$ rpki-client -vvf rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/7C98C2280838F8F782C0F2895015713E81BE0325.mft File: 7C98C2280838F8F782C0F2895015713E81BE0325.mft (raw, json) Hash identifier: dR0k9mRn8bFoo4gicnYHeluAxXanKhz1p3IoDf5ylCk= Subject key identifier: 03:ED:65:D9:2A:0C:53:D3:68:9C:83:BE:96:A2:18:7D:96:28:96:10 Authority key identifier: 7C:98:C2:28:08:38:F8:F7:82:C0:F2:89:50:15:71:3E:81:BE:03:25 Certificate issuer: /CN=7C98C2280838F8F782C0F2895015713E81BE0325 Certificate serial: 1DA4142AF910F25B3D47110815F103B4B34210CE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C98C2280838F8F782C0F2895015713E81BE0325.cer Subject info access: rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/7C98C2280838F8F782C0F2895015713E81BE0325.mft Manifest number: C7 Signing time: Fri 22 Aug 2025 16:13:54 +0000 Manifest this update: Fri 22 Aug 2025 16:08:54 +0000 Manifest next update: Sat 23 Aug 2025 18:50:54 +0000 Files and hashes: 1: 323830343a356639303a3a2f33322d313238203d3e20323639313039.roa (hash: nMHB41bbvGrMn80hUcY82S7eWpy2MVUooar+Lnkaavc=) 2: 7C98C2280838F8F782C0F2895015713E81BE0325.crl (hash: O1auxVM8JZZn5FyDmg66A/wnSH7a/AowdQFdpoYT+5s=) 3: 34352e3137392e36382e302f32322d3332203d3e20323639313039.roa (hash: RzEDIM81kGXzEaX4OawWvQw4Iyvg+vvqjo5CfTHC8SY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/7C98C2280838F8F782C0F2895015713E81BE0325.crl rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/7C98C2280838F8F782C0F2895015713E81BE0325.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C98C2280838F8F782C0F2895015713E81BE0325.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 18:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a4:14:2a:f9:10:f2:5b:3d:47:11:08:15:f1:03:b4:b3:42:10:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C98C2280838F8F782C0F2895015713E81BE0325 Validity Not Before: Aug 22 16:08:54 2025 GMT Not After : Aug 23 18:50:54 2025 GMT Subject: CN=03ED65D92A0C53D3689C83BE96A2187D96289610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8e:0c:5b:8d:64:e8:d6:ef:f3:fb:97:b5:5d: cd:1f:fe:fc:ed:c1:df:b2:f6:d7:96:09:63:37:27: 71:7f:99:c9:bf:d6:69:84:8b:47:73:95:60:d1:39: 1d:0c:b7:8f:d0:55:06:31:9b:a6:c7:d2:f8:68:67: 69:2e:b4:24:f3:c2:53:a7:e0:2d:2b:8b:d1:a6:0b: 0d:96:d6:7b:59:06:b7:1b:13:bb:d0:68:e1:6e:9f: e4:de:3e:7c:16:66:5f:ef:7a:5c:cb:b8:ee:4f:23: 80:70:79:11:1c:54:cb:c8:f5:19:be:f3:9d:aa:2b: 64:61:b1:91:20:d2:eb:2e:27:67:38:e6:0f:d7:97: 37:82:fc:55:7b:71:f3:59:bf:41:34:9f:85:61:e9: 57:1c:e6:a7:56:fd:47:96:51:ca:21:36:aa:5b:f9: 44:df:41:e8:68:ff:b3:81:94:25:56:e6:b4:a8:8c: ec:5f:ef:0e:d9:cc:73:02:bd:dc:68:2d:bc:93:cc: 9d:d9:16:4a:3d:96:43:c4:b9:44:b1:3d:b0:af:ef: ee:09:71:70:da:83:e1:c0:c4:d0:02:b1:19:12:9d: 52:81:7b:dd:b1:12:2f:e7:13:df:1e:fb:1e:89:81: 50:b6:2d:be:c7:a2:ee:58:a8:cc:f9:0f:39:96:60: 4c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:ED:65:D9:2A:0C:53:D3:68:9C:83:BE:96:A2:18:7D:96:28:96:10 X509v3 Authority Key Identifier: keyid:7C:98:C2:28:08:38:F8:F7:82:C0:F2:89:50:15:71:3E:81:BE:03:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/7C98C2280838F8F782C0F2895015713E81BE0325.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C98C2280838F8F782C0F2895015713E81BE0325.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/7C98C2280838F8F782C0F2895015713E81BE0325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b1:c7:c8:47:cb:70:ea:d2:b3:17:26:e9:fc:68:c5:08:c9: 2c:d3:80:15:57:bb:10:e6:cc:9e:be:1c:c5:64:c0:b5:91:b4: 7c:7f:65:ac:8f:b2:45:9b:1d:79:4d:19:69:ad:6e:5b:a0:cf: 52:b1:0d:6f:ac:62:fb:34:05:6f:35:ac:c0:3e:95:95:74:0b: 2c:45:6e:65:30:4f:86:05:4c:63:cf:18:46:a9:6a:59:d2:6a: bc:43:0e:79:95:df:b9:e3:9e:36:fd:c9:a7:ee:c6:3b:f6:9e: 28:10:7d:a1:1b:cd:dc:7f:32:06:2b:a2:06:6b:4d:7d:e6:29: 5f:11:9c:4c:48:83:6f:37:52:7c:63:4c:7f:15:b8:e5:5e:86: 5b:0f:bf:8f:22:4c:a7:15:96:ff:33:5d:31:f0:d3:b1:51:34: d8:8f:43:d8:25:fb:dc:8b:9c:17:76:19:73:70:da:fa:9c:b6: d5:1e:54:11:3c:c9:1d:e9:e2:cd:b7:3d:d1:62:f4:00:b6:50: e1:1e:af:7d:e9:3a:ed:8f:94:06:c2:0e:c7:11:e1:ea:89:2d: e7:36:c5:5b:af:d1:65:5f:cf:48:38:24:0f:c7:fb:95:62:ec: e7:25:ed:0b:63:cf:24:1f:31:61:54:53:c4:fe:94:9c:a8:49: 77:bd:5e:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHaQUKvkQ8ls9RxEIFfEDtLNCEM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M5OEMyMjgwODM4RjhGNzgyQzBGMjg5NTAxNTcxM0U4 MUJFMDMyNTAeFw0yNTA4MjIxNjA4NTRaFw0yNTA4MjMxODUwNTRaMDMxMTAvBgNV BAMTKDAzRUQ2NUQ5MkEwQzUzRDM2ODlDODNCRTk2QTIxODdEOTYyODk2MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnjgxbjWTo1u/z+5e1Xc0f/vzt wd+y9teWCWM3J3F/mcm/1mmEi0dzlWDROR0Mt4/QVQYxm6bH0vhoZ2kutCTzwlOn 4C0ri9GmCw2W1ntZBrcbE7vQaOFun+TePnwWZl/velzLuO5PI4BweREcVMvI9Rm+ 852qK2RhsZEg0usuJ2c45g/XlzeC/FV7cfNZv0E0n4Vh6Vcc5qdW/UeWUcohNqpb +UTfQeho/7OBlCVW5rSojOxf7w7ZzHMCvdxoLbyTzJ3ZFko9lkPEuUSxPbCv7+4J cXDag+HAxNACsRkSnVKBe92xEi/nE98e+x6JgVC2Lb7Hou5YqMz5DzmWYEzlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUA+1l2SoMU9NonIO+lqIYfZYolhAwHwYDVR0j BBgwFoAUfJjCKAg4+PeCwPKJUBVxPoG+AyUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREFYS1doNW11elZDZkFxUFRzYnRDTGpYYmlZZmU5ODFZVUVWejE3Rnox ZFQvMC83Qzk4QzIyODA4MzhGOEY3ODJDMEYyODk1MDE1NzEzRTgxQkUwMzI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDOThDMjI4MDgzOEY4Rjc4 MkMwRjI4OTUwMTU3MTNFODFCRTAzMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REFYS1doNW11elZDZkFxUFRzYnRDTGpYYmlZZmU5ODFZVUVWejE3RnoxZFQvMC83 Qzk4QzIyODA4MzhGOEY3ODJDMEYyODk1MDE1NzEzRTgxQkUwMzI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK7HHyEfLcOrSsxcm6fxoxQjJLNOAFVe7EObMnr4cxWTAtZG0fH9lrI+yRZsd eU0Zaa1uW6DPUrENb6xi+zQFbzWswD6VlXQLLEVuZTBPhgVMY88YRqlqWdJqvEMO eZXfueOeNv3Jp+7GO/aeKBB9oRvN3H8yBiuiBmtNfeYpXxGcTEiDbzdSfGNMfxW4 5V6GWw+/jyJMpxWW/zNdMfDTsVE02I9D2CX73IucF3YZc3Da+py21R5UETzJHeni zbc90WL0ALZQ4R6vfek67Y+UBsIOxxHh6okt5zbFW6/RZV/PSDgkD8f7lWLs5yXt C2PPJB8xYVRTxP6UnKhJd71exg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:49:47 2025 by rpki-client