$ rpki-client -vvf rpki-repo.registro.br/repo/57yZ76xc9xfvfc737toEobt2tr5hExZ1yCGCecN98w9n/0/9CCBE5D9D8D4576CDD8271E11CC131E15962EDCE.mft File: 9CCBE5D9D8D4576CDD8271E11CC131E15962EDCE.mft (raw, json) Hash identifier: yGtH0WXGZJqv8Cz35O1z6m9jAlDzQlpSIOybMk2NzzI= Subject key identifier: AD:70:D8:F1:EE:8D:CB:47:FC:04:F1:8B:1E:55:8B:F9:78:E9:68:F7 Authority key identifier: 9C:CB:E5:D9:D8:D4:57:6C:DD:82:71:E1:1C:C1:31:E1:59:62:ED:CE Certificate issuer: /CN=9CCBE5D9D8D4576CDD8271E11CC131E15962EDCE Certificate serial: 12CE95D1A48DFE1A825DFD81D785DE5197743E58 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBE5D9D8D4576CDD8271E11CC131E15962EDCE.cer Subject info access: rsync://rpki-repo.registro.br/repo/57yZ76xc9xfvfc737toEobt2tr5hExZ1yCGCecN98w9n/0/9CCBE5D9D8D4576CDD8271E11CC131E15962EDCE.mft Manifest number: 01B2 Signing time: Wed 20 Aug 2025 14:04:18 +0000 Manifest this update: Wed 20 Aug 2025 13:59:18 +0000 Manifest next update: Thu 21 Aug 2025 14:41:18 +0000 Files and hashes: 1: 3136382e3139372e39322e302f32322d3234203d3e20323635343738.roa (hash: uRSlWWgNnl4h/33XJUlRrOasoMYKCF27v12L9+jCo6M=) 2: 323830343a316632633a3a2f33322d3434203d3e20323635343738.roa (hash: q9NmZKVJwk45Is/AoeD7DSTs2VE/8q2pM4XSa01uhdM=) 3: 9CCBE5D9D8D4576CDD8271E11CC131E15962EDCE.crl (hash: lkLdrueBjlx2U1TE7Nsja/Ewdgw3EdMmzTTKB2OEthg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/57yZ76xc9xfvfc737toEobt2tr5hExZ1yCGCecN98w9n/0/9CCBE5D9D8D4576CDD8271E11CC131E15962EDCE.crl rsync://rpki-repo.registro.br/repo/57yZ76xc9xfvfc737toEobt2tr5hExZ1yCGCecN98w9n/0/9CCBE5D9D8D4576CDD8271E11CC131E15962EDCE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBE5D9D8D4576CDD8271E11CC131E15962EDCE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ce:95:d1:a4:8d:fe:1a:82:5d:fd:81:d7:85:de:51:97:74:3e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CCBE5D9D8D4576CDD8271E11CC131E15962EDCE Validity Not Before: Aug 20 13:59:18 2025 GMT Not After : Aug 21 14:41:18 2025 GMT Subject: CN=AD70D8F1EE8DCB47FC04F18B1E558BF978E968F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8b:b0:42:52:4b:96:86:03:2e:76:4e:92:a1: cd:ea:55:8b:8b:24:3a:23:63:ec:12:79:af:78:f3: 63:33:92:2a:d8:24:88:19:1e:00:fd:9f:21:24:70: f2:94:56:86:2c:b5:47:41:60:78:c4:9a:06:7d:64: 77:f8:e9:6c:7e:17:e5:9c:d4:c3:88:7e:cf:19:7e: a6:a5:b9:78:cb:63:5d:71:fe:64:ca:33:58:55:db: a3:6d:d7:71:62:e8:d3:ee:ec:30:04:e2:58:0d:b0: 80:f9:0a:44:f9:2a:86:72:ac:04:bf:b5:79:18:30: 8f:f5:c1:f0:7d:87:13:35:1e:76:f5:4d:e3:1c:a0: 00:75:6a:46:f1:53:ba:d2:41:dd:32:b0:ea:fe:b5: f7:6c:1c:83:7e:0e:41:9b:90:5b:1d:29:7f:af:e3: bb:ed:82:6a:0a:9e:e0:1d:fb:d9:89:14:3a:6a:5d: 33:ce:93:28:bb:a0:c2:a9:1e:b5:32:3a:fa:d4:09: a0:4f:f2:b6:c8:4a:37:3f:26:27:6b:7a:d7:f0:64: f8:1b:4a:fd:1d:67:2c:25:a6:57:fb:4d:bf:6d:40: 32:9f:80:55:f9:19:c2:dd:b0:f6:94:4e:e8:91:44: 94:20:cf:81:12:5d:57:29:63:90:ed:aa:36:48:82: b3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:70:D8:F1:EE:8D:CB:47:FC:04:F1:8B:1E:55:8B:F9:78:E9:68:F7 X509v3 Authority Key Identifier: keyid:9C:CB:E5:D9:D8:D4:57:6C:DD:82:71:E1:1C:C1:31:E1:59:62:ED:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/57yZ76xc9xfvfc737toEobt2tr5hExZ1yCGCecN98w9n/0/9CCBE5D9D8D4576CDD8271E11CC131E15962EDCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBE5D9D8D4576CDD8271E11CC131E15962EDCE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/57yZ76xc9xfvfc737toEobt2tr5hExZ1yCGCecN98w9n/0/9CCBE5D9D8D4576CDD8271E11CC131E15962EDCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:bf:80:2a:33:44:9a:59:04:72:f4:43:da:5a:2d:26:3d:59: 4b:0f:cd:bf:e1:08:70:5f:e2:e2:5c:85:24:51:14:26:c7:57: 17:b6:34:99:40:4f:f8:54:16:fe:22:a5:08:b8:e4:19:a5:f3: e2:e1:78:19:ed:4c:34:49:12:77:42:84:58:ba:de:8b:26:c8: 0f:84:cf:c4:01:f2:b3:b6:4c:af:2c:ce:01:b5:6d:18:30:3b: b7:c9:fd:3b:3a:ac:05:8d:91:18:07:09:af:fc:bc:55:fc:92: ad:36:af:22:d6:2d:ce:95:71:cf:2b:1a:7b:b2:5e:29:45:87: 31:b8:6e:b5:2e:be:f0:3a:c8:bf:e6:cc:0f:09:14:fc:89:d6: e5:e7:c5:f0:2e:b8:46:45:5e:fa:b2:e7:82:8b:4b:50:7b:46: dc:7f:14:e0:78:be:34:aa:a1:ca:a6:a7:bc:dd:e9:f8:de:ef: 7b:b7:b4:20:44:2d:da:ca:15:41:8b:e9:8f:a3:85:af:02:30: aa:3d:18:43:94:09:f7:15:bc:47:fb:c4:3d:b9:29:c5:a1:ba: a3:9a:70:a0:36:2b:b0:04:00:6a:2c:1a:51:a9:6e:2c:b9:25: 5e:94:64:d8:ab:d5:27:65:73:8d:0f:32:f2:f8:25:07:de:03: 9b:d4:84:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEs6V0aSN/hqCXf2B14XeUZd0PlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNDQkU1RDlEOEQ0NTc2Q0REODI3MUUxMUNDMTMxRTE1 OTYyRURDRTAeFw0yNTA4MjAxMzU5MThaFw0yNTA4MjExNDQxMThaMDMxMTAvBgNV BAMTKEFENzBEOEYxRUU4RENCNDdGQzA0RjE4QjFFNTU4QkY5NzhFOTY4RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOi7BCUkuWhgMudk6Soc3qVYuL JDojY+wSea9482MzkirYJIgZHgD9nyEkcPKUVoYstUdBYHjEmgZ9ZHf46Wx+F+Wc 1MOIfs8ZfqaluXjLY11x/mTKM1hV26Nt13Fi6NPu7DAE4lgNsID5CkT5KoZyrAS/ tXkYMI/1wfB9hxM1Hnb1TeMcoAB1akbxU7rSQd0ysOr+tfdsHIN+DkGbkFsdKX+v 47vtgmoKnuAd+9mJFDpqXTPOkyi7oMKpHrUyOvrUCaBP8rbISjc/JidretfwZPgb Sv0dZywlplf7Tb9tQDKfgFX5GcLdsPaUTuiRRJQgz4ESXVcpY5DtqjZIgrNjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrXDY8e6Ny0f8BPGLHlWL+XjpaPcwHwYDVR0j BBgwFoAUnMvl2djUV2zdgnHhHMEx4Vli7c4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNTd5Wjc2eGM5eGZ2ZmM3Mzd0b0VvYnQydHI1aEV4WjF5Q0dDZWNOOTh3 OW4vMC85Q0NCRTVEOUQ4RDQ1NzZDREQ4MjcxRTExQ0MxMzFFMTU5NjJFRENFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQ0JFNUQ5RDhENDU3NkNE RDgyNzFFMTFDQzEzMUUxNTk2MkVEQ0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NTd5Wjc2eGM5eGZ2ZmM3Mzd0b0VvYnQydHI1aEV4WjF5Q0dDZWNOOTh3OW4vMC85 Q0NCRTVEOUQ4RDQ1NzZDREQ4MjcxRTExQ0MxMzFFMTU5NjJFRENFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnL+AKjNEmlkEcvRD2lotJj1ZSw/Nv+EIcF/i4lyFJFEUJsdXF7Y0mUBP+FQW /iKlCLjkGaXz4uF4Ge1MNEkSd0KEWLreiybID4TPxAHys7ZMryzOAbVtGDA7t8n9 OzqsBY2RGAcJr/y8VfySrTavItYtzpVxzysae7JeKUWHMbhutS6+8DrIv+bMDwkU /InW5efF8C64RkVe+rLngotLUHtG3H8U4Hi+NKqhyqanvN3p+N7ve7e0IEQt2soV QYvpj6OFrwIwqj0YQ5QJ9xW8R/vEPbkpxaG6o5pwoDYrsAQAaiwaUaluLLklXpRk 2KvVJ2VzjQ8y8vglB94Dm9SEeA== -----END CERTIFICATE-----Generated at Wed Aug 20 18:29:42 2025 by rpki-client