ0ZBQ0MxNURCNDNF NjBCODVBMjAeFw0yNTA4MjMwNDE5MjNaFw0yNTA4MjQwODExMjNaMDMxMTAvBgNV BAMTKEVFQjI3RjczMUY0NEQ3RTREQzlCQjg2Q0QxODBFRjVBRDA3OTBFOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQYblBTpKiFhlML9/LA6pCMBvB xhqhAVm71X+qeXSnAkkhcXIX7H/66aJgmgFARtQOuMjjBz4OlC1ZRjXi8Q2kloRa VnywWcVjIZIDuhmxsF8w1Oda/HeQeZvH4mKPey/2Znz/GZ0Mb79pEI+u1SuxGl3e yvxrN8++W45UFbMxf1JUuMmuhq9TwDNc77i3VegZTHuq2yhs11hE0WhVaec8NtmN n2pZNxUfXuhHN5uM82t5c8T/vrEgOS4oaZCt91aQ80IHd8wuF+dw8lqfLzbC8ZBi dDNhFmwcrPMKtITJc9UAdheMNopp1iTuPN5tPkroG2pnfvvKI7LS4hrHgvJvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7rJ/cx9E1+Tcm7hs0YDvWtB5DpAwHwYDVR0j BBgwFoAUm0DCzBPqtQNF7az6zBXbQ+YLhaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRt MmcvMC85QjQwQzJDQzEzRUFCNTAzNDVFREFDRkFDQzE1REI0M0U2MEI4NUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNDBDMkNDMTNFQUI1MDM0 NUVEQUNGQUNDMTVEQjQzRTYwQjg1QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRtMmcvMC85 QjQwQzJDQzEzRUFCNTAzNDVFREFDRkFDQzE1REI0M0U2MEI4NUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwKVcUsYUZbrZZGmeF95cAIezUSEroXLUAI0bMcXFz0x8APBiBHdgxjyjbTEh bVaCOMqqRfu/abTuKWkOvCZOODdvyrZMS/celQc5TY4FXejICAz8k5+V1lbzETLJ r6Yl+7/ffe5nKCO/eS936GHlYju0nS+mXrbUbVUXWroAiPY9PgqmneSYL+U1eWoV gzpPzF/h9mlO5AYz14y5fx71xRANWvVGhsKbc+fFfhKDI1VQOEI/tb5wkSrZPOO6 uclw/TVcRtG9llqN/f6Tf0Cj/ITtesfmwn4VoTmhPklBrreHhXOtDjrhbai2pXP2 1S1aR305VMiG5ZvuHFdLic4ENg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:42:02 2025 by rpki-client