$ rpki-client -vvf rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft File: BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft (raw, json) Hash identifier: PAk3BPdGYDV+DjNk8E0sqa04zaM4dqZj3dkAYMIkWx4= Subject key identifier: E7:AE:5D:6D:06:51:44:62:F0:2C:9D:59:65:CC:B4:BD:26:C2:DB:82 Authority key identifier: BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25 Certificate issuer: /CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25 Certificate serial: 1BB5E3899006FC91F0158BCE5BE9BF449891C1B2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer Subject info access: rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft Manifest number: 02A3 Signing time: Sat 23 Aug 2025 06:39:52 +0000 Manifest this update: Sat 23 Aug 2025 06:34:52 +0000 Manifest next update: Sun 24 Aug 2025 06:46:52 +0000 Files and hashes: 1: BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl (hash: hyXPLujzXwnZHIiFROWQtlKTKEpGcHybd6XPrBfIaew=) 2: 34352e3136352e3136362e302f32332d3332203d3e20323638363833.roa (hash: 5bSUPkODUWs9/kJhkVx3i4fO1qFGfYEB0H4MohPcXH8=) 3: 323830343a353530303a3a2f33342d313238203d3e20323638363833.roa (hash: CY1cgckh5LfihHbyiE5qbTbYicOGwA3cdqSQfEjeJok=) 4: 34352e3136352e3136342e302f32332d3332203d3e20323638363833.roa (hash: SFgnoC9b6XsOBWOxtYvSuXC8DcOSjBAvZ5UdN6KIgQ0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 06:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b5:e3:89:90:06:fc:91:f0:15:8b:ce:5b:e9:bf:44:98:91:c1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25 Validity Not Before: Aug 23 06:34:52 2025 GMT Not After : Aug 24 06:46:52 2025 GMT Subject: CN=E7AE5D6D06514462F02C9D5965CCB4BD26C2DB82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:a3:4f:82:ea:a9:ba:0d:5e:d4:72:3c:d4: 3f:0f:7b:5c:63:aa:32:fb:2d:b1:5e:21:cb:99:f0: d5:fc:86:79:f7:f8:f4:a9:20:90:a8:1a:18:8d:6c: c2:ed:7b:02:48:8b:4e:9c:cf:37:99:7a:da:3f:89: bc:17:78:3a:bd:c7:eb:84:b1:6f:5a:18:57:48:54: 3c:15:7d:ce:f0:20:cb:c2:a2:ce:1d:db:92:c1:63: 8e:82:1e:35:c4:37:c3:a8:3f:3e:33:c6:9e:b6:61: 6b:4e:af:d0:ca:36:bf:de:f5:c4:d8:69:76:9e:b1: 20:67:72:9f:a2:8a:62:db:72:fe:87:b1:ed:05:00: f3:c0:22:0d:94:62:7e:a8:5a:28:c4:9a:a3:04:4e: c1:c8:f9:ee:d8:7e:3f:5b:ff:56:6e:e0:7d:f0:8c: a9:b6:9a:6e:c5:5a:45:74:68:62:e9:bc:b3:5a:2c: 30:cc:6d:74:c5:ca:97:67:e2:0a:cb:7f:4e:ee:42: b2:1d:f4:e9:a4:74:d4:72:14:6a:bb:09:e1:ae:fb: bb:a1:e8:ee:4f:af:6a:8b:ca:2f:c2:dd:f2:07:49: e2:f2:12:28:4b:a7:27:3a:f0:3f:19:ce:7b:35:31: b9:c2:7a:f7:40:a4:07:e3:8e:7d:d7:37:5f:6e:03: 72:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AE:5D:6D:06:51:44:62:F0:2C:9D:59:65:CC:B4:BD:26:C2:DB:82 X509v3 Authority Key Identifier: keyid:BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e5:ce:90:c9:0d:21:f4:3d:7f:9b:32:2d:16:2f:d9:73:a6: 98:49:73:bf:d6:56:f9:c9:a5:30:f5:ca:57:f3:e5:e7:8e:85: d1:d1:9a:a2:47:7e:26:34:89:07:e0:ec:7c:e7:0f:a9:54:9f: 21:42:17:00:39:b9:9f:63:02:33:eb:c2:cd:d0:32:56:c3:04: 6b:11:1b:38:50:76:3c:8c:64:df:37:95:85:4f:b4:8a:1d:ec: 7a:2e:86:56:a8:bf:05:d1:6c:72:0f:30:06:37:a9:30:a0:75: 83:0e:44:74:02:0e:29:01:73:04:0a:04:f4:2f:67:ae:5f:65: 16:70:c6:a0:d7:a9:93:03:cd:54:f2:82:6c:d3:cc:36:af:f0: d6:7d:88:36:fe:3a:1c:90:89:b4:30:28:d0:f4:46:ef:d4:50: 50:ad:24:69:aa:61:bd:8c:72:35:1d:2f:eb:76:51:03:21:93: 24:3b:6c:cb:39:db:5d:7d:78:6d:34:14:a1:dc:16:e2:37:1a: 1f:72:b3:97:b5:98:61:e0:53:3c:38:08:24:a4:72:04:8b:cb: bd:07:7e:21:6b:99:eb:b2:0a:05:5c:f0:29:e3:d6:5f:ff:d9: fc:3d:02:16:75:82:84:5e:cd:5d:7b:17:9a:06:5e:45:d9:ff: 26:03:18:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUG7XjiZAG/JHwFYvOW+m/RJiRwbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU5MTkxRjIyMkQzNkZGN0VEOTQwQTJCNUU0OTFFMkE4 MDIxREEyNTAeFw0yNTA4MjMwNjM0NTJaFw0yNTA4MjQwNjQ2NTJaMDMxMTAvBgNV BAMTKEU3QUU1RDZEMDY1MTQ0NjJGMDJDOUQ1OTY1Q0NCNEJEMjZDMkRCODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3h6NPguqpug1e1HI81D8Pe1xj qjL7LbFeIcuZ8NX8hnn3+PSpIJCoGhiNbMLtewJIi06czzeZeto/ibwXeDq9x+uE sW9aGFdIVDwVfc7wIMvCos4d25LBY46CHjXEN8OoPz4zxp62YWtOr9DKNr/e9cTY aXaesSBncp+iimLbcv6Hse0FAPPAIg2UYn6oWijEmqMETsHI+e7Yfj9b/1Zu4H3w jKm2mm7FWkV0aGLpvLNaLDDMbXTFypdn4grLf07uQrId9OmkdNRyFGq7CeGu+7uh 6O5Pr2qLyi/C3fIHSeLyEihLpyc68D8Zzns1MbnCevdApAfjjn3XN19uA3LjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU565dbQZRRGLwLJ1ZZcy0vSbC24IwHwYDVR0j BBgwFoAUvpGR8iLTb/ftlAorXkkeKoAh2iUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1lMRXd3c0Q4UXF3ZkxUaXN3UXFlZHZ2TVJTeWVyVlpyY0JkS1dCd0t2 eGsvMS9CRTkxOTFGMjIyRDM2RkY3RUQ5NDBBMkI1RTQ5MUUyQTgwMjFEQTI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFOTE5MUYyMjJEMzZGRjdF RDk0MEEyQjVFNDkxRTJBODAyMURBMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1lMRXd3c0Q4UXF3ZkxUaXN3UXFlZHZ2TVJTeWVyVlpyY0JkS1dCd0t2eGsvMS9C RTkxOTFGMjIyRDM2RkY3RUQ5NDBBMkI1RTQ5MUUyQTgwMjFEQTI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfuXOkMkNIfQ9f5syLRYv2XOmmElzv9ZW+cmlMPXKV/Pl546F0dGaokd+JjSJ B+DsfOcPqVSfIUIXADm5n2MCM+vCzdAyVsMEaxEbOFB2PIxk3zeVhU+0ih3sei6G Vqi/BdFscg8wBjepMKB1gw5EdAIOKQFzBAoE9C9nrl9lFnDGoNepkwPNVPKCbNPM Nq/w1n2INv46HJCJtDAo0PRG79RQUK0kaaphvYxyNR0v63ZRAyGTJDtsyznbXX14 bTQUodwW4jcaH3Kzl7WYYeBTPDgIJKRyBIvLvQd+IWuZ67IKBVzwKePWX//Z/D0C FnWChF7NXXsXmgZeRdn/JgMYsg== -----END CERTIFICATE-----Generated at Sat Aug 23 16:02:03 2025 by rpki-client