$ rpki-client -vvf rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft File: 78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft (raw, json) Hash identifier: R7a9j1LpG3LtfV6/UVmgpsNXLC0f5kajw0RyTao1kPo= Subject key identifier: CD:E1:9E:3D:DE:6B:69:B3:37:D9:79:19:6F:13:DA:77:94:A3:1E:70 Authority key identifier: 78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D Certificate issuer: /CN=78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D Certificate serial: 2AF38B876B711F71A73521A62A7DEE6E231A09F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer Subject info access: rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft Manifest number: 02A5 Signing time: Fri 22 Aug 2025 17:42:52 +0000 Manifest this update: Fri 22 Aug 2025 17:37:52 +0000 Manifest next update: Sat 23 Aug 2025 21:18:52 +0000 Files and hashes: 1: 323830343a343636303a3a2f33322d3438203d3e20323636393836.roa (hash: v7Y3jL7V1UA6vJcIJQBeXwF+XqLzRyyfV/tGx9P54gs=) 2: 78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.crl (hash: RH1WNjWHhqCDcZflsFyya6WBrAPmWG9jt8uIlIjAQGQ=) 3: 34352e3232362e34302e302f32322d3234203d3e20323636393836.roa (hash: zeikrvwxYsGPtaj6ocKVnxUi9R+T/EHQkFPReSoa1+k=) 4: 3230302e3232392e39322e302f32322d3234203d3e20323636393836.roa (hash: ImCqjIuw7ZPjN+CMKosxW66zFXcydQRtxmlATNq8CEo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.crl rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 21:18:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f3:8b:87:6b:71:1f:71:a7:35:21:a6:2a:7d:ee:6e:23:1a:09:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D Validity Not Before: Aug 22 17:37:52 2025 GMT Not After : Aug 23 21:18:52 2025 GMT Subject: CN=CDE19E3DDE6B69B337D979196F13DA7794A31E70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:11:02:d4:4a:40:87:86:6b:8b:dc:cc:46:ba: 73:6c:73:9a:30:e6:24:cc:02:b9:92:f3:e5:12:db: ef:c1:07:c7:93:29:ba:b2:70:a5:8f:85:d4:fd:63: b9:30:e8:13:5e:bd:ad:39:ec:b5:09:70:77:1c:a4: 01:69:7a:ac:9e:d8:cd:3a:91:a1:48:22:98:ef:70: 7c:21:ba:a5:86:89:3b:01:5e:09:f2:3a:fc:b6:2d: 53:e1:ac:bf:e0:8b:aa:4c:c9:bb:bf:8a:cf:d8:c0: e7:06:10:f6:38:ab:ac:90:83:67:fa:ef:a7:66:b8: 48:7e:61:92:d4:e0:91:aa:24:ef:0a:34:fd:bf:6c: 1f:a8:5a:6a:f8:00:01:5e:89:d2:e5:3f:98:39:37: 7a:0a:59:e3:39:5e:80:1e:7c:cc:22:35:3d:93:c7: 5b:1b:02:af:f2:d9:5e:b5:2d:cc:8d:25:1f:5b:05: 11:45:ed:82:da:0c:a4:7c:b4:82:b2:30:e4:74:f4: 3d:f2:5c:88:ea:5c:e0:fd:f5:ba:7d:3a:65:74:6b: 45:1f:a8:9d:23:d4:c1:d7:4c:93:54:0c:aa:f0:2b: 7b:dc:59:ac:8f:7d:a1:0e:74:4c:d5:9f:cd:a6:1a: ec:89:34:f9:32:02:36:86:a3:f4:f2:b9:e6:eb:82: 2b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E1:9E:3D:DE:6B:69:B3:37:D9:79:19:6F:13:DA:77:94:A3:1E:70 X509v3 Authority Key Identifier: keyid:78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:18:1d:b3:e7:70:eb:0c:f2:f6:ff:ee:68:a5:a3:ae:fc:3c: c9:a0:cb:01:c2:c2:0a:dd:1f:21:05:a4:14:f4:f6:5b:48:fd: ed:88:00:06:be:f2:e5:2f:ae:10:f0:6a:de:62:36:7c:85:cc: 9d:92:d5:7a:6f:6b:ca:e1:50:bd:e0:04:31:7f:58:f7:b1:d3: e5:d3:92:3b:cc:56:60:ed:f8:7a:57:eb:6a:8f:a6:52:32:b4: b5:5c:9f:dc:86:de:f7:46:15:97:2c:7b:8b:78:a8:91:78:2f: e2:2e:d9:30:53:db:9f:66:e8:5b:e1:c1:da:c0:ae:8c:11:00: 17:5b:0a:8d:51:1e:4f:72:97:03:a2:41:fb:4a:74:bc:1e:69: 28:ee:87:ba:69:6d:76:bd:a3:ee:d1:33:b7:97:33:2f:5f:d5: dd:dd:ac:1a:4e:75:ba:f9:b0:cf:fb:41:60:fa:98:1e:8b:93: e3:49:d9:2e:9e:1c:3a:c2:fd:53:c0:8f:13:fd:94:46:88:f9: ae:5e:f7:ed:e1:26:ec:94:c4:86:89:1b:bc:03:4b:68:c2:b8: 2d:5c:d4:94:1a:19:4c:47:81:44:ed:d5:5c:18:72:63:1a:d0: 6c:bf:30:39:20:11:28:8f:7f:33:76:3b:34:fe:8a:b9:05:d1: 08:49:e2:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKvOLh2txH3GnNSGmKn3ubiMaCfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhDMzFGODVDRjhCNkE4NDE4RkFEMjVBNTVGNTk0MkYz QkFDREUwRDAeFw0yNTA4MjIxNzM3NTJaFw0yNTA4MjMyMTE4NTJaMDMxMTAvBgNV BAMTKENERTE5RTNEREU2QjY5QjMzN0Q5NzkxOTZGMTNEQTc3OTRBMzFFNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5EQLUSkCHhmuL3MxGunNsc5ow 5iTMArmS8+US2+/BB8eTKbqycKWPhdT9Y7kw6BNeva057LUJcHccpAFpeqye2M06 kaFIIpjvcHwhuqWGiTsBXgnyOvy2LVPhrL/gi6pMybu/is/YwOcGEPY4q6yQg2f6 76dmuEh+YZLU4JGqJO8KNP2/bB+oWmr4AAFeidLlP5g5N3oKWeM5XoAefMwiNT2T x1sbAq/y2V61LcyNJR9bBRFF7YLaDKR8tIKyMOR09D3yXIjqXOD99bp9OmV0a0Uf qJ0j1MHXTJNUDKrwK3vcWayPfaEOdEzVn82mGuyJNPkyAjaGo/TyuebrgitJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzeGePd5rabM32XkZbxPad5SjHnAwHwYDVR0j BBgwFoAUeMMfhc+LaoQY+tJaVfWULzus3g0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzhlVlh2bUdvaG9iMWtBR1RpYUpEVUQxVVpuU1BFbTFtM1VkUTJ2cERB b1UvMS83OEMzMUY4NUNGOEI2QTg0MThGQUQyNUE1NUY1OTQyRjNCQUNERTBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4QzMxRjg1Q0Y4QjZBODQx OEZBRDI1QTU1RjU5NDJGM0JBQ0RFMEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzhlVlh2bUdvaG9iMWtBR1RpYUpEVUQxVVpuU1BFbTFtM1VkUTJ2cERBb1UvMS83 OEMzMUY4NUNGOEI2QTg0MThGQUQyNUE1NUY1OTQyRjNCQUNERTBELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADxgds+dw6wzy9v/uaKWjrvw8yaDLAcLCCt0fIQWkFPT2W0j97YgABr7y5S+u EPBq3mI2fIXMnZLVem9ryuFQveAEMX9Y97HT5dOSO8xWYO34elfrao+mUjK0tVyf 3Ibe90YVlyx7i3iokXgv4i7ZMFPbn2boW+HB2sCujBEAF1sKjVEeT3KXA6JB+0p0 vB5pKO6Humltdr2j7tEzt5czL1/V3d2sGk51uvmwz/tBYPqYHouT40nZLp4cOsL9 U8CPE/2URoj5rl737eEm7JTEhokbvANLaMK4LVzUlBoZTEeBRO3VXBhyYxrQbL8w OSARKI9/M3Y7NP6KuQXRCEni7Q== -----END CERTIFICATE-----Generated at Sat Aug 23 12:35:21 2025 by rpki-client