$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft File: D539CF929B6A6A2B9596B922F417FAD917799ED7.mft (raw, json) Hash identifier: nc22DYTdi4IFSoQdVJj8Z/6LvK7hk/aPtrSdWQ+kxmM= Subject key identifier: 8C:9B:7F:E4:09:28:23:C1:19:A0:9D:2E:AB:35:47:97:A1:AA:BC:36 Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 Certificate issuer: /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Certificate serial: 0B32031539E6DFCC6A4CA43B434B507E2E139C68 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft Manifest number: 02A8 Signing time: Sat 23 Aug 2025 07:06:09 +0000 Manifest this update: Sat 23 Aug 2025 07:01:09 +0000 Manifest next update: Sun 24 Aug 2025 09:57:09 +0000 Files and hashes: 1: D539CF929B6A6A2B9596B922F417FAD917799ED7.crl (hash: UGeDzGpbN6Hp2qgllvOchR4BUWs1zFJXXv0XUOBvLBk=) 2: 34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (hash: FE+7zbwcRwFNCNZQz6JTL4PFhynEDJA2jUUaWQGOwlw=) 3: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (hash: 01pAW4QCHBpNqYLYxhHBFF+Hirycj7LT0087UnT0sog=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 09:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:32:03:15:39:e6:df:cc:6a:4c:a4:3b:43:4b:50:7e:2e:13:9c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Validity Not Before: Aug 23 07:01:09 2025 GMT Not After : Aug 24 09:57:09 2025 GMT Subject: CN=8C9B7FE4092823C119A09D2EAB354797A1AABC36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:18:02:50:f7:45:a0:34:76:c0:7f:4b:c1:3b: 4e:14:00:0a:d7:2b:1d:59:a5:f4:7b:bb:f5:8f:42: bb:57:41:92:d1:05:91:ce:42:1b:1b:fd:7e:81:6b: 2a:3f:d8:a7:e7:6e:61:b3:5f:51:31:f5:75:54:b9: 0d:b7:c3:da:2d:7d:d3:73:2f:70:ff:1e:e2:a5:6e: fc:80:a8:37:f6:21:1e:3d:7a:b5:94:e6:62:32:a6: 0d:21:03:b6:3e:11:ab:f2:a8:76:79:e2:12:e0:c8: ba:72:cd:ce:0e:90:7f:ec:da:d8:ea:81:62:06:8b: ba:8a:c2:dd:8d:58:32:96:e1:92:d4:7a:ee:14:f4: 32:bf:09:80:bc:7b:fb:7b:44:42:9e:88:42:cd:23: b3:d0:db:13:aa:09:7d:f1:6d:2c:89:e6:6e:b3:3d: 8b:ec:2c:f3:01:58:03:cd:c3:ec:d6:ac:7f:fe:f4: 4f:f2:7c:d0:01:05:b8:df:40:53:9d:86:d9:ed:92: 9c:57:e4:86:0d:18:5b:d2:64:30:94:ff:87:59:17: 35:88:d5:2e:e7:55:61:8f:ce:be:f5:c0:6e:a3:ac: 3f:2e:60:c9:16:a4:91:e3:4a:69:c9:0c:db:09:1b: ab:4a:27:41:44:48:a5:ab:6c:2c:17:7d:63:4b:fa: e2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9B:7F:E4:09:28:23:C1:19:A0:9D:2E:AB:35:47:97:A1:AA:BC:36 X509v3 Authority Key Identifier: keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a3:94:07:d9:dd:13:2d:e6:28:f2:5b:ae:08:86:92:88:84: f9:82:d8:40:8c:de:49:1c:73:ff:e7:8f:59:31:e7:54:b8:28: 9e:41:39:3f:ad:23:d8:bf:19:5a:69:43:b8:c6:fb:f2:17:67: 80:18:c9:f2:8b:be:36:d6:dc:d4:99:3f:af:a0:c9:0d:95:89: e4:d8:f6:7c:42:67:bf:5b:ef:de:cf:d4:9b:4a:4d:97:2d:69: 51:af:9d:90:85:57:a0:ef:35:f4:86:46:dd:6d:2f:7d:2c:0b: 65:c9:77:12:a5:46:a2:aa:62:e8:19:00:2d:a6:aa:af:01:81: 89:36:e3:d4:ea:9c:14:dc:53:f4:7a:96:22:6d:06:79:6d:db: 0e:04:d3:4a:05:74:20:5f:71:d2:8d:79:d6:c2:ce:aa:b7:e3: fe:32:06:29:2d:86:64:f1:54:17:59:8d:96:b1:18:6a:87:69: 20:22:78:b5:95:92:83:c8:cc:2d:5c:08:4d:18:42:70:ff:01: ec:f1:28:a4:a8:20:4f:9a:96:34:3e:cd:c3:6b:a3:1e:06:7a: 04:d4:f6:ee:ff:0d:41:66:ee:02:82:66:c8:46:6d:24:87:6a: 0a:09:cd:4d:e4:2f:bd:41:e0:c8:d4:cb:c7:1c:ae:b5:c6:25: b9:68:21:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCzIDFTnm38xqTKQ7Q0tQfi4TnGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUzOUNGOTI5QjZBNkEyQjk1OTZCOTIyRjQxN0ZBRDkx Nzc5OUVENzAeFw0yNTA4MjMwNzAxMDlaFw0yNTA4MjQwOTU3MDlaMDMxMTAvBgNV BAMTKDhDOUI3RkU0MDkyODIzQzExOUEwOUQyRUFCMzU0Nzk3QTFBQUJDMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyGAJQ90WgNHbAf0vBO04UAArX Kx1ZpfR7u/WPQrtXQZLRBZHOQhsb/X6Bayo/2KfnbmGzX1Ex9XVUuQ23w9otfdNz L3D/HuKlbvyAqDf2IR49erWU5mIypg0hA7Y+EavyqHZ54hLgyLpyzc4OkH/s2tjq gWIGi7qKwt2NWDKW4ZLUeu4U9DK/CYC8e/t7REKeiELNI7PQ2xOqCX3xbSyJ5m6z PYvsLPMBWAPNw+zWrH/+9E/yfNABBbjfQFOdhtntkpxX5IYNGFvSZDCU/4dZFzWI 1S7nVWGPzr71wG6jrD8uYMkWpJHjSmnJDNsJG6tKJ0FESKWrbCwXfWNL+uItAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjJt/5AkoI8EZoJ0uqzVHl6GqvDYwHwYDVR0j BBgwFoAU1TnPkptqaiuVlrki9Bf62Rd5ntcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNT M1QvMS9ENTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MzlDRjkyOUI2QTZBMkI5 NTk2QjkyMkY0MTdGQUQ5MTc3OTlFRDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNTM1QvMS9E NTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM6OUB9ndEy3mKPJbrgiGkoiE+YLYQIzeSRxz/+ePWTHnVLgonkE5P60j2L8Z WmlDuMb78hdngBjJ8ou+Ntbc1Jk/r6DJDZWJ5Nj2fEJnv1vv3s/Um0pNly1pUa+d kIVXoO819IZG3W0vfSwLZcl3EqVGoqpi6BkALaaqrwGBiTbj1OqcFNxT9HqWIm0G eW3bDgTTSgV0IF9x0o151sLOqrfj/jIGKS2GZPFUF1mNlrEYaodpICJ4tZWSg8jM LVwITRhCcP8B7PEopKggT5qWND7Nw2ujHgZ6BNT27v8NQWbuAoJmyEZtJIdqCgnN TeQvvUHgyNTLxxyutcYluWghgg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:38:37 2025 by rpki-client