$ rpki-client -vvf rpki-repo.registro.br/repo/CjwyNEGnW5ygdWDc6qhnkuau6g8med9ZZG2axoAamo3a/0/4DCFAD516871C7A999A1C7432F9EB9A2E82BA114.mft File: 4DCFAD516871C7A999A1C7432F9EB9A2E82BA114.mft (raw, json) Hash identifier: ai7UxNovDzN2sqV2/02wenLUizjyeO1Q/09VSo4MkCY= Subject key identifier: 2B:F8:8B:19:00:44:3D:6B:FB:17:5A:93:DA:F6:30:CB:FF:A6:73:5B Authority key identifier: 4D:CF:AD:51:68:71:C7:A9:99:A1:C7:43:2F:9E:B9:A2:E8:2B:A1:14 Certificate issuer: /CN=4DCFAD516871C7A999A1C7432F9EB9A2E82BA114 Certificate serial: 2A88478DB8F2C1DBC71A6A0F248522A76C26E02F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCFAD516871C7A999A1C7432F9EB9A2E82BA114.cer Subject info access: rsync://rpki-repo.registro.br/repo/CjwyNEGnW5ygdWDc6qhnkuau6g8med9ZZG2axoAamo3a/0/4DCFAD516871C7A999A1C7432F9EB9A2E82BA114.mft Manifest number: 84 Signing time: Fri 22 Aug 2025 22:07:34 +0000 Manifest this update: Fri 22 Aug 2025 22:02:34 +0000 Manifest next update: Sun 24 Aug 2025 01:30:34 +0000 Files and hashes: 1: 4DCFAD516871C7A999A1C7432F9EB9A2E82BA114.crl (hash: CTtfG+Jznk21x66kcTbs2uQcU4AIoYu4NNEogTM6GvQ=) 2: 3137302e3233382e34342e302f32342d3332203d3e20323636333137.roa (hash: sAOZOO1jmuilrgO8XQ3Zit6/vM1HJf98TGHvC7gVLBI=) 3: 323830343a333566343a3a2f33322d313238203d3e20323636333137.roa (hash: ItzleHDicIUbCR2klvPYVztwPHqYCjBHlc3svcet+mI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CjwyNEGnW5ygdWDc6qhnkuau6g8med9ZZG2axoAamo3a/0/4DCFAD516871C7A999A1C7432F9EB9A2E82BA114.crl rsync://rpki-repo.registro.br/repo/CjwyNEGnW5ygdWDc6qhnkuau6g8med9ZZG2axoAamo3a/0/4DCFAD516871C7A999A1C7432F9EB9A2E82BA114.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCFAD516871C7A999A1C7432F9EB9A2E82BA114.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 01:30:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:88:47:8d:b8:f2:c1:db:c7:1a:6a:0f:24:85:22:a7:6c:26:e0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DCFAD516871C7A999A1C7432F9EB9A2E82BA114 Validity Not Before: Aug 22 22:02:34 2025 GMT Not After : Aug 24 01:30:34 2025 GMT Subject: CN=2BF88B1900443D6BFB175A93DAF630CBFFA6735B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:14:0a:8f:ed:b7:94:f4:1c:11:2d:0f:b4:59: 68:89:f7:2c:22:60:8f:4a:30:2d:70:89:c5:81:9c: 59:8a:07:90:90:62:c1:a9:1b:cd:29:b0:4d:ec:1a: 53:f2:de:10:61:c9:e0:d4:0a:79:cc:c7:fd:97:bf: 39:88:91:35:f6:cf:84:b6:a2:57:a9:53:ee:35:05: 7b:e6:2c:cc:5d:7a:4b:62:30:1d:3e:17:01:6f:41: a3:35:32:35:03:0f:9b:07:bd:6a:41:c9:a1:b5:1a: bd:d4:11:c6:dd:89:11:5b:07:63:bc:98:bd:cb:8a: 74:f4:1e:9a:cc:db:1c:4e:51:ef:30:e6:ca:4a:a7: 5c:50:ad:32:e9:d0:de:7e:8f:99:5e:e0:68:ba:ff: 1d:87:46:84:70:f5:42:81:aa:2f:fb:bd:cb:cb:30: f3:43:4e:5c:25:2c:80:bc:38:85:de:5d:50:2a:d3: c6:bf:24:d9:c0:52:7b:9c:96:3b:1d:14:d8:01:e9: e5:95:ce:44:d0:b1:e6:15:33:d6:e1:39:20:dc:23: dd:85:be:96:c5:67:22:23:e0:94:f5:89:0c:a1:5c: bc:90:6c:d1:a7:c6:53:65:41:db:d2:7f:98:41:16: 59:4e:9a:6f:cc:e7:12:35:5d:20:cc:8f:b9:58:ff: de:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F8:8B:19:00:44:3D:6B:FB:17:5A:93:DA:F6:30:CB:FF:A6:73:5B X509v3 Authority Key Identifier: keyid:4D:CF:AD:51:68:71:C7:A9:99:A1:C7:43:2F:9E:B9:A2:E8:2B:A1:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CjwyNEGnW5ygdWDc6qhnkuau6g8med9ZZG2axoAamo3a/0/4DCFAD516871C7A999A1C7432F9EB9A2E82BA114.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCFAD516871C7A999A1C7432F9EB9A2E82BA114.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CjwyNEGnW5ygdWDc6qhnkuau6g8med9ZZG2axoAamo3a/0/4DCFAD516871C7A999A1C7432F9EB9A2E82BA114.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:aa:cf:0f:dc:b5:9d:3d:5b:98:c5:3f:df:cc:ce:30:dc:a9: 9f:51:cd:ec:98:6c:25:16:c7:e2:82:23:2c:12:dd:dd:e6:57: a8:cc:c2:06:e2:df:3a:ee:fc:85:d4:4e:db:12:39:7f:f5:8c: 8f:dd:59:bc:28:ef:a8:55:f7:de:24:95:06:a0:e5:ba:ce:91: 18:eb:66:a0:f1:32:69:27:ca:1f:10:57:4d:3f:da:bd:d3:ad: 13:70:f8:44:45:36:8f:5d:b9:6d:db:f1:b0:de:77:cc:56:e4: 39:e5:3a:55:a9:c0:10:08:bb:be:98:ad:6e:ab:1e:b9:97:ab: c9:6e:cb:c7:5b:05:c0:33:28:82:bb:de:ce:95:7b:3f:70:02: 42:53:b7:6b:e0:ad:5e:71:7d:e9:67:6f:ee:ed:d4:51:60:8e: 31:d2:45:d3:88:85:f7:94:da:e9:fb:be:70:87:4b:12:70:02: e7:01:a9:ae:bb:81:f9:e9:94:29:62:84:1a:a6:25:35:91:12: 2f:b5:14:d1:24:c1:63:76:a7:43:3b:75:8d:15:53:04:98:e6: 3c:ec:d6:2f:68:aa:f2:6d:26:e6:38:59:49:4c:dd:f3:a4:84: ce:c4:64:7c:e6:dd:11:47:fc:b4:f6:d1:64:9e:59:d3:33:4d: d6:75:20:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKohHjbjywdvHGmoPJIUip2wm4C8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDRkFENTE2ODcxQzdBOTk5QTFDNzQzMkY5RUI5QTJF ODJCQTExNDAeFw0yNTA4MjIyMjAyMzRaFw0yNTA4MjQwMTMwMzRaMDMxMTAvBgNV BAMTKDJCRjg4QjE5MDA0NDNENkJGQjE3NUE5M0RBRjYzMENCRkZBNjczNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcFAqP7beU9BwRLQ+0WWiJ9ywi YI9KMC1wicWBnFmKB5CQYsGpG80psE3sGlPy3hBhyeDUCnnMx/2XvzmIkTX2z4S2 olepU+41BXvmLMxdektiMB0+FwFvQaM1MjUDD5sHvWpByaG1Gr3UEcbdiRFbB2O8 mL3LinT0HprM2xxOUe8w5spKp1xQrTLp0N5+j5le4Gi6/x2HRoRw9UKBqi/7vcvL MPNDTlwlLIC8OIXeXVAq08a/JNnAUnucljsdFNgB6eWVzkTQseYVM9bhOSDcI92F vpbFZyIj4JT1iQyhXLyQbNGnxlNlQdvSf5hBFllOmm/M5xI1XSDMj7lY/97LAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUK/iLGQBEPWv7F1qT2vYwy/+mc1swHwYDVR0j BBgwFoAUTc+tUWhxx6mZocdDL565ougroRQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2p3eU5FR25XNXlnZFdEYzZxaG5rdWF1Nmc4bWVkOVpaRzJheG9BYW1v M2EvMC80RENGQUQ1MTY4NzFDN0E5OTlBMUM3NDMyRjlFQjlBMkU4MkJBMTE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzREQ0ZBRDUxNjg3MUM3QTk5 OUExQzc0MzJGOUVCOUEyRTgyQkExMTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2p3eU5FR25XNXlnZFdEYzZxaG5rdWF1Nmc4bWVkOVpaRzJheG9BYW1vM2EvMC80 RENGQUQ1MTY4NzFDN0E5OTlBMUM3NDMyRjlFQjlBMkU4MkJBMTE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFKrPD9y1nT1bmMU/38zOMNypn1HN7JhsJRbH4oIjLBLd3eZXqMzCBuLfOu78 hdRO2xI5f/WMj91ZvCjvqFX33iSVBqDlus6RGOtmoPEyaSfKHxBXTT/avdOtE3D4 REU2j125bdvxsN53zFbkOeU6VanAEAi7vpitbqseuZeryW7Lx1sFwDMogrvezpV7 P3ACQlO3a+CtXnF96Wdv7u3UUWCOMdJF04iF95Ta6fu+cIdLEnAC5wGprruB+emU KWKEGqYlNZESL7UU0STBY3anQzt1jRVTBJjmPOzWL2iq8m0m5jhZSUzd86SEzsRk fObdEUf8tPbRZJ5Z0zNN1nUg3g== -----END CERTIFICATE-----Generated at Sat Aug 23 12:50:18 2025 by rpki-client