$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft File: AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft (raw, json) Hash identifier: Xvz2H7VAlWK1Mu3P8IQT4YKiaKWh8Wf7rowkW6mcBcA= Subject key identifier: 0E:B3:14:32:EF:0B:18:36:A6:66:C4:3F:38:78:39:F7:0A:3C:23:F0 Authority key identifier: AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A Certificate issuer: /CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A Certificate serial: 3E1BB596D61CB39E3982DE23F687F388B92716AE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer Subject info access: rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft Manifest number: 0129 Signing time: Tue 29 Jul 2025 10:03:42 +0000 Manifest this update: Tue 29 Jul 2025 09:58:42 +0000 Manifest next update: Wed 30 Jul 2025 10:11:42 +0000 Files and hashes: 1: 34352e3136352e38302e302f32322d3234203d3e203631353935.roa (hash: P3iRqeK3Yv57QU7Bwadb2mGTtOHbUHSsYSW0mi15khA=) 2: 34352e3136352e38302e302f32322d3234203d3e203533343237.roa (hash: W6Il1nJqq5qqLa4TPlQ/OzjTUK08KOF0OrC0Ec1PXjE=) 3: AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl (hash: L3D5cL0U2yIvueAnrFwpRz1XG8iBdq/VVXfyHpoSX7U=) 4: 323830343a353463383a3a2f33322d3438203d3e203631353935.roa (hash: Ae2efMgnwM2PCNT7dU75s66Sccj5kzLKU0a/b++2GsQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Jul 2025 10:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:1b:b5:96:d6:1c:b3:9e:39:82:de:23:f6:87:f3:88:b9:27:16:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A Validity Not Before: Jul 29 09:58:42 2025 GMT Not After : Jul 30 10:11:42 2025 GMT Subject: CN=0EB31432EF0B1836A666C43F387839F70A3C23F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a3:60:7b:5c:d2:4a:15:d7:b8:85:1c:f9:7f: ba:60:2c:bf:19:6e:80:9e:7c:ba:2d:8d:32:0c:2a: 20:c2:5a:05:08:f0:fc:bc:c3:d1:f6:92:94:ad:a2: e3:c3:36:0f:ba:7b:96:6a:e8:a5:8d:37:b4:70:58: ca:3d:7c:cd:f0:9c:06:71:8f:f9:71:42:53:ce:f8: d1:3a:b1:e1:0f:d8:f8:28:fd:e1:53:00:d7:a9:94: 5b:ff:bd:9a:f8:7d:16:8c:c2:da:72:d9:a3:0b:8c: 41:5a:52:72:45:fc:5a:51:35:1b:e4:52:c7:5f:a0: bf:07:8c:e2:13:3d:4b:86:2f:c0:8f:64:27:8a:d8: 05:71:34:f6:20:07:67:f0:d0:83:7e:17:01:1b:3d: 28:60:9e:15:3d:5f:48:7f:0d:46:e0:78:53:bb:e1: 94:f4:fe:40:9d:a5:27:bf:90:03:b3:52:7a:26:01: a1:e3:7c:20:cc:64:cd:dd:a5:72:15:74:81:3b:45: b2:ae:82:b7:60:01:e5:d5:1f:e5:10:aa:c3:72:08: 5e:98:d7:51:cb:e6:2b:9c:02:a7:b3:2f:56:2c:cc: 76:23:39:74:11:42:f9:20:b2:df:1b:33:de:33:e2: 70:4b:27:7f:89:7b:93:a2:e4:fc:14:91:53:e5:1a: ea:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B3:14:32:EF:0B:18:36:A6:66:C4:3F:38:78:39:F7:0A:3C:23:F0 X509v3 Authority Key Identifier: keyid:AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:9e:5b:a3:40:fa:72:b7:33:51:53:ed:96:bb:42:59:0d:20: ff:c5:bc:ee:73:c3:50:44:e8:08:9a:bf:1c:b2:e4:5e:e8:07: 62:75:e0:9d:48:fb:ee:7e:74:45:f2:3f:9e:c8:c8:aa:3b:5f: 5d:ac:0c:55:ca:61:97:2d:6e:ab:46:1a:5e:8d:cc:df:c0:db: 94:00:2b:92:6c:84:65:d0:a6:d2:3c:59:f6:8d:09:2b:a3:25: 46:73:7d:4c:82:60:4b:12:df:ad:fa:5f:c4:07:1c:66:f6:a8: e0:31:4f:e9:a3:bc:67:7a:7b:8a:72:31:b7:cc:0c:9c:02:db: 9b:66:58:3b:c9:84:11:bb:48:41:13:e1:d3:a8:70:af:7d:a0: 2c:e8:6f:57:a1:1b:95:ed:34:57:18:39:37:5c:f8:cf:e8:d4: 00:23:f3:9f:26:23:7b:44:da:16:e1:36:e8:2d:f3:03:e2:6a: 22:ae:30:06:85:91:3c:8b:05:b4:78:1e:74:9d:5a:a9:7e:5d: 1b:e3:51:49:d5:88:24:02:27:4a:67:87:4e:da:33:d2:31:0d: 6e:7b:e8:1f:fc:e7:98:e1:79:a5:6b:59:15:f7:10:c2:07:09: 08:6e:32:7b:99:71:4e:a4:b9:cb:16:39:b6:e6:52:f4:fa:4d: d8:29:c4:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPhu1ltYcs545gt4j9ofziLknFq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1OEVFRDIwQ0VBMDQwMUJERUJERTRDQTI5Q0MyREI1 OUQ3MTEzQTAeFw0yNTA3MjkwOTU4NDJaFw0yNTA3MzAxMDExNDJaMDMxMTAvBgNV BAMTKDBFQjMxNDMyRUYwQjE4MzZBNjY2QzQzRjM4NzgzOUY3MEEzQzIzRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxo2B7XNJKFde4hRz5f7pgLL8Z boCefLotjTIMKiDCWgUI8Py8w9H2kpStouPDNg+6e5Zq6KWNN7RwWMo9fM3wnAZx j/lxQlPO+NE6seEP2Pgo/eFTANeplFv/vZr4fRaMwtpy2aMLjEFaUnJF/FpRNRvk UsdfoL8HjOITPUuGL8CPZCeK2AVxNPYgB2fw0IN+FwEbPShgnhU9X0h/DUbgeFO7 4ZT0/kCdpSe/kAOzUnomAaHjfCDMZM3dpXIVdIE7RbKugrdgAeXVH+UQqsNyCF6Y 11HL5iucAqezL1YszHYjOXQRQvkgst8bM94z4nBLJ3+Je5Oi5PwUkVPlGuorAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDrMUMu8LGDamZsQ/OHg59wo8I/AwHwYDVR0j BBgwFoAUrVju0gzqBAG9695MopzC21nXETowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkhneE5zQUpmQTRpUzk0WmtGZjJ5WnlRQnlSb3piSjFFUFVBS0xmNXBi eUYvMC9BRDU4RUVEMjBDRUEwNDAxQkRFQkRFNENBMjlDQzJEQjU5RDcxMTNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENThFRUQyMENFQTA0MDFC REVCREU0Q0EyOUNDMkRCNTlENzExM0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkhneE5zQUpmQTRpUzk0WmtGZjJ5WnlRQnlSb3piSjFFUFVBS0xmNXBieUYvMC9B RDU4RUVEMjBDRUEwNDAxQkRFQkRFNENBMjlDQzJEQjU5RDcxMTNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAip5bo0D6crczUVPtlrtCWQ0g/8W87nPDUEToCJq/HLLkXugHYnXgnUj77n50 RfI/nsjIqjtfXawMVcphly1uq0YaXo3M38DblAArkmyEZdCm0jxZ9o0JK6MlRnN9 TIJgSxLfrfpfxAccZvao4DFP6aO8Z3p7inIxt8wMnALbm2ZYO8mEEbtIQRPh06hw r32gLOhvV6Eble00Vxg5N1z4z+jUACPznyYje0TaFuE26C3zA+JqIq4wBoWRPIsF tHgedJ1aqX5dG+NRSdWIJAInSmeHTtoz0jENbnvoH/znmOF5pWtZFfcQwgcJCG4y e5lxTqS5yxY5tuZS9PpN2CnEYw== -----END CERTIFICATE-----Generated at Tue Jul 29 14:52:04 2025 by rpki-client