$ rpki-client -vvf rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft File: 87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft (raw, json) Hash identifier: QpuDXMkjc47ZfubTRsMgtqnfYlt88nZBg94uzPfn0FY= Subject key identifier: D8:09:D9:0C:8B:84:A3:20:6B:18:8D:15:BA:2D:78:4B:F7:78:6F:18 Authority key identifier: 87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88 Certificate issuer: /CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88 Certificate serial: 0AA68D02DC685734F5FB474D2D0D6F81E1857526 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer Subject info access: rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft Manifest number: CE Signing time: Wed 20 Aug 2025 16:14:09 +0000 Manifest this update: Wed 20 Aug 2025 16:09:09 +0000 Manifest next update: Thu 21 Aug 2025 19:40:09 +0000 Files and hashes: 1: 34352e3138352e3130342e302f32342d3234203d3e20323639333735.roa (hash: Cj+XZApZwEyDBIz0YbaEcUyGeZaj4bZtMyXONedMytI=) 2: 87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl (hash: oJIgPHRFRbu6+tnKoHPejXZKeSb1wZCFklGCdrpwTF0=) 3: 34352e3138352e3130342e302f32332d3233203d3e20323639333735.roa (hash: X0k+OEr8tLPrBAoKgoUkicfgVlQuwd4zoHl0bGDYL7E=) 4: 34352e3138352e3130362e302f32332d3233203d3e20323639333735.roa (hash: PD33t9dvfUs1NQhXuL3Xie0KcybW7wj9PNJerbegWf4=) 5: 34352e3138352e3130352e302f32342d3234203d3e20323639333735.roa (hash: 8VJcKEqv8e2Tu0UhAjiMptR5U9IhVleiKUHk7Ndb67c=) 6: 34352e3138352e3130362e302f32342d3234203d3e20323639333735.roa (hash: azYb7n2AhoMfnq11Pg2Qjpcr2bkrMTcbjmZ5g/ma4F8=) 7: 34352e3138352e3130342e302f32322d3232203d3e20323639333735.roa (hash: +sNenIhVPHPzNEjIlSdczqKykJ1F6OVtxAmahgGAIR8=) 8: 34352e3138352e3130372e302f32342d3234203d3e20323639333735.roa (hash: E7PEVvRvng2uOsiRhVeUjei4pitJ5GoJken0emdnfsg=) 9: 323830343a363361383a3a2f33322d3332203d3e20323639333735.roa (hash: AaZvRo1Gvb8ehjQqNPJyt+YSjKNO902zr4a+9F5QLy4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 19:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a6:8d:02:dc:68:57:34:f5:fb:47:4d:2d:0d:6f:81:e1:85:75:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88 Validity Not Before: Aug 20 16:09:09 2025 GMT Not After : Aug 21 19:40:09 2025 GMT Subject: CN=D809D90C8B84A3206B188D15BA2D784BF7786F18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:56:f0:e0:61:be:4d:ff:47:b0:9d:3d:3b:31: 5f:b9:75:e7:5f:66:ca:39:56:31:8e:fe:8d:c0:3a: 26:64:f1:d5:6d:83:3d:82:8c:25:5f:e1:3b:82:66: 0e:26:04:e8:70:aa:cb:26:18:ba:10:2a:32:71:09: b7:80:32:eb:5e:52:fd:99:6f:05:9a:01:b1:45:2f: 1e:aa:50:63:d1:45:57:a0:2c:80:37:1d:cf:32:19: 61:01:7c:da:0a:2c:12:81:dd:d8:4a:1a:19:2a:8b: 37:c6:46:30:3f:b4:12:6c:eb:d3:88:4e:bc:f5:b0: 60:27:44:f4:e2:b4:49:91:46:cb:a8:45:76:56:13: e9:e1:ee:f6:41:b8:af:03:50:f7:9f:7e:2d:5c:91: 43:9b:e5:c1:3f:5a:11:08:fa:8b:3b:bf:f1:16:99: 55:77:42:c0:3b:cf:1c:c0:59:b6:5f:6d:56:26:5c: 54:77:43:36:e1:5a:89:be:80:6e:d4:4d:42:b2:6b: 36:47:f3:f0:f7:0e:f5:64:6c:4f:92:e5:06:ca:9d: 5a:1f:a8:97:61:03:c1:fa:e8:8d:08:78:8b:9c:d5: 46:89:ed:9d:27:7f:23:c6:6d:8d:f2:97:27:24:7e: a8:b5:b0:d0:58:fc:1d:63:aa:dd:9e:82:79:5c:a6: 53:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:09:D9:0C:8B:84:A3:20:6B:18:8D:15:BA:2D:78:4B:F7:78:6F:18 X509v3 Authority Key Identifier: keyid:87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d7:8f:85:d7:5a:90:24:a0:9a:2d:17:26:e2:1c:2c:87:b0: ca:51:0e:33:74:69:71:95:16:7a:26:10:e2:c7:56:f0:b3:21: 96:db:99:5b:9d:b4:b3:6f:5f:60:e7:51:1e:3f:91:8a:97:d4: eb:00:3e:95:fa:a0:5c:24:9d:07:7e:36:a5:4e:33:40:37:7e: 9e:bd:77:6d:21:cb:0d:81:01:f2:a7:df:b0:9b:6b:c2:b4:26: 26:1a:f4:fc:31:61:08:db:05:76:e4:c4:07:0a:a2:aa:f6:fb: b2:05:b9:bd:15:6b:59:46:25:bb:28:4e:f5:21:df:8b:8a:fc: 3c:51:5e:b5:61:11:2e:3f:b9:8a:d3:f2:2a:b4:a0:53:ec:4d: fa:0b:54:83:76:70:d2:38:74:e3:7d:cf:f4:2f:8f:82:5a:37: fe:ea:69:d5:9d:2a:63:d2:58:fc:e9:ec:b3:e1:ed:9e:4c:f2: 52:29:f1:40:f1:16:e7:ee:88:7e:c9:78:f0:fb:ad:2f:ce:61: 5e:89:4f:7d:79:67:91:65:b1:e6:59:d9:e6:4a:b7:4b:97:97: c8:37:a5:22:6f:26:df:ae:d0:42:08:2f:f4:52:12:fa:09:59: 2e:0e:b1:c1:8d:5a:bb:24:18:dc:86:7d:fc:76:15:34:1f:df: 17:3d:74:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCqaNAtxoVzT1+0dNLQ1vgeGFdSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBNTRDRDY4RjlCNzY0QkQzRTdGRUMzM0I5MjhDMDJE MjVGOEQ4ODAeFw0yNTA4MjAxNjA5MDlaFw0yNTA4MjExOTQwMDlaMDMxMTAvBgNV BAMTKEQ4MDlEOTBDOEI4NEEzMjA2QjE4OEQxNUJBMkQ3ODRCRjc3ODZGMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPVvDgYb5N/0ewnT07MV+5dedf Zso5VjGO/o3AOiZk8dVtgz2CjCVf4TuCZg4mBOhwqssmGLoQKjJxCbeAMuteUv2Z bwWaAbFFLx6qUGPRRVegLIA3Hc8yGWEBfNoKLBKB3dhKGhkqizfGRjA/tBJs69OI Trz1sGAnRPTitEmRRsuoRXZWE+nh7vZBuK8DUPeffi1ckUOb5cE/WhEI+os7v/EW mVV3QsA7zxzAWbZfbVYmXFR3QzbhWom+gG7UTUKyazZH8/D3DvVkbE+S5QbKnVof qJdhA8H66I0IeIuc1UaJ7Z0nfyPGbY3ylyckfqi1sNBY/B1jqt2egnlcplOrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2AnZDIuEoyBrGI0Vui14S/d4bxgwHwYDVR0j BBgwFoAUh6VM1o+bdkvT5/7DO5KMAtJfjYgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFhYZzZ5V1lFQk5FanFQa3FjcG8xQVd4VEFtWnpuRXBDZGJ1V2s1eXpo ZUQvMC84N0E1NENENjhGOUI3NjRCRDNFN0ZFQzMzQjkyOEMwMkQyNUY4RDg4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QTU0Q0Q2OEY5Qjc2NEJE M0U3RkVDMzNCOTI4QzAyRDI1RjhEODguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFhYZzZ5V1lFQk5FanFQa3FjcG8xQVd4VEFtWnpuRXBDZGJ1V2s1eXpoZUQvMC84 N0E1NENENjhGOUI3NjRCRDNFN0ZFQzMzQjkyOEMwMkQyNUY4RDg4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALtePhddakCSgmi0XJuIcLIewylEOM3RpcZUWeiYQ4sdW8LMhltuZW520s29f YOdRHj+RipfU6wA+lfqgXCSdB342pU4zQDd+nr13bSHLDYEB8qffsJtrwrQmJhr0 /DFhCNsFduTEBwqiqvb7sgW5vRVrWUYluyhO9SHfi4r8PFFetWERLj+5itPyKrSg U+xN+gtUg3Zw0jh0433P9C+Pglo3/upp1Z0qY9JY/Onss+HtnkzyUinxQPEW5+6I fsl48PutL85hXolPfXlnkWWx5lnZ5kq3S5eXyDelIm8m367QQggv9FIS+glZLg6x wY1auyQY3IZ9/HYVNB/fFz10oQ== -----END CERTIFICATE-----Generated at Wed Aug 20 22:30:24 2025 by rpki-client