$ rpki-client -vvf rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft File: D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft (raw, json) Hash identifier: 6ntrNMvhOJR5v46FEBfdjz7/W8FxvSIGelH4xFASuZc= Subject key identifier: 75:F2:C3:CB:A7:49:E3:57:26:BA:C5:EE:7B:AE:62:BB:A9:DA:6E:FB Authority key identifier: D6:30:86:E4:2E:9B:AB:A0:28:DC:D8:D6:5C:FF:50:CE:EF:BD:78:DC Certificate issuer: /CN=D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC Certificate serial: 59BAEF89C9B776CBFC8040492203E8403AA5F768 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer Subject info access: rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft Manifest number: 02A3 Signing time: Fri 22 Aug 2025 18:29:33 +0000 Manifest this update: Fri 22 Aug 2025 18:24:33 +0000 Manifest next update: Sat 23 Aug 2025 18:52:33 +0000 Files and hashes: 1: 323830343a3934633a3a2f33322d3438203d3e20323633303731.roa (hash: a+ZxC/aVIvRBiL+9b6UmCNXG86FPx17UdrDq464ohKI=) 2: D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl (hash: Tk38jlG9O+JfonmNg599JeOEksVhwctsjs4+/CY9PZk=) 3: 3137372e37332e35362e302f32322d3234203d3e20323633303731.roa (hash: 0DCCZJbrhxGS3fKPi1a5Yh23caoQ1m2nGZ+Ls0nr36Y=) 4: 3139312e362e3134342e302f32312d3234203d3e20323633303731.roa (hash: 3z/seUfwbtY8VHvQVEp/hjesW7X+hzHuxNmo8T4n9yI=) 5: 3138362e3233322e3138382e302f32322d3234203d3e20323633303731.roa (hash: QZ++cLr6ePWgalsSJXAkh2lAerAWd1JhyTtP73I1+S8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 18:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ba:ef:89:c9:b7:76:cb:fc:80:40:49:22:03:e8:40:3a:a5:f7:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC Validity Not Before: Aug 22 18:24:33 2025 GMT Not After : Aug 23 18:52:33 2025 GMT Subject: CN=75F2C3CBA749E35726BAC5EE7BAE62BBA9DA6EFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8a:6b:f7:4d:15:9e:e4:b5:ea:24:66:a8:04: b8:9b:10:f5:43:c1:66:b3:85:57:d4:9b:30:e8:88: 7e:b5:23:ee:0d:39:9b:a6:37:c9:4c:a9:ef:3f:42: 22:8a:b6:8f:1e:ab:b4:cb:1a:cd:8f:dc:8e:97:3d: 70:a7:bd:79:0d:27:eb:3e:e1:b6:05:3d:27:23:98: 4a:8e:08:d0:30:ee:73:52:61:74:65:d9:ad:49:7a: 50:eb:fd:24:14:11:8d:2b:bb:83:3c:22:ca:9f:60: 1e:87:5e:09:61:15:52:21:65:11:bc:ef:fc:69:83: f4:53:e7:af:19:71:a4:f9:9c:d1:28:05:69:ef:1d: 17:9a:bb:c0:49:0c:58:47:ed:e6:3c:05:1d:39:24: 8f:ac:0a:8f:26:d4:6b:0f:96:67:5b:64:74:7d:4c: 60:6c:96:30:96:05:e5:0c:8f:20:20:49:12:c9:60: d3:05:40:3e:71:62:53:b5:1c:c9:e1:3f:1a:f5:04: d2:88:c8:1b:83:43:14:74:e1:49:0b:f7:9e:9c:87: b4:1e:cb:06:a4:8b:bb:0d:2c:d5:29:08:9a:0b:7b: a2:f1:05:77:b1:b1:2a:c2:e5:3f:c6:10:d5:ab:28: 2a:29:66:b0:ce:54:f9:06:5a:a4:e6:2f:be:7f:9d: 17:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F2:C3:CB:A7:49:E3:57:26:BA:C5:EE:7B:AE:62:BB:A9:DA:6E:FB X509v3 Authority Key Identifier: keyid:D6:30:86:E4:2E:9B:AB:A0:28:DC:D8:D6:5C:FF:50:CE:EF:BD:78:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:3a:87:f7:ab:dd:d0:b8:05:fc:8d:8f:d6:9b:22:d4:2b:36: f5:c0:c4:82:7d:8e:17:8d:1b:03:5d:01:29:18:71:c0:6e:a6: e3:69:74:4c:0b:08:19:83:e9:2c:5b:9e:97:36:30:b3:28:53: d8:77:ec:ad:a2:85:7e:86:a3:6b:1d:f8:c4:da:9e:60:d9:91: 8f:60:fe:9d:a9:cd:7f:3d:ac:73:91:ae:dc:cf:bb:5e:cb:fe: 61:02:3e:34:61:be:88:e5:fe:b1:4a:21:c7:79:83:c5:11:87: e4:e0:db:05:cc:63:98:d0:00:8d:0a:1c:57:a6:df:8b:76:57: 2e:d8:5b:b3:22:d7:96:81:86:60:22:49:9c:6a:ee:80:cc:66: e3:26:9d:7a:ee:da:69:ca:1c:9b:98:e2:a6:72:9e:24:e0:47: 73:bf:d5:6c:20:0b:33:8d:74:9b:8c:e1:52:28:d5:ee:10:db: 98:6a:76:f0:2e:cb:b7:bf:02:9b:8e:01:49:df:cd:e8:7b:aa: 85:d5:a1:26:9d:8f:e4:f5:94:a1:27:c2:fd:ef:49:0b:24:5f: 29:db:45:7a:4c:cb:d2:6a:99:7c:e3:03:4c:65:e5:45:18:bf: e1:e2:91:e7:14:e8:eb:3c:70:64:24:16:cc:bf:ba:6e:b0:8e: d0:ea:2f:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWbrvicm3dsv8gEBJIgPoQDql92gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYzMDg2RTQyRTlCQUJBMDI4RENEOEQ2NUNGRjUwQ0VF RkJENzhEQzAeFw0yNTA4MjIxODI0MzNaFw0yNTA4MjMxODUyMzNaMDMxMTAvBgNV BAMTKDc1RjJDM0NCQTc0OUUzNTcyNkJBQzVFRTdCQUU2MkJCQTlEQTZFRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWimv3TRWe5LXqJGaoBLibEPVD wWazhVfUmzDoiH61I+4NOZumN8lMqe8/QiKKto8eq7TLGs2P3I6XPXCnvXkNJ+s+ 4bYFPScjmEqOCNAw7nNSYXRl2a1JelDr/SQUEY0ru4M8IsqfYB6HXglhFVIhZRG8 7/xpg/RT568ZcaT5nNEoBWnvHReau8BJDFhH7eY8BR05JI+sCo8m1GsPlmdbZHR9 TGBsljCWBeUMjyAgSRLJYNMFQD5xYlO1HMnhPxr1BNKIyBuDQxR04UkL956ch7Qe ywaki7sNLNUpCJoLe6LxBXexsSrC5T/GENWrKCopZrDOVPkGWqTmL75/nRdJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdfLDy6dJ41cmusXue65iu6nabvswHwYDVR0j BBgwFoAU1jCG5C6bq6Ao3NjWXP9Qzu+9eNwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzJRclpiUUw4dm1EdnIyR2YxTk5xU1lEWEo4b0FxQ3dnQmExMjMxSG5l U00vMS9ENjMwODZFNDJFOUJBQkEwMjhEQ0Q4RDY1Q0ZGNTBDRUVGQkQ3OERDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2MzA4NkU0MkU5QkFCQTAy OERDRDhENjVDRkY1MENFRUZCRDc4REMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzJRclpiUUw4dm1EdnIyR2YxTk5xU1lEWEo4b0FxQ3dnQmExMjMxSG5lU00vMS9E NjMwODZFNDJFOUJBQkEwMjhEQ0Q4RDY1Q0ZGNTBDRUVGQkQ3OERDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvDqH96vd0LgF/I2P1psi1Cs29cDEgn2OF40bA10BKRhxwG6m42l0TAsIGYPp LFuelzYwsyhT2HfsraKFfoajax34xNqeYNmRj2D+nanNfz2sc5Gu3M+7Xsv+YQI+ NGG+iOX+sUohx3mDxRGH5ODbBcxjmNAAjQocV6bfi3ZXLthbsyLXloGGYCJJnGru gMxm4yadeu7aacocm5jipnKeJOBHc7/VbCALM410m4zhUijV7hDbmGp28C7Lt78C m44BSd/N6HuqhdWhJp2P5PWUoSfC/e9JCyRfKdtFekzL0mqZfOMDTGXlRRi/4eKR 5xTo6zxwZCQWzL+6brCO0Oovhg== -----END CERTIFICATE-----Generated at Sat Aug 23 10:14:40 2025 by rpki-client