$ rpki-client -vvf rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft File: 8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft (raw, json) Hash identifier: 7Qr5kWXo07vZRaTxDuRrjYaPXnt7JWEpP10Q0fiJIdQ= Subject key identifier: 73:A9:26:69:2F:CF:C9:2D:44:CA:74:74:FD:56:06:EB:F6:9D:1A:82 Authority key identifier: 8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F Certificate issuer: /CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F Certificate serial: 7B546C5C1C8ABCA69D64C2568B81C25BB17D95E3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer Subject info access: rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft Manifest number: 0287 Signing time: Sat 26 Jul 2025 05:28:04 +0000 Manifest this update: Sat 26 Jul 2025 05:23:04 +0000 Manifest next update: Sun 27 Jul 2025 06:51:04 +0000 Files and hashes: 1: 323830343a313838303a3a2f33322d3438203d3e203631393336.roa (hash: fNkBrLz/jvFOQO/KxVfV9h3dG8yXI+1zaqYHBVObJmU=) 2: 8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl (hash: hAgBilKCXkxrlPvo4/Y1CMgHuWrHgtzN0RJQBfbvYTU=) 3: 3230312e3135382e382e302f32322d3332203d3e203631393336.roa (hash: gjYVPcXMhZ7qu+6OU6EWL5nbz/3oRa7kcaOYjRDvHx8=) 4: 3230312e3135382e31322e302f32322d3332203d3e203631393336.roa (hash: 6R4AlcJOqeq8gfEUoLNsu28aKDDxhWH6o37EplyNWLc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 06:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:54:6c:5c:1c:8a:bc:a6:9d:64:c2:56:8b:81:c2:5b:b1:7d:95:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F Validity Not Before: Jul 26 05:23:04 2025 GMT Not After : Jul 27 06:51:04 2025 GMT Subject: CN=73A926692FCFC92D44CA7474FD5606EBF69D1A82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:79:84:94:e3:23:a4:36:c5:4a:6b:1e:cb:55: e8:f3:e2:77:36:ec:93:df:3c:da:72:3b:35:31:da: 25:8f:44:42:e8:b8:41:f5:4c:0e:d9:26:8b:87:9e: d6:cf:ab:8d:97:50:c5:1d:d7:62:e6:46:74:37:a7: a2:61:c8:f4:eb:84:ea:40:1f:97:cc:a2:6a:37:7c: 99:ca:f3:17:82:3a:12:5d:e9:57:28:4f:bf:f9:83: 78:f6:b2:f0:16:a4:03:e9:45:c0:39:6c:b3:e3:24: 57:47:14:d2:f6:80:57:a2:3d:85:7f:ce:1b:eb:52: 7e:6b:83:74:ca:1e:f9:77:9c:12:9d:ef:92:16:cb: 1f:39:cd:93:fb:d8:0d:4a:82:f1:ae:43:6e:f1:b2: 6d:e8:68:92:0e:40:e8:ea:7f:63:d0:e4:ba:46:5d: 78:36:95:39:1c:02:49:cf:61:c1:ec:68:0a:4b:40: 7a:36:9e:fc:aa:f5:4b:ca:fe:fc:f5:7e:97:f5:4a: 96:40:d8:2b:99:c6:72:d2:1b:1d:c1:d0:b0:62:7c: a6:68:c2:33:65:b0:c1:bd:3c:c0:85:dc:6a:f1:fa: 5a:21:f5:35:c1:2e:29:f8:50:ec:39:0b:cc:28:65: 15:18:a2:10:06:f6:3f:8a:63:37:5f:ad:77:6b:f2: c3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A9:26:69:2F:CF:C9:2D:44:CA:74:74:FD:56:06:EB:F6:9D:1A:82 X509v3 Authority Key Identifier: keyid:8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:b0:dc:85:42:1f:10:5d:a3:8a:62:5d:a7:df:45:b5:12:db: 94:a0:ed:ed:a3:5c:5e:c3:73:a1:4e:1c:04:01:23:7e:a5:53: 27:6a:bd:48:af:9a:65:0b:e4:99:fd:1f:6f:4b:16:9e:e9:18: 5b:d8:9a:0a:0f:6f:eb:07:60:db:f5:76:54:a1:ce:00:18:08: 30:2c:b9:29:63:cb:37:7d:e7:44:c3:90:13:96:8b:f6:a8:56: 6b:c0:6d:58:19:7c:f8:a9:78:c4:b2:d5:79:64:d5:2e:da:93: 3d:40:2b:ed:c9:f1:ea:d2:f5:c3:06:19:aa:a6:15:33:0d:ff: 90:86:26:f4:9d:3f:c6:44:c2:0d:df:cf:2f:3c:1f:18:ae:92: 8a:0e:91:2d:cb:2a:34:6e:da:8d:cc:b8:70:dd:29:d5:07:ff: 80:46:ba:b2:78:1a:45:4e:bf:c5:3b:b1:87:03:ca:bf:08:2e: a4:38:76:e9:ef:41:d0:26:54:5e:52:52:22:98:e5:0d:5b:32: bd:e1:09:4e:3f:d0:0a:5b:17:8a:cd:77:58:0f:8a:32:f7:3b: 02:3a:a3:00:62:07:c0:83:26:7e:5d:9a:41:90:ed:c8:9a:a7: 76:43:ab:7e:36:29:d4:bb:5e:c1:25:8c:be:7c:4b:d3:43:44: b9:54:5e:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUe1RsXByKvKadZMJWi4HCW7F9leMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQwMzA2QzIzRkY1NjRBRjU0Qjc5RDhGOThEMERDRERD OTMwQjIxRjAeFw0yNTA3MjYwNTIzMDRaFw0yNTA3MjcwNjUxMDRaMDMxMTAvBgNV BAMTKDczQTkyNjY5MkZDRkM5MkQ0NENBNzQ3NEZENTYwNkVCRjY5RDFBODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyeYSU4yOkNsVKax7LVejz4nc2 7JPfPNpyOzUx2iWPRELouEH1TA7ZJouHntbPq42XUMUd12LmRnQ3p6JhyPTrhOpA H5fMomo3fJnK8xeCOhJd6VcoT7/5g3j2svAWpAPpRcA5bLPjJFdHFNL2gFeiPYV/ zhvrUn5rg3TKHvl3nBKd75IWyx85zZP72A1KgvGuQ27xsm3oaJIOQOjqf2PQ5LpG XXg2lTkcAknPYcHsaApLQHo2nvyq9UvK/vz1fpf1SpZA2CuZxnLSGx3B0LBifKZo wjNlsMG9PMCF3Grx+loh9TXBLin4UOw5C8woZRUYohAG9j+KYzdfrXdr8sN1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUc6kmaS/PyS1EynR0/VYG6/adGoIwHwYDVR0j BBgwFoAUjQMGwj/1ZK9Ut52PmNDc3ckwsh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSkNYdkZVWXY4NDdNOEtOQUhGREppb3VUcUpCdDJWUU5xbUVOVHFNeFhG TU4vMC84RDAzMDZDMjNGRjU2NEFGNTRCNzlEOEY5OEQwRENEREM5MzBCMjFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEMDMwNkMyM0ZGNTY0QUY1 NEI3OUQ4Rjk4RDBEQ0REQzkzMEIyMUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SkNYdkZVWXY4NDdNOEtOQUhGREppb3VUcUpCdDJWUU5xbUVOVHFNeFhGTU4vMC84 RDAzMDZDMjNGRjU2NEFGNTRCNzlEOEY5OEQwRENEREM5MzBCMjFGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlLDchUIfEF2jimJdp99FtRLblKDt7aNcXsNzoU4cBAEjfqVTJ2q9SK+aZQvk mf0fb0sWnukYW9iaCg9v6wdg2/V2VKHOABgIMCy5KWPLN33nRMOQE5aL9qhWa8Bt WBl8+Kl4xLLVeWTVLtqTPUAr7cnx6tL1wwYZqqYVMw3/kIYm9J0/xkTCDd/PLzwf GK6Sig6RLcsqNG7ajcy4cN0p1Qf/gEa6sngaRU6/xTuxhwPKvwgupDh26e9B0CZU XlJSIpjlDVsyveEJTj/QClsXis13WA+KMvc7AjqjAGIHwIMmfl2aQZDtyJqndkOr fjYp1LtewSWMvnxL00NEuVRe8w== -----END CERTIFICATE-----Generated at Sat Jul 26 10:08:07 2025 by rpki-client