$ rpki-client -vvf rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft File: 8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft (raw, json) Hash identifier: NpolZMqTGHmr8FEoIs1WIy06+9waOv4BUAvsAfTWaNE= Subject key identifier: B9:D8:78:F1:7D:6D:24:4B:CD:DC:C6:49:9D:E3:AF:A1:EB:65:70:30 Authority key identifier: 8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10 Certificate issuer: /CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810 Certificate serial: 52EADDCD1952B8676EDCFE2431EAC743160F046D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer Subject info access: rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft Manifest number: 021F Signing time: Wed 20 Aug 2025 14:32:04 +0000 Manifest this update: Wed 20 Aug 2025 14:27:04 +0000 Manifest next update: Thu 21 Aug 2025 14:32:04 +0000 Files and hashes: 1: 323830343a313735633a3a2f33322d313238203d3e20323633313430.roa (hash: LcxgBvhys26dh3eN+AkNblIZ169BBg5L/bmL0RHyz5I=) 2: 8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl (hash: U2kZOM9O9wslvDZhnLir267xS04q23bm3X1HHFXAie4=) 3: 3139312e362e3134302e302f32322d3332203d3e20323633313430.roa (hash: YR3iwTv8fmQASNA9FOgQAa+ECLErkEz/btJcdJNxQ2k=) 4: 3136382e3230352e3134342e302f32322d3332203d3e20323633313430.roa (hash: bg8Dvb5gyNofKjWKDnAjbZaTOGuSl+Au6niFij0wNQI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 14:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ea:dd:cd:19:52:b8:67:6e:dc:fe:24:31:ea:c7:43:16:0f:04:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810 Validity Not Before: Aug 20 14:27:04 2025 GMT Not After : Aug 21 14:32:04 2025 GMT Subject: CN=B9D878F17D6D244BCDDCC6499DE3AFA1EB657030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:e0:29:7a:1a:8c:9c:fa:f5:30:b3:14:1e: e8:06:89:79:e0:8a:d2:d6:d0:96:ca:dc:ea:f3:ac: d7:e5:fe:9d:31:8b:f6:76:2c:49:a0:0b:62:a2:05: 64:86:0d:5a:74:e8:a1:2c:f9:93:c4:7f:0f:a3:e9: b7:90:ca:fe:e4:0c:56:63:dd:36:01:cb:68:cf:18: d6:55:f2:48:b8:6d:8d:b4:a0:f1:3e:9d:b7:38:74: bb:7d:b2:12:3b:21:39:f9:d7:ec:ad:1e:a5:42:d6: fa:23:f0:91:fb:16:f6:82:8c:4f:3e:b2:66:a0:d6: 42:4b:bf:3d:55:28:95:ea:66:7d:a7:e0:c8:64:a4: e7:89:42:f1:66:88:6f:60:91:df:97:27:b4:78:86: c3:fc:3f:62:7e:be:0a:ee:ae:ca:f9:f9:b1:55:b8: 57:b9:d9:c5:cf:80:19:18:f8:85:9d:79:b0:ea:4b: c1:64:3a:32:74:ab:98:37:69:12:d2:f2:f5:1f:07: 31:e9:8a:80:27:65:32:e8:92:66:64:d8:07:58:a2: ce:0b:27:59:76:04:2d:67:0f:7c:ff:5d:77:a7:ba: 0a:51:87:4b:25:c5:48:1f:c8:4b:aa:61:25:49:89: 72:66:98:71:8c:4d:94:90:3a:75:2e:6d:5f:f0:e3: 58:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D8:78:F1:7D:6D:24:4B:CD:DC:C6:49:9D:E3:AF:A1:EB:65:70:30 X509v3 Authority Key Identifier: keyid:8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:65:a9:15:cb:49:12:de:2d:3f:8c:cc:29:9b:c1:1d:36:cc: 13:68:84:8c:db:3f:b8:5f:a0:4e:8d:aa:be:6b:fa:1a:00:45: a1:76:06:a9:22:07:26:e6:e2:af:ae:06:37:6e:fe:1c:77:eb: 7f:94:e2:52:6c:30:b3:49:9d:67:d6:4f:8d:09:f3:13:36:22: 69:88:71:42:c6:d3:c6:76:8e:ad:7a:ba:af:0d:f6:1a:ea:64: a1:34:7b:66:19:e5:da:c1:fb:3f:aa:02:b7:8e:2a:74:a9:86: 91:0d:d3:8c:90:31:a0:b8:b8:bd:b2:91:a8:6a:81:1a:a9:d0: 0f:3f:53:d5:af:0e:98:15:01:db:d6:72:9f:d5:ae:17:a1:b9: c6:d8:42:3d:9a:e0:ec:f0:55:fb:30:8a:53:c0:96:4b:98:46: 65:4e:71:c3:2e:da:47:90:59:13:0f:69:b2:d2:73:96:7b:4c: e4:c3:51:3e:3c:9b:08:cd:d4:a1:a7:a6:8e:6e:81:c0:75:51: 65:2c:35:d1:9e:04:cd:f6:2e:d6:b2:bf:a8:e3:e0:80:a6:4e: b7:02:49:a7:4d:bc:dd:13:1d:ea:3a:73:35:5e:42:c5:6e:91: d3:42:a8:1d:e0:92:51:81:21:64:c9:f1:63:c7:6b:aa:12:cb: 25:4f:d9:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUurdzRlSuGdu3P4kMerHQxYPBG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYzMjdGRUZBNEU4Nzg4RkZDRkRDRDdDNkQxOTA2NDBG OEE2MjgxMDAeFw0yNTA4MjAxNDI3MDRaFw0yNTA4MjExNDMyMDRaMDMxMTAvBgNV BAMTKEI5RDg3OEYxN0Q2RDI0NEJDRERDQzY0OTlERTNBRkExRUI2NTcwMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs2eApehqMnPr1MLMUHugGiXng itLW0JbK3OrzrNfl/p0xi/Z2LEmgC2KiBWSGDVp06KEs+ZPEfw+j6beQyv7kDFZj 3TYBy2jPGNZV8ki4bY20oPE+nbc4dLt9shI7ITn51+ytHqVC1voj8JH7FvaCjE8+ smag1kJLvz1VKJXqZn2n4MhkpOeJQvFmiG9gkd+XJ7R4hsP8P2J+vgrursr5+bFV uFe52cXPgBkY+IWdebDqS8FkOjJ0q5g3aRLS8vUfBzHpioAnZTLokmZk2AdYos4L J1l2BC1nD3z/XXenugpRh0slxUgfyEuqYSVJiXJmmHGMTZSQOnUubV/w41g/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUudh48X1tJEvN3MZJneOvoetlcDAwHwYDVR0j BBgwFoAUjzJ/76ToeI/8/c18bRkGQPimKBAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnpWUjI5bmhrRkFyam0zYm9HNnhySkNWUFEzNmI1RGFlVnN5bjQ0U1p0 QUIvMC84RjMyN0ZFRkE0RTg3ODhGRkNGRENEN0M2RDE5MDY0MEY4QTYyODEwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGMzI3RkVGQTRFODc4OEZG Q0ZEQ0Q3QzZEMTkwNjQwRjhBNjI4MTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnpWUjI5bmhrRkFyam0zYm9HNnhySkNWUFEzNmI1RGFlVnN5bjQ0U1p0QUIvMC84 RjMyN0ZFRkE0RTg3ODhGRkNGRENEN0M2RDE5MDY0MEY4QTYyODEwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAomWpFctJEt4tP4zMKZvBHTbME2iEjNs/uF+gTo2qvmv6GgBFoXYGqSIHJubi r64GN27+HHfrf5TiUmwws0mdZ9ZPjQnzEzYiaYhxQsbTxnaOrXq6rw32GupkoTR7 Zhnl2sH7P6oCt44qdKmGkQ3TjJAxoLi4vbKRqGqBGqnQDz9T1a8OmBUB29Zyn9Wu F6G5xthCPZrg7PBV+zCKU8CWS5hGZU5xwy7aR5BZEw9pstJzlntM5MNRPjybCM3U oaemjm6BwHVRZSw10Z4EzfYu1rK/qOPggKZOtwJJp0283RMd6jpzNV5CxW6R00Ko HeCSUYEhZMnxY8drqhLLJU/Zhg== -----END CERTIFICATE-----Generated at Wed Aug 20 18:24:11 2025 by rpki-client