$ rpki-client -vvf rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft File: C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft (raw, json) Hash identifier: +gmQyhxOHGJyo3pr91oA4bh+jReLSbfLz57M8aFMa9U= Subject key identifier: 05:DE:2A:6E:95:4A:E3:47:03:9B:7C:2F:CE:71:E6:5A:9E:82:59:D7 Authority key identifier: C0:04:F2:CC:C9:AC:B9:EC:01:A2:6E:FA:FF:53:A1:5B:B3:09:EC:E3 Certificate issuer: /CN=C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3 Certificate serial: 2208BBF250905A466B08BA390D2DF907707447A4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer Subject info access: rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft Manifest number: 011A Signing time: Sat 23 Aug 2025 09:38:50 +0000 Manifest this update: Sat 23 Aug 2025 09:33:50 +0000 Manifest next update: Sun 24 Aug 2025 10:09:50 +0000 Files and hashes: 1: C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl (hash: UsZ1H91Tr8NMNEd6/4yyXRUxhY3oJUhp4LN34LyjQ7k=) 2: 323830343a363933303a3a2f33322d3338203d3e20323730323534.roa (hash: Vi58jILCPaGdfjCNKSlfegkMsczPE3KoQ/bs4WgeL5s=) 3: 34352e3139312e34302e302f32322d3234203d3e20323730323534.roa (hash: +ELc/cdHA6pm2kddxyuB8cT9ZxmW8xhCo1C9X8j7nOc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 10:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:08:bb:f2:50:90:5a:46:6b:08:ba:39:0d:2d:f9:07:70:74:47:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3 Validity Not Before: Aug 23 09:33:50 2025 GMT Not After : Aug 24 10:09:50 2025 GMT Subject: CN=05DE2A6E954AE347039B7C2FCE71E65A9E8259D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:35:ba:8d:97:18:d0:93:e9:a2:a2:cb:92:a3: e5:1a:56:53:0d:7d:50:7b:e2:23:27:85:4e:78:6a: 6b:c9:28:b0:71:c4:1d:c2:b4:c7:34:9f:38:81:9b: 4f:7c:fa:cb:b4:df:fa:b9:95:5d:d8:62:8a:44:99: 88:3b:dd:2d:03:ce:4f:04:33:e3:ea:7a:9c:57:b0: 63:c8:f0:5d:dd:eb:8e:63:1f:17:d3:5d:23:d6:13: 5b:26:b5:e5:59:73:43:e0:10:d7:e3:26:aa:15:67: ef:a4:cc:38:fc:92:fb:a9:bf:d8:5b:a6:88:36:84: 64:98:1c:04:50:7c:a0:d0:26:cf:17:7a:89:f0:b2: 39:c4:67:3f:62:7a:58:74:21:70:45:bd:f3:df:e1: f0:69:2f:6e:ca:fd:f2:d6:82:12:2d:7d:16:2a:0c: e3:13:e3:e8:d4:90:1b:5f:3c:26:a3:30:e2:39:d5: c9:60:58:b2:b7:6f:92:91:4d:f9:b6:4b:ed:07:1b: 8b:d0:6c:3c:58:fb:31:5b:58:e2:9f:71:a9:7e:17: 63:68:f5:c9:29:ea:49:f4:90:d9:96:86:ad:11:a2: 3c:35:74:a9:3b:00:24:e8:b8:d4:d4:f1:51:44:52: 71:cd:dd:cd:2f:3c:ca:17:ea:49:80:4a:4e:61:3b: f9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DE:2A:6E:95:4A:E3:47:03:9B:7C:2F:CE:71:E6:5A:9E:82:59:D7 X509v3 Authority Key Identifier: keyid:C0:04:F2:CC:C9:AC:B9:EC:01:A2:6E:FA:FF:53:A1:5B:B3:09:EC:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:93:d4:b9:54:98:e9:86:17:dc:d4:cb:e3:34:2e:f7:58:0d: 07:f4:38:5e:26:66:a9:13:77:58:5f:68:fc:76:12:12:23:78: 81:08:c0:28:c3:2d:fc:07:51:05:6e:89:40:f3:61:8f:94:76: a3:3c:f2:c2:6f:72:9c:c0:22:cb:1b:3f:b4:eb:17:b4:7b:7d: cb:60:a7:23:cf:b8:b3:c3:10:1c:d0:b6:c6:77:0b:1c:d4:4d: 8a:7c:36:89:21:16:87:30:7e:de:77:5f:9c:56:d7:31:bf:85: b7:b8:8f:da:c3:d0:1a:f3:c2:c8:9e:2a:2e:b3:1e:09:9b:ee: c1:fc:13:c2:29:f5:2c:16:92:e1:ea:d4:19:5a:9b:98:ee:98: d5:23:8b:a5:e1:27:b0:82:50:d6:01:87:d7:86:f7:98:4d:48: 8a:b3:0e:0a:39:76:44:b4:cc:17:08:97:b9:25:0a:b0:5f:e4: bd:cd:e3:59:80:fc:cd:ec:0b:04:eb:ac:9a:9f:30:63:0e:85: c6:42:bc:23:98:be:19:b7:c3:77:9e:e4:17:ee:43:81:4b:ad: 3b:a1:7c:f5:ce:56:52:9b:76:ba:91:4c:c9:62:b1:e5:9f:c9: 41:0e:2b:57:dc:d6:72:49:7c:8f:73:a1:ab:ab:61:d7:67:eb: 4f:dc:b9:d9 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUIgi78lCQWkZrCLo5DS35B3B0R6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNEYyQ0NDOUFDQjlFQzAxQTI2RUZBRkY1M0ExNUJC MzA5RUNFMzAeFw0yNTA4MjMwOTMzNTBaFw0yNTA4MjQxMDA5NTBaMDMxMTAvBgNV BAMTKDA1REUyQTZFOTU0QUUzNDcwMzlCN0MyRkNFNzFFNjVBOUU4MjU5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdNbqNlxjQk+miosuSo+UaVlMN fVB74iMnhU54amvJKLBxxB3CtMc0nziBm098+su03/q5lV3YYopEmYg73S0Dzk8E M+PqepxXsGPI8F3d645jHxfTXSPWE1smteVZc0PgENfjJqoVZ++kzDj8kvupv9hb pog2hGSYHARQfKDQJs8XeonwsjnEZz9ielh0IXBFvfPf4fBpL27K/fLWghItfRYq DOMT4+jUkBtfPCajMOI51clgWLK3b5KRTfm2S+0HG4vQbDxY+zFbWOKfcal+F2No 9ckp6kn0kNmWhq0Rojw1dKk7ACTouNTU8VFEUnHN3c0vPMoX6kmASk5hO/nvAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUBd4qbpVK40cDm3wvznHmWp6CWdcwHwYDVR0j BBgwFoAUwATyzMmsuewBom76/1OhW7MJ7OMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YRHZicVQ4RmdoUEJ4NVBMTlpFUDNkMndrNDd4N1o2ZG9DZ1hWOGlrZktz LzAvQzAwNEYyQ0NDOUFDQjlFQzAxQTI2RUZBRkY1M0ExNUJCMzA5RUNFMy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DMDA0RjJDQ0M5QUNCOUVDMDFB MjZFRkFGRjUzQTE1QkIzMDlFQ0UzLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1hE dmJxVDhGZ2hQQng1UExOWkVQM2Qyd2s0N3g3WjZkb0NnWFY4aWtmS3MvMC9DMDA0 RjJDQ0M5QUNCOUVDMDFBMjZFRkFGRjUzQTE1QkIzMDlFQ0UzLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA F5PUuVSY6YYX3NTL4zQu91gNB/Q4XiZmqRN3WF9o/HYSEiN4gQjAKMMt/AdRBW6J QPNhj5R2ozzywm9ynMAiyxs/tOsXtHt9y2CnI8+4s8MQHNC2xncLHNRNinw2iSEW hzB+3ndfnFbXMb+Ft7iP2sPQGvPCyJ4qLrMeCZvuwfwTwin1LBaS4erUGVqbmO6Y 1SOLpeEnsIJQ1gGH14b3mE1IirMOCjl2RLTMFwiXuSUKsF/kvc3jWYD8zewLBOus mp8wYw6FxkK8I5i+GbfDd57kF+5DgUutO6F89c5WUpt2upFMyWKx5Z/JQQ4rV9zW ckl8j3Ohq6th12frT9y52Q== -----END CERTIFICATE-----Generated at Sun Aug 24 00:29:15 2025 by rpki-client