$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft File: 89F33609E2B118C8ED9A105548D2D01FD6E38729.mft (raw, json) Hash identifier: RyMOKOyj4lJeM6+6KC8yFW0TiNUgddbsAO6GmLxTrTk= Subject key identifier: 20:9B:94:C4:78:70:E0:54:FA:14:BB:78:22:26:25:75:C0:9D:5D:DC Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 Certificate issuer: /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Certificate serial: 4366684F0BB2C38DD91D8885090B4294FF67EA4A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject info access: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft Manifest number: 02A1 Signing time: Sat 23 Aug 2025 01:22:11 +0000 Manifest this update: Sat 23 Aug 2025 01:17:11 +0000 Manifest next update: Sun 24 Aug 2025 04:39:11 +0000 Files and hashes: 1: 3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa (hash: 91gQ1OFtC7i3YwbFOdgAOt94iN2xUARUXKGh62+Ssos=) 2: 3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa (hash: bMO8E7JDP414YIw6qvyG05VpeLGja7y87JGV9snRtok=) 3: 323830343a313263303a3a2f33322d3438203d3e20323633343936.roa (hash: yCRnKe7Cfo4f5weE5YMpi/ZO3/1Psrg+aJlLbswl12Y=) 4: 89F33609E2B118C8ED9A105548D2D01FD6E38729.crl (hash: 9eFdC8zxJtNd+/dPnjJAv4/vy49Atw5xMPTbiLIoy0E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 04:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:66:68:4f:0b:b2:c3:8d:d9:1d:88:85:09:0b:42:94:ff:67:ea:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Validity Not Before: Aug 23 01:17:11 2025 GMT Not After : Aug 24 04:39:11 2025 GMT Subject: CN=209B94C47870E054FA14BB7822262575C09D5DDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6f:fc:ca:98:2f:50:e7:42:fe:80:d8:52:03: fa:73:20:3f:f7:59:4d:aa:6e:8a:16:95:64:6a:0d: 84:1d:cc:03:18:27:e9:40:19:ce:2b:1e:be:5a:22: be:09:4f:93:6d:7b:d5:c3:8e:30:82:71:7b:e7:e0: 95:a6:14:5c:52:c8:95:00:27:bb:93:ff:75:65:03: ea:e0:04:f7:c3:20:c8:44:80:0f:73:d0:93:6f:8c: fc:75:21:a4:2c:91:33:9f:ea:dd:1d:2f:b5:41:b0: ab:18:57:6e:ce:5f:70:c3:d4:79:ba:ce:86:53:54: fb:0b:14:85:cb:8e:df:ac:f8:95:13:30:ca:03:b3: 8b:74:84:92:ae:12:43:b2:47:32:5b:24:75:89:e4: a0:a6:90:c8:ae:b1:a9:66:a6:36:ce:21:3d:3a:1f: 1d:fc:de:93:de:30:f0:be:1a:b4:9e:3c:bc:fb:50: 99:3a:a0:41:6a:6f:93:fd:b3:f7:7a:b7:ac:bd:9d: 16:01:7e:b7:81:c8:4e:14:3f:d3:fc:59:fa:a0:61: 0c:c2:09:cd:e6:b1:c2:5b:e6:d3:9f:8d:77:a1:21: 17:e0:4e:c0:ad:3f:95:56:e0:e0:6b:0a:5d:79:0e: 43:a0:4b:e7:10:b2:77:77:b0:37:6d:d7:d7:90:2c: 8d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9B:94:C4:78:70:E0:54:FA:14:BB:78:22:26:25:75:C0:9D:5D:DC X509v3 Authority Key Identifier: keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:85:4b:46:38:24:15:14:2d:c4:4a:71:49:80:1f:54:34:98: a0:56:c7:d1:5d:87:79:87:13:44:5a:0d:df:bb:b0:3f:39:f1: 5b:b4:55:26:db:0c:0e:92:76:d4:9f:04:6f:c4:96:cb:a0:1e: e0:f8:34:54:24:26:69:50:d1:7f:04:12:a7:47:b8:3d:c0:a8: c0:4a:a4:d1:40:30:01:54:89:ca:8a:d6:74:76:2b:43:1a:cc: b8:95:fb:b6:08:2a:83:38:ee:46:38:f5:ee:bc:66:2c:f8:e9: cc:f0:45:53:db:a9:71:69:47:67:8b:a5:c4:7c:56:78:52:f0: 2a:9f:d7:ae:06:4d:41:d4:0d:a6:d3:ac:0d:75:f1:35:94:2a: d6:ec:43:82:e9:12:1f:eb:1c:31:b4:08:f8:3f:57:57:ab:03: 8e:82:25:9e:7a:92:c6:2a:2a:56:04:c8:24:bd:5f:4c:29:32: a7:5e:2a:62:2a:85:08:90:99:58:a0:f0:88:59:fc:ed:a0:bb: 1f:5f:71:34:1d:4d:fb:95:eb:17:5e:b3:a4:27:37:e7:39:ea: 33:8a:3e:5d:c1:df:3d:c1:f3:83:af:17:4d:53:ff:ea:08:fb: f8:68:66:a0:66:5a:06:00:79:61:c0:e8:bd:7a:17:75:9b:b0: 87:4b:75:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ2ZoTwuyw43ZHYiFCQtClP9n6kowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlGMzM2MDlFMkIxMThDOEVEOUExMDU1NDhEMkQwMUZE NkUzODcyOTAeFw0yNTA4MjMwMTE3MTFaFw0yNTA4MjQwNDM5MTFaMDMxMTAvBgNV BAMTKDIwOUI5NEM0Nzg3MEUwNTRGQTE0QkI3ODIyMjYyNTc1QzA5RDVEREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTb/zKmC9Q50L+gNhSA/pzID/3 WU2qbooWlWRqDYQdzAMYJ+lAGc4rHr5aIr4JT5Nte9XDjjCCcXvn4JWmFFxSyJUA J7uT/3VlA+rgBPfDIMhEgA9z0JNvjPx1IaQskTOf6t0dL7VBsKsYV27OX3DD1Hm6 zoZTVPsLFIXLjt+s+JUTMMoDs4t0hJKuEkOyRzJbJHWJ5KCmkMiusalmpjbOIT06 Hx383pPeMPC+GrSePLz7UJk6oEFqb5P9s/d6t6y9nRYBfreByE4UP9P8WfqgYQzC Cc3mscJb5tOfjXehIRfgTsCtP5VW4OBrCl15DkOgS+cQsnd3sDdt19eQLI3DAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIJuUxHhw4FT6FLt4IiYldcCdXdwwHwYDVR0j BBgwFoAUifM2CeKxGMjtmhBVSNLQH9bjhykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4 ekUvMS84OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RjMzNjA5RTJCMTE4QzhF RDlBMTA1NTQ4RDJEMDFGRDZFMzg3MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4ekUvMS84 OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALoVLRjgkFRQtxEpxSYAfVDSYoFbH0V2HeYcTRFoN37uwPznxW7RVJtsMDpJ2 1J8Eb8SWy6Ae4Pg0VCQmaVDRfwQSp0e4PcCowEqk0UAwAVSJyorWdHYrQxrMuJX7 tggqgzjuRjj17rxmLPjpzPBFU9upcWlHZ4ulxHxWeFLwKp/XrgZNQdQNptOsDXXx NZQq1uxDgukSH+scMbQI+D9XV6sDjoIlnnqSxioqVgTIJL1fTCkyp14qYiqFCJCZ WKDwiFn87aC7H19xNB1N+5XrF16zpCc35znqM4o+XcHfPcHzg68XTVP/6gj7+Ghm oGZaBgB5YcDovXoXdZuwh0t1aw== -----END CERTIFICATE-----Generated at Sat Aug 23 12:28:54 2025 by rpki-client