$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft File: D95738A14AD98B305087E048FD2E4821E5E2299A.mft (raw, json) Hash identifier: aednvfpUCA3zVddrQjaLZoOlpGyx7Rma2hlUCLA3bfA= Subject key identifier: 01:E8:EE:F8:CB:49:52:C8:AF:A2:5B:56:7D:B3:59:CF:FC:F7:38:97 Authority key identifier: D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A Certificate issuer: /CN=D95738A14AD98B305087E048FD2E4821E5E2299A Certificate serial: 20DABCE04DD98E18A114BA83AC733D3E84EC3D13 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject info access: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft Manifest number: B4 Signing time: Sat 23 Aug 2025 00:40:01 +0000 Manifest this update: Sat 23 Aug 2025 00:35:01 +0000 Manifest next update: Sun 24 Aug 2025 04:31:01 +0000 Files and hashes: 1: 3137302e38332e3230302e302f32322d3234203d3e20323633343730.roa (hash: 3dEyGzKHFOd9LeZVxU1UzcBmIS+t2RbJviuI4dC12Lk=) 2: 323830343a313235343a3a2f33322d3332203d3e20323633343730.roa (hash: ELWb7rC3fgvn1sa3PxipINIruhW615Gy+69ajKYPWzI=) 3: 3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa (hash: g6mPrnM05WB2yDxH6Zlq8hbCsk4V+orsbGR3GF+AKT8=) 4: D95738A14AD98B305087E048FD2E4821E5E2299A.crl (hash: SP5LUxwJ0QvBPlvrgcXx88RAi+su9F60eDmj6IChsHY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 04:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:da:bc:e0:4d:d9:8e:18:a1:14:ba:83:ac:73:3d:3e:84:ec:3d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D95738A14AD98B305087E048FD2E4821E5E2299A Validity Not Before: Aug 23 00:35:01 2025 GMT Not After : Aug 24 04:31:01 2025 GMT Subject: CN=01E8EEF8CB4952C8AFA25B567DB359CFFCF73897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:19:51:47:a5:ae:f4:6c:19:84:cc:9c:13: e2:53:4d:69:34:c9:f6:e9:2e:b8:fc:f1:b4:96:6c: 70:09:89:fa:b0:19:00:a3:1a:d2:b9:e8:97:04:ed: f0:01:18:1b:0c:e3:c3:e2:ea:2c:6e:fc:e6:0f:aa: 73:4e:06:87:10:63:d8:f6:f5:74:f2:b4:56:77:96: ed:94:52:f5:1b:71:1b:99:9c:ad:e9:88:0d:39:f8: 1a:09:9c:0a:c8:bf:7d:8a:d2:f0:35:00:8b:25:50: f3:23:d7:10:89:9b:4b:0f:be:08:7a:af:d1:0b:74: ab:20:98:d0:6e:45:fd:1d:8e:93:28:02:13:1e:fe: 30:3c:56:51:93:2e:54:a7:6d:bd:35:b6:7e:8e:0b: 43:62:e1:ec:4b:14:0e:87:86:7d:8d:93:83:a9:06: 2f:26:a8:a3:d2:75:93:11:c1:fc:3a:38:0a:60:e7: 2f:32:3b:1e:da:17:3d:95:c8:a9:e6:02:e1:c8:30: bd:d6:c4:2d:7d:e8:f6:8a:22:3d:f7:d7:80:f2:f5: 2a:d6:85:ee:d3:77:79:56:97:0a:c3:5f:70:c5:a6: 62:91:c1:af:6c:a1:61:03:f5:01:b8:c9:a7:91:df: fb:fe:19:1d:db:c9:01:08:a8:e2:1e:19:3e:97:f4: 8e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E8:EE:F8:CB:49:52:C8:AF:A2:5B:56:7D:B3:59:CF:FC:F7:38:97 X509v3 Authority Key Identifier: keyid:D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:32:9f:b3:25:70:3b:cc:84:b4:55:55:94:48:9a:39:a3:ba: 59:e3:f5:30:ee:95:a8:03:40:0e:60:27:3d:2d:ae:eb:68:88: c7:ae:06:41:ea:e7:23:a6:4a:21:19:2a:ed:62:9b:88:6a:44: 16:fb:8b:f8:6a:b9:e1:48:59:f2:4f:0e:b9:02:24:14:28:71: 53:78:8b:fa:a6:41:23:65:b1:b2:23:37:d2:18:85:3e:65:41: 26:fe:f2:a5:99:8c:c9:ce:f9:1e:c1:5b:c7:fb:71:f6:9a:f6: 90:de:e8:8f:63:0b:64:02:68:ba:1e:3b:9f:a4:5a:2d:f5:0d: e9:2b:5b:c4:43:58:df:df:a3:f7:58:c2:a1:9b:dc:28:e5:14: 0f:2c:61:7d:32:57:06:0a:e5:4a:9d:fb:c7:8f:e6:d5:7e:be: 29:a4:bd:2d:29:c8:2a:07:52:0d:14:83:7e:1e:95:d7:71:7c: 44:cd:38:03:c2:7b:af:5c:a9:c1:82:56:f1:a8:00:3b:27:2d: e0:3d:b0:66:76:57:3a:7a:c9:eb:d0:03:43:76:81:aa:34:87: 2e:71:35:82:80:26:f5:e7:30:a9:99:fa:15:f4:8d:c8:58:d2: 65:e0:6c:54:4e:e1:c4:ed:49:96:e5:2d:60:88:56:01:7c:95: b4:eb:db:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUINq84E3ZjhihFLqDrHM9PoTsPRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk1NzM4QTE0QUQ5OEIzMDUwODdFMDQ4RkQyRTQ4MjFF NUUyMjk5QTAeFw0yNTA4MjMwMDM1MDFaFw0yNTA4MjQwNDMxMDFaMDMxMTAvBgNV BAMTKDAxRThFRUY4Q0I0OTUyQzhBRkEyNUI1NjdEQjM1OUNGRkNGNzM4OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC49RlRR6Wu9GwZhMycE+JTTWk0 yfbpLrj88bSWbHAJifqwGQCjGtK56JcE7fABGBsM48Pi6ixu/OYPqnNOBocQY9j2 9XTytFZ3lu2UUvUbcRuZnK3piA05+BoJnArIv32K0vA1AIslUPMj1xCJm0sPvgh6 r9ELdKsgmNBuRf0djpMoAhMe/jA8VlGTLlSnbb01tn6OC0Ni4exLFA6Hhn2Nk4Op Bi8mqKPSdZMRwfw6OApg5y8yOx7aFz2VyKnmAuHIML3WxC196PaKIj3314Dy9SrW he7Td3lWlwrDX3DFpmKRwa9soWED9QG4yaeR3/v+GR3byQEIqOIeGT6X9I6tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAeju+MtJUsivoltWfbNZz/z3OJcwHwYDVR0j BBgwFoAU2Vc4oUrZizBQh+BI/S5IIeXiKZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2 UFkvMC9EOTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NTczOEExNEFEOThCMzA1 MDg3RTA0OEZEMkU0ODIxRTVFMjI5OUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2UFkvMC9E OTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXTKfsyVwO8yEtFVVlEiaOaO6WeP1MO6VqANADmAnPS2u62iIx64GQernI6ZK IRkq7WKbiGpEFvuL+Gq54UhZ8k8OuQIkFChxU3iL+qZBI2WxsiM30hiFPmVBJv7y pZmMyc75HsFbx/tx9pr2kN7oj2MLZAJouh47n6RaLfUN6StbxENY39+j91jCoZvc KOUUDyxhfTJXBgrlSp37x4/m1X6+KaS9LSnIKgdSDRSDfh6V13F8RM04A8J7r1yp wYJW8agAOyct4D2wZnZXOnrJ69ADQ3aBqjSHLnE1goAm9ecwqZn6FfSNyFjSZeBs VE7hxO1JluUtYIhWAXyVtOvbYQ== -----END CERTIFICATE-----Generated at Sat Aug 23 15:30:50 2025 by rpki-client