$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft File: EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft (raw, json) Hash identifier: SwKCg6KcjpfhZfsu+JKe2ogXAU90Py4DKU0FB1WPjmI= Subject key identifier: BA:2F:23:30:FB:8F:D8:97:28:67:06:B0:D6:02:60:88:3C:13:84:8E Authority key identifier: EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73 Certificate issuer: /CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73 Certificate serial: 214F06128FBD0825423FDFAE6894D304C5D2A469 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer Subject info access: rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft Manifest number: 02A0 Signing time: Wed 20 Aug 2025 01:50:00 +0000 Manifest this update: Wed 20 Aug 2025 01:45:00 +0000 Manifest next update: Thu 21 Aug 2025 05:43:00 +0000 Files and hashes: 1: EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl (hash: XKNQ20jKkSmLrXvvM5k/SQ7NqUvSPiw05+h6ty3CiiQ=) 2: 3137372e3132352e32302e302f32322d3234203d3e203532363335.roa (hash: zB3RAYBJ5ds+DR9vGHFVJDE/Fhcry/mu8n6ADfs/cdI=) 3: 323830343a6438303a3a2f33322d3438203d3e203532363335.roa (hash: h5ZbShRyf6a9djvBfVUYZNDwI63lUNghsgSzyARdb0k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 05:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:4f:06:12:8f:bd:08:25:42:3f:df:ae:68:94:d3:04:c5:d2:a4:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73 Validity Not Before: Aug 20 01:45:00 2025 GMT Not After : Aug 21 05:43:00 2025 GMT Subject: CN=BA2F2330FB8FD897286706B0D60260883C13848E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7e:15:97:d9:f3:94:f5:02:e8:8b:8a:a2:37: c2:1c:0c:25:66:e8:bb:4e:7c:f1:9a:da:62:46:73: 68:05:8c:53:69:0b:6e:93:13:5f:01:e4:8a:2d:08: e4:73:a6:40:11:b7:6d:1f:7f:56:e8:26:1d:32:98: bb:25:f6:8d:52:46:70:9b:2b:b8:ff:16:10:6e:9c: f2:2c:48:02:5d:58:d7:f3:ef:c4:5a:9a:a3:e5:6e: 78:d4:dd:06:9f:4d:b9:81:9e:6e:69:57:fd:41:17: 05:7f:03:b8:bd:6b:4e:8b:58:59:7e:2f:78:82:0e: 6b:86:4e:d1:53:85:ab:3a:0c:fd:aa:ff:31:d1:25: 33:38:7e:d0:f8:7a:43:8d:ac:6c:03:7c:47:ce:9b: 7d:44:6b:f9:ad:2d:00:2b:c6:fa:bc:ba:9f:f1:de: 4b:73:a2:52:be:53:60:fa:52:b1:45:1d:08:ce:62: 95:fb:80:d5:0e:92:b2:e4:1d:15:22:a0:1e:d0:b2: 7e:8f:67:44:da:98:cc:c0:59:ae:c9:b0:5e:9b:48: 55:40:4e:5b:83:47:99:ca:48:8e:73:3b:1d:74:ee: 5c:d4:e9:f7:12:97:b1:c3:da:7f:bb:70:00:ca:26: 8e:b2:a5:5b:5d:2f:3a:25:a7:4a:58:6b:b5:01:38: eb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2F:23:30:FB:8F:D8:97:28:67:06:B0:D6:02:60:88:3C:13:84:8E X509v3 Authority Key Identifier: keyid:EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b9:bf:10:54:a8:1b:39:88:81:04:3c:13:1f:1d:89:d6:6e: 9d:f8:ae:ec:9f:ec:59:e1:82:a1:f6:d2:74:98:7f:b7:46:f0: 9c:55:fc:ca:88:48:35:75:ae:38:a6:6b:13:2b:44:7e:5a:1b: 86:a6:2c:e7:c7:0f:fa:45:38:69:56:ed:7d:94:05:e2:fe:5a: 4c:31:76:05:29:cc:8b:1e:29:32:80:85:22:0e:0d:9e:d4:f7: 2e:69:35:a1:c3:5c:48:62:64:a0:29:59:12:b2:e9:8e:45:df: 98:d1:47:15:39:1d:1f:19:f0:2a:ae:ab:7c:3b:6f:4d:cf:7a: 6d:16:34:57:a2:2b:42:82:f6:74:63:18:79:80:56:1a:52:bd: 5a:97:fc:02:48:75:8e:e7:b8:c0:77:82:04:3f:aa:ca:dc:44: 02:ea:c1:67:39:21:e6:4f:20:49:fc:f5:37:4b:a2:4b:67:4c: ad:d8:2b:a9:27:bc:5c:c2:ef:d6:4e:c9:96:14:17:26:ef:da: b6:2d:4b:25:ef:d5:5f:dd:df:f2:ac:e7:bc:30:94:40:aa:b1: 0f:5c:37:76:77:bb:69:a6:e0:6d:96:bf:86:1e:3a:bf:67:14: ce:f8:f9:88:5d:a2:81:49:e9:13:64:d3:6b:b6:f2:f2:a6:e9: 8f:d0:12:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIU8GEo+9CCVCP9+uaJTTBMXSpGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMwODY1NTgyMTU4NUEwQTVCN0Q2QTBFNTJGQzc0RUY1 MUY5MEU3MzAeFw0yNTA4MjAwMTQ1MDBaFw0yNTA4MjEwNTQzMDBaMDMxMTAvBgNV BAMTKEJBMkYyMzMwRkI4RkQ4OTcyODY3MDZCMEQ2MDI2MDg4M0MxMzg0OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3fhWX2fOU9QLoi4qiN8IcDCVm 6LtOfPGa2mJGc2gFjFNpC26TE18B5IotCORzpkARt20ff1boJh0ymLsl9o1SRnCb K7j/FhBunPIsSAJdWNfz78RamqPlbnjU3QafTbmBnm5pV/1BFwV/A7i9a06LWFl+ L3iCDmuGTtFThas6DP2q/zHRJTM4ftD4ekONrGwDfEfOm31Ea/mtLQArxvq8up/x 3ktzolK+U2D6UrFFHQjOYpX7gNUOkrLkHRUioB7Qsn6PZ0TamMzAWa7JsF6bSFVA TluDR5nKSI5zOx107lzU6fcSl7HD2n+7cADKJo6ypVtdLzolp0pYa7UBOOudAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUui8jMPuP2JcoZwaw1gJgiDwThI4wHwYDVR0j BBgwFoAU7AhlWCFYWgpbfWoOUvx071H5DnMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3RKR2p2cjZ1ZVZxU1NiRnV2Z1NIbnpORXlSMlZrSkh3TWN1OVRBOW1h bUUvMS9FQzA4NjU1ODIxNTg1QTBBNUI3RDZBMEU1MkZDNzRFRjUxRjkwRTczLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDMDg2NTU4MjE1ODVBMEE1 QjdENkEwRTUyRkM3NEVGNTFGOTBFNzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3RKR2p2cjZ1ZVZxU1NiRnV2Z1NIbnpORXlSMlZrSkh3TWN1OVRBOW1hbUUvMS9F QzA4NjU1ODIxNTg1QTBBNUI3RDZBMEU1MkZDNzRFRjUxRjkwRTczLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAILm/EFSoGzmIgQQ8Ex8didZunfiu7J/sWeGCofbSdJh/t0bwnFX8yohINXWu OKZrEytEflobhqYs58cP+kU4aVbtfZQF4v5aTDF2BSnMix4pMoCFIg4NntT3Lmk1 ocNcSGJkoClZErLpjkXfmNFHFTkdHxnwKq6rfDtvTc96bRY0V6IrQoL2dGMYeYBW GlK9Wpf8Akh1jue4wHeCBD+qytxEAurBZzkh5k8gSfz1N0uiS2dMrdgrqSe8XMLv 1k7JlhQXJu/ati1LJe/VX93f8qznvDCUQKqxD1w3dne7aabgbZa/hh46v2cUzvj5 iF2igUnpE2TTa7by8qbpj9AS1g== -----END CERTIFICATE-----Generated at Wed Aug 20 16:17:38 2025 by rpki-client