$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft File: 0688357ED433C0A60770FB474BDB2C72796B78BD.mft (raw, json) Hash identifier: pprwYjtYTpEDp6B/nJMGSXJvTCcpf9vMiVkrpWHoeKo= Subject key identifier: D3:4D:7D:B0:DF:4F:6E:AF:F9:7F:BD:7D:65:0A:F2:20:0F:4E:C7:44 Authority key identifier: 06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD Certificate issuer: /CN=0688357ED433C0A60770FB474BDB2C72796B78BD Certificate serial: 448D3B5AE6024D0CB0BF74B093C69EE2AC9DE6A6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject info access: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft Manifest number: AC Signing time: Wed 20 Aug 2025 07:32:33 +0000 Manifest this update: Wed 20 Aug 2025 07:27:33 +0000 Manifest next update: Thu 21 Aug 2025 09:52:33 +0000 Files and hashes: 1: 0688357ED433C0A60770FB474BDB2C72796B78BD.crl (hash: R1p9RAH4tMBj4FdoPKZTC8LaMEkP6nzeuq+bjuFQX88=) 2: 3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa (hash: IaTZ4i3zNgWw2pTgrax+ua0Htv3rIzLefPo79rSHOwM=) 3: 323830343a316165303a3a2f33322d3634203d3e203631363936.roa (hash: MNi0hCQVw5LiwCn26uDAV8DWpcneKIoS1bbRQFE26gw=) 4: 3133382e33362e3233322e302f32322d3332203d3e203631363936.roa (hash: 0PAGB5C8H6IcqwDv00MSTHzGTYgYIUYZIqOHywJKqvU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 09:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8d:3b:5a:e6:02:4d:0c:b0:bf:74:b0:93:c6:9e:e2:ac:9d:e6:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0688357ED433C0A60770FB474BDB2C72796B78BD Validity Not Before: Aug 20 07:27:33 2025 GMT Not After : Aug 21 09:52:33 2025 GMT Subject: CN=D34D7DB0DF4F6EAFF97FBD7D650AF2200F4EC744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ca:37:98:cc:a0:09:83:fb:67:3e:f0:37:54: 2d:3c:1c:07:7b:7f:cb:ab:bb:84:96:79:7b:15:ec: f9:74:8e:75:fb:72:2b:59:1f:ec:a9:01:21:3c:ff: 5a:62:e5:01:54:87:51:0e:74:4e:fc:ba:4a:92:47: 5b:e7:e3:28:e4:0a:33:6a:37:57:ac:b0:41:6d:e4: 2b:84:ac:2d:5f:38:03:7d:d2:47:ca:2f:61:59:95: e6:80:09:e4:bb:5c:ed:9b:6e:17:6b:0e:f5:e1:77: 6c:2f:0b:14:86:ce:c6:4a:7f:31:1c:08:84:be:7c: 02:b8:c3:2d:c3:14:19:0d:c5:c3:18:d7:fe:ce:88: fa:ba:fe:ff:3b:d2:77:03:c8:68:96:52:25:20:13: 65:d9:ca:b9:7a:93:fc:7e:9d:b0:b8:c2:8d:73:7a: 0b:07:8a:3b:7b:98:e5:83:e7:64:85:a6:66:14:28: f3:f2:eb:03:56:21:2d:c8:c7:2e:de:f5:01:e5:2b: ab:3f:e1:46:ef:fd:78:f6:d8:ec:1c:4c:c1:64:56: 40:e8:3d:df:60:3e:1b:25:73:86:78:92:e8:74:98: 77:ee:af:cc:de:0d:c4:e7:8b:bd:44:81:5b:f8:c9: c2:ca:9b:eb:bb:33:12:02:42:7d:3e:0e:11:ff:51: 02:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4D:7D:B0:DF:4F:6E:AF:F9:7F:BD:7D:65:0A:F2:20:0F:4E:C7:44 X509v3 Authority Key Identifier: keyid:06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:ed:99:68:4e:af:99:d0:37:e5:3e:fc:58:d9:4d:30:5f:29: ce:6f:3c:3d:3e:15:34:d6:9c:e1:57:fd:7d:d4:ef:6e:60:16: 04:ab:15:d9:79:c6:c3:b0:f4:54:7a:20:85:52:33:54:1b:3d: 89:91:74:5a:ce:6c:ca:d3:d9:bd:f4:5c:e2:04:11:0b:0b:85: 1e:34:12:bb:b8:f7:39:3c:84:04:26:cd:b9:7c:48:ff:30:dd: 37:a9:67:92:2e:e9:8f:59:1d:53:30:35:48:40:d3:05:7a:bc: 15:5f:d3:bb:e2:7c:b2:30:c5:61:0f:e8:b5:bd:42:ea:e3:27: 92:c8:ac:8d:2e:cd:0b:b5:04:2c:09:40:e5:64:38:02:00:9f: 93:ef:b2:25:05:45:08:4d:bf:d5:60:ed:d8:da:9e:cf:c1:e2: 33:4f:5f:21:f3:7f:f2:3b:80:e8:c0:29:a8:fd:b9:ac:d3:e2: 9b:9e:50:ca:38:84:2b:1a:51:34:8d:c6:92:1f:a0:89:79:1b: 3b:f6:cc:4e:98:91:f1:d9:ec:1d:09:f9:43:74:fc:19:47:d0: 90:18:6e:7c:27:40:40:05:10:79:74:23:2b:cb:cb:64:9f:11: 5b:7d:ba:de:dc:cf:48:a6:73:3f:d5:a5:cb:b1:af:3f:e5:90: 69:a3:2f:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURI07WuYCTQywv3Swk8ae4qyd5qYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4ODM1N0VENDMzQzBBNjA3NzBGQjQ3NEJEQjJDNzI3 OTZCNzhCRDAeFw0yNTA4MjAwNzI3MzNaFw0yNTA4MjEwOTUyMzNaMDMxMTAvBgNV BAMTKEQzNEQ3REIwREY0RjZFQUZGOTdGQkQ3RDY1MEFGMjIwMEY0RUM3NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjyjeYzKAJg/tnPvA3VC08HAd7 f8uru4SWeXsV7Pl0jnX7citZH+ypASE8/1pi5QFUh1EOdE78ukqSR1vn4yjkCjNq N1essEFt5CuErC1fOAN90kfKL2FZleaACeS7XO2bbhdrDvXhd2wvCxSGzsZKfzEc CIS+fAK4wy3DFBkNxcMY1/7OiPq6/v870ncDyGiWUiUgE2XZyrl6k/x+nbC4wo1z egsHijt7mOWD52SFpmYUKPPy6wNWIS3Ixy7e9QHlK6s/4Ubv/Xj22OwcTMFkVkDo Pd9gPhslc4Z4kuh0mHfur8zeDcTni71EgVv4ycLKm+u7MxICQn0+DhH/UQIbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0019sN9Pbq/5f719ZQryIA9Ox0QwHwYDVR0j BBgwFoAUBog1ftQzwKYHcPtHS9sscnlreL0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNX c3gvMC8wNjg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODgzNTdFRDQzM0MwQTYw NzcwRkI0NzRCREIyQzcyNzk2Qjc4QkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNXc3gvMC8w Njg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUO2ZaE6vmdA35T78WNlNMF8pzm88PT4VNNac4Vf9fdTvbmAWBKsV2XnGw7D0 VHoghVIzVBs9iZF0Ws5sytPZvfRc4gQRCwuFHjQSu7j3OTyEBCbNuXxI/zDdN6ln ki7pj1kdUzA1SEDTBXq8FV/Tu+J8sjDFYQ/otb1C6uMnksisjS7NC7UELAlA5WQ4 AgCfk++yJQVFCE2/1WDt2Nqez8HiM09fIfN/8juA6MApqP25rNPim55QyjiEKxpR NI3Gkh+giXkbO/bMTpiR8dnsHQn5Q3T8GUfQkBhufCdAQAUQeXQjK8vLZJ8RW326 3tzPSKZzP9Wly7GvP+WQaaMvUQ== -----END CERTIFICATE-----Generated at Wed Aug 20 18:32:08 2025 by rpki-client