$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.mft File: 0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.mft (raw, json) Hash identifier: wqIsb5tQply4sWoaV2Bj5w6vl/ZMHAUfFOwvrBFsJyU= Subject key identifier: 34:51:02:47:81:90:B4:38:DE:AF:E7:27:0E:E3:01:75:AE:29:FE:CE Authority key identifier: 0C:9E:7A:58:1F:B3:4E:75:3F:90:B9:3C:9E:30:03:ED:6F:E1:D0:F0 Certificate issuer: /CN=0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0 Certificate serial: 322953FE2604B7ED080F054634D97FF9D7E9A09F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.mft Manifest number: 6D Signing time: Fri 25 Jul 2025 20:23:40 +0000 Manifest this update: Fri 25 Jul 2025 20:18:40 +0000 Manifest next update: Sat 26 Jul 2025 21:52:40 +0000 Files and hashes: 1: 3137302e3234352e3132362e302f32342d3234203d3e20323636303232.roa (hash: J3vPBe+lnQ/iFaCVqN2x7MdAQVBEj+rvWmJtEF9kUE0=) 2: 3137302e3234352e3132352e302f32342d3234203d3e20323636303232.roa (hash: /G1Zbr3lal9RIdlygmz9QftomPKpcarPUTidAPRFrB4=) 3: 0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.crl (hash: mNNeTff7r9lbXari53X+88f5Ypsn3knPhcfgy8MHHEE=) 4: 3137302e3234352e3132342e302f32342d3234203d3e20323636303232.roa (hash: NyjvRqrsWW7DHKYMZ6MxBe2aS7uYJOKGkA+406fr9eQ=) 5: 323830343a333934343a3a2f33322d3332203d3e20323636303232.roa (hash: eNek7s/NjIGaiJQf+4joY/oeeA6o2Xb2iDWz5nNf7mU=) 6: 3137302e3234352e3132342e302f32332d3233203d3e20323636303232.roa (hash: O+oNKtxxAV4hi7g3gFIS54YA/83Cr3nfDSvimJlyFfs=) 7: 3137302e3234352e3132372e302f32342d3234203d3e20323636303232.roa (hash: YPjqMC53pPLv42dL6Pw9qLt/uKQ2XnkLPjSql2GVReY=) 8: 3137302e3234352e3132342e302f32322d3232203d3e20323636303232.roa (hash: c5glFMByvpnMIegNy5aaYzjOSeI+qm5ABaH+4pnoaIg=) 9: 3137302e3234352e3132362e302f32332d3233203d3e20323636303232.roa (hash: iRw9/4rJpOYX60HrikKUD+hM5i546e6s3PpfIIP6X9Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.crl rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Jul 2025 21:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:29:53:fe:26:04:b7:ed:08:0f:05:46:34:d9:7f:f9:d7:e9:a0:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0 Validity Not Before: Jul 25 20:18:40 2025 GMT Not After : Jul 26 21:52:40 2025 GMT Subject: CN=345102478190B438DEAFE7270EE30175AE29FECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3c:69:21:ae:8a:b5:ac:8d:d4:ad:7b:5f:a7: 86:3b:53:b4:fc:75:a0:dd:cd:c1:20:2e:3c:df:34: 0e:f3:5c:76:ba:be:1e:f5:cc:a6:b9:20:5b:50:7c: 9b:d1:5d:63:cf:cf:df:c2:0a:d6:24:1b:4c:b0:9c: ce:ec:96:3c:f1:6b:4a:24:b0:84:0a:6b:72:90:97: 62:9e:5c:d3:0f:9f:49:75:08:9e:83:49:6f:1b:4c: e3:56:2d:fa:14:6c:ee:41:cd:dc:41:fe:3f:33:7b: 23:5a:f4:a4:c3:f5:c5:2e:92:93:bc:ec:6a:72:6c: a4:74:b9:6c:6e:a3:6f:4a:c7:1a:c9:7e:6d:8a:1f: 68:b6:12:0d:72:7f:64:89:6e:6a:2b:c8:25:f7:b2: 76:f6:04:5c:97:dc:ec:b4:48:d3:46:be:3e:52:0a: 77:ee:b3:fe:8f:96:6d:90:ed:7f:13:e5:57:40:f3: bd:bb:d5:63:19:90:c5:bc:6c:3e:c1:4a:9e:7f:5f: 90:9e:03:71:51:1d:76:03:8b:e0:3f:fc:ce:1e:87: 65:4f:0a:24:86:ec:05:46:d8:06:26:51:b8:4b:ca: 48:60:bb:f6:7f:11:88:a9:cc:10:da:5f:7a:36:10: 5e:f9:18:52:70:aa:c7:58:2f:33:ce:81:d5:ec:be: 57:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:51:02:47:81:90:B4:38:DE:AF:E7:27:0E:E3:01:75:AE:29:FE:CE X509v3 Authority Key Identifier: keyid:0C:9E:7A:58:1F:B3:4E:75:3F:90:B9:3C:9E:30:03:ED:6F:E1:D0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:02:a1:c8:64:86:c8:f0:87:ce:13:1b:4b:41:e7:06:a3:76: 28:02:0d:53:56:92:ed:3f:4d:41:b2:34:b2:07:1c:a9:17:07: 45:bc:ac:31:55:60:11:b4:d5:cc:37:28:2e:12:45:60:c3:f9: ba:86:e0:01:53:db:c4:8d:8d:a2:b9:cf:8c:77:98:b0:90:88: b8:cd:ed:a9:0d:9d:fb:85:61:22:f5:18:76:41:70:10:b6:9e: 44:5c:c9:46:27:74:c2:b9:2b:21:93:88:83:7e:36:ab:63:3c: f3:ec:6a:03:b3:05:1e:67:a6:13:b4:63:b6:63:ce:01:9c:f0: b0:f0:60:90:24:4d:7e:92:b0:43:9d:d7:26:d6:02:05:ed:1f: f6:a3:2c:fd:81:65:58:ad:ee:be:a5:fb:15:55:19:49:27:2a: 60:bd:af:74:e0:4a:8f:3d:7d:e2:d1:31:94:a0:5c:8c:20:64: 65:fa:2b:cf:7b:89:87:73:0d:e9:63:68:e7:e2:48:82:95:78: 3e:dd:0b:0b:82:b3:33:6a:fc:89:31:97:74:83:a3:15:4e:e2: 2b:32:b3:87:d2:b5:45:3b:53:32:0f:ce:37:d4:33:c0:1f:7e: 5e:36:95:ce:40:16:20:ef:ee:af:eb:7e:11:37:68:f8:f0:8a: 59:dc:37:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMilT/iYEt+0IDwVGNNl/+dfpoJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEM5RTdBNTgxRkIzNEU3NTNGOTBCOTNDOUUzMDAzRUQ2 RkUxRDBGMDAeFw0yNTA3MjUyMDE4NDBaFw0yNTA3MjYyMTUyNDBaMDMxMTAvBgNV BAMTKDM0NTEwMjQ3ODE5MEI0MzhERUFGRTcyNzBFRTMwMTc1QUUyOUZFQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIPGkhroq1rI3UrXtfp4Y7U7T8 daDdzcEgLjzfNA7zXHa6vh71zKa5IFtQfJvRXWPPz9/CCtYkG0ywnM7sljzxa0ok sIQKa3KQl2KeXNMPn0l1CJ6DSW8bTONWLfoUbO5BzdxB/j8zeyNa9KTD9cUukpO8 7GpybKR0uWxuo29KxxrJfm2KH2i2Eg1yf2SJbmoryCX3snb2BFyX3Oy0SNNGvj5S Cnfus/6Plm2Q7X8T5VdA87271WMZkMW8bD7BSp5/X5CeA3FRHXYDi+A//M4eh2VP CiSG7AVG2AYmUbhLykhgu/Z/EYipzBDaX3o2EF75GFJwqsdYLzPOgdXsvlfRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNFECR4GQtDjer+cnDuMBda4p/s4wHwYDVR0j BBgwFoAUDJ56WB+zTnU/kLk8njAD7W/h0PAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnc4RjVFb2Nkc0NrY040WWZLQlBrWUp0Tno0VUZEcEZMcnl0elZpN2dl dW4vMC8wQzlFN0E1ODFGQjM0RTc1M0Y5MEI5M0M5RTMwMDNFRDZGRTFEMEYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDOUU3QTU4MUZCMzRFNzUz RjkwQjkzQzlFMzAwM0VENkZFMUQwRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qnc4RjVFb2Nkc0NrY040WWZLQlBrWUp0Tno0VUZEcEZMcnl0elZpN2dldW4vMC8w QzlFN0E1ODFGQjM0RTc1M0Y5MEI5M0M5RTMwMDNFRDZGRTFEMEYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGgKhyGSGyPCHzhMbS0HnBqN2KAINU1aS7T9NQbI0sgccqRcHRbysMVVgEbTV zDcoLhJFYMP5uobgAVPbxI2NornPjHeYsJCIuM3tqQ2d+4VhIvUYdkFwELaeRFzJ Rid0wrkrIZOIg342q2M88+xqA7MFHmemE7RjtmPOAZzwsPBgkCRNfpKwQ53XJtYC Be0f9qMs/YFlWK3uvqX7FVUZSScqYL2vdOBKjz194tExlKBcjCBkZforz3uJh3MN 6WNo5+JIgpV4Pt0LC4KzM2r8iTGXdIOjFU7iKzKzh9K1RTtTMg/ON9QzwB9+XjaV zkAWIO/ur+t+ETdo+PCKWdw3Eg== -----END CERTIFICATE-----Generated at Sat Jul 26 13:14:21 2025 by rpki-client