$ rpki-client -vvf rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.mft File: 2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.mft (raw, json) Hash identifier: pwwQ11lNCNTnF2PUiJfI2OydANNKBXrPkjz7GMCvekU= Subject key identifier: 21:D2:90:5C:72:7A:AD:A0:D7:A7:C4:F3:1A:66:3F:D0:78:0B:77:7A Authority key identifier: 2A:56:F9:74:D0:1E:D8:CF:D5:D2:40:22:C9:C3:13:E4:A6:7D:0B:82 Certificate issuer: /CN=2A56F974D01ED8CFD5D24022C9C313E4A67D0B82 Certificate serial: 67F6433BB778BED2D8264CF5E6CDADCBA85FB696 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.cer Subject info access: rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.mft Manifest number: 02A5 Signing time: Fri 22 Aug 2025 20:02:36 +0000 Manifest this update: Fri 22 Aug 2025 19:57:36 +0000 Manifest next update: Sat 23 Aug 2025 20:57:36 +0000 Files and hashes: 1: 2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.crl (hash: pgzPk70ssPWt9bQQXiWlrVW8PYK/aOgjAaPP8TQ4tpo=) 2: 323830343a386538383a3a2f33322d3438203d3e20323733343332.roa (hash: w+RGFIUO0fkMSWVC+1OJSOxgwJ3XnZ8bhoyISdqC9uM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.crl rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 20:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f6:43:3b:b7:78:be:d2:d8:26:4c:f5:e6:cd:ad:cb:a8:5f:b6:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A56F974D01ED8CFD5D24022C9C313E4A67D0B82 Validity Not Before: Aug 22 19:57:36 2025 GMT Not After : Aug 23 20:57:36 2025 GMT Subject: CN=21D2905C727AADA0D7A7C4F31A663FD0780B777A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:72:da:9e:ae:eb:02:3e:95:a6:0a:98:23:c3: 3c:1c:87:80:f8:41:61:de:d1:eb:51:14:f1:94:03: ee:9d:21:c9:05:87:2d:94:1d:57:8d:af:92:e8:3d: 70:b4:07:ed:dc:13:7f:5c:3c:2a:5e:53:4c:84:83: 32:42:9d:7b:f4:6f:f2:34:47:b2:94:36:5b:92:7d: e5:8d:1e:1b:2a:32:01:4e:ee:1b:1c:72:d3:70:b4: d4:7c:de:e1:56:6e:67:a1:d6:d0:61:6c:20:0e:8c: 72:12:cd:9e:6b:d3:f9:1e:47:ff:20:03:54:74:4d: 17:e0:4d:60:d4:47:5e:c8:27:8f:d6:aa:93:6f:db: e6:99:83:3f:4e:d5:95:44:93:d3:30:e2:bf:8e:05: cb:68:57:66:be:78:8d:d1:b2:a0:f7:91:cf:e1:8b: dd:a4:69:95:1a:c1:60:fd:4b:df:57:23:b6:7e:27: f9:66:40:4d:d4:33:44:44:e0:3b:ef:d7:85:4d:c7: 7f:e1:f2:f8:52:14:0d:b9:80:15:05:3c:a7:ed:3a: 45:2d:f8:94:41:cb:03:55:ce:6c:e2:2b:3f:a1:e9: 1b:fa:3c:7d:c7:4c:af:0f:d0:a0:4c:64:ca:20:d9: af:d5:e7:d3:8c:66:50:9f:8d:bc:72:55:93:8b:ff: 16:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D2:90:5C:72:7A:AD:A0:D7:A7:C4:F3:1A:66:3F:D0:78:0B:77:7A X509v3 Authority Key Identifier: keyid:2A:56:F9:74:D0:1E:D8:CF:D5:D2:40:22:C9:C3:13:E4:A6:7D:0B:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:24:32:0b:1e:fe:d3:46:b7:c9:ac:b3:d6:b5:59:40:12:fb: b4:38:53:97:9a:af:5b:94:8d:f6:bd:52:29:0b:75:c1:30:2e: 9a:f0:72:ee:33:63:ad:90:6d:fa:8a:ca:12:04:ef:35:c5:51: 0a:d7:6e:8b:a0:41:3d:d2:6e:20:13:bd:3b:26:b1:e3:7e:c9: 7a:99:66:00:73:c3:0c:f6:bc:6d:e4:b9:53:b3:74:19:c3:a5: 6f:6c:49:ce:ee:91:20:b7:8a:6a:1a:eb:9c:87:1c:9b:99:69: 91:77:9b:1e:1c:1e:3b:d4:ab:20:8e:aa:25:8a:45:42:39:d4: 64:49:f7:66:dc:68:5e:97:ef:2c:f5:96:ad:62:4e:91:24:d1: 54:41:31:09:5c:fc:a7:4f:c2:a5:48:da:95:c0:04:2d:71:4c: 96:b6:95:71:ed:ba:53:30:e6:03:51:37:30:b9:5f:1f:cf:62: d2:ff:e6:d7:4f:62:97:ea:b9:d6:11:60:63:4e:a5:0e:3d:0a: fd:75:1e:a8:d3:b1:49:79:d1:f5:31:21:62:34:c6:4d:25:54: 28:29:34:ef:53:2a:92:72:b3:e3:f6:b8:70:e4:b4:c0:b8:2d: 7a:74:d2:88:4d:37:35:40:97:22:68:02:e2:6d:21:dc:99:02: 9b:c3:13:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZ/ZDO7d4vtLYJkz15s2ty6hftpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE1NkY5NzREMDFFRDhDRkQ1RDI0MDIyQzlDMzEzRTRB NjdEMEI4MjAeFw0yNTA4MjIxOTU3MzZaFw0yNTA4MjMyMDU3MzZaMDMxMTAvBgNV BAMTKDIxRDI5MDVDNzI3QUFEQTBEN0E3QzRGMzFBNjYzRkQwNzgwQjc3N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrctqerusCPpWmCpgjwzwch4D4 QWHe0etRFPGUA+6dIckFhy2UHVeNr5LoPXC0B+3cE39cPCpeU0yEgzJCnXv0b/I0 R7KUNluSfeWNHhsqMgFO7hscctNwtNR83uFWbmeh1tBhbCAOjHISzZ5r0/keR/8g A1R0TRfgTWDUR17IJ4/WqpNv2+aZgz9O1ZVEk9Mw4r+OBctoV2a+eI3RsqD3kc/h i92kaZUawWD9S99XI7Z+J/lmQE3UM0RE4Dvv14VNx3/h8vhSFA25gBUFPKftOkUt +JRBywNVzmziKz+h6Rv6PH3HTK8P0KBMZMog2a/V59OMZlCfjbxyVZOL/xYJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIdKQXHJ6raDXp8TzGmY/0HgLd3owHwYDVR0j BBgwFoAUKlb5dNAe2M/V0kAiycMT5KZ9C4IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3dpY0ZyYWhRNUhrd1BDaXJ3VXRENE05QnBhRjJidVB3MWVXYWpTeUxU QkwvMS8yQTU2Rjk3NEQwMUVEOENGRDVEMjQwMjJDOUMzMTNFNEE2N0QwQjgyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNTZGOTc0RDAxRUQ4Q0ZE NUQyNDAyMkM5QzMxM0U0QTY3RDBCODIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3dpY0ZyYWhRNUhrd1BDaXJ3VXRENE05QnBhRjJidVB3MWVXYWpTeUxUQkwvMS8y QTU2Rjk3NEQwMUVEOENGRDVEMjQwMjJDOUMzMTNFNEE2N0QwQjgyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVCQyCx7+00a3yayz1rVZQBL7tDhTl5qvW5SN9r1SKQt1wTAumvBy7jNjrZBt +orKEgTvNcVRCtdui6BBPdJuIBO9Oyax437JeplmAHPDDPa8beS5U7N0GcOlb2xJ zu6RILeKahrrnIccm5lpkXebHhweO9SrII6qJYpFQjnUZEn3ZtxoXpfvLPWWrWJO kSTRVEExCVz8p0/CpUjalcAELXFMlraVce26UzDmA1E3MLlfH89i0v/m109il+q5 1hFgY06lDj0K/XUeqNOxSXnR9TEhYjTGTSVUKCk071MqknKz4/a4cOS0wLgtenTS iE03NUCXImgC4m0h3JkCm8MTPA== -----END CERTIFICATE-----Generated at Sat Aug 23 10:30:24 2025 by rpki-client