$ rpki-client -vvf rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.mft File: 38E14B86FE172DD4D8E534146604EB873463394D.mft (raw, json) Hash identifier: BrkrQfvkwFkLDXGj0yAHOcKJWidfPcwlmTqD6gDDRyM= Subject key identifier: 8E:0C:AB:B4:E9:BB:54:1B:B1:AB:B4:A8:E6:53:A2:C7:32:8C:2B:7D Authority key identifier: 38:E1:4B:86:FE:17:2D:D4:D8:E5:34:14:66:04:EB:87:34:63:39:4D Certificate issuer: /CN=38E14B86FE172DD4D8E534146604EB873463394D Certificate serial: 24F3D34EF1A2A42863080B62F39D7B017959A813 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38E14B86FE172DD4D8E534146604EB873463394D.cer Subject info access: rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.mft Manifest number: 0148 Signing time: Wed 20 Aug 2025 15:25:37 +0000 Manifest this update: Wed 20 Aug 2025 15:20:37 +0000 Manifest next update: Thu 21 Aug 2025 18:18:37 +0000 Files and hashes: 1: 3230302e33362e3139322e302f32322d3234203d3e20323731343238.roa (hash: FGbym0C7oy+3WkWLxGeUkkMs9tZRG07fiF6hYHOGFP8=) 2: 38E14B86FE172DD4D8E534146604EB873463394D.crl (hash: lSe483YsqPcLucb88RlbcvspYEirrszd5C/ncG+gN0c=) 3: 323830343a376236303a3a2f33322d3438203d3e20323731343238.roa (hash: KS3CIPQBP8uBSzv8b+te50bhqKxNppim+ZvFE5maTMk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.crl rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38E14B86FE172DD4D8E534146604EB873463394D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 18:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f3:d3:4e:f1:a2:a4:28:63:08:0b:62:f3:9d:7b:01:79:59:a8:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E14B86FE172DD4D8E534146604EB873463394D Validity Not Before: Aug 20 15:20:37 2025 GMT Not After : Aug 21 18:18:37 2025 GMT Subject: CN=8E0CABB4E9BB541BB1ABB4A8E653A2C7328C2B7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:11:5c:0a:86:3c:f2:50:14:33:8a:cb:e1:58: 12:fd:a6:6b:73:9d:88:24:bd:e9:ef:66:21:f5:2b: 7f:61:24:25:6e:90:88:09:02:fd:87:a6:01:54:81: c3:f7:ff:41:ac:a1:42:60:01:c6:3f:16:f5:f6:99: 81:5f:ab:0d:d7:8a:c3:fe:3b:e1:1f:17:8f:4c:e8: d1:87:9a:f6:71:cd:a3:12:3b:26:6f:3b:bc:21:41: b6:45:73:b2:0a:9d:4a:5f:b9:2e:40:d4:d6:2e:aa: 18:84:c2:46:d0:36:8a:f5:3c:90:b9:d8:cd:cd:42: 84:64:39:55:00:6b:54:7c:8f:ed:e7:53:ff:88:d0: 0c:02:8b:cd:9e:cb:bf:28:68:7c:d1:48:1d:ed:3e: 62:ae:e5:3f:ee:b6:82:ec:59:53:a7:c6:2e:dd:54: ea:d3:14:18:99:8c:41:f2:8d:d5:4d:ec:ff:be:44: 2a:af:4a:44:78:ec:78:50:41:46:ba:b3:34:13:70: 1a:75:a6:d3:0b:5f:6f:d2:3b:86:80:b7:05:fa:26: 27:cb:c4:dd:68:af:2b:50:4d:44:5c:f1:fb:47:2e: c3:27:cd:f9:b8:0b:a8:06:0f:c4:c8:74:96:2e:a7: 97:9c:bf:df:43:be:a4:fb:3f:a2:be:16:59:39:45: a6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0C:AB:B4:E9:BB:54:1B:B1:AB:B4:A8:E6:53:A2:C7:32:8C:2B:7D X509v3 Authority Key Identifier: keyid:38:E1:4B:86:FE:17:2D:D4:D8:E5:34:14:66:04:EB:87:34:63:39:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38E14B86FE172DD4D8E534146604EB873463394D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/38E14B86FE172DD4D8E534146604EB873463394D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7f:d8:a6:c5:5d:34:ec:6a:ce:15:f8:39:9c:9c:89:2c:f7: 82:1d:27:4e:79:ca:dc:0d:fc:b0:cb:07:30:04:4d:91:1e:89: c3:b2:9d:08:69:c5:0c:5e:09:34:17:e0:64:fa:68:36:7f:0a: 43:84:43:ac:9d:9a:4d:39:fc:e9:d4:ff:e8:1c:2f:5d:98:77: 23:2e:7d:d4:b8:a3:7c:ab:f4:17:09:76:61:dd:81:91:b3:3c: 7d:88:eb:59:b7:7a:b2:b8:ab:d5:6b:28:0a:c9:ff:04:1a:84: 0b:07:44:43:57:2b:a3:e0:b2:d8:c6:fd:65:19:f5:e9:ba:88: a5:0b:25:4c:16:c8:1c:69:ba:0d:f2:a8:17:bd:d7:fe:23:f5: 94:69:37:3a:49:cd:7b:0d:94:57:0c:c8:0a:cf:10:de:32:dc: 14:6b:b1:f0:dd:d8:b3:90:41:95:5b:9a:93:bb:bb:64:fa:0a: e4:ef:62:62:49:14:b9:71:42:3e:6d:59:5e:17:68:b8:e3:4f: bb:72:ec:a3:4d:83:88:a9:2f:5a:73:d0:b8:b3:a2:90:30:85: a0:65:38:1d:7d:c9:34:08:d8:30:58:7f:a8:5f:75:73:d2:2a: cf:b8:e9:dc:d0:53:34:74:2e:f7:cf:89:be:1e:3e:60:6c:91: b8:18:a7:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJPPTTvGipChjCAti8517AXlZqBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFMTRCODZGRTE3MkRENEQ4RTUzNDE0NjYwNEVCODcz NDYzMzk0RDAeFw0yNTA4MjAxNTIwMzdaFw0yNTA4MjExODE4MzdaMDMxMTAvBgNV BAMTKDhFMENBQkI0RTlCQjU0MUJCMUFCQjRBOEU2NTNBMkM3MzI4QzJCN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBEVwKhjzyUBQzisvhWBL9pmtz nYgkvenvZiH1K39hJCVukIgJAv2HpgFUgcP3/0GsoUJgAcY/FvX2mYFfqw3XisP+ O+EfF49M6NGHmvZxzaMSOyZvO7whQbZFc7IKnUpfuS5A1NYuqhiEwkbQNor1PJC5 2M3NQoRkOVUAa1R8j+3nU/+I0AwCi82ey78oaHzRSB3tPmKu5T/utoLsWVOnxi7d VOrTFBiZjEHyjdVN7P++RCqvSkR47HhQQUa6szQTcBp1ptMLX2/SO4aAtwX6JifL xN1orytQTURc8ftHLsMnzfm4C6gGD8TIdJYup5ecv99DvqT7P6K+Flk5RaYdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjgyrtOm7VBuxq7So5lOixzKMK30wHwYDVR0j BBgwFoAUOOFLhv4XLdTY5TQUZgTrhzRjOU0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFdDRTVIdkFxWWUyQ3VvWXRFVXgzY0dZSDNqTExDbTE5VXN2Vms3QTlx Y1kvMC8zOEUxNEI4NkZFMTcyREQ0RDhFNTM0MTQ2NjA0RUI4NzM0NjMzOTRELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4RTE0Qjg2RkUxNzJERDRE OEU1MzQxNDY2MDRFQjg3MzQ2MzM5NEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFdDRTVIdkFxWWUyQ3VvWXRFVXgzY0dZSDNqTExDbTE5VXN2Vms3QTlxY1kvMC8z OEUxNEI4NkZFMTcyREQ0RDhFNTM0MTQ2NjA0RUI4NzM0NjMzOTRELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX3/YpsVdNOxqzhX4OZyciSz3gh0nTnnK3A38sMsHMARNkR6Jw7KdCGnFDF4J NBfgZPpoNn8KQ4RDrJ2aTTn86dT/6BwvXZh3Iy591LijfKv0Fwl2Yd2BkbM8fYjr Wbd6srir1WsoCsn/BBqECwdEQ1cro+Cy2Mb9ZRn16bqIpQslTBbIHGm6DfKoF73X /iP1lGk3OknNew2UVwzICs8Q3jLcFGux8N3Ys5BBlVuak7u7ZPoK5O9iYkkUuXFC Pm1ZXhdouONPu3Lso02DiKkvWnPQuLOikDCFoGU4HX3JNAjYMFh/qF91c9Iqz7jp 3NBTNHQu98+Jvh4+YGyRuBinhg== -----END CERTIFICATE-----Generated at Wed Aug 20 18:31:14 2025 by rpki-client