$ rpki-client -vvf rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft File: 98525FF70BD67C78C36BE3190E3463098E95DF2C.mft (raw, json) Hash identifier: nVNk9usm0jCTtrby/J0WfPG4g5xJeZM5Htna2oRFFbM= Subject key identifier: 92:A3:D9:3F:2D:72:9B:7A:1D:E6:98:5E:2F:A0:FC:A6:E6:05:86:EF Authority key identifier: 98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C Certificate issuer: /CN=98525FF70BD67C78C36BE3190E3463098E95DF2C Certificate serial: 2F299C2C484B5C4E5290DD8FD2CDDAF9C841D896 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer Subject info access: rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft Manifest number: 029F Signing time: Wed 20 Aug 2025 11:10:58 +0000 Manifest this update: Wed 20 Aug 2025 11:05:58 +0000 Manifest next update: Thu 21 Aug 2025 11:47:58 +0000 Files and hashes: 1: 98525FF70BD67C78C36BE3190E3463098E95DF2C.crl (hash: sDcWWOS/NyQBPY5OpYanYfNOWhLIFpgUNIw4diYlOf4=) 2: 34352e342e3130342e302f32322d3234203d3e20323636303633.roa (hash: YqZ3SJPT6Xcqs9peUTXMNxMHIB0EzaAQ68UaAdgZNVs=) 3: 323830343a333966633a3a2f33322d3438203d3e20323636303633.roa (hash: uZx6MKqpTg13sIPZCAlz9trqbeJwgRlXEg00ldqRU1M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 11:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:29:9c:2c:48:4b:5c:4e:52:90:dd:8f:d2:cd:da:f9:c8:41:d8:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98525FF70BD67C78C36BE3190E3463098E95DF2C Validity Not Before: Aug 20 11:05:58 2025 GMT Not After : Aug 21 11:47:58 2025 GMT Subject: CN=92A3D93F2D729B7A1DE6985E2FA0FCA6E60586EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a6:d5:59:13:88:e7:0a:99:e1:b8:ec:32:4a: 1e:7c:59:ab:e4:0d:cc:3c:c5:89:82:8c:0f:ba:4d: b6:d0:e5:a0:d6:9f:8e:42:79:01:c1:59:fe:dd:34: 64:a7:a7:c3:92:03:93:88:5a:a2:60:d4:15:a9:d4: 78:ff:7b:7f:92:f4:19:64:80:92:f0:c7:bc:dc:3e: ff:e1:96:e8:95:b0:23:db:63:31:32:b8:6a:18:cb: e7:f5:5c:82:46:2f:4d:85:d4:14:38:7a:94:df:bc: 67:11:5f:2c:96:24:03:a1:18:7b:73:69:9b:14:1a: 8c:1d:e3:8d:05:81:7d:e0:f5:46:a6:52:7e:bb:d7: 7a:62:05:fd:5e:c7:00:2f:a2:d1:9d:de:8a:68:e7: 93:6b:fd:4e:c9:52:ef:bf:0f:9c:38:71:06:a3:a0: 8a:7e:1c:e6:b7:27:9c:6c:a8:75:c5:83:19:e8:46: 79:5b:d8:81:38:af:c4:19:64:9f:1f:ed:93:cf:a3: 01:8a:e0:38:8a:fb:6d:bd:b3:87:86:56:04:49:ed: 36:78:50:91:3e:01:26:30:6d:52:22:fe:24:86:61: f2:6c:9f:7f:8f:17:e0:f3:f9:40:d4:31:68:be:d5: ac:27:7c:fd:3a:eb:23:c0:00:25:ad:bb:93:82:89: aa:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A3:D9:3F:2D:72:9B:7A:1D:E6:98:5E:2F:A0:FC:A6:E6:05:86:EF X509v3 Authority Key Identifier: keyid:98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e9:8f:f6:58:bd:99:ee:cd:09:ff:0f:51:94:17:5b:8a:ed: d0:10:7c:82:7e:58:78:a2:ed:d4:c9:21:80:9d:3a:fc:57:18: 91:5b:ff:30:d2:4e:6a:25:db:de:61:48:33:3a:fd:47:c1:df: 54:ad:2f:43:18:7a:44:e1:a6:26:c7:4c:c8:0e:e4:71:f9:13: fc:bf:07:c0:49:99:dc:53:94:3e:b0:b6:d5:76:22:79:99:be: 15:b7:c8:e1:fd:9c:4b:51:d0:fc:b6:1a:51:b2:b9:f5:02:1b: 9f:3e:55:0b:ea:9b:3d:87:f5:7e:1a:0a:e6:73:48:ce:51:de: 3e:6a:ec:c6:0b:59:05:6d:dc:f5:91:5f:ec:43:3c:1a:ca:5f: ac:93:c6:d5:24:3a:72:5d:cd:24:8d:72:e4:ec:a9:f9:f5:d2: c4:d5:ec:63:16:38:49:93:b5:ea:02:1b:5e:d0:ec:1b:85:71: 99:8a:7c:3f:0d:ea:a9:9b:75:f4:c2:41:cc:93:8e:ae:20:b4: e3:4c:99:06:52:2d:7e:4c:a6:82:be:0c:60:f4:33:2c:91:ae: 9d:6c:95:b1:79:9c:d1:88:fe:df:22:d2:e9:5e:a1:82:9f:c1: e2:78:90:6f:b8:6d:37:a5:27:0b:25:d4:14:89:00:46:c2:f8: 46:8a:53:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULymcLEhLXE5SkN2P0s3a+chB2JYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MjVGRjcwQkQ2N0M3OEMzNkJFMzE5MEUzNDYzMDk4 RTk1REYyQzAeFw0yNTA4MjAxMTA1NThaFw0yNTA4MjExMTQ3NThaMDMxMTAvBgNV BAMTKDkyQTNEOTNGMkQ3MjlCN0ExREU2OTg1RTJGQTBGQ0E2RTYwNTg2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWptVZE4jnCpnhuOwySh58Wavk Dcw8xYmCjA+6TbbQ5aDWn45CeQHBWf7dNGSnp8OSA5OIWqJg1BWp1Hj/e3+S9Blk gJLwx7zcPv/hluiVsCPbYzEyuGoYy+f1XIJGL02F1BQ4epTfvGcRXyyWJAOhGHtz aZsUGowd440FgX3g9UamUn6713piBf1exwAvotGd3opo55Nr/U7JUu+/D5w4cQaj oIp+HOa3J5xsqHXFgxnoRnlb2IE4r8QZZJ8f7ZPPowGK4DiK+229s4eGVgRJ7TZ4 UJE+ASYwbVIi/iSGYfJsn3+PF+Dz+UDUMWi+1awnfP066yPAACWtu5OCiaprAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkqPZPy1ym3od5pheL6D8puYFhu8wHwYDVR0j BBgwFoAUmFJf9wvWfHjDa+MZDjRjCY6V3ywwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3duRE1ITTEydkZkZ1dDclVVUWVUeGk0c1ZBaTdId2h4WXVQYkVZSmM5 QjQvMS85ODUyNUZGNzBCRDY3Qzc4QzM2QkUzMTkwRTM0NjMwOThFOTVERjJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4NTI1RkY3MEJENjdDNzhD MzZCRTMxOTBFMzQ2MzA5OEU5NURGMkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N3duRE1ITTEydkZkZ1dDclVVUWVUeGk0c1ZBaTdId2h4WXVQYkVZSmM5QjQvMS85 ODUyNUZGNzBCRDY3Qzc4QzM2QkUzMTkwRTM0NjMwOThFOTVERjJDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfOmP9li9me7NCf8PUZQXW4rt0BB8gn5YeKLt1MkhgJ06/FcYkVv/MNJOaiXb 3mFIMzr9R8HfVK0vQxh6ROGmJsdMyA7kcfkT/L8HwEmZ3FOUPrC21XYieZm+FbfI 4f2cS1HQ/LYaUbK59QIbnz5VC+qbPYf1fhoK5nNIzlHePmrsxgtZBW3c9ZFf7EM8 GspfrJPG1SQ6cl3NJI1y5Oyp+fXSxNXsYxY4SZO16gIbXtDsG4VxmYp8Pw3qqZt1 9MJBzJOOriC040yZBlItfkymgr4MYPQzLJGunWyVsXmc0Yj+3yLS6V6hgp/B4niQ b7htN6UnCyXUFIkARsL4RopT5g== -----END CERTIFICATE-----Generated at Wed Aug 20 18:30:53 2025 by rpki-client