$ rpki-client -vvf rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft File: 3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft (raw, json) Hash identifier: 3E6TBKJs1Nxx2MkSxQYfP9qTkCijmqXI/XIhgYHjnIw= Subject key identifier: 40:F5:EF:5E:1C:7E:E1:05:AE:4C:72:E3:E6:8D:0A:B1:E0:D6:A7:4F Authority key identifier: 30:87:C3:71:0F:B1:C5:ED:2A:38:12:24:F1:E8:1B:AC:39:DA:7F:CE Certificate issuer: /CN=3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE Certificate serial: 4DA29E9C7383AFEA338FF9AF25C9DC11852F2D77 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer Subject info access: rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft Manifest number: 02A1 Signing time: Wed 20 Aug 2025 04:59:44 +0000 Manifest this update: Wed 20 Aug 2025 04:54:44 +0000 Manifest next update: Thu 21 Aug 2025 05:31:44 +0000 Files and hashes: 1: 3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.crl (hash: Kqdb7JqE//qXL6RYshQfrezGjaGwy3s2wwqKpcZ7ROc=) 2: 3136382e3230352e37362e302f32322d3234203d3e20323635333535.roa (hash: 8d7fb9ij+PooSWUf38BeSaVdGp1TOm0K0uvvCP+F8NI=) 3: 323830343a326539633a3a2f33322d3438203d3e20323635333535.roa (hash: OGY/LrMrlfQKwjbab8G09HMM8TnKgSFSf9D0yjKBpNA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.crl rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 05:31:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a2:9e:9c:73:83:af:ea:33:8f:f9:af:25:c9:dc:11:85:2f:2d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE Validity Not Before: Aug 20 04:54:44 2025 GMT Not After : Aug 21 05:31:44 2025 GMT Subject: CN=40F5EF5E1C7EE105AE4C72E3E68D0AB1E0D6A74F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:14:68:1c:d9:8a:af:fa:76:dc:ad:df:f1:5c: 11:fb:7e:7f:09:d1:be:7c:1c:f5:01:e0:59:ad:e0: 7d:2c:58:e5:ff:ad:4f:fd:1c:c3:b4:f1:15:07:a0: 97:e3:8c:b7:b1:8a:1f:cc:01:62:e5:0f:91:fb:2b: 61:0c:f3:ce:8d:66:53:f2:a7:96:d3:8a:8e:f0:fe: 3a:81:84:64:3f:b2:10:68:31:d3:4b:b2:97:da:1b: 93:f6:6e:21:d8:17:c8:35:e0:6e:a8:55:02:29:d4: e1:1c:2a:75:df:30:0d:cb:e1:63:6b:bb:60:9d:b7: 0a:41:41:e5:31:13:da:b5:96:95:12:ce:b3:55:53: 30:ce:51:7a:f6:dc:e3:83:5b:40:85:f2:9b:2e:14: 47:67:7f:eb:43:dd:d4:75:2d:dd:74:30:da:5e:84: 61:d1:d4:08:f1:bb:f6:57:4d:67:74:b6:57:be:d5: 64:3e:30:a5:09:34:53:a1:bb:9a:91:49:16:fe:cc: 45:16:3b:da:62:69:cf:16:62:58:9f:9e:9f:0f:e6: 9f:b6:5a:1a:41:8d:3a:be:3b:58:18:5e:0b:85:9d: 74:cb:1b:74:14:a5:ad:d1:a0:ff:26:14:50:4b:b2: 67:84:03:39:41:8a:9a:d8:93:71:b2:86:b5:22:62: 22:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F5:EF:5E:1C:7E:E1:05:AE:4C:72:E3:E6:8D:0A:B1:E0:D6:A7:4F X509v3 Authority Key Identifier: keyid:30:87:C3:71:0F:B1:C5:ED:2A:38:12:24:F1:E8:1B:AC:39:DA:7F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f3:0f:a6:a1:f5:30:66:8b:3e:d1:ff:2f:56:64:cc:c1:ca: 3c:af:dc:88:69:a1:18:a8:f9:2d:0c:de:5e:bb:53:c9:ed:4d: 46:46:d3:c2:48:3d:5f:d2:13:12:e7:57:bb:d1:f3:b8:d6:4d: b7:eb:17:c5:38:7c:d6:36:dd:16:bc:ad:66:1d:4b:07:5b:a4: 35:9d:ca:16:5e:0c:fc:c5:f5:30:9a:17:63:df:21:bb:2f:16: ca:e4:9f:54:76:46:73:73:13:e7:9c:12:de:5f:4c:db:55:eb: 2b:9e:a8:ae:ba:a3:b6:e2:ce:11:a2:38:ae:b5:ec:5e:68:37: 30:6f:14:93:a0:a3:a7:f7:db:3a:a3:06:34:25:2f:e6:0b:23: 6f:b0:b5:1e:85:31:8f:66:19:f0:4d:d5:4d:6b:cf:ee:98:9f: 3f:e0:8e:c0:a7:b8:6e:f7:e2:5a:d2:29:68:c0:19:c5:e4:3e: ba:b4:90:bd:e6:64:86:c3:88:cf:d9:66:2c:1e:39:78:e2:e1: 1b:75:e1:6a:ac:03:68:b9:02:2d:89:90:3e:b7:b2:a8:d8:6b: 7c:a7:c1:96:fb:7b:ae:4c:10:80:f2:36:16:03:25:74:6f:08: 6e:da:f0:14:2e:a5:7c:20:51:1f:f8:1d:6a:44:e9:57:48:9b: 15:d6:53:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTaKenHODr+ozj/mvJcncEYUvLXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4N0MzNzEwRkIxQzVFRDJBMzgxMjI0RjFFODFCQUMz OURBN0ZDRTAeFw0yNTA4MjAwNDU0NDRaFw0yNTA4MjEwNTMxNDRaMDMxMTAvBgNV BAMTKDQwRjVFRjVFMUM3RUUxMDVBRTRDNzJFM0U2OEQwQUIxRTBENkE3NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKFGgc2Yqv+nbcrd/xXBH7fn8J 0b58HPUB4Fmt4H0sWOX/rU/9HMO08RUHoJfjjLexih/MAWLlD5H7K2EM886NZlPy p5bTio7w/jqBhGQ/shBoMdNLspfaG5P2biHYF8g14G6oVQIp1OEcKnXfMA3L4WNr u2CdtwpBQeUxE9q1lpUSzrNVUzDOUXr23OODW0CF8psuFEdnf+tD3dR1Ld10MNpe hGHR1Ajxu/ZXTWd0tle+1WQ+MKUJNFOhu5qRSRb+zEUWO9piac8WYlifnp8P5p+2 WhpBjTq+O1gYXguFnXTLG3QUpa3RoP8mFFBLsmeEAzlBiprYk3GyhrUiYiL/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQPXvXhx+4QWuTHLj5o0KseDWp08wHwYDVR0j BBgwFoAUMIfDcQ+xxe0qOBIk8egbrDnaf84wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkJ2Z1ZMc2YxcVZSeWVxZ1NZZWtpYWNkZzlZRTRuSFRDYnN4d1dzdW9m aTMvMS8zMDg3QzM3MTBGQjFDNUVEMkEzODEyMjRGMUU4MUJBQzM5REE3RkNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwODdDMzcxMEZCMUM1RUQy QTM4MTIyNEYxRTgxQkFDMzlEQTdGQ0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkJ2Z1ZMc2YxcVZSeWVxZ1NZZWtpYWNkZzlZRTRuSFRDYnN4d1dzdW9maTMvMS8z MDg3QzM3MTBGQjFDNUVEMkEzODEyMjRGMUU4MUJBQzM5REE3RkNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACfMPpqH1MGaLPtH/L1ZkzMHKPK/ciGmhGKj5LQzeXrtTye1NRkbTwkg9X9IT EudXu9HzuNZNt+sXxTh81jbdFrytZh1LB1ukNZ3KFl4M/MX1MJoXY98huy8WyuSf VHZGc3MT55wS3l9M21XrK56orrqjtuLOEaI4rrXsXmg3MG8Uk6Cjp/fbOqMGNCUv 5gsjb7C1HoUxj2YZ8E3VTWvP7pifP+COwKe4bvfiWtIpaMAZxeQ+urSQveZkhsOI z9lmLB45eOLhG3XhaqwDaLkCLYmQPreyqNhrfKfBlvt7rkwQgPI2FgMldG8Ibtrw FC6lfCBRH/gdakTpV0ibFdZT+g== -----END CERTIFICATE-----Generated at Wed Aug 20 18:39:46 2025 by rpki-client