$ rpki-client -vvf rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft File: 4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft (raw, json) Hash identifier: VuTIkhJUGI9P9ig8g5jEcJTx9sXAhb4ovGnJXX+XDLg= Subject key identifier: 0C:2C:14:8D:E4:CE:E2:A8:B1:10:B7:32:96:9B:20:0E:C3:C7:E1:AB Authority key identifier: 4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 Certificate issuer: /CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Certificate serial: 366142EEE0AF6ED9B672C1750E245E7EAF1B2DC4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject info access: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft Manifest number: 0125 Signing time: Sat 23 Aug 2025 12:45:20 +0000 Manifest this update: Sat 23 Aug 2025 12:40:20 +0000 Manifest next update: Sun 24 Aug 2025 14:27:20 +0000 Files and hashes: 1: 3230312e3135302e3132302e302f32322d3234203d3e203631383632.roa (hash: N7pBzAqFHQXwjW/KS0P1VsU5DUXI/b+mnSTAPuK/6eo=) 2: 4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl (hash: ghKXHlrV0G4NOdITNFpR3ADbrB0aU+RjZXwghqNA9zA=) 3: 323830343a316137633a3a2f33322d3334203d3e203631383632.roa (hash: TJaA5xEZrkse1eozPtBQZAtjZj6iE5o4CDiRrM/8CKc=) 4: 3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa (hash: fxTpR6kGjpzHUi4HM+ey62/lxDfVFp1Mya/83PptAgs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 14:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:61:42:ee:e0:af:6e:d9:b6:72:c1:75:0e:24:5e:7e:af:1b:2d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Validity Not Before: Aug 23 12:40:20 2025 GMT Not After : Aug 24 14:27:20 2025 GMT Subject: CN=0C2C148DE4CEE2A8B110B732969B200EC3C7E1AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:b1:7d:06:70:c5:2b:41:5f:65:de:a7:bf: da:0d:60:fd:38:7a:7d:bc:84:9c:93:50:f6:18:37: 5e:e3:33:aa:11:51:fe:5e:35:ec:ce:e9:3c:76:3b: c1:ce:7b:8d:0f:c2:b3:12:09:ad:47:c8:ba:13:cd: 00:a0:ba:25:67:da:15:b0:01:cc:74:33:0b:1e:ff: 30:16:34:e4:45:ea:17:e8:48:b1:c5:f2:eb:b4:bb: 98:9c:ee:9d:d3:41:8f:fe:c4:c5:83:23:e2:39:24: 9c:1d:f5:53:4c:79:8d:5d:0b:6e:d8:b2:40:78:1e: cf:d3:66:b7:17:96:a5:b2:53:be:cb:8f:cc:02:0e: 07:8d:93:09:e4:cf:ed:ac:fe:2a:b6:d1:ad:2e:98: 8c:46:bf:2c:2c:3e:72:c8:e3:70:5e:2a:ef:6d:88: 24:0b:85:bd:cb:64:ae:ec:2c:fa:59:91:ea:86:b2: ff:f7:9b:ea:5f:6d:05:09:b6:f6:8d:93:91:59:17: e0:6d:3a:2c:67:7e:5e:5e:62:84:6d:6e:81:28:33: aa:be:70:1e:5e:95:04:f4:33:69:c3:ed:51:fb:87: 86:f9:b7:a7:9e:20:2a:81:e2:69:cf:c5:6c:d5:35: e8:dd:bf:81:26:07:40:cd:71:fa:e2:ee:e6:d8:c3: 80:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2C:14:8D:E4:CE:E2:A8:B1:10:B7:32:96:9B:20:0E:C3:C7:E1:AB X509v3 Authority Key Identifier: keyid:4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:dc:77:b0:ce:ae:2d:64:7f:52:af:81:bf:b2:20:4f:fd:02: 26:6d:37:06:f7:14:4a:71:bb:6b:5e:65:56:4a:8c:40:72:12: b2:23:3b:3f:ca:ea:2f:2c:1b:54:d7:56:cb:d7:f8:60:2f:2f: 55:8d:bc:e5:27:27:a3:9b:30:77:b0:b8:70:d8:39:a6:e5:ec: bb:9f:2a:0c:26:25:65:f9:2d:15:70:ba:86:4a:2c:12:42:b7: eb:d1:5a:3d:6f:d1:cf:61:7f:0e:26:55:be:ad:57:83:b1:85: 0d:25:a4:a2:83:58:8b:66:58:77:a6:be:fd:f5:67:6e:5d:88: f6:58:6b:74:f4:47:4e:7f:3e:3a:45:3a:48:d1:ea:dd:8e:6e: 55:f4:04:6b:46:17:35:03:f7:43:5b:3a:84:c8:66:b3:2b:c7: 0c:e0:56:f5:8e:e9:44:68:81:b2:4a:ee:87:3d:ae:da:1a:d5: 71:f8:cf:a7:50:c5:5e:6f:88:45:6f:db:84:7e:ee:69:de:3e: 79:75:3c:7a:23:88:35:24:e9:a1:0c:c8:ee:63:58:02:e7:31: d4:66:ae:4f:6b:23:49:39:c6:35:92:e2:8b:78:fb:89:1f:24: 46:e4:08:ce:90:b0:91:16:c8:84:c9:cd:d3:16:7e:ed:88:44: 4e:25:d5:26 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUNmFC7uCvbtm2csF1DiRefq8bLcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlF NTMwNjM1NTAeFw0yNTA4MjMxMjQwMjBaFw0yNTA4MjQxNDI3MjBaMDMxMTAvBgNV BAMTKDBDMkMxNDhERTRDRUUyQThCMTEwQjczMjk2OUIyMDBFQzNDN0UxQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH7LF9BnDFK0FfZd6nv9oNYP04 en28hJyTUPYYN17jM6oRUf5eNezO6Tx2O8HOe40PwrMSCa1HyLoTzQCguiVn2hWw Acx0Mwse/zAWNORF6hfoSLHF8uu0u5ic7p3TQY/+xMWDI+I5JJwd9VNMeY1dC27Y skB4Hs/TZrcXlqWyU77Lj8wCDgeNkwnkz+2s/iq20a0umIxGvywsPnLI43BeKu9t iCQLhb3LZK7sLPpZkeqGsv/3m+pfbQUJtvaNk5FZF+BtOixnfl5eYoRtboEoM6q+ cB5elQT0M2nD7VH7h4b5t6eeICqB4mnPxWzVNejdv4EmB0DNcfri7ubYw4DHAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUDCwUjeTO4qixELcylpsgDsPH4aswHwYDVR0j BBgwFoAUS4CyC9dA34r88PjFpv64ueUwY1UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9Tb2h2akZIS1hwcGtOUWs3UWJxeWVqTjVmUGtaMmNHclA0OXI2dUFRdmNz LzAvNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlFNTMwNjM1NS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjgwQjIwQkQ3NDBERjhBRkNG MEY4QzVBNkZFQjhCOUU1MzA2MzU1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1Nv aHZqRkhLWHBwa05RazdRYnF5ZWpONWZQa1oyY0dyUDQ5cjZ1QVF2Y3MvMC80Qjgw QjIwQkQ3NDBERjhBRkNGMEY4QzVBNkZFQjhCOUU1MzA2MzU1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA cdx3sM6uLWR/Uq+Bv7IgT/0CJm03BvcUSnG7a15lVkqMQHISsiM7P8rqLywbVNdW y9f4YC8vVY285Scno5swd7C4cNg5puXsu58qDCYlZfktFXC6hkosEkK369FaPW/R z2F/DiZVvq1Xg7GFDSWkooNYi2ZYd6a+/fVnbl2I9lhrdPRHTn8+OkU6SNHq3Y5u VfQEa0YXNQP3Q1s6hMhmsyvHDOBW9Y7pRGiBskruhz2u2hrVcfjPp1DFXm+IRW/b hH7uad4+eXU8eiOINSTpoQzI7mNYAucx1GauT2sjSTnGNZLii3j7iR8kRuQIzpCw kRbIhMnN0xZ+7YhETiXVJg== -----END CERTIFICATE-----Generated at Sat Aug 23 21:32:47 2025 by rpki-client