$ rpki-client -vvf rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft File: D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft (raw, json) Hash identifier: BlAo+bRvuDkqHY3YQhatqd5WDZnfmjOFlyn0Cm7CTgU= Subject key identifier: A2:37:1B:4B:C4:D0:C1:8A:B9:CA:36:66:2B:63:0F:51:96:BF:6C:F2 Authority key identifier: D8:BC:28:57:A2:90:8D:A9:E9:7E:EF:42:2A:25:74:5D:89:F2:82:B3 Certificate issuer: /CN=D8BC2857A2908DA9E97EEF422A25745D89F282B3 Certificate serial: 2F9EF607DE62FFD6269DF98C3799200387732338 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer Subject info access: rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft Manifest number: 028F Signing time: Sat 23 Aug 2025 02:13:18 +0000 Manifest this update: Sat 23 Aug 2025 02:08:18 +0000 Manifest next update: Sun 24 Aug 2025 03:25:18 +0000 Files and hashes: 1: D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl (hash: 6dBHt9rHr2T8ix17ROaYwBHmK3tIqcT9aWEE9VzPCJk=) 2: 323830343a343630343a3a2f33322d3334203d3e20323636393632.roa (hash: xwaJR5dhjhBO4fQGCT/XLU8PXXzRhmShVjgGEu1UG64=) 3: 34352e3232362e3132342e302f32322d3234203d3e20323636393632.roa (hash: GajE+SmGWaNYBKVNw4W3zPMLuW5M9g5AsGBUOwDGmFM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 03:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:9e:f6:07:de:62:ff:d6:26:9d:f9:8c:37:99:20:03:87:73:23:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8BC2857A2908DA9E97EEF422A25745D89F282B3 Validity Not Before: Aug 23 02:08:18 2025 GMT Not After : Aug 24 03:25:18 2025 GMT Subject: CN=A2371B4BC4D0C18AB9CA36662B630F5196BF6CF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9a:e7:cf:46:33:8b:e9:fb:a2:81:cf:3f:e2: 50:33:d6:6c:af:54:82:5a:07:cc:1a:26:a6:a0:6f: b8:ad:e5:7f:ab:6b:f5:a7:31:ca:e9:11:97:66:89: 6a:a9:e6:b2:24:f0:ed:37:fd:e6:63:6a:fe:fc:af: e8:ed:37:03:64:4f:81:2c:5e:44:48:06:ca:1b:ad: d0:15:69:f1:8c:f6:45:13:0b:94:25:b8:ae:79:68: 5f:c7:dd:06:19:a8:98:a5:5c:6c:15:55:bb:cd:82: 06:a0:f0:cc:75:bd:9d:a4:2d:cc:3d:58:80:fe:ef: 1d:31:5d:d7:7c:c6:19:00:89:2d:8c:09:a0:bc:2c: ad:10:3e:4f:a8:1c:52:95:6e:e3:49:68:96:d3:55: 99:11:6e:be:5b:a8:0a:23:0c:02:06:b6:aa:16:56: a2:f3:80:09:0a:5d:aa:ea:2d:8a:3c:f4:f7:52:a4: 27:76:a6:a8:de:27:13:43:42:61:6e:9f:55:1f:d5: 2d:e2:68:de:ad:29:18:03:40:46:81:8b:f8:e4:10: 2c:cc:8d:33:05:30:c2:c2:97:29:cb:62:86:e2:bb: 48:71:95:36:e1:c9:3f:33:84:c9:8e:b4:51:c1:9e: 97:a3:2f:d7:fd:0e:75:cb:bb:4c:69:db:e0:ea:24: de:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:37:1B:4B:C4:D0:C1:8A:B9:CA:36:66:2B:63:0F:51:96:BF:6C:F2 X509v3 Authority Key Identifier: keyid:D8:BC:28:57:A2:90:8D:A9:E9:7E:EF:42:2A:25:74:5D:89:F2:82:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:06:65:d8:0d:35:56:7f:f2:e8:a2:65:d4:54:6a:46:3e:5e: ba:8f:3b:b2:58:c1:c2:a0:49:dc:4b:42:a0:52:d3:3e:a1:89: ae:39:37:7f:3c:23:e0:57:77:83:d6:f6:3f:9b:ae:0e:0a:ce: f1:87:94:5b:4b:7e:63:59:bc:05:48:18:79:e8:0b:a2:3c:e5: 9a:12:a2:24:5d:8c:75:ec:cd:ef:3a:fe:d2:9e:e3:59:63:45: 3f:2c:68:ce:36:aa:ea:a3:84:10:50:e8:f8:da:b7:f3:52:62: fe:79:c5:56:35:67:a9:b9:ae:06:33:1b:a2:aa:bc:92:31:ce: a2:43:eb:93:ba:4c:e2:d2:f6:6f:ce:71:76:de:9c:83:49:1d: 73:ce:b0:61:ec:f4:39:1a:a4:66:57:d8:14:6d:5b:89:3a:8c: 06:9e:f7:52:60:b7:2d:68:d4:3d:64:1b:f0:91:67:fb:90:ea: 14:db:37:5d:ac:73:8e:4b:c8:6f:bd:36:c9:e4:30:f9:d6:0d: c9:0a:79:21:bc:18:35:7d:fb:d0:bf:01:13:a4:4b:06:5f:db: bb:0a:40:50:fb:9c:a8:12:f2:ee:82:74:01:e1:98:80:6c:a1: 0d:6c:c7:c7:90:e2:2e:ab:26:ba:7f:d7:33:6c:15:7e:2c:d9: 4e:bd:23:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUL572B95i/9YmnfmMN5kgA4dzIzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCQzI4NTdBMjkwOERBOUU5N0VFRjQyMkEyNTc0NUQ4 OUYyODJCMzAeFw0yNTA4MjMwMjA4MThaFw0yNTA4MjQwMzI1MThaMDMxMTAvBgNV BAMTKEEyMzcxQjRCQzREMEMxOEFCOUNBMzY2NjJCNjMwRjUxOTZCRjZDRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNmufPRjOL6fuigc8/4lAz1myv VIJaB8waJqagb7it5X+ra/WnMcrpEZdmiWqp5rIk8O03/eZjav78r+jtNwNkT4Es XkRIBsobrdAVafGM9kUTC5QluK55aF/H3QYZqJilXGwVVbvNggag8Mx1vZ2kLcw9 WID+7x0xXdd8xhkAiS2MCaC8LK0QPk+oHFKVbuNJaJbTVZkRbr5bqAojDAIGtqoW VqLzgAkKXarqLYo89PdSpCd2pqjeJxNDQmFun1Uf1S3iaN6tKRgDQEaBi/jkECzM jTMFMMLClynLYobiu0hxlTbhyT8zhMmOtFHBnpejL9f9DnXLu0xp2+DqJN4nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUojcbS8TQwYq5yjZmK2MPUZa/bPIwHwYDVR0j BBgwFoAU2LwoV6KQjanpfu9CKiV0XYnygrMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRk1yamtDRXlDN3VrVXp1RVc3d1JUdjdEV1pBemV0a3VVNXc3bjJTNU1y ZDYvMC9EOEJDMjg1N0EyOTA4REE5RTk3RUVGNDIyQTI1NzQ1RDg5RjI4MkIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4QkMyODU3QTI5MDhEQTlF OTdFRUY0MjJBMjU3NDVEODlGMjgyQjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rk1yamtDRXlDN3VrVXp1RVc3d1JUdjdEV1pBemV0a3VVNXc3bjJTNU1yZDYvMC9E OEJDMjg1N0EyOTA4REE5RTk3RUVGNDIyQTI1NzQ1RDg5RjI4MkIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeQZl2A01Vn/y6KJl1FRqRj5euo87sljBwqBJ3EtCoFLTPqGJrjk3fzwj4Fd3 g9b2P5uuDgrO8YeUW0t+Y1m8BUgYeegLojzlmhKiJF2MdezN7zr+0p7jWWNFPyxo zjaq6qOEEFDo+Nq381Ji/nnFVjVnqbmuBjMboqq8kjHOokPrk7pM4tL2b85xdt6c g0kdc86wYez0ORqkZlfYFG1biTqMBp73UmC3LWjUPWQb8JFn+5DqFNs3XaxzjkvI b702yeQw+dYNyQp5IbwYNX370L8BE6RLBl/buwpAUPucqBLy7oJ0AeGYgGyhDWzH x5DiLqsmun/XM2wVfizZTr0j0Q== -----END CERTIFICATE-----Generated at Sat Aug 23 12:25:26 2025 by rpki-client