$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft File: CDB34CF4AFC01721153990AE1A10D922F7507546.mft (raw, json) Hash identifier: TGjy0bQLMnyusIPRZmyVmSTYcfTO5sMnTfYKxTZ+IQY= Subject key identifier: FD:D8:CD:44:2A:18:7D:3A:61:81:8A:F9:50:4B:EE:7D:08:4D:44:46 Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 Certificate issuer: /CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Certificate serial: 607829D6DF51906DA7A31A2F9C36A335D5486A2B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject info access: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft Manifest number: 02A3 Signing time: Wed 20 Aug 2025 09:30:29 +0000 Manifest this update: Wed 20 Aug 2025 09:25:29 +0000 Manifest next update: Thu 21 Aug 2025 10:09:29 +0000 Files and hashes: 1: 3136382e3232382e382e302f32322d3332203d3e20323634393030.roa (hash: y3lZCCq0IOFmfmrjbdteQ0GspT2lhf61PyVMBbr1S80=) 2: CDB34CF4AFC01721153990AE1A10D922F7507546.crl (hash: Ul6Z0UtdqV+bQmYvtucZ3NexejylB0u/k4Q/ylKU2HM=) 3: 3137302e38302e3233362e302f32322d3332203d3e20323634393030.roa (hash: fCiKWIGD8EL/QIyZTksmVx9NSqYYweXi5WC6tEAvyuA=) 4: 323830343a326639343a3a2f33322d3438203d3e20323634393030.roa (hash: vhvxSeJd+tzRkEzkUqJfnoWG2u32D84RmUUxjVexbJA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 10:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:78:29:d6:df:51:90:6d:a7:a3:1a:2f:9c:36:a3:35:d5:48:6a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Validity Not Before: Aug 20 09:25:29 2025 GMT Not After : Aug 21 10:09:29 2025 GMT Subject: CN=FDD8CD442A187D3A61818AF9504BEE7D084D4446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:08:7b:b7:81:28:68:e9:10:5d:0b:7d:2e:f3: 0c:ad:3a:7e:c5:89:cc:ae:75:50:02:49:46:f2:7a: 7e:98:da:dd:a5:32:35:e7:d1:79:a9:e2:f6:6d:ad: 0d:71:5e:16:70:12:74:59:db:ce:24:c9:bb:f9:1b: 54:06:78:ae:12:38:ab:f7:93:0d:ad:04:fc:e3:de: 8d:39:2d:84:66:8e:88:0d:54:44:fb:a5:ed:68:7e: 57:69:35:19:de:4e:ea:c7:f2:64:73:a0:3d:64:1f: 40:fd:6f:18:88:88:59:2d:f4:61:90:b4:36:3e:7a: 8b:99:a9:74:1b:2c:99:51:59:de:23:5e:fa:a1:ad: a3:45:2c:08:95:ee:37:aa:4c:5a:c8:ab:12:f0:ec: 25:23:78:67:e5:90:e2:88:b7:5f:31:78:33:aa:71: 74:2f:89:42:63:e6:30:ab:cd:e8:ae:eb:b6:b1:fe: 0b:6f:e5:52:7c:70:53:21:c3:85:b4:15:c2:df:cb: 53:65:06:98:c8:93:36:e9:11:20:51:94:52:82:aa: a8:33:d5:e2:81:04:c4:c2:91:90:2a:7f:2b:15:f5: d8:ac:d7:66:cf:1d:46:e9:7c:78:54:21:b6:db:81: d8:c6:5e:2c:d2:95:7a:63:45:53:6d:be:24:24:83: 6a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D8:CD:44:2A:18:7D:3A:61:81:8A:F9:50:4B:EE:7D:08:4D:44:46 X509v3 Authority Key Identifier: keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:e7:71:b8:9c:0a:3d:57:42:47:78:bf:6e:12:ce:76:02:94: f9:35:bd:6a:33:ab:54:8e:fb:d6:45:be:27:1c:4c:21:ef:8c: e3:cf:f5:50:23:49:a8:56:15:72:65:d9:62:05:6d:09:1c:7c: 35:df:84:9c:36:d1:de:78:ec:39:43:59:ba:18:60:d6:28:1d: db:7a:d9:df:8f:3d:22:d8:8b:11:c1:de:9b:b4:f5:53:45:3e: b9:da:1d:4a:52:fe:fd:17:c9:7f:fd:4c:0c:1d:02:5e:41:d0: c5:a6:a4:58:f3:f5:35:36:db:53:1d:fb:4f:b7:31:9a:18:22: b3:54:36:af:fc:6d:f9:53:ee:a0:a1:2b:e2:7c:61:1e:61:19: 0f:67:8d:c7:81:be:29:f9:ac:fc:78:45:79:85:73:af:06:96: 49:b8:7d:9d:49:3b:ba:86:55:3f:06:7a:21:25:49:e3:44:c6: f8:a2:3a:02:b8:c1:c6:8b:54:0d:2c:e2:01:10:c9:44:ab:1c: bf:47:e2:cb:36:b0:8a:1b:a4:a5:c8:28:70:e7:7d:09:c6:3d: 28:fb:de:55:84:84:1b:44:70:5f:a1:1e:60:63:16:67:ff:a4: 2d:03:5b:ac:ac:f0:e1:46:87:43:71:bb:8f:a6:d4:4f:7e:06: 91:7a:60:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYHgp1t9RkG2noxovnDajNdVIaiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCMzRDRjRBRkMwMTcyMTE1Mzk5MEFFMUExMEQ5MjJG NzUwNzU0NjAeFw0yNTA4MjAwOTI1MjlaFw0yNTA4MjExMDA5MjlaMDMxMTAvBgNV BAMTKEZERDhDRDQ0MkExODdEM0E2MTgxOEFGOTUwNEJFRTdEMDg0RDQ0NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9CHu3gSho6RBdC30u8wytOn7F icyudVACSUbyen6Y2t2lMjXn0Xmp4vZtrQ1xXhZwEnRZ284kybv5G1QGeK4SOKv3 kw2tBPzj3o05LYRmjogNVET7pe1ofldpNRneTurH8mRzoD1kH0D9bxiIiFkt9GGQ tDY+eouZqXQbLJlRWd4jXvqhraNFLAiV7jeqTFrIqxLw7CUjeGflkOKIt18xeDOq cXQviUJj5jCrzeiu67ax/gtv5VJ8cFMhw4W0FcLfy1NlBpjIkzbpESBRlFKCqqgz 1eKBBMTCkZAqfysV9dis12bPHUbpfHhUIbbbgdjGXizSlXpjRVNtviQkg2ofAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/djNRCoYfTphgYr5UEvufQhNREYwHwYDVR0j BBgwFoAUzbNM9K/AFyEVOZCuGhDZIvdQdUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhU RnEvMC9DREIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQjM0Q0Y0QUZDMDE3MjEx NTM5OTBBRTFBMTBEOTIyRjc1MDc1NDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhURnEvMC9D REIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF+dxuJwKPVdCR3i/bhLOdgKU+TW9ajOrVI771kW+JxxMIe+M48/1UCNJqFYV cmXZYgVtCRx8Nd+EnDbR3njsOUNZuhhg1igd23rZ3489ItiLEcHem7T1U0U+udod SlL+/RfJf/1MDB0CXkHQxaakWPP1NTbbUx37T7cxmhgis1Q2r/xt+VPuoKEr4nxh HmEZD2eNx4G+Kfms/HhFeYVzrwaWSbh9nUk7uoZVPwZ6ISVJ40TG+KI6ArjBxotU DSziARDJRKscv0fiyzawihukpcgocOd9CcY9KPveVYSEG0RwX6EeYGMWZ/+kLQNb rKzw4UaHQ3G7j6bUT34GkXpgCA== -----END CERTIFICATE-----Generated at Wed Aug 20 18:24:12 2025 by rpki-client