$ rpki-client -vvf rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft File: ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft (raw, json) Hash identifier: Z6y/3JRbQrIl3eRww5Kv5uG5oGJJaUpslSiGNbcmdh0= Subject key identifier: B1:BC:47:66:7E:69:33:18:E8:0C:E3:5A:F0:6C:F8:8B:AB:55:4A:9D Authority key identifier: ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41 Certificate issuer: /CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541 Certificate serial: 4694B708E4D8772980748245D7D1A26D3711D351 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer Subject info access: rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft Manifest number: 02A4 Signing time: Sat 23 Aug 2025 16:42:54 +0000 Manifest this update: Sat 23 Aug 2025 16:37:54 +0000 Manifest next update: Sun 24 Aug 2025 20:29:54 +0000 Files and hashes: 1: 34352e3138342e3137362e302f32322d3232203d3e20323639333932.roa (hash: n6m5QXLtYsd6QZ8EVT2MzdSK9laq92ocZsZcfnIdIPA=) 2: ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl (hash: BpGId0d9m1NRHRZJDeW1SSrkLfRtBJTLq4H+WJ0X4gc=) 3: 34352e3138342e3137362e302f32332d3233203d3e20323639333932.roa (hash: /Dp4hCOsgXygPlMz5YSz4GTiSyfx+NQyd1XZo/YIByE=) 4: 34352e3138342e3137382e302f32332d3233203d3e20323639333932.roa (hash: 9oCvgVcA9zyrxL9AHAJRRHoxWEvKlFhGZYHtdt61ank=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 17:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:94:b7:08:e4:d8:77:29:80:74:82:45:d7:d1:a2:6d:37:11:d3:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541 Validity Not Before: Aug 23 16:37:54 2025 GMT Not After : Aug 24 20:29:54 2025 GMT Subject: CN=B1BC47667E693318E80CE35AF06CF88BAB554A9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dd:83:bd:87:96:fa:79:44:26:8e:a0:fd:cd: a3:08:f5:95:04:4a:35:a0:a9:3a:ae:be:51:1d:32: 7c:86:9b:e3:4f:e5:fe:df:6e:49:20:e2:ed:08:dc: 81:5f:6d:23:1d:6b:a1:78:15:7e:75:01:51:cb:d8: 26:57:b1:b5:ac:62:7d:4a:58:30:45:25:30:05:0f: 70:8e:65:72:84:92:be:a3:09:27:98:5e:ed:ca:88: ed:22:f2:33:75:7e:dc:00:eb:40:e5:22:4f:5d:37: 7e:33:1b:4f:9e:17:7e:78:00:97:f6:d3:83:a8:37: 8f:3f:cb:ae:a8:d2:02:48:7a:ec:d7:2d:92:57:08: 15:8f:b3:df:3c:77:1e:80:59:e9:56:2c:7d:ff:a6: 4c:a7:47:da:5c:96:83:78:11:06:62:2c:dd:f5:59: 90:0a:09:55:c1:30:a6:68:e9:4c:ba:dd:53:dc:88: 14:08:11:c6:0a:10:e5:ad:1e:5f:d6:ee:4c:ad:26: 34:bc:db:ba:1e:b5:b4:d8:c6:83:1b:7a:05:f4:ce: 37:a9:40:51:08:00:bd:ea:da:1d:a2:7b:fc:28:d2: f9:14:ec:27:a9:e6:02:34:07:85:07:36:e4:51:39: 46:c3:dd:b8:74:58:57:66:31:89:28:f9:d6:ea:7f: 21:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BC:47:66:7E:69:33:18:E8:0C:E3:5A:F0:6C:F8:8B:AB:55:4A:9D X509v3 Authority Key Identifier: keyid:ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:93:ff:e5:df:0e:49:94:df:b0:3d:9f:13:b9:fc:e1:e4:59: 78:20:64:74:03:a3:eb:b4:ca:3f:7f:66:df:26:58:cd:20:ff: a1:45:55:89:c2:7f:a9:fc:7f:b7:cb:7a:fb:33:10:54:72:9f: 25:20:18:ab:f5:15:85:81:65:30:c4:32:fb:3c:ab:90:72:5d: ee:d5:ab:77:ec:60:72:b5:b7:d2:50:d4:ca:b0:61:01:bf:7c: 02:08:46:35:05:69:de:26:c4:21:41:7b:54:1e:b8:b2:33:f6: 05:c6:ae:59:4c:eb:79:c2:e0:eb:49:09:0f:ae:c8:54:9a:e8: ac:62:a9:1a:80:c3:21:b5:c0:f5:7a:0c:2f:6e:b7:a0:c7:db: 2e:29:83:80:ef:9f:f0:3f:60:2c:af:0d:f0:a8:92:dd:16:9a: d9:5a:74:63:98:e1:a0:90:71:16:ee:0c:05:43:90:4f:96:62: 85:c0:8d:61:0c:d8:1d:db:a1:57:83:64:5c:c5:6e:b9:ab:50: cb:ef:c6:e0:70:67:29:2d:dc:ad:78:57:83:e0:5d:83:82:88: 0d:17:2a:d4:65:c7:3d:6d:ed:cd:d8:c3:78:d5:1f:40:af:1a: ea:87:05:d6:4a:7e:4b:d4:b9:6d:83:85:6a:ed:d5:1e:93:dd: 40:35:2f:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURpS3COTYdymAdIJF19GibTcR01EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ1QjM3RkRFMUEzMDNDM0E0QkQ1QTFDMjZFMDA4QUFD OTExMzU0MTAeFw0yNTA4MjMxNjM3NTRaFw0yNTA4MjQyMDI5NTRaMDMxMTAvBgNV BAMTKEIxQkM0NzY2N0U2OTMzMThFODBDRTM1QUYwNkNGODhCQUI1NTRBOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+3YO9h5b6eUQmjqD9zaMI9ZUE SjWgqTquvlEdMnyGm+NP5f7fbkkg4u0I3IFfbSMda6F4FX51AVHL2CZXsbWsYn1K WDBFJTAFD3COZXKEkr6jCSeYXu3KiO0i8jN1ftwA60DlIk9dN34zG0+eF354AJf2 04OoN48/y66o0gJIeuzXLZJXCBWPs988dx6AWelWLH3/pkynR9pcloN4EQZiLN31 WZAKCVXBMKZo6Uy63VPciBQIEcYKEOWtHl/W7kytJjS827oetbTYxoMbegX0zjep QFEIAL3q2h2ie/wo0vkU7Cep5gI0B4UHNuRROUbD3bh0WFdmMYko+dbqfyEnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsbxHZn5pMxjoDONa8Gz4i6tVSp0wHwYDVR0j BBgwFoAU7Vs3/eGjA8OkvVocJuAIqskRNUEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUY2Rm5INTlvWVc1YWVMS29LNUQ1aEtvdWttVlV4OEtQZjh5dHFKTGVx dXQvMS9FRDVCMzdGREUxQTMwM0MzQTRCRDVBMUMyNkUwMDhBQUM5MTEzNTQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VENUIzN0ZERTFBMzAzQzNB NEJENUExQzI2RTAwOEFBQzkxMTM1NDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUY2Rm5INTlvWVc1YWVMS29LNUQ1aEtvdWttVlV4OEtQZjh5dHFKTGVxdXQvMS9F RDVCMzdGREUxQTMwM0MzQTRCRDVBMUMyNkUwMDhBQUM5MTEzNTQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQJP/5d8OSZTfsD2fE7n84eRZeCBkdAOj67TKP39m3yZYzSD/oUVVicJ/qfx/ t8t6+zMQVHKfJSAYq/UVhYFlMMQy+zyrkHJd7tWrd+xgcrW30lDUyrBhAb98AghG NQVp3ibEIUF7VB64sjP2BcauWUzrecLg60kJD67IVJrorGKpGoDDIbXA9XoML263 oMfbLimDgO+f8D9gLK8N8KiS3Raa2Vp0Y5jhoJBxFu4MBUOQT5ZihcCNYQzYHduh V4NkXMVuuatQy+/G4HBnKS3crXhXg+Bdg4KIDRcq1GXHPW3tzdjDeNUfQK8a6ocF 1kp+S9S5bYOFau3VHpPdQDUvsw== -----END CERTIFICATE-----Generated at Sat Aug 23 21:26:17 2025 by rpki-client