$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft File: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft (raw, json) Hash identifier: n77kGzVtBqJ6au0nIQ8LpfH+FpcIsIvlX/hs7fpTKP8= Subject key identifier: CB:D4:37:31:FD:3C:18:50:B1:5C:C9:29:59:DE:6C:43:24:E7:C7:AC Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB Certificate issuer: /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Certificate serial: 1CC6643FBFCE440D355616341022A2E355959E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft Manifest number: 029E Signing time: Wed 20 Aug 2025 08:47:05 +0000 Manifest this update: Wed 20 Aug 2025 08:42:05 +0000 Manifest next update: Thu 21 Aug 2025 10:33:05 +0000 Files and hashes: 1: 323830343a353431383a3a2f33322d3438203d3e20323638363238.roa (hash: hHMhRh5DdSaR5fzUNnHJawbPKzBIyAZaoDmsUo8IWgk=) 2: 34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (hash: MFaOGmG3uk10MnFBlQJ/Pj6U7TcWeAadSbIdDIDPMAE=) 3: 3230382e35322e3136322e302f32332d3234203d3e20323638363238.roa (hash: maW2GNrI3AoqX8WFxWiMg/YOqECnU1fsdQA4kdJdduU=) 4: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl (hash: f3rNwryVwRduHSx3TGZrsaXRu0trnrKXL6gwo/KgrRM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 10:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c6:64:3f:bf:ce:44:0d:35:56:16:34:10:22:a2:e3:55:95:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Validity Not Before: Aug 20 08:42:05 2025 GMT Not After : Aug 21 10:33:05 2025 GMT Subject: CN=CBD43731FD3C1850B15CC92959DE6C4324E7C7AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:85:7d:7b:b7:0a:1d:cc:8a:15:10:89:56:44: 5d:c2:2c:a3:73:3a:c1:dc:88:12:2f:24:7e:2f:67: 7d:58:e9:e6:b4:ae:b2:be:da:31:b5:b4:f5:31:bc: 05:ab:25:01:d6:4a:dc:1c:11:8e:79:28:d7:c3:2b: ea:70:a6:5e:3a:7a:4e:94:0e:8a:d1:25:72:a7:94: bc:ec:12:1a:2e:bd:1f:5f:56:7d:97:f0:a0:4f:68: de:45:90:6c:c9:23:3b:83:39:e1:a5:c6:c9:fa:98: 9a:ca:b4:01:1a:a7:68:53:eb:b8:f2:2b:f8:07:28: 8a:4e:74:77:8b:be:c6:e2:d1:d9:4f:f4:46:03:9f: bb:ed:8c:21:4e:fa:8a:6b:bb:bc:fd:05:01:9c:83: ed:bc:9d:8f:ca:91:c2:f8:88:e4:fa:9d:43:17:e6: 75:ff:81:23:cd:11:19:44:cd:90:1c:eb:13:23:3f: 2d:c5:bd:d4:57:de:04:99:37:4a:b6:f9:b1:d2:b2: 63:92:49:bf:ee:18:52:c9:c4:8c:d3:e9:0a:2c:8c: 0b:45:28:78:37:38:8b:2a:54:8e:bb:e2:c4:f6:4d: 97:01:ad:b7:e3:95:f4:45:31:b9:d9:94:28:f1:d2: b6:ad:2e:85:7f:8d:d3:87:f2:31:0b:12:71:45:5a: da:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D4:37:31:FD:3C:18:50:B1:5C:C9:29:59:DE:6C:43:24:E7:C7:AC X509v3 Authority Key Identifier: keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:15:e2:1d:0c:57:31:2a:88:5e:b6:2e:1d:d0:9c:8d:a6:7b: ee:db:bb:a8:87:e9:c0:e0:ac:e5:d3:c6:3f:c4:ff:4a:e0:d8: 26:a9:05:4c:24:80:da:43:4a:ab:af:39:27:38:fc:50:b2:c1: 3c:54:99:e6:7a:e9:66:5f:32:b1:b7:cd:0e:ea:99:6f:6c:d4: 6f:57:72:c7:e4:d7:b7:e8:3d:63:5f:7d:27:81:ab:40:fe:b3: be:e9:75:77:96:e5:a1:ac:5e:cf:d3:53:8d:5f:b7:ca:0d:66: 50:91:34:3c:89:b3:7c:bc:97:8b:55:76:2d:2c:cd:fd:88:d5: d1:5c:4b:8f:27:2d:3b:8c:f6:5a:df:ac:14:fc:e3:28:2a:5b: 00:f3:dd:0c:21:df:6a:97:6b:95:2a:e4:29:6f:24:d1:fd:ac: cf:5e:68:04:e9:31:b4:9e:10:3d:cf:8b:02:e1:6f:78:9f:99: 4c:fd:41:c1:8f:01:6a:c0:09:56:5d:02:c8:8d:46:08:8d:5a: f1:b3:76:55:9e:3f:7c:9a:e4:36:4d:69:ff:84:ff:58:df:b3: e6:8c:2c:83:ab:c5:7a:fc:32:43:9a:c6:64:be:8b:ac:4c:d3: d3:0d:cf:09:f7:65:a5:44:d1:9d:71:30:96:a9:ab:9a:d3:15: d0:3f:2b:47 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgITHMZkP7/ORA01VhY0ECKi41WVnjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygyQzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhD MDAyOEZCMB4XDTI1MDgyMDA4NDIwNVoXDTI1MDgyMTEwMzMwNVowMzExMC8GA1UE AxMoQ0JENDM3MzFGRDNDMTg1MEIxNUNDOTI5NTlERTZDNDMyNEU3QzdBQzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALuFfXu3Ch3MihUQiVZEXcIso3M6 wdyIEi8kfi9nfVjp5rSusr7aMbW09TG8BaslAdZK3BwRjnko18Mr6nCmXjp6TpQO itElcqeUvOwSGi69H19WfZfwoE9o3kWQbMkjO4M54aXGyfqYmsq0ARqnaFPruPIr +Acoik50d4u+xuLR2U/0RgOfu+2MIU76imu7vP0FAZyD7bydj8qRwviI5PqdQxfm df+BI80RGUTNkBzrEyM/LcW91FfeBJk3Srb5sdKyY5JJv+4YUsnEjNPpCiyMC0Uo eDc4iypUjrvixPZNlwGtt+OV9EUxudmUKPHStq0uhX+N04fyMQsScUVa2jMCAwEA AaOCAlkwggJVMB0GA1UdDgQWBBTL1Dcx/TwYULFcySlZ3mxDJOfHrDAfBgNVHSME GDAWgBQsnFlOk24eKK1a1zpr8orjjAAo+zAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby8zQkZiREJFZ1p1VGdjWTk2YW9DM01kaWQ3QkU4cmpqaXBneW5MM2ltenJo QS8xLzJDOUM1OTRFOTM2RTFFMjhBRDVBRDczQTZCRjI4QUUzOEMwMDI4RkIuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvMkM5QzU5NEU5MzZFMUUyOEFE NUFENzNBNkJGMjhBRTM4QzAwMjhGQi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGK BggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8z QkZiREJFZ1p1VGdjWTk2YW9DM01kaWQ3QkU4cmpqaXBneW5MM2ltenJoQS8xLzJD OUM1OTRFOTM2RTFFMjhBRDVBRDczQTZCRjI4QUUzOEMwMDI4RkIubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBKFeIdDFcxKoheti4d0JyNpnvu27uoh+nA4Kzl08Y/xP9K4NgmqQVMJIDaQ0qr rzknOPxQssE8VJnmeulmXzKxt80O6plvbNRvV3LH5Ne36D1jX30ngatA/rO+6XV3 luWhrF7P01ONX7fKDWZQkTQ8ibN8vJeLVXYtLM39iNXRXEuPJy07jPZa36wU/OMo KlsA890MId9ql2uVKuQpbyTR/azPXmgE6TG0nhA9z4sC4W94n5lM/UHBjwFqwAlW XQLIjUYIjVrxs3ZVnj98muQ2TWn/hP9Y37PmjCyDq8V6/DJDmsZkvousTNPTDc8J 92WlRNGdcTCWqaua0xXQPytH -----END CERTIFICATE-----Generated at Wed Aug 20 18:38:48 2025 by rpki-client