$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft File: 84210C699884A23E38D45F40B27833D84A440F91.mft (raw, json) Hash identifier: XfoebJtVLfJinflyb5QRfjjjiUKaihD9reFd6tR3A58= Subject key identifier: 74:F1:08:03:16:52:6C:75:15:AB:F0:05:D9:C5:EE:AC:38:90:6A:E3 Authority key identifier: 84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91 Certificate issuer: /CN=84210C699884A23E38D45F40B27833D84A440F91 Certificate serial: 07CC165FA1FF2289237C33AA00EAE4BC7BA5F3FA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer Subject info access: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft Manifest number: 02AB Signing time: Sat 23 Aug 2025 08:20:00 +0000 Manifest this update: Sat 23 Aug 2025 08:15:00 +0000 Manifest next update: Sun 24 Aug 2025 08:59:00 +0000 Files and hashes: 1: 323830343a323163303a3a2f33322d3332203d3e20323634353731.roa (hash: XTvtebp7oM9owviERxilfDQ7pM/0nW6KsEuwtKryh3E=) 2: 3133382e33362e38302e302f32322d3234203d3e20323634353731.roa (hash: W9cuh6TY+DbzNPDLc450PMX/lZENV+B6iA3ixoKigao=) 3: 84210C699884A23E38D45F40B27833D84A440F91.crl (hash: +0HH9Zd6Vq2Gx2jBa0KerZVq1qV2zBbsVAuMkNEcn3g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 08:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:cc:16:5f:a1:ff:22:89:23:7c:33:aa:00:ea:e4:bc:7b:a5:f3:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84210C699884A23E38D45F40B27833D84A440F91 Validity Not Before: Aug 23 08:15:00 2025 GMT Not After : Aug 24 08:59:00 2025 GMT Subject: CN=74F1080316526C7515ABF005D9C5EEAC38906AE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:b1:eb:72:63:53:37:85:16:5e:3a:d5:04: e3:f2:ba:d9:24:4f:22:1d:59:47:f0:ae:6c:55:0e: d3:61:24:72:78:fe:80:32:aa:28:5d:ff:b0:48:dc: 37:0c:72:44:df:de:0f:42:f6:4d:03:c9:36:a8:c6: 12:ba:b6:6c:a3:7d:4d:6b:69:bf:04:82:ec:ca:50: 8c:44:e0:34:33:3a:0a:43:e1:b6:4c:f7:6d:15:ac: 8e:dd:b1:ad:c6:fc:c7:99:a5:73:55:3b:ad:d0:aa: c1:ec:e1:2d:8f:19:2f:b1:9e:6e:17:85:6d:f7:42: ed:a3:c7:fc:b9:45:7c:61:99:3e:08:53:65:4e:49: 10:da:b3:2b:1a:ea:ad:66:d3:cf:bb:53:d2:c9:c6: eb:21:c5:a4:45:50:ae:33:24:7a:61:10:99:b8:b3: ba:f8:c6:47:a0:f3:d3:d9:c5:57:22:d5:ea:24:4b: c0:9a:8d:8b:e4:e2:0d:c2:2e:70:20:2f:87:57:f7: 7a:6d:77:c2:56:9a:dc:b7:fa:86:98:53:b7:40:7f: 87:bb:e4:0a:df:5d:98:fe:af:7c:8c:43:4d:e4:ec: 7a:af:f5:10:e8:52:34:a1:c3:73:e4:b9:25:3f:72: c8:41:e1:55:52:90:14:5d:3b:cd:6c:d8:cb:f5:ab: e1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F1:08:03:16:52:6C:75:15:AB:F0:05:D9:C5:EE:AC:38:90:6A:E3 X509v3 Authority Key Identifier: keyid:84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:5f:78:5a:4c:5a:4e:dc:a9:ac:1c:1c:ff:c8:8e:6a:35:98: 5f:a4:83:4d:c7:17:c0:e5:89:1f:6d:bd:07:29:1b:64:df:09: ac:ed:2e:18:44:13:fb:27:d2:ce:07:e5:4f:01:c0:67:a0:38: 70:8b:8f:c9:9d:4e:43:1e:9e:fb:f4:e9:ac:f2:80:b1:e1:f7: 17:ca:f1:d0:ab:70:19:56:74:0a:01:84:9d:c4:5b:c2:6f:ce: 5c:4f:09:27:c9:88:9f:48:b5:3f:09:33:28:7e:64:91:8c:86: f7:fa:d1:30:f7:f0:18:0a:10:02:f6:4b:45:1d:45:44:6d:4a: 28:38:5c:52:2e:c0:99:1c:03:69:d9:33:52:fd:d8:6c:10:54: ee:c6:8e:0f:6c:53:79:d2:64:74:e3:96:c7:86:b0:44:a2:e8: e3:5c:4e:ec:c0:dd:cc:ac:30:e8:b5:4c:24:2e:45:23:2b:d3: ac:7a:a8:57:19:30:8e:b9:7f:31:2e:da:02:81:8d:64:67:b7: 18:24:88:fe:46:ad:23:46:a0:95:8f:6e:bd:aa:c7:e4:27:66: 1f:4b:65:73:59:4b:11:64:75:6e:a1:d3:3c:c5:7c:b0:6e:b6: 47:4a:00:34:46:0f:c1:13:70:7c:0e:26:b0:f2:30:e4:62:df: d4:9d:b3:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUB8wWX6H/IokjfDOqAOrkvHul8/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMTBDNjk5ODg0QTIzRTM4RDQ1RjQwQjI3ODMzRDg0 QTQ0MEY5MTAeFw0yNTA4MjMwODE1MDBaFw0yNTA4MjQwODU5MDBaMDMxMTAvBgNV BAMTKDc0RjEwODAzMTY1MjZDNzUxNUFCRjAwNUQ5QzVFRUFDMzg5MDZBRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvCrHrcmNTN4UWXjrVBOPyutkk TyIdWUfwrmxVDtNhJHJ4/oAyqihd/7BI3DcMckTf3g9C9k0DyTaoxhK6tmyjfU1r ab8EguzKUIxE4DQzOgpD4bZM920VrI7dsa3G/MeZpXNVO63QqsHs4S2PGS+xnm4X hW33Qu2jx/y5RXxhmT4IU2VOSRDasysa6q1m08+7U9LJxushxaRFUK4zJHphEJm4 s7r4xkeg89PZxVci1eokS8CajYvk4g3CLnAgL4dX93ptd8JWmty3+oaYU7dAf4e7 5ArfXZj+r3yMQ03k7Hqv9RDoUjShw3PkuSU/cshB4VVSkBRdO81s2Mv1q+GbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdPEIAxZSbHUVq/AF2cXurDiQauMwHwYDVR0j BBgwFoAUhCEMaZiEoj441F9Asngz2EpED5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1B4aE5xZzVFQWNnaFVEalU0WUJlZXNtbUthRmRxbnZFM3I1R0s1Zm55 RkYvMS84NDIxMEM2OTk4ODRBMjNFMzhENDVGNDBCMjc4MzNEODRBNDQwRjkxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0MjEwQzY5OTg4NEEyM0Uz OEQ0NUY0MEIyNzgzM0Q4NEE0NDBGOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1B4aE5xZzVFQWNnaFVEalU0WUJlZXNtbUthRmRxbnZFM3I1R0s1Zm55RkYvMS84 NDIxMEM2OTk4ODRBMjNFMzhENDVGNDBCMjc4MzNEODRBNDQwRjkxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE194WkxaTtyprBwc/8iOajWYX6SDTccXwOWJH229BykbZN8JrO0uGEQT+yfS zgflTwHAZ6A4cIuPyZ1OQx6e+/TprPKAseH3F8rx0KtwGVZ0CgGEncRbwm/OXE8J J8mIn0i1PwkzKH5kkYyG9/rRMPfwGAoQAvZLRR1FRG1KKDhcUi7AmRwDadkzUv3Y bBBU7saOD2xTedJkdOOWx4awRKLo41xO7MDdzKww6LVMJC5FIyvTrHqoVxkwjrl/ MS7aAoGNZGe3GCSI/katI0aglY9uvarH5CdmH0tlc1lLEWR1bqHTPMV8sG62R0oA NEYPwRNwfA4msPIw5GLf1J2zSQ== -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:27 2025 by rpki-client