$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft File: 89F33609E2B118C8ED9A105548D2D01FD6E38729.mft (raw, json) Hash identifier: GuK2eMhNDLI2GArOrN4V+++kQ0rBZIte5wgJadF9BDk= Subject key identifier: 2A:E8:BF:68:E7:F9:92:40:3A:5C:6D:B7:C4:E4:0B:CE:30:AF:73:89 Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 Certificate issuer: /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Certificate serial: 33D41C8AB593F23D8920690E8E489550BCAE9880 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject info access: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft Manifest number: 027B Signing time: Fri 25 Jul 2025 12:34:23 +0000 Manifest this update: Fri 25 Jul 2025 12:29:23 +0000 Manifest next update: Sat 26 Jul 2025 15:12:23 +0000 Files and hashes: 1: 3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa (hash: bMO8E7JDP414YIw6qvyG05VpeLGja7y87JGV9snRtok=) 2: 89F33609E2B118C8ED9A105548D2D01FD6E38729.crl (hash: 8F2KaeM8/VKZMnKAP0L58P8SUUXUhWTQZPqS5t8dXwA=) 3: 323830343a313263303a3a2f33322d3438203d3e20323633343936.roa (hash: yCRnKe7Cfo4f5weE5YMpi/ZO3/1Psrg+aJlLbswl12Y=) 4: 3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa (hash: 91gQ1OFtC7i3YwbFOdgAOt94iN2xUARUXKGh62+Ssos=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Jul 2025 15:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d4:1c:8a:b5:93:f2:3d:89:20:69:0e:8e:48:95:50:bc:ae:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Validity Not Before: Jul 25 12:29:23 2025 GMT Not After : Jul 26 15:12:23 2025 GMT Subject: CN=2AE8BF68E7F992403A5C6DB7C4E40BCE30AF7389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:96:81:9f:f7:d3:86:a1:1b:ff:67:53:43:83: 4f:30:7c:e9:66:ab:9f:0a:fb:db:39:4d:66:f8:0e: c9:72:e6:77:66:b8:2f:f3:fa:8a:19:10:05:2b:4b: a5:79:09:b9:13:ee:55:1d:ea:1d:9b:b4:b1:2d:c0: 5f:ce:0e:c9:83:a2:ef:78:32:d2:93:8f:56:a1:d4: fd:ec:33:99:d1:90:89:fa:36:ca:40:83:44:18:df: 0e:56:4f:08:35:58:fc:cd:e8:a3:39:40:6b:cc:3f: c0:3a:4d:44:f6:94:78:18:d4:1e:52:bc:4d:ed:27: b0:39:ce:c3:30:25:c3:84:df:7a:e8:96:9d:df:d0: cf:3c:0c:73:6f:0e:a7:8b:94:76:51:42:db:8a:b2: ce:dd:2b:23:27:a1:78:ed:a7:91:ab:e1:e1:8e:7b: 53:56:c5:4e:bf:da:cc:6e:b0:69:06:a2:b9:88:61: 2f:9c:50:cd:cd:35:fe:b3:f5:38:b1:77:37:f8:1d: 42:5b:dd:78:0c:a5:f2:41:98:84:54:09:b5:6d:b6: 7e:2b:b1:3b:09:4a:21:9a:c6:39:d7:30:c0:40:bc: 6d:b6:d6:28:53:c4:c8:b0:48:c9:6c:42:3d:fb:e4: ee:70:6c:85:37:38:04:16:0b:65:29:0b:9d:ac:0f: 29:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E8:BF:68:E7:F9:92:40:3A:5C:6D:B7:C4:E4:0B:CE:30:AF:73:89 X509v3 Authority Key Identifier: keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e2:5a:f4:04:b3:a5:4f:85:8c:0c:ec:b4:7b:85:37:da:a1: 05:15:be:e8:7b:cd:6a:ff:7f:71:dd:6b:8d:96:ca:8c:b2:51: 04:54:fc:e2:53:cd:04:a1:2c:c5:c9:e4:cd:77:af:a1:50:6e: a5:a4:03:aa:9b:8b:a9:4a:dd:66:ac:cb:7a:7f:89:cf:23:c3: 40:ab:24:0a:b7:da:fd:96:06:de:23:7d:48:18:3c:07:8d:15: a0:42:62:da:51:5e:03:c7:6e:65:63:6d:2e:35:91:0d:f2:2b: 50:73:8f:75:3a:4d:e7:66:21:14:ec:e8:50:bd:67:9f:f2:ef: e5:1b:ae:f9:69:b7:8a:02:82:26:72:60:31:49:4b:45:04:25: 30:fe:e4:2b:c3:9e:57:38:a2:87:64:3c:16:3b:27:d1:d2:96: 76:6c:9b:57:bc:da:92:87:3a:33:f3:02:02:3b:74:a3:56:33: 91:87:1f:35:a7:56:6d:0c:bd:71:d3:7c:af:42:9e:db:62:4d: 16:fb:85:2b:c0:a0:7c:40:d5:92:2b:26:47:ad:5f:41:15:17: 12:a4:5e:47:4f:52:cb:2a:4b:1c:d7:fc:d5:b2:6c:d5:e9:d2: 49:1b:33:34:f5:5c:23:00:5c:d2:a5:d2:3f:a3:43:fb:9a:f8: 0c:f2:c0:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUM9QcirWT8j2JIGkOjkiVULyumIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlGMzM2MDlFMkIxMThDOEVEOUExMDU1NDhEMkQwMUZE NkUzODcyOTAeFw0yNTA3MjUxMjI5MjNaFw0yNTA3MjYxNTEyMjNaMDMxMTAvBgNV BAMTKDJBRThCRjY4RTdGOTkyNDAzQTVDNkRCN0M0RTQwQkNFMzBBRjczODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9loGf99OGoRv/Z1NDg08wfOlm q58K+9s5TWb4Dsly5ndmuC/z+ooZEAUrS6V5CbkT7lUd6h2btLEtwF/ODsmDou94 MtKTj1ah1P3sM5nRkIn6NspAg0QY3w5WTwg1WPzN6KM5QGvMP8A6TUT2lHgY1B5S vE3tJ7A5zsMwJcOE33rolp3f0M88DHNvDqeLlHZRQtuKss7dKyMnoXjtp5Gr4eGO e1NWxU6/2sxusGkGormIYS+cUM3NNf6z9Tixdzf4HUJb3XgMpfJBmIRUCbVttn4r sTsJSiGaxjnXMMBAvG221ihTxMiwSMlsQj375O5wbIU3OAQWC2UpC52sDynFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKui/aOf5kkA6XG23xOQLzjCvc4kwHwYDVR0j BBgwFoAUifM2CeKxGMjtmhBVSNLQH9bjhykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4 ekUvMS84OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RjMzNjA5RTJCMTE4QzhF RDlBMTA1NTQ4RDJEMDFGRDZFMzg3MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4ekUvMS84 OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXuJa9ASzpU+FjAzstHuFN9qhBRW+6HvNav9/cd1rjZbKjLJRBFT84lPNBKEs xcnkzXevoVBupaQDqpuLqUrdZqzLen+JzyPDQKskCrfa/ZYG3iN9SBg8B40VoEJi 2lFeA8duZWNtLjWRDfIrUHOPdTpN52YhFOzoUL1nn/Lv5Ruu+Wm3igKCJnJgMUlL RQQlMP7kK8OeVziih2Q8Fjsn0dKWdmybV7zakoc6M/MCAjt0o1YzkYcfNadWbQy9 cdN8r0Ke22JNFvuFK8CgfEDVkismR61fQRUXEqReR09SyypLHNf81bJs1enSSRsz NPVcIwBc0qXSP6ND+5r4DPLAsA== -----END CERTIFICATE-----Generated at Sat Jul 26 06:44:58 2025 by rpki-client