$ rpki-client -vvf rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/A238987D0DCDD2E9A9A971D52BB6651198981252.mft File: A238987D0DCDD2E9A9A971D52BB6651198981252.mft (raw, json) Hash identifier: rd6lnSfMWkFTE7rmg3KsJZ+Wvz+09czMvrJfi0jGV+c= Subject key identifier: 81:4D:7F:A6:63:E7:E0:85:C4:65:AC:A8:6B:F1:53:AC:7D:A1:C5:23 Authority key identifier: A2:38:98:7D:0D:CD:D2:E9:A9:A9:71:D5:2B:B6:65:11:98:98:12:52 Certificate issuer: /CN=A238987D0DCDD2E9A9A971D52BB6651198981252 Certificate serial: 22B216BF85924D471AE9463DC37E836A983BA923 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A238987D0DCDD2E9A9A971D52BB6651198981252.cer Subject info access: rsync://rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/A238987D0DCDD2E9A9A971D52BB6651198981252.mft Manifest number: 2D Signing time: Wed 20 Aug 2025 13:42:10 +0000 Manifest this update: Wed 20 Aug 2025 13:37:10 +0000 Manifest next update: Thu 21 Aug 2025 15:38:10 +0000 Files and hashes: 1: A238987D0DCDD2E9A9A971D52BB6651198981252.crl (hash: h0vF7BIU62U7KHmdVYNsf34AzJ8gi3PnQIbvoRr6sXY=) 2: 323830343a343739383a3a2f33322d313238203d3e20323637303634.roa (hash: /DFqZtK8pcbJpNfMcmW86/HL6yQhNfKgR1+Vx7V3qvk=) 3: 34352e3232382e3132382e302f32322d3332203d3e20323637303634.roa (hash: 50aTTpLDa7imopjFF42vqESbqb0F96QgB5qVPAU09a0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/A238987D0DCDD2E9A9A971D52BB6651198981252.crl rsync://rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/A238987D0DCDD2E9A9A971D52BB6651198981252.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A238987D0DCDD2E9A9A971D52BB6651198981252.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 15:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b2:16:bf:85:92:4d:47:1a:e9:46:3d:c3:7e:83:6a:98:3b:a9:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A238987D0DCDD2E9A9A971D52BB6651198981252 Validity Not Before: Aug 20 13:37:10 2025 GMT Not After : Aug 21 15:38:10 2025 GMT Subject: CN=814D7FA663E7E085C465ACA86BF153AC7DA1C523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:85:e2:7d:35:e6:67:8a:10:2f:b2:e8:5f:d7: fe:81:96:09:cb:12:bd:13:46:80:13:1f:39:c3:4e: 82:65:71:7d:df:04:08:0a:5f:4a:ce:64:32:b5:b3: 3f:fb:77:19:ed:2d:1c:34:7f:2e:bd:61:8c:d0:29: 3f:4f:33:b0:b2:9e:ca:e5:e2:21:a3:dd:d9:f2:ee: 51:e9:e3:b0:e2:55:5e:02:c4:8f:dd:36:d1:1b:44: a5:6d:8e:87:8c:46:80:7c:69:24:c9:cb:71:1d:2a: 59:08:84:a8:5c:fd:f6:28:47:19:d5:41:0d:d1:2a: 96:e4:87:09:36:b8:24:7b:0d:73:c7:3e:08:46:02: e9:6c:cc:d7:3b:f5:66:2e:d7:32:8f:21:c2:0a:1a: 85:5e:1a:c0:8e:9c:7b:51:d1:56:9b:f9:3c:fc:24: 0d:7e:a9:05:32:9e:bb:37:ed:b6:43:2e:43:d9:83: 66:15:d4:26:48:92:52:12:80:be:fe:ae:43:6c:5e: 6c:44:74:26:bc:c4:59:83:c8:32:83:c2:35:6c:35: 15:43:9f:27:69:3d:74:4f:2a:76:b8:21:85:d3:7c: 8b:4e:25:3b:8e:af:a5:6e:3d:be:22:ae:18:e0:d0: af:c0:0c:d5:cb:76:3c:c2:bd:20:7e:ce:b5:c8:74: bb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:4D:7F:A6:63:E7:E0:85:C4:65:AC:A8:6B:F1:53:AC:7D:A1:C5:23 X509v3 Authority Key Identifier: keyid:A2:38:98:7D:0D:CD:D2:E9:A9:A9:71:D5:2B:B6:65:11:98:98:12:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/A238987D0DCDD2E9A9A971D52BB6651198981252.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A238987D0DCDD2E9A9A971D52BB6651198981252.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/A238987D0DCDD2E9A9A971D52BB6651198981252.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c8:d9:48:b7:85:93:f4:b0:f7:78:18:0d:e9:63:1f:b1:04: 06:ad:9c:a2:b9:47:7f:fc:f9:3f:a0:01:b4:48:dd:b6:89:57: 85:91:fa:5e:6a:8d:65:a1:8a:05:85:3b:f6:73:e5:15:46:fc: c4:7c:ae:04:ed:9d:34:50:7f:ab:22:c2:04:4d:c9:19:e8:cc: d4:a5:48:6b:48:00:e0:64:8d:4d:1a:79:0d:29:b4:ef:0d:60: 42:50:85:f8:1f:b9:48:16:9c:9e:7a:9a:93:d7:dd:3b:38:4b: e8:4c:5e:0a:aa:46:ee:37:15:4d:0c:19:b9:ca:a3:34:77:4d: 47:b3:c6:8c:5a:2e:fe:de:67:c4:6b:8f:59:1a:d5:2f:60:a8: 6d:fc:83:71:56:54:8b:34:5d:3f:6a:9b:83:33:60:34:7d:b4: 57:24:87:f8:6a:17:ec:c2:43:ee:55:41:b0:7d:ba:a5:46:9f: a2:2b:bf:5c:a7:a3:de:84:97:11:45:ce:f8:12:d5:a3:33:cb: b2:69:ed:94:2f:b2:30:64:db:9c:9b:d0:65:2f:f4:4a:34:bb: a0:ae:49:1f:65:ff:32:10:fb:2f:17:8f:5d:ec:ad:92:71:af: 75:3a:63:85:af:1e:28:ba:32:3d:88:37:dd:1b:7e:ed:76:f4: 89:be:8d:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIrIWv4WSTUca6UY9w36Dapg7qSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIzODk4N0QwRENERDJFOUE5QTk3MUQ1MkJCNjY1MTE5 ODk4MTI1MjAeFw0yNTA4MjAxMzM3MTBaFw0yNTA4MjExNTM4MTBaMDMxMTAvBgNV BAMTKDgxNEQ3RkE2NjNFN0UwODVDNDY1QUNBODZCRjE1M0FDN0RBMUM1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpheJ9NeZnihAvsuhf1/6BlgnL Er0TRoATHznDToJlcX3fBAgKX0rOZDK1sz/7dxntLRw0fy69YYzQKT9PM7Cynsrl 4iGj3dny7lHp47DiVV4CxI/dNtEbRKVtjoeMRoB8aSTJy3EdKlkIhKhc/fYoRxnV QQ3RKpbkhwk2uCR7DXPHPghGAulszNc79WYu1zKPIcIKGoVeGsCOnHtR0Vab+Tz8 JA1+qQUynrs37bZDLkPZg2YV1CZIklISgL7+rkNsXmxEdCa8xFmDyDKDwjVsNRVD nydpPXRPKna4IYXTfItOJTuOr6VuPb4irhjg0K/ADNXLdjzCvSB+zrXIdLsHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgU1/pmPn4IXEZayoa/FTrH2hxSMwHwYDVR0j BBgwFoAUojiYfQ3N0umpqXHVK7ZlEZiYElIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzFEMXFqUHhzaWZHdVlTcmNmbVZHNm40UnVnYjNuQ3BLb0NIMmt4UmJC bVQvMC9BMjM4OTg3RDBEQ0REMkU5QTlBOTcxRDUyQkI2NjUxMTk4OTgxMjUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyMzg5ODdEMERDREQyRTlB OUE5NzFENTJCQjY2NTExOTg5ODEyNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NzFEMXFqUHhzaWZHdVlTcmNmbVZHNm40UnVnYjNuQ3BLb0NIMmt4UmJCbVQvMC9B MjM4OTg3RDBEQ0REMkU5QTlBOTcxRDUyQkI2NjUxMTk4OTgxMjUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAScjZSLeFk/Sw93gYDeljH7EEBq2corlHf/z5P6ABtEjdtolXhZH6XmqNZaGK BYU79nPlFUb8xHyuBO2dNFB/qyLCBE3JGejM1KVIa0gA4GSNTRp5DSm07w1gQlCF +B+5SBacnnqak9fdOzhL6ExeCqpG7jcVTQwZucqjNHdNR7PGjFou/t5nxGuPWRrV L2CobfyDcVZUizRdP2qbgzNgNH20VySH+GoX7MJD7lVBsH26pUafoiu/XKej3oSX EUXO+BLVozPLsmntlC+yMGTbnJvQZS/0SjS7oK5JH2X/MhD7LxePXeytknGvdTpj ha8eKLoyPYg33Rt+7Xb0ib6NsA== -----END CERTIFICATE-----Generated at Wed Aug 20 18:36:37 2025 by rpki-client