$ rpki-client -vvf rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft File: A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft (raw, json) Hash identifier: VzIaYOMVoRj+3gSmJM969dxKT3vZjM2b0zNyduiKnAc= Subject key identifier: 0A:06:24:85:1A:C5:F2:2E:EE:0F:82:27:87:76:D6:FD:42:6E:8E:A8 Authority key identifier: A5:A3:3C:2B:9B:9B:1A:56:83:44:C1:6E:89:CE:84:E7:BC:E5:F0:41 Certificate issuer: /CN=A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041 Certificate serial: 10B1856ECA9F14A3EAE6C536F784F01ECEEF4DB9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer Subject info access: rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft Manifest number: 0288 Signing time: Sat 23 Aug 2025 05:21:07 +0000 Manifest this update: Sat 23 Aug 2025 05:16:07 +0000 Manifest next update: Sun 24 Aug 2025 07:46:07 +0000 Files and hashes: 1: A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.crl (hash: Hz0fJQS5m2aUmyVSSYMkPE42/5n7MBFQS6wGbEznEQE=) 2: 323830343a386162633a3a2f33322d3438203d3e20323733363839.roa (hash: rUu1WD3v6rnQOV2P+/5JdTYMrXKT75iQg9qRjPCLRvI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.crl rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 07:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b1:85:6e:ca:9f:14:a3:ea:e6:c5:36:f7:84:f0:1e:ce:ef:4d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041 Validity Not Before: Aug 23 05:16:07 2025 GMT Not After : Aug 24 07:46:07 2025 GMT Subject: CN=0A0624851AC5F22EEE0F82278776D6FD426E8EA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:09:1a:ca:4f:90:ea:de:cd:a8:c8:40:38:fe: 66:ba:9d:9e:9f:cc:d1:e6:ed:c8:50:d6:4c:d2:68: e9:98:b4:5f:b1:ab:b6:df:04:72:a9:0d:1a:df:bd: 95:d2:4b:d3:2c:81:c2:b5:ef:80:0c:bc:37:38:f3: 15:fc:82:c5:ce:a8:5b:94:79:02:ba:38:04:a1:07: 22:ba:dd:da:b8:f0:93:36:0a:23:dd:69:05:14:3e: 20:04:f3:31:c5:77:09:ed:39:61:5b:33:58:e0:b0: c9:06:20:3d:28:06:3a:81:d4:3e:bd:cc:cc:27:cb: 83:2f:a5:2a:3b:85:41:d6:17:c7:18:4c:63:3e:1f: 1a:49:18:41:59:98:6f:b3:cd:ae:f8:67:5f:d2:4d: 67:de:cc:d4:fd:4f:ae:7f:38:db:89:b7:f4:90:ee: 91:cb:77:1b:af:24:4f:4c:78:2a:54:b3:94:1b:72: ca:d8:e3:20:9e:e1:6d:b2:02:0a:db:26:e1:92:87: c3:c4:59:07:e5:c6:de:65:b3:ab:b5:1e:dc:15:92: 0e:45:b5:f6:f7:89:42:46:21:45:66:15:02:04:9e: dd:9f:c6:3c:96:da:05:97:a9:ad:f9:8b:39:97:55: 7b:a6:23:ff:64:6d:a0:dd:01:f4:52:f2:11:fa:f9: 06:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:06:24:85:1A:C5:F2:2E:EE:0F:82:27:87:76:D6:FD:42:6E:8E:A8 X509v3 Authority Key Identifier: keyid:A5:A3:3C:2B:9B:9B:1A:56:83:44:C1:6E:89:CE:84:E7:BC:E5:F0:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d5:89:36:8c:fd:a5:a2:ae:e3:d5:3f:df:73:90:2f:0e:56: 65:01:0d:57:c5:58:ee:eb:61:ed:4e:0b:c9:05:d3:2b:61:85: 28:5b:e8:48:91:5c:13:c9:ea:1a:61:2d:b1:20:44:1b:d5:5a: 98:3c:d1:49:b8:f4:fe:5c:47:86:c5:24:0f:05:24:96:a4:0f: 97:93:dd:03:39:ae:51:5a:d8:75:a5:f2:8b:a8:83:ab:66:3b: 84:29:67:75:ca:27:ed:f3:aa:e4:37:68:38:45:d4:52:38:73: f4:36:3a:08:c6:1c:7f:8e:6f:3c:61:53:36:8d:de:d3:da:a8: 74:be:4b:13:75:ab:06:18:c8:1f:53:ec:ec:9e:02:b6:11:34: a6:b6:0a:5e:3c:88:ba:95:49:d7:9c:20:35:d8:c9:87:2b:37: 3a:c4:5f:3e:a7:59:48:54:4c:5d:03:55:44:ae:94:f9:94:cc: a1:bf:a9:19:7f:3b:7a:83:2e:f6:ce:65:03:f2:14:2c:b6:d0: c0:73:e2:c5:57:34:29:1f:5a:4d:52:d5:40:a1:ee:4d:5e:a5: 73:76:59:8d:64:02:ba:55:d8:ac:ad:53:e5:f8:d5:52:a1:2f: d0:00:76:1a:93:b2:84:b8:42:c1:67:7b:bf:82:cd:59:11:a1: 64:16:a6:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUELGFbsqfFKPq5sU294TwHs7vTbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVBMzNDMkI5QjlCMUE1NjgzNDRDMTZFODlDRTg0RTdC Q0U1RjA0MTAeFw0yNTA4MjMwNTE2MDdaFw0yNTA4MjQwNzQ2MDdaMDMxMTAvBgNV BAMTKDBBMDYyNDg1MUFDNUYyMkVFRTBGODIyNzg3NzZENkZENDI2RThFQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVCRrKT5Dq3s2oyEA4/ma6nZ6f zNHm7chQ1kzSaOmYtF+xq7bfBHKpDRrfvZXSS9MsgcK174AMvDc48xX8gsXOqFuU eQK6OAShByK63dq48JM2CiPdaQUUPiAE8zHFdwntOWFbM1jgsMkGID0oBjqB1D69 zMwny4MvpSo7hUHWF8cYTGM+HxpJGEFZmG+zza74Z1/STWfezNT9T65/ONuJt/SQ 7pHLdxuvJE9MeCpUs5QbcsrY4yCe4W2yAgrbJuGSh8PEWQflxt5ls6u1HtwVkg5F tfb3iUJGIUVmFQIEnt2fxjyW2gWXqa35izmXVXumI/9kbaDdAfRS8hH6+QY9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCgYkhRrF8i7uD4Inh3bW/UJujqgwHwYDVR0j BBgwFoAUpaM8K5ubGlaDRMFuic6E57zl8EEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUU4bU1yYXBoRXNkR29QVThHSExMSG1rdm5zSGo0Ulp4dERYSktQOHY5 WlUvMC9BNUEzM0MyQjlCOUIxQTU2ODM0NEMxNkU4OUNFODRFN0JDRTVGMDQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1QTMzQzJCOUI5QjFBNTY4 MzQ0QzE2RTg5Q0U4NEU3QkNFNUYwNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUU4bU1yYXBoRXNkR29QVThHSExMSG1rdm5zSGo0Ulp4dERYSktQOHY5WlUvMC9B NUEzM0MyQjlCOUIxQTU2ODM0NEMxNkU4OUNFODRFN0JDRTVGMDQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhdWJNoz9paKu49U/33OQLw5WZQENV8VY7uth7U4LyQXTK2GFKFvoSJFcE8nq GmEtsSBEG9VamDzRSbj0/lxHhsUkDwUklqQPl5PdAzmuUVrYdaXyi6iDq2Y7hCln dcon7fOq5DdoOEXUUjhz9DY6CMYcf45vPGFTNo3e09qodL5LE3WrBhjIH1Ps7J4C thE0prYKXjyIupVJ15wgNdjJhys3OsRfPqdZSFRMXQNVRK6U+ZTMob+pGX87eoMu 9s5lA/IULLbQwHPixVc0KR9aTVLVQKHuTV6lc3ZZjWQCulXYrK1T5fjVUqEv0AB2 GpOyhLhCwWd7v4LNWRGhZBam9Q== -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:16 2025 by rpki-client