$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft File: 294426E31AEAEBF273647549DD459DE98A112431.mft (raw, json) Hash identifier: rFGnZymruuVn5Jb1f3ZH25w9d2mgxOft6eniyyiVBCU= Subject key identifier: 1C:05:AD:92:8E:59:B2:9C:62:FD:05:7F:EF:93:7B:3B:DB:B4:CE:F0 Authority key identifier: 29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31 Certificate issuer: /CN=294426E31AEAEBF273647549DD459DE98A112431 Certificate serial: 78EDAC2DD320FD4CFEEBD8C6A8C53DA424FE0D8F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer Subject info access: rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft Manifest number: 0287 Signing time: Sat 26 Jul 2025 00:15:24 +0000 Manifest this update: Sat 26 Jul 2025 00:10:24 +0000 Manifest next update: Sun 27 Jul 2025 03:14:24 +0000 Files and hashes: 1: 3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa (hash: tM+Sjx/wcU41RTwQQmeZaLCi88tO8sgzPpP4YPgZE8s=) 2: 323830343a313539303a3a2f33322d313238203d3e20323633333935.roa (hash: 27TRK43DvGzctvUwTwZoruKts8GvTaqt7quiQch6ar4=) 3: 294426E31AEAEBF273647549DD459DE98A112431.crl (hash: PMx7LrQqCZONnbW3Y4W35RAez7QCJyPC0+3so60JOL8=) 4: 3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa (hash: kP3yuOziQGvTs7gAqbrCAHPzpnd0+PYYuQOkH5wNORA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 03:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ed:ac:2d:d3:20:fd:4c:fe:eb:d8:c6:a8:c5:3d:a4:24:fe:0d:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294426E31AEAEBF273647549DD459DE98A112431 Validity Not Before: Jul 26 00:10:24 2025 GMT Not After : Jul 27 03:14:24 2025 GMT Subject: CN=1C05AD928E59B29C62FD057FEF937B3BDBB4CEF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1f:04:6f:11:94:a2:63:0d:11:79:7e:26:af: e2:11:49:b9:61:db:bf:78:25:45:a4:45:d5:3d:de: 27:fd:2f:d5:df:16:cf:69:1b:af:12:63:cc:ab:5b: 27:e8:26:aa:d4:03:6a:3b:96:47:56:56:9a:61:7f: 07:bf:d8:54:2e:2d:ce:c4:35:39:b7:b4:a9:47:29: 11:5d:93:b2:08:9e:60:99:51:2e:14:26:8a:a1:f5: 99:81:1c:a7:b7:11:ef:5a:b9:97:56:aa:5d:8b:c0: 28:da:73:ee:6c:40:ca:dd:f8:69:9f:88:e6:28:27: cc:b0:9b:2a:19:0b:e1:e3:b4:59:84:91:ca:2b:5d: e8:a7:a5:d7:09:bd:d6:58:14:c7:df:ba:c5:cb:e3: 51:3c:35:7e:15:d7:0a:8b:05:95:20:6b:33:6d:15: b7:82:d5:a4:84:dd:bb:c7:9b:41:2c:7d:60:14:16: e2:d3:7e:a9:b1:b6:c5:07:07:3d:b3:1b:52:10:69: f8:ce:aa:b0:85:ad:a4:b9:c1:80:81:c4:a5:85:85: ac:fb:a7:6c:98:a0:43:be:30:ba:cd:6f:6b:b1:0b: 42:b2:c0:50:f4:b5:9b:85:38:5a:53:36:cf:54:92: c1:fb:b6:35:c6:1a:90:9c:72:ed:11:8f:8b:2d:02: 80:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:05:AD:92:8E:59:B2:9C:62:FD:05:7F:EF:93:7B:3B:DB:B4:CE:F0 X509v3 Authority Key Identifier: keyid:29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:1b:f9:c1:1e:a0:07:7f:95:8e:91:1e:9f:36:20:0d:ba:75: 9e:fa:5b:3f:16:fc:1e:18:0f:cf:7f:e8:de:3a:fc:69:bf:87: 95:aa:57:70:02:09:da:ba:ac:04:59:85:28:7a:d3:84:bc:74: da:21:fc:a1:43:f9:39:d5:8a:4c:9a:90:4a:c3:6c:ed:b7:5f: ad:3d:92:07:8c:38:86:8f:db:88:98:76:8b:25:6a:2c:83:86: 48:42:dd:42:82:81:a5:f7:bc:ec:fb:c6:97:c6:60:81:4d:66: f8:ab:2a:e7:fa:14:72:db:0e:ec:8e:9a:c9:be:fa:f9:6b:82: 46:d3:56:af:b9:72:68:c0:ce:14:c5:04:be:8d:9a:d6:f5:83: a4:0d:ec:41:b3:f2:53:50:3c:19:a8:72:53:89:e4:9b:1c:d1: f0:50:11:97:66:4d:17:03:19:14:15:2c:cf:3a:0a:6e:52:97: b2:2a:a0:4b:8b:40:1f:36:8e:9d:21:43:72:68:25:70:6e:3c: 2c:de:a6:86:16:1e:6f:c6:9e:6c:c6:a3:c4:91:a8:ba:d3:99: 96:2a:ba:4e:fc:31:e5:77:c5:a6:55:9a:24:7d:6b:78:55:ac: 6c:80:df:97:1d:fe:b1:79:a4:50:2b:47:69:4e:40:fa:7a:ad: 59:4c:4b:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeO2sLdMg/Uz+69jGqMU9pCT+DY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0NDI2RTMxQUVBRUJGMjczNjQ3NTQ5REQ0NTlERTk4 QTExMjQzMTAeFw0yNTA3MjYwMDEwMjRaFw0yNTA3MjcwMzE0MjRaMDMxMTAvBgNV BAMTKDFDMDVBRDkyOEU1OUIyOUM2MkZEMDU3RkVGOTM3QjNCREJCNENFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrHwRvEZSiYw0ReX4mr+IRSblh 2794JUWkRdU93if9L9XfFs9pG68SY8yrWyfoJqrUA2o7lkdWVpphfwe/2FQuLc7E NTm3tKlHKRFdk7IInmCZUS4UJoqh9ZmBHKe3Ee9auZdWql2LwCjac+5sQMrd+Gmf iOYoJ8ywmyoZC+HjtFmEkcorXeinpdcJvdZYFMffusXL41E8NX4V1wqLBZUgazNt FbeC1aSE3bvHm0EsfWAUFuLTfqmxtsUHBz2zG1IQafjOqrCFraS5wYCBxKWFhaz7 p2yYoEO+MLrNb2uxC0KywFD0tZuFOFpTNs9UksH7tjXGGpCccu0Rj4stAoAVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHAWtko5Zspxi/QV/75N7O9u0zvAwHwYDVR0j BBgwFoAUKUQm4xrq6/JzZHVJ3UWd6YoRJDEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkZvRnFCeDd4U3ZTcmozMlpGMnpKdEJxQ0xpdEVFR0QyeDQ5VnFkUTVT bjQvMS8yOTQ0MjZFMzFBRUFFQkYyNzM2NDc1NDlERDQ1OURFOThBMTEyNDMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NDQyNkUzMUFFQUVCRjI3 MzY0NzU0OURENDU5REU5OEExMTI0MzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkZvRnFCeDd4U3ZTcmozMlpGMnpKdEJxQ0xpdEVFR0QyeDQ5VnFkUTVTbjQvMS8y OTQ0MjZFMzFBRUFFQkYyNzM2NDc1NDlERDQ1OURFOThBMTEyNDMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhRv5wR6gB3+VjpEenzYgDbp1nvpbPxb8HhgPz3/o3jr8ab+HlapXcAIJ2rqs BFmFKHrThLx02iH8oUP5OdWKTJqQSsNs7bdfrT2SB4w4ho/biJh2iyVqLIOGSELd QoKBpfe87PvGl8ZggU1m+Ksq5/oUctsO7I6ayb76+WuCRtNWr7lyaMDOFMUEvo2a 1vWDpA3sQbPyU1A8GahyU4nkmxzR8FARl2ZNFwMZFBUszzoKblKXsiqgS4tAHzaO nSFDcmglcG48LN6mhhYeb8aebMajxJGoutOZliq6Tvwx5XfFplWaJH1reFWsbIDf lx3+sXmkUCtHaU5A+nqtWUxLCQ== -----END CERTIFICATE-----Generated at Sat Jul 26 12:05:33 2025 by rpki-client