$ rpki-client -vvf rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft File: CAAC943455AAA15F91CE50FF2493F762682C2729.mft (raw, json) Hash identifier: tK0LF8lArgnkouhd838FMWUxlYn62bJmp/Mr+hg2RVQ= Subject key identifier: CB:93:22:04:A9:3F:E8:2A:7E:6A:3A:E7:0F:46:4D:E8:03:0B:22:22 Authority key identifier: CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29 Certificate issuer: /CN=CAAC943455AAA15F91CE50FF2493F762682C2729 Certificate serial: 25BF4A47B672E8B5E7152FEDF923EBAFE6BADCE5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer Subject info access: rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft Manifest number: 0288 Signing time: Tue 29 Jul 2025 06:23:19 +0000 Manifest this update: Tue 29 Jul 2025 06:18:19 +0000 Manifest next update: Wed 30 Jul 2025 09:49:19 +0000 Files and hashes: 1: 3137372e35322e34302e302f32322d3234203d3e20323632343337.roa (hash: E3nbOYHXA5sCh8uuqp16XW2886aMw7JwoLjFWeA2Urc=) 2: 3230312e3137352e34382e302f32322d3234203d3e20323632343337.roa (hash: qrrQQPAmrbXv0WBE9xtoHoKBeLqUXodpmZjSti9EBaI=) 3: CAAC943455AAA15F91CE50FF2493F762682C2729.crl (hash: IAvF7/VO8Cu0zl//vlrfx+ANdsOh1lKB7Jl6wiDkdh4=) 4: 3137302e38322e382e302f32322d3234203d3e20323632343337.roa (hash: JnXqPH2nriNBGIqM4gPPtYFvnJ7m1OEcCyNN4SMeflI=) 5: 323830343a3437633a3a2f33322d3438203d3e20323632343337.roa (hash: n6sYyIPIBbvhPsqtdp3i8l0Ppf9FFwjJIF3DL+P8GlE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.crl rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Jul 2025 08:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:bf:4a:47:b6:72:e8:b5:e7:15:2f:ed:f9:23:eb:af:e6:ba:dc:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAAC943455AAA15F91CE50FF2493F762682C2729 Validity Not Before: Jul 29 06:18:19 2025 GMT Not After : Jul 30 09:49:19 2025 GMT Subject: CN=CB932204A93FE82A7E6A3AE70F464DE8030B2222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:40:10:c2:42:13:d3:ff:58:76:ed:59:be: 27:28:ad:78:8b:ee:dc:bb:33:12:4d:0b:09:e4:a2: 25:2f:e8:bf:f6:e8:a2:5b:e7:8e:22:d4:b9:89:f2: 25:58:bb:04:79:36:4a:34:b6:f1:fc:b9:14:f9:02: 35:17:c9:c6:03:f8:fb:90:2a:27:b3:19:44:f6:7a: e5:51:7a:00:a1:c3:25:ff:fb:4f:63:f3:3e:13:ea: 7b:7a:31:0e:e1:2f:f8:39:d7:94:84:73:ba:79:13: 32:dd:99:1b:3a:b1:52:9e:51:7c:8c:74:8a:e3:00: 9f:54:82:6a:a6:cd:fe:d0:50:de:6c:87:c2:99:65: ca:ba:20:a9:96:15:ae:41:b4:70:79:bb:c6:bb:5f: e1:77:5b:24:ed:18:68:21:59:98:0c:71:b2:e0:f8: e1:35:17:23:46:17:88:cb:e9:17:49:53:f4:88:54: ef:b6:dc:04:ac:cf:32:a1:52:34:c8:7b:b3:d3:13: 31:d0:86:b4:d0:7d:a9:ce:50:6d:a9:32:c0:c1:5d: 3b:71:cc:70:a2:de:19:80:a5:51:79:41:ea:d4:e8: 47:e8:02:39:27:e7:c4:53:e4:b6:16:27:a1:83:70: 0c:a1:cb:56:1f:40:11:fa:76:47:d0:b8:2b:6b:1b: 9f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:93:22:04:A9:3F:E8:2A:7E:6A:3A:E7:0F:46:4D:E8:03:0B:22:22 X509v3 Authority Key Identifier: keyid:CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f8:a0:9a:65:22:3e:f8:42:8d:16:10:3c:00:36:d4:2b:a6: 99:91:27:d0:71:f8:c4:49:29:96:32:3b:d5:de:76:bc:0a:2b: 2d:38:64:fc:ee:07:41:ea:32:37:a4:2e:0a:41:4a:30:46:1c: 0d:89:a3:7a:30:8e:77:5a:01:a0:be:25:66:01:a2:d7:d3:c6: 4e:41:7a:b5:65:1e:dd:20:24:c2:7d:14:a8:c9:1c:f8:1e:04: bd:f0:8a:c5:53:c9:69:c7:28:b9:d4:52:d1:fc:8d:36:7e:c8: 8f:37:84:70:40:0b:5c:40:f9:c6:60:94:37:d6:80:de:ba:21: 8b:0f:66:c2:ee:78:1d:68:f9:cb:89:a9:3c:ee:b8:a9:00:7c: 37:cb:50:ca:95:23:ac:9e:39:71:19:ee:71:3c:df:38:da:d9: 09:95:b9:98:6f:9e:a4:95:78:0f:85:dc:0b:70:7d:55:90:a8: ce:7e:55:2b:10:e3:4a:6e:9f:e0:a9:76:18:46:e4:fd:c4:2c: 3f:6d:6a:92:b7:2a:bb:28:d3:f3:a1:23:cd:25:32:82:a3:18: 0b:d9:f7:fb:35:b9:30:e4:5c:26:64:e5:97:b9:38:6f:64:d1: 3a:33:70:ed:e8:a9:24:4d:5e:a7:37:d9:d2:8f:73:94:54:61: d9:9e:1e:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJb9KR7Zy6LXnFS/t+SPrr+a63OUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBQzk0MzQ1NUFBQTE1RjkxQ0U1MEZGMjQ5M0Y3NjI2 ODJDMjcyOTAeFw0yNTA3MjkwNjE4MTlaFw0yNTA3MzAwOTQ5MTlaMDMxMTAvBgNV BAMTKENCOTMyMjA0QTkzRkU4MkE3RTZBM0FFNzBGNDY0REU4MDMwQjIyMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC04UAQwkIT0/9Ydu1ZvicorXiL 7ty7MxJNCwnkoiUv6L/26KJb544i1LmJ8iVYuwR5Nko0tvH8uRT5AjUXycYD+PuQ KiezGUT2euVRegChwyX/+09j8z4T6nt6MQ7hL/g515SEc7p5EzLdmRs6sVKeUXyM dIrjAJ9Ugmqmzf7QUN5sh8KZZcq6IKmWFa5BtHB5u8a7X+F3WyTtGGghWZgMcbLg +OE1FyNGF4jL6RdJU/SIVO+23ASszzKhUjTIe7PTEzHQhrTQfanOUG2pMsDBXTtx zHCi3hmApVF5QerU6EfoAjkn58RT5LYWJ6GDcAyhy1YfQBH6dkfQuCtrG5/pAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUy5MiBKk/6Cp+ajrnD0ZN6AMLIiIwHwYDVR0j BBgwFoAUyqyUNFWqoV+RzlD/JJP3YmgsJykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1V2c0NiSEd3NXZVZ3NFcUxTVzdQa0RiNnk4UUR2MVpCNmp1TmZBOXp1 NUwvMC9DQUFDOTQzNDU1QUFBMTVGOTFDRTUwRkYyNDkzRjc2MjY4MkMyNzI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBQUM5NDM0NTVBQUExNUY5 MUNFNTBGRjI0OTNGNzYyNjgyQzI3MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1V2c0NiSEd3NXZVZ3NFcUxTVzdQa0RiNnk4UUR2MVpCNmp1TmZBOXp1NUwvMC9D QUFDOTQzNDU1QUFBMTVGOTFDRTUwRkYyNDkzRjc2MjY4MkMyNzI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZPigmmUiPvhCjRYQPAA21CummZEn0HH4xEkpljI71d52vAorLThk/O4HQeoy N6QuCkFKMEYcDYmjejCOd1oBoL4lZgGi19PGTkF6tWUe3SAkwn0UqMkc+B4EvfCK xVPJaccoudRS0fyNNn7IjzeEcEALXED5xmCUN9aA3rohiw9mwu54HWj5y4mpPO64 qQB8N8tQypUjrJ45cRnucTzfONrZCZW5mG+epJV4D4XcC3B9VZCozn5VKxDjSm6f 4Kl2GEbk/cQsP21qkrcquyjT86EjzSUygqMYC9n3+zW5MORcJmTll7k4b2TROjNw 7eipJE1epzfZ0o9zlFRh2Z4e+w== -----END CERTIFICATE-----Generated at Tue Jul 29 08:50:19 2025 by rpki-client