$ rpki-client -vvf rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft File: 1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft (raw, json) Hash identifier: oXA9T+LRUwL7S0UuLHb5r3o7ws1c4+rh/8RybBy6Spw= Subject key identifier: DD:2B:63:DA:00:CB:09:01:E3:87:AB:0E:CF:25:A5:87:17:EE:04:45 Authority key identifier: 1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F Certificate issuer: /CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F Certificate serial: 086DC06493D40AACD75EEA888A8FE5A99ABC6343 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft Manifest number: A8 Signing time: Sat 23 Aug 2025 10:19:22 +0000 Manifest this update: Sat 23 Aug 2025 10:14:22 +0000 Manifest next update: Sun 24 Aug 2025 11:41:22 +0000 Files and hashes: 1: 34352e3138322e3134382e302f32322d3234203d3e20323733343134.roa (hash: dbbmdVzbgg93YC+/yC7kPmE+pyR0GJJ9WJLl+Jcl/IY=) 2: 323830343a386534343a3a2f33322d3438203d3e20323733343134.roa (hash: NpcxWvXzal1YKXgip4gJbMKKp8E5cO//NlFEyag8Gr0=) 3: 1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl (hash: +bkxNwxlMiEeQLMONKAn9jS/NtAeV88Snb9dLHGSE+Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 11:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:6d:c0:64:93:d4:0a:ac:d7:5e:ea:88:8a:8f:e5:a9:9a:bc:63:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F Validity Not Before: Aug 23 10:14:22 2025 GMT Not After : Aug 24 11:41:22 2025 GMT Subject: CN=DD2B63DA00CB0901E387AB0ECF25A58717EE0445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e0:90:97:d3:07:29:12:6d:5b:bd:ff:41:80: 4f:26:02:0e:35:15:62:8e:10:f5:e5:b3:9f:fb:e7: 53:db:9c:71:85:d2:22:86:74:84:9f:09:1f:ba:15: a9:27:71:d2:aa:99:bd:2d:80:23:1e:97:e0:b1:4e: 1a:15:e1:f9:6b:0f:d3:92:65:21:60:27:77:80:35: 6d:bc:de:c7:4e:d4:aa:80:b8:f0:d9:ef:a5:20:87: de:02:9f:23:8d:87:87:51:2c:12:24:7c:18:1f:94: 9a:ea:a3:fe:b8:5e:59:e5:0b:66:c9:0c:67:c4:db: 01:23:57:4a:8f:e8:06:b3:7a:f6:3a:62:18:fe:66: c8:33:0d:15:c2:84:c2:cc:91:97:7b:b4:07:dd:e6: 1e:05:7b:80:b6:38:f7:36:1b:4b:76:5c:5e:b5:5a: 14:0e:af:f5:b5:61:cb:29:e4:10:fb:70:66:a9:06: 57:a9:76:3b:55:34:5c:36:3d:03:28:fd:d5:3d:57: e0:cd:75:55:08:1d:29:ba:3f:bc:b5:62:f0:38:fa: 61:04:d7:ee:a9:f4:b6:aa:96:b5:fc:37:9a:3e:db: 1b:d0:46:81:34:18:ad:42:99:3f:77:d1:b3:a7:43: 3c:05:01:c5:0d:c0:5d:35:db:d6:d5:36:ef:6f:74: bb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2B:63:DA:00:CB:09:01:E3:87:AB:0E:CF:25:A5:87:17:EE:04:45 X509v3 Authority Key Identifier: keyid:1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:34:0c:b9:e7:b5:ff:27:db:7e:af:d6:a5:8d:86:4d:f7:14: 6d:42:28:b8:59:5c:09:c9:30:68:b5:08:1f:be:2a:bf:57:5d: c3:d6:a3:b9:d1:02:e3:60:5d:b7:12:b0:ea:57:d0:78:51:fa: ca:c6:88:a9:7f:a6:e8:73:1b:7e:f0:65:8a:b9:d0:e3:6a:a9: be:59:f1:32:d4:3a:9d:44:e3:a4:74:e5:72:f8:43:b0:6b:8a: 3b:45:ef:76:8c:b2:a4:cc:44:a6:83:6b:43:e8:63:b3:f5:11: 58:66:a0:53:dc:03:88:4b:dd:f2:4c:64:df:3b:ad:10:c7:f7: 14:0b:81:e9:82:30:5c:4b:a2:35:07:41:e7:32:cf:4b:1f:f6: 07:29:3b:3c:6c:fa:1f:ef:cc:80:91:a0:08:a7:00:85:93:bd: 4d:62:18:9e:85:43:c8:e4:7d:4e:62:e6:58:48:93:1a:4d:6a: 67:80:b0:72:a4:c4:32:1f:87:ff:57:0e:70:ed:d0:07:0c:b3: 87:cf:40:d1:df:4c:00:0b:2b:ec:59:0f:4d:86:2a:4e:88:4a: cd:28:69:3b:18:5b:cb:03:5a:43:6f:f6:1f:c9:3e:c0:e0:a3: c6:1e:57:f7:87:c8:29:79:6a:3c:56:80:74:08:01:55:89:b4: 2b:d5:8e:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCG3AZJPUCqzXXuqIio/lqZq8Y0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRkRDQTcwMzI5QjlEQ0QyMTc2MDlCRDlDRTU5NDJG RTFDNkEyRjAeFw0yNTA4MjMxMDE0MjJaFw0yNTA4MjQxMTQxMjJaMDMxMTAvBgNV BAMTKEREMkI2M0RBMDBDQjA5MDFFMzg3QUIwRUNGMjVBNTg3MTdFRTA0NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94JCX0wcpEm1bvf9BgE8mAg41 FWKOEPXls5/751PbnHGF0iKGdISfCR+6FakncdKqmb0tgCMel+CxThoV4flrD9OS ZSFgJ3eANW283sdO1KqAuPDZ76Ugh94CnyONh4dRLBIkfBgflJrqo/64XlnlC2bJ DGfE2wEjV0qP6AazevY6Yhj+ZsgzDRXChMLMkZd7tAfd5h4Fe4C2OPc2G0t2XF61 WhQOr/W1Ycsp5BD7cGapBlepdjtVNFw2PQMo/dU9V+DNdVUIHSm6P7y1YvA4+mEE 1+6p9LaqlrX8N5o+2xvQRoE0GK1CmT930bOnQzwFAcUNwF0129bVNu9vdLtBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3Stj2gDLCQHjh6sOzyWlhxfuBEUwHwYDVR0j BBgwFoAUHO/cpwMpudzSF2Cb2c5ZQv4cai8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzVHOUhjVXpQQURjZGF4TnlDVE5KS1RhTUg2U0N4eWNpOTFQVlg1WGFt Q1gvMC8xQ0VGRENBNzAzMjlCOURDRDIxNzYwOUJEOUNFNTk0MkZFMUM2QTJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDRUZEQ0E3MDMyOUI5RENE MjE3NjA5QkQ5Q0U1OTQyRkUxQzZBMkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzVHOUhjVXpQQURjZGF4TnlDVE5KS1RhTUg2U0N4eWNpOTFQVlg1WGFtQ1gvMC8x Q0VGRENBNzAzMjlCOURDRDIxNzYwOUJEOUNFNTk0MkZFMUM2QTJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwjQMuee1/yfbfq/WpY2GTfcUbUIouFlcCckwaLUIH74qv1ddw9ajudEC42Bd txKw6lfQeFH6ysaIqX+m6HMbfvBlirnQ42qpvlnxMtQ6nUTjpHTlcvhDsGuKO0Xv doyypMxEpoNrQ+hjs/URWGagU9wDiEvd8kxk3zutEMf3FAuB6YIwXEuiNQdB5zLP Sx/2Byk7PGz6H+/MgJGgCKcAhZO9TWIYnoVDyOR9TmLmWEiTGk1qZ4CwcqTEMh+H /1cOcO3QBwyzh89A0d9MAAsr7FkPTYYqTohKzShpOxhbywNaQ2/2H8k+wOCjxh5X 94fIKXlqPFaAdAgBVYm0K9WOpg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:19:05 2025 by rpki-client