$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft File: 8AD497903AB3566443C9C794694A61EFE427FA7A.mft (raw, json) Hash identifier: EhzzC+E0uX5kgMGUDY7gnZobk5laJfY8can04Jz2QNA= Subject key identifier: EE:4E:F1:E7:29:50:F2:3D:7D:64:2C:91:08:F5:FF:6E:48:36:DA:A0 Authority key identifier: 8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A Certificate issuer: /CN=8AD497903AB3566443C9C794694A61EFE427FA7A Certificate serial: 474F38C2EE4BBCDC6FF00E5212513CABB537BC75 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft Manifest number: 0275 Signing time: Sat 12 Jul 2025 20:35:28 +0000 Manifest this update: Sat 12 Jul 2025 20:30:28 +0000 Manifest next update: Sun 13 Jul 2025 23:42:28 +0000 Files and hashes: 1: 323830343a383630343a3a2f33332d3333203d3e20323732363134.roa (hash: Cx4646zrPKq6xD6iBJPkGxFHe6jY6KpJK0fDkBl/7Jo=) 2: 323830343a383630343a3a2f33322d3332203d3e20323732363134.roa (hash: UuJdu9oNRzQAzqGiZTO4vBqCVsMzpdiamCVuQEkL6sg=) 3: 323830343a383630343a383030303a3a2f33332d3333203d3e20323732363134.roa (hash: ORpItz/kBb3bXBiU/q9Su7SYmZ2oQTmI/c9DsHZIB4Q=) 4: 8AD497903AB3566443C9C794694A61EFE427FA7A.crl (hash: 6GTxzeA+iJh8sC/gOAfYcIyBmtgyEfUHnM8v5IlG8nQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Jul 2025 23:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:4f:38:c2:ee:4b:bc:dc:6f:f0:0e:52:12:51:3c:ab:b5:37:bc:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AD497903AB3566443C9C794694A61EFE427FA7A Validity Not Before: Jul 12 20:30:28 2025 GMT Not After : Jul 13 23:42:28 2025 GMT Subject: CN=EE4EF1E72950F23D7D642C9108F5FF6E4836DAA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:53:fb:1c:35:c2:89:f9:d1:0a:60:d2:05:84: aa:52:05:d1:cc:2c:d3:80:29:78:cd:5b:b9:8d:e4: 38:68:a6:d6:8c:66:b9:db:45:93:fb:2d:d2:22:bf: 56:cf:ee:f7:58:36:8f:85:9c:d3:6c:cf:8f:a6:f2: 43:71:b9:33:0f:49:10:d0:19:20:98:9c:99:9f:2c: 28:da:47:c4:42:00:d0:a1:6d:3e:30:df:b8:5f:79: 81:85:1b:e5:e4:a7:85:dd:2b:7f:46:d6:1a:a7:15: 3a:a7:21:35:a1:f9:d4:e6:99:76:be:cb:14:99:fd: e7:a2:f4:10:1a:f4:05:65:d2:93:d8:11:49:e0:40: d7:a3:8e:f8:12:b3:d1:2c:c0:2e:45:3a:3e:9a:4c: 66:f7:37:68:99:03:67:96:80:83:f6:e8:bf:8f:87: d0:8c:da:1f:9e:6f:5d:9d:b6:ff:a4:8c:2f:71:80: 74:9a:47:dd:01:cb:36:ff:4e:3d:11:5b:2c:80:6b: 55:80:7e:60:6e:b4:25:d0:4a:c5:70:89:0e:dd:34: 23:b0:81:ee:a0:69:24:00:24:50:e9:a5:7b:62:d0: e8:01:41:3a:50:80:7b:7b:c2:3e:91:90:ef:6a:ae: 12:f4:5e:78:64:4a:6b:a8:b0:33:ab:f6:08:11:6c: 5b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4E:F1:E7:29:50:F2:3D:7D:64:2C:91:08:F5:FF:6E:48:36:DA:A0 X509v3 Authority Key Identifier: keyid:8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:7d:30:ca:ef:27:aa:18:a8:9e:d4:0e:4c:c3:87:3a:cf:c6: e8:2f:f2:1c:af:5d:4a:1b:73:9c:ed:ee:f9:70:dd:48:d1:76: 12:02:d8:33:39:53:80:cc:82:e2:0e:7f:68:a3:0a:25:b1:b9: 5b:63:fb:25:22:2f:16:fc:d6:2b:75:9b:2b:df:ea:26:fc:a4: ef:32:64:44:a7:09:6d:23:9b:2b:f5:02:13:22:b6:4e:1c:59: 22:3c:54:27:c8:9f:98:d8:df:88:9e:45:86:3c:a7:29:58:44: d7:85:d4:f3:d0:f7:f7:18:12:75:4f:1a:e0:e1:f7:f0:e5:65: 80:69:a0:60:76:c0:7a:c7:15:97:6c:96:52:69:44:25:f1:29: bb:64:7e:d7:c0:c5:25:d7:c2:2c:48:ca:e8:52:de:99:26:18: fb:3d:19:c3:bd:74:e1:b3:03:fb:55:83:c6:c0:43:0a:24:bf: b6:57:c8:06:da:33:6a:8a:74:51:9b:ab:0a:ac:72:1a:c5:6b: 56:16:f4:5b:bc:0c:14:b3:16:f6:09:d5:a3:e7:75:22:20:19: 71:f1:4f:31:83:2f:8b:66:d8:5c:e0:e4:c2:de:31:3d:dc:54: d4:36:94:f9:a5:00:83:a1:d3:a4:a1:7f:39:e6:ab:bf:dc:dc: c0:11:b5:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR084wu5LvNxv8A5SElE8q7U3vHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFENDk3OTAzQUIzNTY2NDQzQzlDNzk0Njk0QTYxRUZF NDI3RkE3QTAeFw0yNTA3MTIyMDMwMjhaFw0yNTA3MTMyMzQyMjhaMDMxMTAvBgNV BAMTKEVFNEVGMUU3Mjk1MEYyM0Q3RDY0MkM5MTA4RjVGRjZFNDgzNkRBQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQU/scNcKJ+dEKYNIFhKpSBdHM LNOAKXjNW7mN5DhoptaMZrnbRZP7LdIiv1bP7vdYNo+FnNNsz4+m8kNxuTMPSRDQ GSCYnJmfLCjaR8RCANChbT4w37hfeYGFG+Xkp4XdK39G1hqnFTqnITWh+dTmmXa+ yxSZ/eei9BAa9AVl0pPYEUngQNejjvgSs9EswC5FOj6aTGb3N2iZA2eWgIP26L+P h9CM2h+eb12dtv+kjC9xgHSaR90Byzb/Tj0RWyyAa1WAfmButCXQSsVwiQ7dNCOw ge6gaSQAJFDppXti0OgBQTpQgHt7wj6RkO9qrhL0XnhkSmuosDOr9ggRbFv5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7k7x5ylQ8j19ZCyRCPX/bkg22qAwHwYDVR0j BBgwFoAUitSXkDqzVmRDyceUaUph7+Qn+nowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFl5NGFKTVB2emFja2tMSGc0azlvSEhIWjdnam5FcmtRUEpVYXN2cDZh bk4vMS84QUQ0OTc5MDNBQjM1NjY0NDNDOUM3OTQ2OTRBNjFFRkU0MjdGQTdBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBRDQ5NzkwM0FCMzU2NjQ0 M0M5Qzc5NDY5NEE2MUVGRTQyN0ZBN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFl5NGFKTVB2emFja2tMSGc0azlvSEhIWjdnam5FcmtRUEpVYXN2cDZhbk4vMS84 QUQ0OTc5MDNBQjM1NjY0NDNDOUM3OTQ2OTRBNjFFRkU0MjdGQTdBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqH0wyu8nqhiontQOTMOHOs/G6C/yHK9dShtznO3u+XDdSNF2EgLYMzlTgMyC 4g5/aKMKJbG5W2P7JSIvFvzWK3WbK9/qJvyk7zJkRKcJbSObK/UCEyK2ThxZIjxU J8ifmNjfiJ5FhjynKVhE14XU89D39xgSdU8a4OH38OVlgGmgYHbAescVl2yWUmlE JfEpu2R+18DFJdfCLEjK6FLemSYY+z0Zw7104bMD+1WDxsBDCiS/tlfIBtozaop0 UZurCqxyGsVrVhb0W7wMFLMW9gnVo+d1IiAZcfFPMYMvi2bYXODkwt4xPdxU1DaU +aUAg6HTpKF/Oearv9zcwBG1gw== -----END CERTIFICATE-----Generated at Sat Jul 12 23:06:10 2025 by rpki-client