$ rpki-client -vvf rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft File: 9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft (raw, json) Hash identifier: e8pGXEI9YLZdg2pt7spTCWfAw5w7btSNEHatftWQj14= Subject key identifier: BA:9F:7F:BC:22:61:70:8E:77:95:C8:86:36:3A:CA:EA:05:DA:64:00 Authority key identifier: 9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9 Certificate issuer: /CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9 Certificate serial: 25F3A77A56254934EFCD87E16F300AC373AA9CED Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft Manifest number: 01A1 Signing time: Sat 23 Aug 2025 02:19:44 +0000 Manifest this update: Sat 23 Aug 2025 02:14:44 +0000 Manifest next update: Sun 24 Aug 2025 03:12:44 +0000 Files and hashes: 1: 3136302e3233382e32342e302f32322d3234203d3e20323637323633.roa (hash: PFf7r8NesetTZTWlwVJGodcacjgKx2YPuW6mqFlVgBA=) 2: 9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl (hash: Bf6iPMTp6tqgCtH3hJu8e3gmvyra3tBOMpT1OCAMwkQ=) 3: 323830343a346163383a3a2f33322d3332203d3e20323637323633.roa (hash: C/JW/5+W67z3bHrJD4GBQa9VrsbU/o7KtfAav89CUFM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 03:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f3:a7:7a:56:25:49:34:ef:cd:87:e1:6f:30:0a:c3:73:aa:9c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9 Validity Not Before: Aug 23 02:14:44 2025 GMT Not After : Aug 24 03:12:44 2025 GMT Subject: CN=BA9F7FBC2261708E7795C886363ACAEA05DA6400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:80:f3:6f:df:4f:1d:75:33:ec:55:cd:56:aa: 6d:20:57:ce:f7:9a:18:32:06:d0:90:de:89:d5:10: 91:40:a8:fc:d3:7d:53:d5:6c:60:ab:09:ba:ac:74: ab:38:62:cd:08:49:c7:c7:29:73:32:f1:8f:8c:2a: ca:20:d9:95:b6:af:85:13:35:39:21:ea:cc:a3:76: 73:f7:70:8d:21:c4:e1:76:b3:01:3d:86:ce:73:7d: f5:8b:8f:65:2b:96:8d:e1:c5:32:59:46:0b:b7:8d: 45:fb:0f:8b:97:40:af:dc:95:87:7e:4e:da:45:db: 1b:c2:02:5e:0c:1d:15:a9:33:a6:65:08:00:18:de: 46:00:49:50:56:29:cc:b8:1a:f9:91:ac:1f:65:51: 7c:6b:1e:8a:2f:ee:47:4d:b8:9c:7f:82:2d:a1:2e: 70:2d:3e:8d:d3:7d:12:e5:59:66:c5:ca:f3:9f:d9: 20:5b:ad:88:f7:c4:df:05:f5:65:90:c2:07:b2:f3: 9c:ca:6f:59:0c:1a:ce:af:20:7d:52:13:a1:95:df: 18:3e:c5:b5:73:10:2b:a0:11:ae:08:1e:ec:04:13: 9f:d1:96:84:bc:55:14:b2:9e:a2:27:34:87:e9:ca: c3:3b:65:0b:2a:f0:e8:e2:ff:a4:bd:8c:a8:fe:25: 79:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9F:7F:BC:22:61:70:8E:77:95:C8:86:36:3A:CA:EA:05:DA:64:00 X509v3 Authority Key Identifier: keyid:9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:85:30:95:2d:bc:98:69:0c:e8:c3:32:a4:c2:bb:e1:af:d5: 25:1f:26:80:9a:62:08:55:c8:5d:24:8c:8e:15:e8:31:02:e8: e3:c5:43:17:dd:3c:44:df:6a:ef:90:91:c4:f7:b2:7d:2d:4a: 67:8a:c9:15:bf:14:08:3f:68:51:07:16:91:2e:15:ea:35:d7: 02:99:8e:b6:33:bc:7b:6c:3e:bf:77:3c:11:1e:9c:9c:ea:12: ea:c9:fb:66:b4:54:ad:b0:07:03:1c:1c:2a:0d:d6:41:da:0c: 5f:8a:10:cd:24:88:ff:be:b1:fc:d9:ec:c7:d5:37:6c:68:fe: 62:d9:98:39:17:67:3e:ed:d3:7f:11:5c:59:6e:6c:61:ae:13: 19:2b:fd:81:d6:e3:0f:d0:0a:e9:ff:ca:e0:28:3a:5e:35:19: e7:76:b6:c1:74:69:7a:db:00:ba:fa:bd:6e:27:0b:94:f3:4f: 66:b2:cd:2c:15:45:95:9a:ea:9e:71:47:3b:8c:ff:24:96:67: d4:74:94:e5:65:61:5c:36:59:b1:2f:62:eb:5c:58:a9:d1:2c: ed:dd:be:cd:1b:08:8c:3b:e5:dd:82:fc:3f:49:ea:be:51:a5: 6a:27:16:ef:80:75:44:e3:e3:65:13:d5:73:71:0b:59:98:ab: f1:08:fc:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJfOnelYlSTTvzYfhbzAKw3OqnO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU4RTFEQjVDMzNEM0ZDOEY4RTdDOTkzMDExNTgwQUEy OEYzMEJDOTAeFw0yNTA4MjMwMjE0NDRaFw0yNTA4MjQwMzEyNDRaMDMxMTAvBgNV BAMTKEJBOUY3RkJDMjI2MTcwOEU3Nzk1Qzg4NjM2M0FDQUVBMDVEQTY0MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNgPNv308ddTPsVc1Wqm0gV873 mhgyBtCQ3onVEJFAqPzTfVPVbGCrCbqsdKs4Ys0IScfHKXMy8Y+MKsog2ZW2r4UT NTkh6syjdnP3cI0hxOF2swE9hs5zffWLj2Urlo3hxTJZRgu3jUX7D4uXQK/clYd+ TtpF2xvCAl4MHRWpM6ZlCAAY3kYASVBWKcy4GvmRrB9lUXxrHoov7kdNuJx/gi2h LnAtPo3TfRLlWWbFyvOf2SBbrYj3xN8F9WWQwgey85zKb1kMGs6vIH1SE6GV3xg+ xbVzECugEa4IHuwEE5/RloS8VRSynqInNIfpysM7ZQsq8Oji/6S9jKj+JXnvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUup9/vCJhcI53lciGNjrK6gXaZAAwHwYDVR0j BBgwFoAUno4dtcM9P8j458mTARWAqijzC8kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEpqZ0hEN2tIaFAxVWFnZlYxQ25MWWJKalVSQWlVY2lwcjk1UXpobm5F eWsvMC85RThFMURCNUMzM0QzRkM4RjhFN0M5OTMwMTE1ODBBQTI4RjMwQkM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFOEUxREI1QzMzRDNGQzhG OEU3Qzk5MzAxMTU4MEFBMjhGMzBCQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEpqZ0hEN2tIaFAxVWFnZlYxQ25MWWJKalVSQWlVY2lwcjk1UXpobm5FeWsvMC85 RThFMURCNUMzM0QzRkM4RjhFN0M5OTMwMTE1ODBBQTI4RjMwQkM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgoUwlS28mGkM6MMypMK74a/VJR8mgJpiCFXIXSSMjhXoMQLo48VDF908RN9q 75CRxPeyfS1KZ4rJFb8UCD9oUQcWkS4V6jXXApmOtjO8e2w+v3c8ER6cnOoS6sn7 ZrRUrbAHAxwcKg3WQdoMX4oQzSSI/76x/Nnsx9U3bGj+YtmYORdnPu3TfxFcWW5s Ya4TGSv9gdbjD9AK6f/K4Cg6XjUZ53a2wXRpetsAuvq9bicLlPNPZrLNLBVFlZrq nnFHO4z/JJZn1HSU5WVhXDZZsS9i61xYqdEs7d2+zRsIjDvl3YL8P0nqvlGlaicW 74B1ROPjZRPVc3ELWZir8Qj8Ng== -----END CERTIFICATE-----Generated at Sat Aug 23 11:02:33 2025 by rpki-client