$ rpki-client -vvf rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.mft File: 938F45B39DC45B48A1C4185FBA8AF194B821EFA1.mft (raw, json) Hash identifier: XVp9izMszMLQYjOkhuuZopq8rkyMr4q5S+SpQZ2eFvs= Subject key identifier: 95:82:CB:57:79:1C:E9:05:63:C0:1A:68:8D:95:F4:02:3C:11:52:CE Authority key identifier: 93:8F:45:B3:9D:C4:5B:48:A1:C4:18:5F:BA:8A:F1:94:B8:21:EF:A1 Certificate issuer: /CN=938F45B39DC45B48A1C4185FBA8AF194B821EFA1 Certificate serial: 42131926E4A53624D8353BE9CEA8CE1EA7266D74 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer Subject info access: rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.mft Manifest number: 029D Signing time: Fri 22 Aug 2025 21:22:00 +0000 Manifest this update: Fri 22 Aug 2025 21:17:00 +0000 Manifest next update: Sun 24 Aug 2025 01:03:00 +0000 Files and hashes: 1: 3137302e38322e3135322e302f32322d3234203d3e20323632343238.roa (hash: 2IVpsWf9td7IqeV8vlI6lOxRxzzX6vOBzqs3GCMyrS8=) 2: 323830343a313364633a3a2f33322d3334203d3e20323632343238.roa (hash: XXtE3ZKq8tsCg3Jl+GlR8/wpdm3hojklmT8O2l53ad4=) 3: 3137372e34342e3134342e302f32302d3234203d3e20323632343238.roa (hash: T1EclWB7Gapw2oqcst4QMwzACZ8Z4zJJisLgGZXiM1A=) 4: 938F45B39DC45B48A1C4185FBA8AF194B821EFA1.crl (hash: TWu3PhOjZ8qMXcXHMoc0Ne7fETwlMbigbNIvdrs7N08=) 5: 3139312e362e3137362e302f32302d3234203d3e20323632343238.roa (hash: vFydTh8w7KM4BbRjNSkNnNzFeDsgyodDg5x3yz8jr8A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.crl rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 01:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:13:19:26:e4:a5:36:24:d8:35:3b:e9:ce:a8:ce:1e:a7:26:6d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=938F45B39DC45B48A1C4185FBA8AF194B821EFA1 Validity Not Before: Aug 22 21:17:00 2025 GMT Not After : Aug 24 01:03:00 2025 GMT Subject: CN=9582CB57791CE90563C01A688D95F4023C1152CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f1:a2:9b:b8:e0:53:dc:24:ba:fb:d6:98:f4: 38:4b:03:ce:7c:e3:0e:d1:1f:11:8f:9b:90:db:6b: d1:bc:d8:d6:62:29:de:ed:59:49:12:16:98:82:7d: 38:c2:af:99:91:de:2f:93:58:e5:5d:75:1e:e0:1f: 16:5e:c8:e2:3e:ef:d9:12:42:25:ad:77:8d:c2:21: b1:2a:1a:af:e6:53:5f:22:f0:9d:94:4b:69:07:cd: 32:eb:3e:e9:75:06:e3:06:4a:d3:43:72:ee:b0:8b: 67:98:24:57:99:5b:b4:c7:49:a8:f0:27:00:fa:13: 35:f6:07:c8:6d:e4:4f:8f:c5:85:37:3b:87:b7:29: 64:aa:18:91:f2:ca:d0:85:1e:67:59:d6:60:b0:21: fb:73:b6:43:69:6e:8d:ca:84:c1:17:09:73:d4:1b: f4:b3:c5:c7:94:7f:81:8e:60:7c:1c:06:af:c5:eb: 95:75:17:8d:dd:26:17:52:34:d1:aa:11:c7:df:28: 7a:f9:23:48:5a:30:72:67:0c:2a:f0:82:20:02:de: c5:7b:48:ff:8f:92:ec:c0:ca:ad:75:5d:af:74:41: a0:72:f6:d8:1b:28:ce:59:a5:a8:35:30:be:b7:27: 67:d1:ab:48:62:14:7f:af:1b:bc:31:f9:25:df:59: 9b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:82:CB:57:79:1C:E9:05:63:C0:1A:68:8D:95:F4:02:3C:11:52:CE X509v3 Authority Key Identifier: keyid:93:8F:45:B3:9D:C4:5B:48:A1:C4:18:5F:BA:8A:F1:94:B8:21:EF:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:3f:09:41:1f:f5:a9:ce:db:03:b0:5a:b2:09:88:be:88:1c: 22:4e:17:bd:fd:43:d4:71:b9:18:cc:3b:60:0e:57:de:1e:7b: 17:77:6c:ad:75:ca:aa:93:e7:44:fb:ff:59:8e:5d:dd:0d:6e: 52:0d:ba:d7:b4:6e:0e:82:4b:02:89:77:2a:11:c5:a2:ad:e9: 4d:32:18:f1:4f:3d:c0:4a:dc:41:43:f7:9b:67:02:eb:01:ce: 79:da:56:e3:a3:fc:4a:dd:d8:bb:a9:d9:02:4f:a5:36:12:1c: 9d:20:ac:10:4e:eb:13:7a:0a:5e:20:f2:ae:69:86:49:29:5c: ba:ae:1a:7f:6a:98:76:ca:d5:1b:ed:b4:97:ae:61:6e:e3:c2: 6f:63:e2:f2:84:19:19:08:f3:e1:b4:f9:09:ae:8b:b4:1d:8b: 62:e8:32:5c:a2:72:83:8d:bc:e6:12:30:ac:5f:72:46:28:a7: 4e:d0:2c:cd:d9:84:57:4f:25:8f:d3:56:0e:c3:c6:01:0c:0f: a1:3d:c1:66:5d:8c:81:e3:a8:25:3a:07:d7:1f:dc:fd:da:db: 84:f9:f5:c5:94:23:86:ed:21:d1:2e:a9:f6:0f:5c:2f:53:b5: 40:0f:43:53:8e:91:d6:d4:f5:d3:d7:59:dd:cb:91:a4:f5:a9: 2b:c4:65:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQhMZJuSlNiTYNTvpzqjOHqcmbXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM4RjQ1QjM5REM0NUI0OEExQzQxODVGQkE4QUYxOTRC ODIxRUZBMTAeFw0yNTA4MjIyMTE3MDBaFw0yNTA4MjQwMTAzMDBaMDMxMTAvBgNV BAMTKDk1ODJDQjU3NzkxQ0U5MDU2M0MwMUE2ODhEOTVGNDAyM0MxMTUyQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+8aKbuOBT3CS6+9aY9DhLA858 4w7RHxGPm5Dba9G82NZiKd7tWUkSFpiCfTjCr5mR3i+TWOVddR7gHxZeyOI+79kS QiWtd43CIbEqGq/mU18i8J2US2kHzTLrPul1BuMGStNDcu6wi2eYJFeZW7THSajw JwD6EzX2B8ht5E+PxYU3O4e3KWSqGJHyytCFHmdZ1mCwIftztkNpbo3KhMEXCXPU G/SzxceUf4GOYHwcBq/F65V1F43dJhdSNNGqEcffKHr5I0haMHJnDCrwgiAC3sV7 SP+PkuzAyq11Xa90QaBy9tgbKM5Zpag1ML63J2fRq0hiFH+vG7wx+SXfWZvlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlYLLV3kc6QVjwBpojZX0AjwRUs4wHwYDVR0j BBgwFoAUk49Fs53EW0ihxBhfuorxlLgh76EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDdwOW5od0xQbXFYUFluWGRhVEM2ZGgxQnVQRHFuY2N4Mk1WZ3U3akN3 WlcvMS85MzhGNDVCMzlEQzQ1QjQ4QTFDNDE4NUZCQThBRjE5NEI4MjFFRkExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzOEY0NUIzOURDNDVCNDhB MUM0MTg1RkJBOEFGMTk0QjgyMUVGQTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDdwOW5od0xQbXFYUFluWGRhVEM2ZGgxQnVQRHFuY2N4Mk1WZ3U3akN3WlcvMS85 MzhGNDVCMzlEQzQ1QjQ4QTFDNDE4NUZCQThBRjE5NEI4MjFFRkExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABj8JQR/1qc7bA7BasgmIvogcIk4Xvf1D1HG5GMw7YA5X3h57F3dsrXXKqpPn RPv/WY5d3Q1uUg2617RuDoJLAol3KhHFoq3pTTIY8U89wErcQUP3m2cC6wHOedpW 46P8St3Yu6nZAk+lNhIcnSCsEE7rE3oKXiDyrmmGSSlcuq4af2qYdsrVG+20l65h buPCb2Pi8oQZGQjz4bT5Ca6LtB2LYugyXKJyg4285hIwrF9yRiinTtAszdmEV08l j9NWDsPGAQwPoT3BZl2MgeOoJToH1x/c/drbhPn1xZQjhu0h0S6p9g9cL1O1QA9D U46R1tT109dZ3cuRpPWpK8Rl+w== -----END CERTIFICATE-----Generated at Sat Aug 23 12:41:50 2025 by rpki-client