$ rpki-client -vvf rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft File: 8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft (raw, json) Hash identifier: A6FYKZkwSvDFQzhHYfa5Pd+qvymZHkmA0YyRyZjISm8= Subject key identifier: 8B:27:23:AF:86:D4:DD:C3:6B:65:BF:2D:FC:B4:A4:69:58:54:5E:39 Authority key identifier: 8E:C7:D5:A9:01:6A:AE:FC:41:0E:D4:66:E0:0B:14:EB:DC:E6:EE:7F Certificate issuer: /CN=8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F Certificate serial: 278630DDAE0C6D5A73A24F676D710A130A208849 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer Subject info access: rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft Manifest number: 029E Signing time: Wed 20 Aug 2025 07:58:16 +0000 Manifest this update: Wed 20 Aug 2025 07:53:16 +0000 Manifest next update: Thu 21 Aug 2025 09:52:16 +0000 Files and hashes: 1: 3137302e37382e3130302e302f32322d3234203d3e20323636323737.roa (hash: EOg/hM1DxnfBQMJLRQ41kPRgUah10XE4r5WsOtjys1w=) 2: 323830343a333534303a3a2f33322d3438203d3e20323636323737.roa (hash: P1a8+zNmPoNV87lU1gPo9XyXRrpLc9cUorv71O21VUA=) 3: 8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl (hash: 7oearSgl/ywad/bHmTqlFvhXBb/5D/U0/3N92loiK0g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 09:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:86:30:dd:ae:0c:6d:5a:73:a2:4f:67:6d:71:0a:13:0a:20:88:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F Validity Not Before: Aug 20 07:53:16 2025 GMT Not After : Aug 21 09:52:16 2025 GMT Subject: CN=8B2723AF86D4DDC36B65BF2DFCB4A46958545E39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d8:5c:37:49:4e:30:89:cf:9f:11:26:1a:9e: 77:2e:de:aa:fc:4a:eb:05:4d:71:12:9d:d1:0b:b4: 24:1d:67:b1:e0:c2:8b:be:55:26:70:32:0b:88:e3: 64:21:44:86:9f:57:54:53:18:de:c5:9b:12:32:50: b7:a6:3a:ce:fc:cd:78:04:61:e3:26:74:ce:01:1a: 7e:11:65:d0:86:bd:ad:6d:e7:18:f5:6c:d6:33:62: e6:06:65:2c:c7:12:95:65:23:37:d3:4c:61:36:18: b3:58:d0:1d:44:88:dd:ac:f8:74:68:51:6b:ff:5e: 96:af:3f:89:f5:0b:5c:f6:52:ab:10:0f:2c:1a:86: d7:0b:e6:eb:7d:ff:f9:b9:7b:5e:2c:d4:a0:0f:bc: 08:22:e5:e2:20:d6:18:15:13:e2:6e:5d:0a:1b:be: 94:be:4d:85:4b:af:e1:ff:06:f9:0e:10:95:fe:3b: e4:eb:a8:c8:76:7b:d1:74:58:0b:8f:d9:2a:f7:27: 13:2f:4d:5e:75:13:99:53:49:d7:d4:b8:a3:cc:62: 2d:cf:03:59:0e:ad:e5:5d:a3:0b:3a:ba:73:4d:7c: b4:d6:5e:86:3b:74:55:6f:1b:e0:8b:ed:fe:04:74: 34:1c:96:88:c4:7f:e8:a9:11:63:fd:00:98:6b:bd: fd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:27:23:AF:86:D4:DD:C3:6B:65:BF:2D:FC:B4:A4:69:58:54:5E:39 X509v3 Authority Key Identifier: keyid:8E:C7:D5:A9:01:6A:AE:FC:41:0E:D4:66:E0:0B:14:EB:DC:E6:EE:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:bd:9a:7b:11:c3:6c:82:12:82:9b:cb:e2:58:00:73:7c:cb: 84:17:b1:9f:b6:61:f8:69:5f:2a:2c:86:39:50:f4:70:1d:2e: 1d:5a:9a:42:f8:a8:72:9c:33:cc:64:82:f9:c4:b2:e4:96:78: 6f:ce:8f:78:21:0a:91:d2:bd:82:8a:c0:f1:01:54:05:06:b1: 43:61:56:ec:10:07:e8:a0:be:6f:e5:cb:df:e6:76:ae:81:d7: d6:47:81:0c:7d:a2:dc:dc:84:28:34:b1:82:17:80:3c:23:54: d8:ec:a0:46:dd:ac:2c:41:f3:c6:f2:b0:20:3b:e7:67:fb:88: a1:df:ef:64:6a:ec:08:2f:3f:81:13:b6:c0:ad:7a:75:e6:1a: c3:90:8b:42:31:3e:ce:5a:57:f3:86:07:49:c3:da:f6:db:e3: 1f:48:76:70:01:d6:92:8f:94:40:f7:9e:11:e5:fd:25:6e:30: 30:26:5c:82:49:a9:4f:64:cf:85:aa:bb:cd:bc:d2:c1:ab:80: 4b:8b:0f:e3:38:a1:14:83:94:cb:8b:c0:ba:f8:57:89:bc:fa: a7:fa:a0:5a:fb:30:b4:f4:6f:99:3c:d4:eb:6a:5d:e6:63:cb: 07:74:c7:77:3b:11:ed:d1:da:20:c1:e3:d9:c0:67:22:43:60: bb:93:9b:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJ4Yw3a4MbVpzok9nbXEKEwogiEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVDN0Q1QTkwMTZBQUVGQzQxMEVENDY2RTAwQjE0RUJE Q0U2RUU3RjAeFw0yNTA4MjAwNzUzMTZaFw0yNTA4MjEwOTUyMTZaMDMxMTAvBgNV BAMTKDhCMjcyM0FGODZENEREQzM2QjY1QkYyREZDQjRBNDY5NTg1NDVFMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh2Fw3SU4wic+fESYanncu3qr8 SusFTXESndELtCQdZ7Hgwou+VSZwMguI42QhRIafV1RTGN7FmxIyULemOs78zXgE YeMmdM4BGn4RZdCGva1t5xj1bNYzYuYGZSzHEpVlIzfTTGE2GLNY0B1EiN2s+HRo UWv/XpavP4n1C1z2UqsQDywahtcL5ut9//m5e14s1KAPvAgi5eIg1hgVE+JuXQob vpS+TYVLr+H/BvkOEJX+O+TrqMh2e9F0WAuP2Sr3JxMvTV51E5lTSdfUuKPMYi3P A1kOreVdows6unNNfLTWXoY7dFVvG+CL7f4EdDQclojEf+ipEWP9AJhrvf0zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiycjr4bU3cNrZb8t/LSkaVhUXjkwHwYDVR0j BBgwFoAUjsfVqQFqrvxBDtRm4AsU69zm7n8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlBwZUg0aFV3SFNtTlY5aHc3Y3g0Um1GOG90Sk5OOEhQZndrbUZuOTR1 aXMvMS84RUM3RDVBOTAxNkFBRUZDNDEwRUQ0NjZFMDBCMTRFQkRDRTZFRTdGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQzdENUE5MDE2QUFFRkM0 MTBFRDQ2NkUwMEIxNEVCRENFNkVFN0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlBwZUg0aFV3SFNtTlY5aHc3Y3g0Um1GOG90Sk5OOEhQZndrbUZuOTR1aXMvMS84 RUM3RDVBOTAxNkFBRUZDNDEwRUQ0NjZFMDBCMTRFQkRDRTZFRTdGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzb2aexHDbIISgpvL4lgAc3zLhBexn7Zh+GlfKiyGOVD0cB0uHVqaQviocpwz zGSC+cSy5JZ4b86PeCEKkdK9gorA8QFUBQaxQ2FW7BAH6KC+b+XL3+Z2roHX1keB DH2i3NyEKDSxgheAPCNU2OygRt2sLEHzxvKwIDvnZ/uIod/vZGrsCC8/gRO2wK16 deYaw5CLQjE+zlpX84YHScPa9tvjH0h2cAHWko+UQPeeEeX9JW4wMCZcgkmpT2TP haq7zbzSwauAS4sP4zihFIOUy4vAuvhXibz6p/qgWvswtPRvmTzU62pd5mPLB3TH dzsR7dHaIMHj2cBnIkNgu5ObUA== -----END CERTIFICATE-----Generated at Wed Aug 20 16:17:53 2025 by rpki-client