$ rpki-client -vvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft File: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft (raw, json) Hash identifier: PuGX+sXlTjguLry5la3bcCY5uNEZfqQc9NkiZJRZJ2A= Subject key identifier: DE:A5:1F:56:20:E8:5E:AE:79:75:61:82:EA:9E:CF:CA:CB:94:8E:A6 Authority key identifier: 02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED Certificate issuer: /CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Certificate serial: 5B47A0FA2142B92CFBC2132F5B21008F4138E237 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer Subject info access: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft Manifest number: 029F Signing time: Sat 23 Aug 2025 09:28:08 +0000 Manifest this update: Sat 23 Aug 2025 09:23:08 +0000 Manifest next update: Sun 24 Aug 2025 10:08:08 +0000 Files and hashes: 1: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl (hash: q2Cpo9uekoZKl1bQSE+UePico6/bnUswLy8DnHzdVdk=) 2: 323830343a313431633a3a2f33322d313238203d3e203533313330.roa (hash: cjsfM81trhoZs+Ib78YBfAQ97ux0mFDSEJNG8MM4Pa8=) 3: 3139312e372e37322e302f32312d3234203d3e203533313330.roa (hash: uXdeuicJG1GO+GJKUORCb4DqvhzxPyQ2Z5ORNJJFr7Q=) 4: 3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa (hash: BzoyXL30Xsaxt5/GzA+mLV5q6XBxznhdO2qisUbseRg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 10:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:47:a0:fa:21:42:b9:2c:fb:c2:13:2f:5b:21:00:8f:41:38:e2:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Validity Not Before: Aug 23 09:23:08 2025 GMT Not After : Aug 24 10:08:08 2025 GMT Subject: CN=DEA51F5620E85EAE79756182EA9ECFCACB948EA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:27:65:8a:c3:8b:6d:ab:26:64:12:b5:28: ee:52:20:62:b2:75:28:ad:bc:4b:ea:60:6f:5d:99: a0:ec:7c:17:08:75:15:2d:40:03:e4:83:5a:53:92: 3a:97:66:56:2b:90:0e:b4:5f:f9:43:65:89:4f:82: 8c:12:71:00:ab:d1:b9:60:3f:74:d1:2c:d2:b5:23: b5:f0:8f:54:80:7b:9c:98:2b:95:4f:f6:7d:6d:90: 3f:fe:16:fe:c1:79:b9:e7:e3:b0:11:26:0f:68:69: 25:67:3e:95:9f:da:a8:d1:1f:c4:ca:20:98:cb:38: b9:39:04:42:33:1f:55:7b:3d:74:02:34:06:8d:34: 04:5e:c1:9e:c4:fb:5d:1a:67:12:46:bf:81:aa:16: da:56:24:20:b5:fe:61:08:39:16:bd:db:cf:f2:32: 05:60:2d:8e:57:bd:4f:df:01:bb:fa:fc:ff:35:e4: 07:bc:de:2c:01:5e:06:86:df:ae:30:ab:6d:41:0d: 65:3e:f5:88:12:d0:21:2a:37:42:ef:ef:dd:3c:8a: c0:7d:c6:26:f0:79:3d:c3:af:00:f8:d6:c8:12:14: b9:0e:d0:04:91:af:5d:64:e8:84:c0:91:72:98:dd: 36:a7:70:06:0a:5f:fe:d2:59:b4:5e:21:6f:ec:ad: 3a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A5:1F:56:20:E8:5E:AE:79:75:61:82:EA:9E:CF:CA:CB:94:8E:A6 X509v3 Authority Key Identifier: keyid:02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ad:18:06:dc:76:28:bc:3d:bc:70:2b:5a:13:88:aa:06:58: 48:91:c6:17:3e:19:30:7c:bc:35:0b:21:ae:59:26:d8:79:ea: 0a:e4:62:cd:8e:2b:9b:4d:7d:4d:cb:6e:88:c3:8f:c1:d0:2d: 90:7e:71:ef:8a:67:19:3b:1d:27:92:c8:c5:6c:a6:e0:74:6a: 51:e1:b8:4d:c2:87:23:21:ba:d2:a3:4a:a6:63:c2:56:20:c5: 28:c4:24:6d:bc:ce:80:59:4a:12:68:24:c0:b2:cd:f6:6a:fb: c7:d4:30:5d:e4:b5:ee:a1:9e:bf:9c:d2:c4:e9:2b:e8:e0:2e: dc:79:00:44:cb:d0:f1:89:98:2a:35:da:78:53:8a:86:1c:0a: 9e:70:50:55:f2:6b:bd:b4:e5:cf:b7:ef:15:38:8a:ad:7f:69: 7f:bf:0e:35:ef:28:53:2c:40:97:0e:37:53:0c:81:37:ed:5f: f3:60:4e:a2:47:ef:71:ef:7b:18:fd:9b:06:c7:d4:52:eb:fa: 7d:b9:59:8a:24:c6:01:b5:59:13:71:ea:d1:3b:dd:cc:a5:a9: ce:6a:b6:e4:bd:41:c7:46:22:11:22:e7:3b:fd:a2:28:6e:98: 3c:20:05:52:3e:25:c3:8f:34:4a:8e:6d:f7:a1:e3:af:6b:bc: a6:89:d1:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUW0eg+iFCuSz7whMvWyEAj0E44jcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJDQjk5M0U5NTg1QTUzRkM2QjQwREE3NjJBNzNFQjI4 MjFCRjZFRDAeFw0yNTA4MjMwOTIzMDhaFw0yNTA4MjQxMDA4MDhaMDMxMTAvBgNV BAMTKERFQTUxRjU2MjBFODVFQUU3OTc1NjE4MkVBOUVDRkNBQ0I5NDhFQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC45CdlisOLbasmZBK1KO5SIGKy dSitvEvqYG9dmaDsfBcIdRUtQAPkg1pTkjqXZlYrkA60X/lDZYlPgowScQCr0blg P3TRLNK1I7Xwj1SAe5yYK5VP9n1tkD/+Fv7Bebnn47ARJg9oaSVnPpWf2qjRH8TK IJjLOLk5BEIzH1V7PXQCNAaNNARewZ7E+10aZxJGv4GqFtpWJCC1/mEIORa928/y MgVgLY5XvU/fAbv6/P815Ae83iwBXgaG364wq21BDWU+9YgS0CEqN0Lv7908isB9 xibweT3DrwD41sgSFLkO0ASRr11k6ITAkXKY3TancAYKX/7SWbReIW/srTpxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3qUfViDoXq55dWGC6p7PysuUjqYwHwYDVR0j BBgwFoAUAsuZPpWFpT/GtA2nYqc+soIb9u0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtM NlovMS8wMkNCOTkzRTk1ODVBNTNGQzZCNDBEQTc2MkE3M0VCMjgyMUJGNkVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyQ0I5OTNFOTU4NUE1M0ZD NkI0MERBNzYyQTczRUIyODIxQkY2RUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtMNlovMS8w MkNCOTkzRTk1ODVBNTNGQzZCNDBEQTc2MkE3M0VCMjgyMUJGNkVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaq0YBtx2KLw9vHArWhOIqgZYSJHGFz4ZMHy8NQshrlkm2HnqCuRizY4rm019 TctuiMOPwdAtkH5x74pnGTsdJ5LIxWym4HRqUeG4TcKHIyG60qNKpmPCViDFKMQk bbzOgFlKEmgkwLLN9mr7x9QwXeS17qGev5zSxOkr6OAu3HkARMvQ8YmYKjXaeFOK hhwKnnBQVfJrvbTlz7fvFTiKrX9pf78ONe8oUyxAlw43UwyBN+1f82BOokfvce97 GP2bBsfUUuv6fblZiiTGAbVZE3Hq0TvdzKWpzmq25L1Bx0YiESLnO/2iKG6YPCAF Uj4lw480So5t96Hjr2u8ponRJw== -----END CERTIFICATE-----Generated at Sat Aug 23 18:56:57 2025 by rpki-client