$ rpki-client -vvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft File: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft (raw, json) Hash identifier: dy17wbcp07T3lhpYEenzZpiyLB2Ncu08dKosMz52h0w= Subject key identifier: 3A:EE:CC:AF:6C:CE:87:82:A8:40:C0:70:59:08:C1:FC:95:0B:CD:D3 Authority key identifier: 02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED Certificate issuer: /CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Certificate serial: 06CC3D3BEA5D08D24E5F9A9616291746F383DBB2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer Subject info access: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft Manifest number: 027A Signing time: Sat 26 Jul 2025 03:13:08 +0000 Manifest this update: Sat 26 Jul 2025 03:08:08 +0000 Manifest next update: Sun 27 Jul 2025 03:43:08 +0000 Files and hashes: 1: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl (hash: 0t6dOrwSrdrcWhdvLF/uJIQfgRQ0OQAqwkThGvrygY4=) 2: 3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa (hash: BzoyXL30Xsaxt5/GzA+mLV5q6XBxznhdO2qisUbseRg=) 3: 323830343a313431633a3a2f33322d313238203d3e203533313330.roa (hash: cjsfM81trhoZs+Ib78YBfAQ97ux0mFDSEJNG8MM4Pa8=) 4: 3139312e372e37322e302f32312d3234203d3e203533313330.roa (hash: uXdeuicJG1GO+GJKUORCb4DqvhzxPyQ2Z5ORNJJFr7Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 03:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:cc:3d:3b:ea:5d:08:d2:4e:5f:9a:96:16:29:17:46:f3:83:db:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Validity Not Before: Jul 26 03:08:08 2025 GMT Not After : Jul 27 03:43:08 2025 GMT Subject: CN=3AEECCAF6CCE8782A840C0705908C1FC950BCDD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:c4:03:88:bb:40:e5:80:7e:75:93:33:ec: 96:c3:6a:09:f8:4e:5d:b5:1a:04:93:15:c2:0b:5d: 2f:c0:97:60:b2:9c:74:f3:9c:8f:77:ad:1f:80:d6: 32:5d:1f:e1:9d:6a:24:ca:9d:62:9d:ef:0c:02:cb: 95:2c:2c:43:80:52:a7:b2:09:5c:52:af:f7:55:0b: 0e:9f:42:3a:a0:fb:61:ca:b2:0e:00:9d:f1:48:45: 54:30:77:ab:65:56:87:df:68:9a:97:db:4a:de:ee: 63:72:a5:29:85:54:43:ca:57:80:b8:dd:a2:f6:b2: 46:2b:49:cb:da:f6:8e:5a:dc:7c:c2:5a:96:4c:f6: 9f:1e:31:1e:43:7f:6e:80:00:e1:3b:d5:a7:48:6f: 95:1f:e0:69:82:a8:70:7f:6f:9c:46:19:0f:5f:e8: b8:91:88:82:73:55:1c:ce:36:77:34:2c:11:e1:1a: 37:2b:8f:0c:64:da:f7:77:3b:bf:03:47:29:64:a5: 9f:9f:11:94:8a:1a:a4:33:10:51:28:57:25:69:6e: 85:a9:54:f5:6a:1f:0a:2a:78:1c:b1:c9:ad:c1:9a: 41:02:94:12:95:87:d2:17:d6:a9:4e:d4:86:89:00: 41:4f:ca:67:04:d5:f6:e2:df:e5:4a:af:26:19:13: 09:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EE:CC:AF:6C:CE:87:82:A8:40:C0:70:59:08:C1:FC:95:0B:CD:D3 X509v3 Authority Key Identifier: keyid:02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:64:0f:2b:88:09:6c:51:2e:19:ba:ec:e3:a1:e4:9d:fb:7e: ec:2b:54:85:35:ab:46:50:ba:58:36:ff:b2:44:6b:01:bb:76: 43:41:92:f7:0b:90:5d:73:21:45:04:36:16:8d:5c:61:20:ed: a9:e4:95:fc:61:44:ad:a8:4e:04:09:29:6a:d1:d2:f2:9e:9a: ea:90:03:13:7e:67:81:84:31:50:1d:06:1b:14:26:17:69:b7: 37:bd:f9:38:f2:8f:a4:88:d7:e0:d3:a5:88:6b:ed:30:8e:a8: a0:1e:f7:d2:73:c5:84:34:b1:9f:9c:7e:11:8b:13:ec:9e:15: 1e:0f:0e:db:18:82:90:6d:73:80:da:b7:67:e8:cc:05:ab:bd: 00:d2:db:90:ef:d6:27:09:74:cd:e3:50:3e:5b:25:60:b4:f0: 3b:98:ee:bb:ea:c3:8e:ad:02:30:aa:36:a2:dd:39:2f:3a:03: 59:fb:bb:0e:de:1f:31:ed:a6:e9:50:c9:97:72:aa:45:13:6f: 73:40:70:d4:46:01:ab:21:74:a1:0f:81:5a:09:1b:97:ac:c9: 21:08:b5:82:1a:89:93:9f:07:4f:b4:b8:a6:3f:e3:51:0b:7f: c6:93:d4:e0:f2:a5:3b:34:2a:ac:a9:4d:26:94:42:bf:50:d5: 85:f5:5c:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBsw9O+pdCNJOX5qWFikXRvOD27IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJDQjk5M0U5NTg1QTUzRkM2QjQwREE3NjJBNzNFQjI4 MjFCRjZFRDAeFw0yNTA3MjYwMzA4MDhaFw0yNTA3MjcwMzQzMDhaMDMxMTAvBgNV BAMTKDNBRUVDQ0FGNkNDRTg3ODJBODQwQzA3MDU5MDhDMUZDOTUwQkNERDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw0sQDiLtA5YB+dZMz7JbDagn4 Tl21GgSTFcILXS/Al2CynHTznI93rR+A1jJdH+GdaiTKnWKd7wwCy5UsLEOAUqey CVxSr/dVCw6fQjqg+2HKsg4AnfFIRVQwd6tlVoffaJqX20re7mNypSmFVEPKV4C4 3aL2skYrScva9o5a3HzCWpZM9p8eMR5Df26AAOE71adIb5Uf4GmCqHB/b5xGGQ9f 6LiRiIJzVRzONnc0LBHhGjcrjwxk2vd3O78DRylkpZ+fEZSKGqQzEFEoVyVpboWp VPVqHwoqeByxya3BmkEClBKVh9IX1qlO1IaJAEFPymcE1fbi3+VKryYZEwmHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOu7Mr2zOh4KoQMBwWQjB/JULzdMwHwYDVR0j BBgwFoAUAsuZPpWFpT/GtA2nYqc+soIb9u0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtM NlovMS8wMkNCOTkzRTk1ODVBNTNGQzZCNDBEQTc2MkE3M0VCMjgyMUJGNkVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyQ0I5OTNFOTU4NUE1M0ZD NkI0MERBNzYyQTczRUIyODIxQkY2RUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtMNlovMS8w MkNCOTkzRTk1ODVBNTNGQzZCNDBEQTc2MkE3M0VCMjgyMUJGNkVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUWQPK4gJbFEuGbrs46Hknft+7CtUhTWrRlC6WDb/skRrAbt2Q0GS9wuQXXMh RQQ2Fo1cYSDtqeSV/GFErahOBAkpatHS8p6a6pADE35ngYQxUB0GGxQmF2m3N735 OPKPpIjX4NOliGvtMI6ooB730nPFhDSxn5x+EYsT7J4VHg8O2xiCkG1zgNq3Z+jM Bau9ANLbkO/WJwl0zeNQPlslYLTwO5juu+rDjq0CMKo2ot05LzoDWfu7Dt4fMe2m 6VDJl3KqRRNvc0Bw1EYBqyF0oQ+BWgkbl6zJIQi1ghqJk58HT7S4pj/jUQt/xpPU 4PKlOzQqrKlNJpRCv1DVhfVcCg== -----END CERTIFICATE-----Generated at Sat Jul 26 19:15:11 2025 by rpki-client