$ rpki-client -vvf rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft File: 10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft (raw, json) Hash identifier: cVN02zoPWv/7PAkY5E+Z+pZZEpCZECqENcIRa74cZ8A= Subject key identifier: 84:25:A4:88:47:36:17:F3:6C:84:36:14:8B:1A:0E:08:EE:6B:5F:C6 Authority key identifier: 10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10 Certificate issuer: /CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10 Certificate serial: 6D8D4AFC09303091CBCE6B3B3ABB5A417CA7F2D8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer Subject info access: rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft Manifest number: 02A7 Signing time: Sat 23 Aug 2025 04:54:48 +0000 Manifest this update: Sat 23 Aug 2025 04:49:48 +0000 Manifest next update: Sun 24 Aug 2025 05:24:48 +0000 Files and hashes: 1: 3137372e33372e33302e302f32342d3234203d3e20323730353934.roa (hash: Ey7RS6ZvA9Mg77sUwDuoQ8ZDRjfaKl8xEJ8Pcs9LN8I=) 2: 3137372e33372e32382e302f32322d3232203d3e20323730353934.roa (hash: KWppXTqmgTsfYVtQwBA0L55uv+geHmhw9Ux5utAeIAg=) 3: 3137372e33372e32382e302f32332d3233203d3e20323730353934.roa (hash: fE24f26j0kL/eARBJ/0bEc8rHNXMJe4dMA29NYJzh/E=) 4: 3137372e33372e32392e302f32342d3234203d3e20323730353934.roa (hash: f6yTzBfUYT5Bjdi76PtLBqtiOolgjET/iU/l6X+ipa4=) 5: 323830343a366536343a3a2f33322d3430203d3e20323730353934.roa (hash: FJzuXb3rPKEB9M/UrCEVvzbujD6MI9jHBtF6Dpipnxc=) 6: 10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl (hash: NR2a95NNgiF3aowx4gEpKA5QdQ9sN7f8m44Z7QVH+n4=) 7: 3137372e33372e33312e302f32342d3234203d3e20323730353934.roa (hash: FDFbmXXsRE37sk0qOjiCb7hbsCEVD3Su2L9vgvnmp7E=) 8: 3137372e33372e33302e302f32332d3233203d3e20323730353934.roa (hash: jZMapOUe84nS0/HmSAfDLEi0KYVQyv8elBOcMNwdzlk=) 9: 3137372e33372e32382e302f32342d3234203d3e20323730353934.roa (hash: EmWje+arIFTV7gO7Z/KIu2yxqAhGMRVeT3C7Qk900tY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 05:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:8d:4a:fc:09:30:30:91:cb:ce:6b:3b:3a:bb:5a:41:7c:a7:f2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10 Validity Not Before: Aug 23 04:49:48 2025 GMT Not After : Aug 24 05:24:48 2025 GMT Subject: CN=8425A488473617F36C8436148B1A0E08EE6B5FC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9b:33:9e:58:c4:54:aa:ad:a9:45:f6:52:00: c9:be:63:df:c3:ef:ec:1c:5e:3b:d5:2d:e0:84:f9: e7:78:59:e6:3f:d5:c6:73:a2:b9:f9:d6:ce:82:a4: 31:8f:68:96:36:84:29:62:e8:17:fe:57:5a:6e:23: 67:c5:66:6e:db:32:73:9e:25:37:3d:c7:8b:2a:b2: 3d:6b:57:5c:47:05:7c:9c:b7:c6:8f:a7:ee:2e:dd: 4d:1f:fa:e7:07:bb:aa:24:55:51:ec:6b:42:89:28: 20:86:c0:c8:73:a5:c2:99:27:ec:fd:b7:eb:a9:a4: f3:31:ba:a5:52:3e:f8:3c:bc:61:0b:a7:eb:5f:dd: 54:72:d5:b3:f6:d7:aa:15:61:60:ff:c0:1d:a4:9a: 49:31:dd:21:6e:41:3f:66:5f:dc:9a:a6:f1:c7:90: e3:f7:10:f8:a2:a9:08:fd:ee:d4:a0:08:33:63:90: 48:20:ba:72:2a:ea:4b:aa:db:c2:e4:58:41:b4:5a: cd:fc:ac:1d:04:3b:9c:71:fc:67:4f:2c:49:f7:f2: 18:57:da:c3:b0:b0:8f:9f:1a:e4:36:e6:dc:4c:c7: 2c:cf:8f:8a:01:75:ad:aa:3e:cf:9e:0e:d4:2f:c9: 45:bf:54:11:23:e6:17:82:1a:82:71:08:26:5e:c9: b7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:25:A4:88:47:36:17:F3:6C:84:36:14:8B:1A:0E:08:EE:6B:5F:C6 X509v3 Authority Key Identifier: keyid:10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:68:89:2d:dd:72:de:05:d5:d0:85:0c:92:a6:f5:05:43:96: e3:d3:21:1f:89:df:69:b3:d3:35:a0:90:48:94:48:d2:3f:49: 26:b1:fd:2c:5c:4b:7a:72:ce:89:93:22:9c:f1:ef:81:a0:09: a3:07:aa:49:ff:77:a8:49:d6:02:6b:2f:76:b7:fd:cc:9e:99: 4b:f2:d7:59:38:7c:f0:03:2e:fe:b0:5c:19:e7:19:50:1d:24: be:b0:1a:fc:ae:6b:34:57:9d:e6:ff:a2:02:59:54:a8:c9:e1: 2d:08:07:f5:b2:9c:0c:82:38:45:be:62:f1:8a:40:08:f9:c6: a4:42:46:09:b7:9c:b6:74:60:55:1f:83:49:1c:a9:67:05:f0: 83:f9:10:34:bc:2d:59:7b:6d:13:19:df:00:a4:c0:27:23:c3: 5c:4c:43:38:43:18:d4:8a:ba:3a:4d:15:b6:56:40:2f:13:b8: 08:df:f8:74:6a:6a:fe:8e:ba:5a:85:2f:b8:f2:45:db:1e:0f: bd:94:b2:3c:45:d3:2b:03:0b:47:19:c1:a6:9b:4c:46:6e:1f: ef:ca:e6:cf:e5:a9:52:52:a1:55:7e:18:a8:d8:57:48:0d:4a: 3b:d0:f2:a9:93:56:a5:69:ad:66:35:d3:5f:ac:43:8c:72:b4: e3:f1:14:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbY1K/AkwMJHLzms7OrtaQXyn8tgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCRjM5Q0VFNDc3QzIzQkU2MEJBOTk5QkE3QjcwMTcx QkZCMkMxMDAeFw0yNTA4MjMwNDQ5NDhaFw0yNTA4MjQwNTI0NDhaMDMxMTAvBgNV BAMTKDg0MjVBNDg4NDczNjE3RjM2Qzg0MzYxNDhCMUEwRTA4RUU2QjVGQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLmzOeWMRUqq2pRfZSAMm+Y9/D 7+wcXjvVLeCE+ed4WeY/1cZzorn51s6CpDGPaJY2hCli6Bf+V1puI2fFZm7bMnOe JTc9x4sqsj1rV1xHBXyct8aPp+4u3U0f+ucHu6okVVHsa0KJKCCGwMhzpcKZJ+z9 t+uppPMxuqVSPvg8vGELp+tf3VRy1bP216oVYWD/wB2kmkkx3SFuQT9mX9yapvHH kOP3EPiiqQj97tSgCDNjkEggunIq6kuq28LkWEG0Ws38rB0EO5xx/GdPLEn38hhX 2sOwsI+fGuQ25txMxyzPj4oBda2qPs+eDtQvyUW/VBEj5heCGoJxCCZeybdDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhCWkiEc2F/NshDYUixoOCO5rX8YwHwYDVR0j BBgwFoAUEL85zuR3wjvmC6mZuntwFxv7LBAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0gzdkJnQ1VrNXBEWXpZWHhidTRvcVI3TVBTWDJWUFczZWlWWDRGN3k2 em8vMS8xMEJGMzlDRUU0NzdDMjNCRTYwQkE5OTlCQTdCNzAxNzFCRkIyQzEwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwQkYzOUNFRTQ3N0MyM0JF NjBCQTk5OUJBN0I3MDE3MUJGQjJDMTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0gzdkJnQ1VrNXBEWXpZWHhidTRvcVI3TVBTWDJWUFczZWlWWDRGN3k2em8vMS8x MEJGMzlDRUU0NzdDMjNCRTYwQkE5OTlCQTdCNzAxNzFCRkIyQzEwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo2iJLd1y3gXV0IUMkqb1BUOW49MhH4nfabPTNaCQSJRI0j9JJrH9LFxLenLO iZMinPHvgaAJoweqSf93qEnWAmsvdrf9zJ6ZS/LXWTh88AMu/rBcGecZUB0kvrAa /K5rNFed5v+iAllUqMnhLQgH9bKcDII4Rb5i8YpACPnGpEJGCbectnRgVR+DSRyp ZwXwg/kQNLwtWXttExnfAKTAJyPDXExDOEMY1Iq6Ok0VtlZALxO4CN/4dGpq/o66 WoUvuPJF2x4PvZSyPEXTKwMLRxnBpptMRm4f78rmz+WpUlKhVX4YqNhXSA1KO9Dy qZNWpWmtZjXTX6xDjHK04/EU8A== -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:45 2025 by rpki-client