$ rpki-client -vvf rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft File: 0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft (raw, json) Hash identifier: Q0ItVvqQjq1DbbcVB0pwv3uyC76rFbgnwc7pMoaJmx0= Subject key identifier: 3D:04:13:E9:FF:05:7D:45:B5:59:9D:02:AF:7A:14:7B:E7:20:1A:16 Authority key identifier: 0A:2B:2F:4D:32:F3:48:A3:E7:5A:31:A4:8F:A6:BC:E1:94:9A:E7:F0 Certificate issuer: /CN=0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0 Certificate serial: 32A6CCEC6663B0833E93C24207200CB8B93FA91C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft Manifest number: 2D Signing time: Sat 23 Aug 2025 18:35:13 +0000 Manifest this update: Sat 23 Aug 2025 18:30:13 +0000 Manifest next update: Sun 24 Aug 2025 21:04:13 +0000 Files and hashes: 1: 323830343a353335343a3a2f33322d313238203d3e20323638353737.roa (hash: youEd1A6G9ZdagofZd+N94Vs6aXJfkDPw454AC/ppO0=) 2: 34352e3136332e3131362e302f32322d3332203d3e20323638353737.roa (hash: Et77+LynBLMWqk+rHPa5qaEBgzJDRsbZGk2IR87u0z0=) 3: 0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.crl (hash: dO7cBIYSKBs5QV1H7y/Mx0I3xIFLXcg8L+LcLyIkSVg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.crl rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 21:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a6:cc:ec:66:63:b0:83:3e:93:c2:42:07:20:0c:b8:b9:3f:a9:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0 Validity Not Before: Aug 23 18:30:13 2025 GMT Not After : Aug 24 21:04:13 2025 GMT Subject: CN=3D0413E9FF057D45B5599D02AF7A147BE7201A16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2b:f2:ac:44:89:4d:4b:de:27:5d:6d:0c:07: 45:dd:2f:1e:2d:de:2d:7e:48:be:20:5e:2f:72:43: 66:19:4f:2d:4c:02:ba:2f:9a:2e:74:92:1d:ae:63: ae:a1:d4:73:c9:14:fd:5d:5e:04:7c:57:cb:fd:80: 34:f2:34:71:7b:50:5f:bd:00:9d:3e:01:27:99:6e: 1a:71:e2:47:0e:a5:32:c7:ce:1f:d1:68:00:3f:b1: bf:45:4c:7e:23:b7:1a:ef:a7:b9:74:2e:ce:e2:d7: 33:97:c3:d4:fc:80:7a:83:28:5b:31:a4:06:0d:e1: 34:0d:08:f5:cd:82:cb:37:9a:da:db:20:6e:8a:80: f9:ee:53:6f:99:98:b1:6c:69:ad:f1:30:f7:b0:c7: 39:8b:2e:55:53:44:96:3d:d3:9e:7a:ee:0a:f1:28: c9:09:75:b6:c3:03:66:f4:5a:51:f9:37:97:93:75: 61:ea:4a:b3:b7:b5:1e:59:58:7b:72:ff:52:8c:d7: c4:45:44:87:a0:0b:81:c9:62:fa:d6:b4:75:84:46: 3b:1f:57:19:bd:3f:76:44:42:fa:22:c4:8d:fd:8f: 14:42:fc:b0:74:48:5b:0a:97:39:17:15:cb:fa:f3: d3:b7:3b:b9:6a:fb:17:b6:3b:e8:0d:fb:c3:d8:1b: d1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:04:13:E9:FF:05:7D:45:B5:59:9D:02:AF:7A:14:7B:E7:20:1A:16 X509v3 Authority Key Identifier: keyid:0A:2B:2F:4D:32:F3:48:A3:E7:5A:31:A4:8F:A6:BC:E1:94:9A:E7:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:39:6c:9d:5a:96:9b:1a:b3:cd:43:6e:58:a5:74:54:6f:3a: a2:4f:c5:24:dc:34:36:7a:b8:5f:4d:64:83:7e:21:e4:00:93: 76:5f:08:82:de:75:5a:32:1a:e4:17:ad:8e:a8:ca:20:78:2e: 5b:e8:7f:d0:2e:3c:c0:72:67:96:bf:43:4d:5f:1a:de:4e:7f: 40:01:45:77:a7:2d:b4:f2:ae:2a:c2:66:7d:77:26:18:04:c6: 95:90:76:8f:49:e7:83:dc:2a:b1:20:71:c9:a0:5c:c5:b4:4f: 16:ea:23:25:72:b5:6e:7c:a1:49:33:a9:c9:03:bf:27:63:5a: 73:b9:5b:41:85:ad:b4:88:b1:1a:7b:f3:04:68:7c:db:51:8b: ad:05:85:b6:37:ee:e4:ee:ed:f2:e4:85:e5:32:8d:de:58:db: 6d:f1:55:e9:b7:ff:b2:31:3d:09:e7:16:1c:88:77:75:90:a5: 06:a6:da:f5:5f:96:70:0b:d2:f1:b9:90:45:db:10:40:0b:22: 8a:1d:9c:3a:88:1e:9d:2f:23:26:ae:b5:eb:c2:bb:4c:a1:56: 11:6a:1e:a6:b5:e6:39:78:cc:fe:5b:24:20:52:cd:01:bd:2b: b2:85:98:a2:6a:d3:b9:1a:f1:bb:92:2c:46:bf:f2:78:2b:bf: 54:f9:c6:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMqbM7GZjsIM+k8JCByAMuLk/qRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEyQjJGNEQzMkYzNDhBM0U3NUEzMUE0OEZBNkJDRTE5 NDlBRTdGMDAeFw0yNTA4MjMxODMwMTNaFw0yNTA4MjQyMTA0MTNaMDMxMTAvBgNV BAMTKDNEMDQxM0U5RkYwNTdENDVCNTU5OUQwMkFGN0ExNDdCRTcyMDFBMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbK/KsRIlNS94nXW0MB0XdLx4t 3i1+SL4gXi9yQ2YZTy1MArovmi50kh2uY66h1HPJFP1dXgR8V8v9gDTyNHF7UF+9 AJ0+ASeZbhpx4kcOpTLHzh/RaAA/sb9FTH4jtxrvp7l0Ls7i1zOXw9T8gHqDKFsx pAYN4TQNCPXNgss3mtrbIG6KgPnuU2+ZmLFsaa3xMPewxzmLLlVTRJY905567grx KMkJdbbDA2b0WlH5N5eTdWHqSrO3tR5ZWHty/1KM18RFRIegC4HJYvrWtHWERjsf Vxm9P3ZEQvoixI39jxRC/LB0SFsKlzkXFcv689O3O7lq+xe2O+gN+8PYG9EDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPQQT6f8FfUW1WZ0Cr3oUe+cgGhYwHwYDVR0j BBgwFoAUCisvTTLzSKPnWjGkj6a84ZSa5/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRVl4Rzg3VUxNcGNHRlJONXR1cUpuQzRwUHZMUVNDRTlKVnZmOEM1OUZk SlIvMC8wQTJCMkY0RDMyRjM0OEEzRTc1QTMxQTQ4RkE2QkNFMTk0OUFFN0YwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBMkIyRjREMzJGMzQ4QTNF NzVBMzFBNDhGQTZCQ0UxOTQ5QUU3RjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RVl4Rzg3VUxNcGNHRlJONXR1cUpuQzRwUHZMUVNDRTlKVnZmOEM1OUZkSlIvMC8w QTJCMkY0RDMyRjM0OEEzRTc1QTMxQTQ4RkE2QkNFMTk0OUFFN0YwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGTlsnVqWmxqzzUNuWKV0VG86ok/FJNw0Nnq4X01kg34h5ACTdl8Igt51WjIa 5BetjqjKIHguW+h/0C48wHJnlr9DTV8a3k5/QAFFd6cttPKuKsJmfXcmGATGlZB2 j0nng9wqsSBxyaBcxbRPFuojJXK1bnyhSTOpyQO/J2Nac7lbQYWttIixGnvzBGh8 21GLrQWFtjfu5O7t8uSF5TKN3ljbbfFV6bf/sjE9CecWHIh3dZClBqba9V+WcAvS 8bmQRdsQQAsiih2cOogenS8jJq6168K7TKFWEWoeprXmOXjM/lskIFLNAb0rsoWY omrTuRrxu5IsRr/yeCu/VPnGLw== -----END CERTIFICATE-----Generated at Sun Aug 24 03:18:28 2025 by rpki-client