$ rpki-client -vvf rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft File: E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft (raw, json) Hash identifier: 1LxwyrniwSXGUo5REh+jFiof1ftdxhnKHH/wrB3ZzXs= Subject key identifier: D0:C8:8E:4F:3B:6F:C6:67:2A:A9:E7:D1:CE:7F:83:BF:12:4F:F3:23 Authority key identifier: E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4 Certificate issuer: /CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4 Certificate serial: 62C3902A7BCF10207967EE3835662F573674D60F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer Subject info access: rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft Manifest number: 02A2 Signing time: Sat 23 Aug 2025 09:57:11 +0000 Manifest this update: Sat 23 Aug 2025 09:52:11 +0000 Manifest next update: Sun 24 Aug 2025 10:54:11 +0000 Files and hashes: 1: E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl (hash: mLoqJFVcF9lR1+OVw15FZx68/IHmh7iX9Qkf9vEJnmY=) 2: 34352e3138332e3138302e302f32322d3234203d3e20323639333337.roa (hash: ht/LU548z0DQ9qyd/CXKzpoxrH9NqeBOqRLrPd+T36Y=) 3: 323830343a363331343a3a2f33322d3438203d3e20323639333337.roa (hash: 8rIADCc1IMBXHDjsfVNZY3xX+m3yox+H7e16XbvP0l4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 10:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:c3:90:2a:7b:cf:10:20:79:67:ee:38:35:66:2f:57:36:74:d6:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4 Validity Not Before: Aug 23 09:52:11 2025 GMT Not After : Aug 24 10:54:11 2025 GMT Subject: CN=D0C88E4F3B6FC6672AA9E7D1CE7F83BF124FF323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fb:5b:eb:47:90:29:3a:d0:df:ee:f8:7b:bc: 4b:07:31:ba:08:90:b5:29:2f:d7:08:f4:fd:11:0b: e8:5d:5f:ac:58:48:8a:fb:b9:18:a2:c6:31:8b:b9: f0:11:77:ad:df:c8:2a:9c:03:79:67:fe:71:06:c9: fc:b3:d5:ba:8f:43:8d:fc:dd:af:08:b1:d6:12:30: 1e:84:b3:32:8a:d7:98:ff:a0:01:10:0c:40:da:e8: 6e:d4:79:d4:cd:ee:7c:f0:51:a1:6d:05:28:17:e4: 3e:bc:9a:6e:7b:db:f8:d6:d6:f9:12:36:3d:56:51: 09:c1:0a:28:35:f8:44:27:04:d9:12:f1:14:b2:b1: e1:61:25:b5:90:e1:db:75:58:f4:1f:c8:a2:2d:a9: fb:b9:5c:a4:a1:97:bf:32:51:e9:a0:16:d3:bf:93: 97:06:39:a3:b0:53:f0:c9:47:bd:25:a2:19:b6:59: 50:f7:77:7f:68:7b:fa:fb:51:f9:2f:eb:ac:e7:c9: 2d:7d:72:a0:20:3b:cc:70:48:e4:f4:6b:4e:6b:e0: dd:54:af:5f:5d:2b:e6:9e:2e:8a:d3:b2:6f:06:86: d2:57:d2:36:b1:fc:6b:61:26:7a:38:9e:aa:f5:96: ee:e3:67:91:11:9e:84:ae:3e:62:71:04:c5:62:13: c6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C8:8E:4F:3B:6F:C6:67:2A:A9:E7:D1:CE:7F:83:BF:12:4F:F3:23 X509v3 Authority Key Identifier: keyid:E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:09:61:2b:f3:bb:2f:e5:86:36:0c:af:2f:db:4d:63:26:1d: d0:b2:fb:bc:40:ff:ba:1a:24:45:92:6e:a0:08:42:af:b7:72: 39:80:45:ef:e9:27:36:3e:6e:29:33:4d:77:d6:b4:73:29:f2: 63:37:fc:81:4f:06:9f:c4:2d:2c:ed:fc:9a:76:28:76:d0:90: fc:a9:ff:70:bb:38:5b:d6:87:94:81:52:a0:d9:8a:7a:97:16: b9:c4:52:40:9d:53:aa:2d:60:17:9d:73:2c:78:ce:2c:e9:51: d8:0e:da:12:e8:a0:0e:62:16:a3:14:d8:40:14:2c:84:4f:30: 37:34:be:41:38:94:57:17:06:27:f9:2e:b6:08:1a:27:24:6b: 98:74:96:15:c5:7e:58:ad:7f:df:e8:40:f4:9c:c4:ac:37:a3: ff:87:2e:94:d0:10:38:8d:ab:e8:7e:d6:0e:82:47:3d:03:7b: 27:8f:8e:c8:a5:e6:1e:93:25:83:68:95:12:13:ee:1b:2e:23: 75:d3:ef:d2:25:95:51:07:63:9e:19:34:1a:2a:92:e9:65:37: b5:66:09:f0:ce:a6:b0:70:e6:1e:fa:8b:b7:8b:85:c2:8f:a5: 08:bb:66:04:70:d2:bf:1f:90:01:8d:a4:e0:5f:27:3f:0b:6a: af:fd:4c:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYsOQKnvPECB5Z+44NWYvVzZ01g8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEFCRjAzOUIxRkYyMEY5REU1RkY2Q0UxREUzRENC QkFGRDZCNDAeFw0yNTA4MjMwOTUyMTFaFw0yNTA4MjQxMDU0MTFaMDMxMTAvBgNV BAMTKEQwQzg4RTRGM0I2RkM2NjcyQUE5RTdEMUNFN0Y4M0JGMTI0RkYzMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz+1vrR5ApOtDf7vh7vEsHMboI kLUpL9cI9P0RC+hdX6xYSIr7uRiixjGLufARd63fyCqcA3ln/nEGyfyz1bqPQ438 3a8IsdYSMB6EszKK15j/oAEQDEDa6G7UedTN7nzwUaFtBSgX5D68mm572/jW1vkS Nj1WUQnBCig1+EQnBNkS8RSyseFhJbWQ4dt1WPQfyKItqfu5XKShl78yUemgFtO/ k5cGOaOwU/DJR70lohm2WVD3d39oe/r7Ufkv66znyS19cqAgO8xwSOT0a05r4N1U r19dK+aeLorTsm8GhtJX0jax/GthJno4nqr1lu7jZ5ERnoSuPmJxBMViE8bNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0MiOTztvxmcqqefRzn+DvxJP8yMwHwYDVR0j BBgwFoAU5wir8Dmx/yD53l/2zh3j3Luv1rQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0g0NmE5dFJGdFZSNWJaRkthalZlZTlZNzV2cDQ0QzZhMzRMMVlzblVq SEUvMS9FNzA4QUJGMDM5QjFGRjIwRjlERTVGRjZDRTFERTNEQ0JCQUZENkI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3MDhBQkYwMzlCMUZGMjBG OURFNUZGNkNFMURFM0RDQkJBRkQ2QjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0g0NmE5dFJGdFZSNWJaRkthalZlZTlZNzV2cDQ0QzZhMzRMMVlzblVqSEUvMS9F NzA4QUJGMDM5QjFGRjIwRjlERTVGRjZDRTFERTNEQ0JCQUZENkI0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASglhK/O7L+WGNgyvL9tNYyYd0LL7vED/uhokRZJuoAhCr7dyOYBF7+knNj5u KTNNd9a0cynyYzf8gU8Gn8QtLO38mnYodtCQ/Kn/cLs4W9aHlIFSoNmKepcWucRS QJ1Tqi1gF51zLHjOLOlR2A7aEuigDmIWoxTYQBQshE8wNzS+QTiUVxcGJ/kutgga JyRrmHSWFcV+WK1/3+hA9JzErDej/4culNAQOI2r6H7WDoJHPQN7J4+OyKXmHpMl g2iVEhPuGy4jddPv0iWVUQdjnhk0GiqS6WU3tWYJ8M6msHDmHvqLt4uFwo+lCLtm BHDSvx+QAY2k4F8nPwtqr/1Mgg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:16:08 2025 by rpki-client