$ rpki-client -vvf rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft File: D4B92897692C4F611B738C6728923C318CA5378D.mft (raw, json) Hash identifier: 3a8s8alyaMnWpMDHbWrHiV0AJRA1oSi8cmuje1td/fQ= Subject key identifier: 1D:A0:9F:DB:E4:08:30:FE:C9:BF:04:16:DC:31:94:4C:5F:89:38:3E Authority key identifier: D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D Certificate issuer: /CN=D4B92897692C4F611B738C6728923C318CA5378D Certificate serial: 65B4D97C46E9D5A2349FDD2371913ED42159EB5C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer Subject info access: rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft Manifest number: 028A Signing time: Fri 22 Aug 2025 19:05:23 +0000 Manifest this update: Fri 22 Aug 2025 19:00:23 +0000 Manifest next update: Sat 23 Aug 2025 23:04:23 +0000 Files and hashes: 1: D4B92897692C4F611B738C6728923C318CA5378D.crl (hash: dASwpM1fKEwFypqrTM8DwzDExVmJlMcRMOrE3A/kPNw=) 2: 323830343a386133343a656330303a3a2f33382d3338203d3e20323733363534.roa (hash: 7nFV3a+hQjLyzppGzpIflRodGqWB/Ue6XkXpTxIfQY4=) 3: 323830343a386133343a3a2f33382d3338203d3e20323733363534.roa (hash: F8C1M9ExsKqvOiXN93YJ+GMs5GM54Va82EHzWjYNmOI=) 4: 323830343a386133343a666330303a3a2f33382d3338203d3e20323733363534.roa (hash: Cz6E9/3ppBWDY1aQmtRNWMr0zzfNkr0yKTQZi86JYiA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.crl rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 23:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b4:d9:7c:46:e9:d5:a2:34:9f:dd:23:71:91:3e:d4:21:59:eb:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4B92897692C4F611B738C6728923C318CA5378D Validity Not Before: Aug 22 19:00:23 2025 GMT Not After : Aug 23 23:04:23 2025 GMT Subject: CN=1DA09FDBE40830FEC9BF0416DC31944C5F89383E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3d:64:50:ac:b4:cb:f5:db:4a:83:d9:ce:7e: f1:8c:43:45:bd:31:86:80:e6:27:fa:da:ed:5b:06: fd:9d:d2:c5:88:f1:41:3d:88:94:7e:4f:75:96:36: b7:1c:c3:e5:04:e0:0d:85:8e:74:fe:32:1c:8c:82: 40:13:ac:03:4b:7c:c0:28:f1:99:51:78:c3:42:a7: 8d:15:94:2d:ed:6d:97:58:e6:df:07:0b:3d:2b:3c: 73:3f:bf:69:17:42:e3:43:21:a0:d5:a6:66:55:58: 78:14:2d:9a:c4:48:f3:8e:1d:c0:c6:62:4f:b7:58: 55:30:9f:7e:10:eb:1c:9d:d4:40:f1:f7:26:72:70: 29:5d:d9:e4:ef:1d:b0:34:c6:ca:ff:c3:2e:90:17: 62:56:c2:f5:ea:44:3d:a2:c4:20:97:36:26:5d:7b: 6d:92:b0:32:b0:36:c9:45:87:50:f1:da:6b:e3:d0: 1f:e0:a2:fd:92:f3:0a:78:15:e8:37:d3:73:0b:ce: 85:6d:1b:98:a1:13:19:10:d6:21:2f:be:82:fb:cc: ac:08:a8:9c:20:aa:11:57:10:e1:64:c4:44:ab:1d: 4c:e5:46:ee:33:7d:b3:c1:e4:a4:b6:da:a7:16:52: 9a:02:2a:53:dc:d2:e7:0a:5c:98:a9:ff:bd:9c:18: 1c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A0:9F:DB:E4:08:30:FE:C9:BF:04:16:DC:31:94:4C:5F:89:38:3E X509v3 Authority Key Identifier: keyid:D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:16:43:62:07:02:79:e7:20:43:3e:13:db:88:f9:37:e5:d3: cb:6f:88:58:02:fe:0b:b6:db:a7:8a:aa:1b:76:c7:d4:38:61: c7:6f:79:85:53:1f:50:65:31:a7:cf:a5:e6:4e:cf:d8:ef:58: 78:ef:4e:2b:d7:b5:b6:3c:67:d1:99:80:35:e3:6d:9a:a3:10: 8b:1a:e8:27:ad:e6:a2:f4:b0:2d:71:8b:9f:02:e0:32:44:93: ab:04:bf:67:9f:a3:da:97:40:e0:2e:9e:14:c1:f9:48:44:7c: 77:cc:8a:74:eb:4b:63:a9:86:0e:92:18:41:40:70:db:f0:39: 05:fe:ba:82:bc:17:cd:0e:99:c4:6d:a0:cb:71:09:6d:14:87: 9f:64:a5:2b:c4:25:f3:fb:4b:5c:17:49:9a:9c:51:78:bd:1d: 44:47:02:7b:6a:68:77:e4:e1:9e:63:a6:5d:9d:58:99:b5:14: 6b:1a:1f:dd:54:43:03:ed:76:dd:6b:14:e1:74:a2:d4:e2:e6: e6:0d:ec:88:04:36:aa:ad:33:3b:b1:95:b2:cb:c9:a9:e5:07: 13:fb:5a:1f:83:fc:a9:97:c8:30:d4:de:ac:e3:f7:22:1b:f4: fe:92:fb:5f:6a:fa:f7:4c:d4:3d:35:83:4e:cb:9f:a2:32:a9: b1:8c:43:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZbTZfEbp1aI0n90jcZE+1CFZ61wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRCOTI4OTc2OTJDNEY2MTFCNzM4QzY3Mjg5MjNDMzE4 Q0E1Mzc4RDAeFw0yNTA4MjIxOTAwMjNaFw0yNTA4MjMyMzA0MjNaMDMxMTAvBgNV BAMTKDFEQTA5RkRCRTQwODMwRkVDOUJGMDQxNkRDMzE5NDRDNUY4OTM4M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLPWRQrLTL9dtKg9nOfvGMQ0W9 MYaA5if62u1bBv2d0sWI8UE9iJR+T3WWNrccw+UE4A2FjnT+MhyMgkATrANLfMAo 8ZlReMNCp40VlC3tbZdY5t8HCz0rPHM/v2kXQuNDIaDVpmZVWHgULZrESPOOHcDG Yk+3WFUwn34Q6xyd1EDx9yZycCld2eTvHbA0xsr/wy6QF2JWwvXqRD2ixCCXNiZd e22SsDKwNslFh1Dx2mvj0B/gov2S8wp4Feg303MLzoVtG5ihExkQ1iEvvoL7zKwI qJwgqhFXEOFkxESrHUzlRu4zfbPB5KS22qcWUpoCKlPc0ucKXJip/72cGBxpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHaCf2+QIMP7JvwQW3DGUTF+JOD4wHwYDVR0j BBgwFoAU1Lkol2ksT2Ebc4xnKJI8MYylN40wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2hucUJoRU1oUk5TVnlodmNLbkNjamU0dW9qRDFFTHB3VGREV2ViTUh6 ZzMvMS9ENEI5Mjg5NzY5MkM0RjYxMUI3MzhDNjcyODkyM0MzMThDQTUzNzhELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0QjkyODk3NjkyQzRGNjEx QjczOEM2NzI4OTIzQzMxOENBNTM3OEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2hucUJoRU1oUk5TVnlodmNLbkNjamU0dW9qRDFFTHB3VGREV2ViTUh6ZzMvMS9E NEI5Mjg5NzY5MkM0RjYxMUI3MzhDNjcyODkyM0MzMThDQTUzNzhELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgxZDYgcCeecgQz4T24j5N+XTy2+IWAL+C7bbp4qqG3bH1Dhhx295hVMfUGUx p8+l5k7P2O9YeO9OK9e1tjxn0ZmANeNtmqMQixroJ63movSwLXGLnwLgMkSTqwS/ Z5+j2pdA4C6eFMH5SER8d8yKdOtLY6mGDpIYQUBw2/A5Bf66grwXzQ6ZxG2gy3EJ bRSHn2SlK8Ql8/tLXBdJmpxReL0dREcCe2pod+ThnmOmXZ1YmbUUaxof3VRDA+12 3WsU4XSi1OLm5g3siAQ2qq0zO7GVssvJqeUHE/taH4P8qZfIMNTerOP3Ihv0/pL7 X2r690zUPTWDTsufojKpsYxDIg== -----END CERTIFICATE-----Generated at Sat Aug 23 14:04:01 2025 by rpki-client