$ rpki-client -vvf rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft File: 7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft (raw, json) Hash identifier: CjD802oz6CAsfOek3Id26N57fWDd5Xa4gEiIvxnTGyY= Subject key identifier: 74:F9:62:1B:59:4B:3B:99:63:E8:3D:9C:35:4D:DC:70:28:D7:0F:EA Authority key identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 Certificate issuer: /CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1 Certificate serial: 4BDE4B613478D8BC0023B938C33F125A81A8372A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer Subject info access: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft Manifest number: 02A4 Signing time: Sat 23 Aug 2025 03:55:28 +0000 Manifest this update: Sat 23 Aug 2025 03:50:28 +0000 Manifest next update: Sun 24 Aug 2025 05:15:28 +0000 Files and hashes: 1: 3133382e39372e3130372e302f32342d3234203d3e203533313037.roa (hash: d37RWCzmBlHMXyTEoKWy+EnzDGvUsG4ci+hJH2k1A/Q=) 2: 3133382e39372e3130342e302f32322d3232203d3e203533313037.roa (hash: YxmutoTj6CF7MhqKkZWdp2PcBcnZPzoU+yCAdwcvIH8=) 3: 323830343a323363383a3a2f33322d3332203d3e20323634313832.roa (hash: 3F2e2/DDYn3RX1xMVmaKyyDfXDqpy3jTInAQP0qhGc4=) 4: 7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl (hash: SCWE47//nsV0yvGmRqJle/xmNKpvvEcMtV8DYj7Zpo4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 05:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:de:4b:61:34:78:d8:bc:00:23:b9:38:c3:3f:12:5a:81:a8:37:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1 Validity Not Before: Aug 23 03:50:28 2025 GMT Not After : Aug 24 05:15:28 2025 GMT Subject: CN=74F9621B594B3B9963E83D9C354DDC7028D70FEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:08:1e:47:90:dc:e6:4f:da:5b:41:b8:c6:dd: 2c:66:01:b5:4c:5a:00:8b:3d:50:46:a3:a9:04:5e: 28:c1:aa:d2:34:94:a9:8f:5f:52:5e:8b:4b:8e:de: ac:22:55:29:da:f6:ec:7d:8d:05:d0:6d:fe:b9:1b: 48:1f:2c:88:fa:11:12:00:20:f4:f8:ab:60:4b:d2: b5:de:5e:d4:0d:c3:fb:de:ef:0a:c7:ea:c6:ad:c8: ab:76:97:72:92:ef:cd:ee:97:88:ac:7b:ec:71:32: 11:0e:8f:19:c7:dc:26:01:e5:b0:a1:d5:af:bd:1b: 14:01:2b:73:f7:65:0c:14:45:a6:35:6d:9c:a5:a2: 49:7e:ad:c6:4f:0c:33:5d:48:b2:03:6f:d7:2a:a9: 89:68:01:c3:ad:89:8e:3e:54:26:52:c7:5e:30:f3: bf:24:54:4e:15:d5:65:3c:60:f8:b3:f6:ce:3b:fc: f0:f0:f5:59:7e:08:d4:ca:ef:09:90:4f:4b:78:b5: 16:60:d7:6b:a2:a5:40:16:ec:56:51:82:3d:c3:02: 03:a3:6a:d7:a8:6f:7c:79:ea:42:3c:66:1d:ae:ec: dd:97:0a:1c:d1:d1:a6:a3:54:4e:d1:a0:94:84:ef: b0:bc:ff:d4:9e:37:85:bb:3d:e0:1f:e6:d2:ee:cc: cb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F9:62:1B:59:4B:3B:99:63:E8:3D:9C:35:4D:DC:70:28:D7:0F:EA X509v3 Authority Key Identifier: keyid:71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:09:69:bd:5e:48:20:8c:39:62:6e:13:17:7a:aa:b6:e2:df: b7:9d:3a:b1:5b:7c:5c:88:6b:3c:23:12:18:c8:b5:72:32:31: c8:06:08:28:f9:42:49:13:4b:d8:42:eb:ba:a3:c0:f0:63:70: e7:13:ec:5e:08:b2:aa:45:c0:27:cc:19:79:6a:12:85:81:a7: 64:ee:1f:c1:1d:97:95:fc:02:ff:b9:27:c0:4c:5c:7e:bf:9c: 1e:30:aa:c3:44:49:39:57:8d:da:8d:ff:bc:21:3a:87:71:12: 44:f2:82:7f:ef:f5:54:1d:40:67:84:0e:26:db:96:6d:57:f2: f4:05:44:a5:c4:6f:39:f2:75:7a:9d:86:7f:8d:e8:e5:e5:1c: 93:11:2a:69:81:3a:5e:75:be:ca:28:1f:7a:6d:60:cd:ab:fc: af:d6:b2:12:a3:8b:90:a1:9a:a6:1a:f1:87:8f:f5:3b:5c:14: 68:6b:e2:55:f0:ed:46:3b:6f:79:fa:5a:ec:e4:bf:63:dd:64: bf:9e:38:ac:32:55:b1:6c:16:25:fe:21:2f:0e:a1:ca:78:91: 63:c8:d9:44:73:29:1d:87:0e:6b:0d:99:df:13:2b:24:a6:29: 4f:90:02:1c:8a:0b:d4:c4:91:c5:45:4d:db:fa:9d:34:2f:b2: 16:ae:48:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS95LYTR42LwAI7k4wz8SWoGoNyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEyNUJFRERGRUMyOUMwQTRDRjU5MUU1RUI0MDgzOEJG RTNDN0FDMTAeFw0yNTA4MjMwMzUwMjhaFw0yNTA4MjQwNTE1MjhaMDMxMTAvBgNV BAMTKDc0Rjk2MjFCNTk0QjNCOTk2M0U4M0Q5QzM1NEREQzcwMjhENzBGRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgCB5HkNzmT9pbQbjG3SxmAbVM WgCLPVBGo6kEXijBqtI0lKmPX1Jei0uO3qwiVSna9ux9jQXQbf65G0gfLIj6ERIA IPT4q2BL0rXeXtQNw/ve7wrH6satyKt2l3KS783ul4ise+xxMhEOjxnH3CYB5bCh 1a+9GxQBK3P3ZQwURaY1bZylokl+rcZPDDNdSLIDb9cqqYloAcOtiY4+VCZSx14w 878kVE4V1WU8YPiz9s47/PDw9Vl+CNTK7wmQT0t4tRZg12uipUAW7FZRgj3DAgOj ateob3x56kI8Zh2u7N2XChzR0aajVE7RoJSE77C8/9SeN4W7PeAf5tLuzMsNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdPliG1lLO5lj6D2cNU3ccCjXD+owHwYDVR0j BBgwFoAUcSW+3f7CnApM9ZHl60CDi/48esEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEhnSnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRi eksvMS83MTI1QkVEREZFQzI5QzBBNENGNTkxRTVFQjQwODM4QkZFM0M3QUMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxMjVCRURERkVDMjlDMEE0 Q0Y1OTFFNUVCNDA4MzhCRkUzQzdBQzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEhnSnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRieksvMS83 MTI1QkVEREZFQzI5QzBBNENGNTkxRTVFQjQwODM4QkZFM0M3QUMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHQlpvV5IIIw5Ym4TF3qqtuLft506sVt8XIhrPCMSGMi1cjIxyAYIKPlCSRNL 2ELruqPA8GNw5xPsXgiyqkXAJ8wZeWoShYGnZO4fwR2XlfwC/7knwExcfr+cHjCq w0RJOVeN2o3/vCE6h3ESRPKCf+/1VB1AZ4QOJtuWbVfy9AVEpcRvOfJ1ep2Gf43o 5eUckxEqaYE6XnW+yigfem1gzav8r9ayEqOLkKGaphrxh4/1O1wUaGviVfDtRjtv efpa7OS/Y91kv544rDJVsWwWJf4hLw6hyniRY8jZRHMpHYcOaw2Z3xMrJKYpT5AC HIoL1MSRxUVN2/qdNC+yFq5IUw== -----END CERTIFICATE-----Generated at Sat Aug 23 15:57:15 2025 by rpki-client