$ rpki-client -vvf rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.mft File: 32068CEB1B931618FB29A0ECD52F9D22FB0304DA.mft (raw, json) Hash identifier: titUEXLEJLBaqy2jjRtXlHN7/rgAsGqvZMPvX1ultxQ= Subject key identifier: 81:1E:50:3E:75:9A:D2:7D:B0:0E:CD:7E:EC:C0:0D:27:78:A1:D6:4E Authority key identifier: 32:06:8C:EB:1B:93:16:18:FB:29:A0:EC:D5:2F:9D:22:FB:03:04:DA Certificate issuer: /CN=32068CEB1B931618FB29A0ECD52F9D22FB0304DA Certificate serial: 4CABAEBD57990925850104390DAD0401D90E3E05 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.mft Manifest number: 02A4 Signing time: Sat 23 Aug 2025 12:34:13 +0000 Manifest this update: Sat 23 Aug 2025 12:29:13 +0000 Manifest next update: Sun 24 Aug 2025 13:46:13 +0000 Files and hashes: 1: 34352e36352e3233362e302f32322d3234203d3e20323636353236.roa (hash: 6Tw1Qh3+7pbuMN+p/b0CjOJVcWYBSbeaPsx04md2eiM=) 2: 32068CEB1B931618FB29A0ECD52F9D22FB0304DA.crl (hash: JOatFAs6MqdUPVUR3XSLtxHt81g0+CkaY9JfvnjnwhQ=) 3: 323830343a336435633a3a2f33322d3336203d3e20323636353236.roa (hash: hG9C5493PGDbutLPKxkFc3n6WKuxTqsTbH82yybndLw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.crl rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ab:ae:bd:57:99:09:25:85:01:04:39:0d:ad:04:01:d9:0e:3e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32068CEB1B931618FB29A0ECD52F9D22FB0304DA Validity Not Before: Aug 23 12:29:13 2025 GMT Not After : Aug 24 13:46:13 2025 GMT Subject: CN=811E503E759AD27DB00ECD7EECC00D2778A1D64E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2c:5d:d2:4d:a8:6f:87:f2:bb:91:2d:a1:05: f8:82:f8:bd:41:7d:94:1e:ff:36:c9:4e:d5:e2:cb: c9:e7:d5:c5:c1:c6:b9:d1:dd:3d:71:4a:d1:5b:4c: 41:e3:80:f3:9e:f8:7a:24:3c:a8:f2:21:af:6a:f2: e4:b3:d9:41:b4:8b:67:17:7a:37:e5:eb:2c:da:3d: 70:d6:ac:16:15:42:c9:ac:b1:11:cd:2c:c1:0f:34: 26:3a:78:53:6c:cd:de:89:bb:6c:56:95:32:51:c2: 60:e1:9a:e8:c8:43:fc:1f:3d:90:b7:43:91:8d:1a: 4e:71:60:7b:98:b7:fd:35:4e:c8:04:74:f2:f3:73: 72:b3:40:69:7e:d0:86:32:6a:f4:84:cb:f3:57:0e: d3:c5:29:85:3c:f1:af:85:e2:7f:1b:95:02:c6:e6: 17:8a:c7:3b:4f:06:09:1c:eb:f0:ae:33:9e:26:b7: 23:7a:f9:65:60:bb:2c:e7:fd:44:f4:14:4e:ee:65: 24:13:ce:8f:92:3f:4b:43:93:43:34:b7:bb:15:7d: 9d:a7:b8:1d:ca:1f:56:d6:d8:f9:4f:c8:9b:31:fa: 63:2d:db:2e:d8:ea:4d:be:c6:75:b5:b7:9e:75:45: 80:0e:d2:a0:5e:e5:f2:bd:b6:be:8d:4a:8b:64:df: af:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1E:50:3E:75:9A:D2:7D:B0:0E:CD:7E:EC:C0:0D:27:78:A1:D6:4E X509v3 Authority Key Identifier: keyid:32:06:8C:EB:1B:93:16:18:FB:29:A0:EC:D5:2F:9D:22:FB:03:04:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a1:59:e4:f6:5d:26:66:72:9f:30:d1:4e:f5:4c:90:8b:20: 8b:b8:2a:c9:92:9f:77:96:13:b8:c5:4a:ab:60:a0:35:ed:0a: fc:35:37:2c:96:2c:70:8a:57:2f:40:01:86:c4:ef:12:26:b5: 03:4b:42:c5:50:af:b3:dc:2f:4e:72:fa:c1:48:22:b7:c1:d9: ab:3e:e4:74:88:32:3c:77:92:d8:1d:93:2d:27:12:00:4f:22: 87:84:9c:3a:46:f0:df:ec:af:40:ad:cb:14:5b:4e:8d:08:f8: 4d:52:66:e7:78:a0:04:36:32:e9:48:46:73:a7:bf:67:3f:8d: 95:0a:94:8e:c5:7e:cc:7f:93:eb:d4:7d:2b:44:ba:f1:39:bb: d3:89:2d:77:4e:cf:43:25:2f:54:17:50:79:99:5f:14:1b:95: 1e:12:2a:10:9c:1b:64:c3:31:6b:9e:37:8e:78:de:ba:c0:0c: b9:9e:8d:f0:46:ad:02:ff:38:1a:34:fb:39:d6:be:e2:cc:4c: 81:4d:1b:d4:a4:77:e0:39:88:0d:b5:10:59:ce:f3:f4:9f:6e: 3a:81:f4:1c:fc:51:c9:bb:60:02:5e:d2:c3:e6:5e:27:8b:03: e0:51:f9:d5:e4:41:0f:7b:ad:cc:b5:1e:1f:7b:57:00:d5:d3: b2:d4:ed:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTKuuvVeZCSWFAQQ5Da0EAdkOPgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIwNjhDRUIxQjkzMTYxOEZCMjlBMEVDRDUyRjlEMjJG QjAzMDREQTAeFw0yNTA4MjMxMjI5MTNaFw0yNTA4MjQxMzQ2MTNaMDMxMTAvBgNV BAMTKDgxMUU1MDNFNzU5QUQyN0RCMDBFQ0Q3RUVDQzAwRDI3NzhBMUQ2NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaLF3STahvh/K7kS2hBfiC+L1B fZQe/zbJTtXiy8nn1cXBxrnR3T1xStFbTEHjgPOe+HokPKjyIa9q8uSz2UG0i2cX ejfl6yzaPXDWrBYVQsmssRHNLMEPNCY6eFNszd6Ju2xWlTJRwmDhmujIQ/wfPZC3 Q5GNGk5xYHuYt/01TsgEdPLzc3KzQGl+0IYyavSEy/NXDtPFKYU88a+F4n8blQLG 5heKxztPBgkc6/CuM54mtyN6+WVguyzn/UT0FE7uZSQTzo+SP0tDk0M0t7sVfZ2n uB3KH1bW2PlPyJsx+mMt2y7Y6k2+xnW1t551RYAO0qBe5fK9tr6NSotk369FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgR5QPnWa0n2wDs1+7MANJ3ih1k4wHwYDVR0j BBgwFoAUMgaM6xuTFhj7KaDs1S+dIvsDBNowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHRoM2QycFVrOHJyN2N6YzhrM3VFMmVyTkF0UmlzcXBFMmpodnFZY2hG dFIvMS8zMjA2OENFQjFCOTMxNjE4RkIyOUEwRUNENTJGOUQyMkZCMDMwNERBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyMDY4Q0VCMUI5MzE2MThG QjI5QTBFQ0Q1MkY5RDIyRkIwMzA0REEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHRoM2QycFVrOHJyN2N6YzhrM3VFMmVyTkF0UmlzcXBFMmpodnFZY2hGdFIvMS8z MjA2OENFQjFCOTMxNjE4RkIyOUEwRUNENTJGOUQyMkZCMDMwNERBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUKFZ5PZdJmZynzDRTvVMkIsgi7gqyZKfd5YTuMVKq2CgNe0K/DU3LJYscIpX L0ABhsTvEia1A0tCxVCvs9wvTnL6wUgit8HZqz7kdIgyPHeS2B2TLScSAE8ih4Sc Okbw3+yvQK3LFFtOjQj4TVJm53igBDYy6UhGc6e/Zz+NlQqUjsV+zH+T69R9K0S6 8Tm704ktd07PQyUvVBdQeZlfFBuVHhIqEJwbZMMxa543jnjeusAMuZ6N8EatAv84 GjT7Oda+4sxMgU0b1KR34DmIDbUQWc7z9J9uOoH0HPxRybtgAl7Sw+ZeJ4sD4FH5 1eRBD3utzLUeH3tXANXTstTt8w== -----END CERTIFICATE-----Generated at Sat Aug 23 18:29:42 2025 by rpki-client