$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.mft File: 57B50CDFE20B642A6640800E5E00DB69A36D4AF3.mft (raw, json) Hash identifier: XmOCnGwGvAsrT3cL+jlWdw9GbxWPeGQaBMZ0/+d2Ptg= Subject key identifier: 22:8D:64:8C:C9:88:6D:88:A8:44:48:54:76:21:14:BC:C3:02:27:9D Authority key identifier: 57:B5:0C:DF:E2:0B:64:2A:66:40:80:0E:5E:00:DB:69:A3:6D:4A:F3 Certificate issuer: /CN=57B50CDFE20B642A6640800E5E00DB69A36D4AF3 Certificate serial: 17E6571E9ECD68E0664747A94EE20813FE449983 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.cer Subject info access: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.mft Manifest number: 2B Signing time: Wed 20 Aug 2025 15:56:01 +0000 Manifest this update: Wed 20 Aug 2025 15:51:01 +0000 Manifest next update: Thu 21 Aug 2025 18:19:01 +0000 Files and hashes: 1: 34352e3232382e3130342e302f32322d3332203d3e20323637303737.roa (hash: CyZlU5isE9wGi3h/xSKxtzFuGmGh7hkfGVSrX1jTcpg=) 2: 57B50CDFE20B642A6640800E5E00DB69A36D4AF3.crl (hash: cYSeVqtymLUmqzXIZ1ZtTRA4EZz5KHf5CQaeDGsV+rQ=) 3: 323830343a343763633a3a2f33322d313238203d3e20323637303737.roa (hash: OviZj1wS5XOeNusWuWzxM096AIJ3rnyA+h3UJP4k228=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.crl rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 18:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e6:57:1e:9e:cd:68:e0:66:47:47:a9:4e:e2:08:13:fe:44:99:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57B50CDFE20B642A6640800E5E00DB69A36D4AF3 Validity Not Before: Aug 20 15:51:01 2025 GMT Not After : Aug 21 18:19:01 2025 GMT Subject: CN=228D648CC9886D88A8444854762114BCC302279D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b9:06:b3:6e:ac:95:09:cc:4a:dd:2c:bb:ab: 31:c2:19:d4:f0:27:0c:91:44:68:5d:82:8e:c4:44: 27:de:4b:9a:e1:44:f5:59:42:68:0f:ee:2a:ed:ba: 81:1e:dc:37:fc:27:10:8f:67:db:4e:58:5d:27:72: 7a:58:44:35:2c:ad:de:78:b4:06:c5:08:ed:d1:7e: 44:7b:a3:96:e0:ca:1a:e2:5a:e3:0f:88:10:87:81: 26:2b:99:96:22:bf:b4:c7:59:39:ca:8f:82:08:b6: d0:b2:a0:34:8e:90:f9:f7:2a:34:74:18:9b:c8:05: 32:c4:fd:91:9e:99:8a:f8:b3:1b:32:fe:d0:f7:62: fe:8a:c1:39:37:32:bd:05:40:c5:58:60:66:19:e1: b8:f0:45:e2:b3:1d:83:34:da:1e:ed:5c:b0:44:70: e4:90:53:7b:8c:f3:87:21:14:e8:30:c4:01:41:5b: ec:6f:f1:97:76:1e:3d:22:8c:ec:fc:71:e8:33:64: 96:80:c0:da:72:5b:b7:7b:57:01:d4:58:5a:a0:50: 5f:ab:00:e7:f9:6f:f8:4b:ba:de:67:7f:fc:30:d1: dc:18:71:f1:0c:11:06:9a:c3:af:25:cd:6a:5f:d4: 3f:af:af:59:04:41:00:6a:c5:01:0a:a2:34:15:ac: ae:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8D:64:8C:C9:88:6D:88:A8:44:48:54:76:21:14:BC:C3:02:27:9D X509v3 Authority Key Identifier: keyid:57:B5:0C:DF:E2:0B:64:2A:66:40:80:0E:5E:00:DB:69:A3:6D:4A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/57B50CDFE20B642A6640800E5E00DB69A36D4AF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:72:21:cb:a5:ac:03:d3:59:72:cd:17:e2:f8:e9:00:75:1f: e3:3b:17:34:5e:0f:46:13:5b:0c:f6:2c:4d:e8:05:10:10:55: 99:42:db:2e:ed:44:ca:1b:46:c0:7c:a3:72:19:85:66:a8:10: f7:75:48:b7:27:4b:9a:21:0b:8a:c4:ac:3e:c5:7f:b7:54:e5: 69:cc:83:05:e3:af:61:bb:f7:a2:43:78:03:35:be:12:6b:db: a0:97:3d:9c:5e:c8:e8:c4:39:76:ad:09:48:82:72:9c:3b:8c: f8:0d:eb:2c:03:00:ce:0c:0c:23:c0:18:5e:29:21:03:d8:07: 28:c2:b6:e2:c2:32:61:ef:d5:90:9b:bf:87:65:c5:f7:82:94: b5:c5:08:60:9f:fa:f4:03:bc:06:6e:af:f9:f9:b3:2c:a9:8b: 40:41:07:f6:e7:44:58:6d:44:87:ab:58:34:c5:fc:c3:3c:8c: 82:e4:4d:10:5b:80:06:3d:b7:b3:99:1e:f1:15:db:b6:b0:12: cd:72:12:ea:e2:f2:f1:a2:41:73:c4:2f:65:fa:c2:d7:1f:c4: f0:98:37:dd:4c:8d:25:5a:5b:6f:e4:a2:ed:82:87:89:9b:49: b4:15:65:17:13:c5:fc:8e:eb:56:98:7c:c9:70:19:4b:44:12: 94:78:4d:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUF+ZXHp7NaOBmR0epTuIIE/5EmYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdCNTBDREZFMjBCNjQyQTY2NDA4MDBFNUUwMERCNjlB MzZENEFGMzAeFw0yNTA4MjAxNTUxMDFaFw0yNTA4MjExODE5MDFaMDMxMTAvBgNV BAMTKDIyOEQ2NDhDQzk4ODZEODhBODQ0NDg1NDc2MjExNEJDQzMwMjI3OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCluQazbqyVCcxK3Sy7qzHCGdTw JwyRRGhdgo7ERCfeS5rhRPVZQmgP7irtuoEe3Df8JxCPZ9tOWF0ncnpYRDUsrd54 tAbFCO3RfkR7o5bgyhriWuMPiBCHgSYrmZYiv7THWTnKj4IIttCyoDSOkPn3KjR0 GJvIBTLE/ZGemYr4sxsy/tD3Yv6KwTk3Mr0FQMVYYGYZ4bjwReKzHYM02h7tXLBE cOSQU3uM84chFOgwxAFBW+xv8Zd2Hj0ijOz8cegzZJaAwNpyW7d7VwHUWFqgUF+r AOf5b/hLut5nf/ww0dwYcfEMEQaaw68lzWpf1D+vr1kEQQBqxQEKojQVrK5/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIo1kjMmIbYioREhUdiEUvMMCJ50wHwYDVR0j BBgwFoAUV7UM3+ILZCpmQIAOXgDbaaNtSvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNL MUovMC81N0I1MENERkUyMEI2NDJBNjY0MDgwMEU1RTAwREI2OUEzNkQ0QUYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3QjUwQ0RGRTIwQjY0MkE2 NjQwODAwRTVFMDBEQjY5QTM2RDRBRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNLMUovMC81 N0I1MENERkUyMEI2NDJBNjY0MDgwMEU1RTAwREI2OUEzNkQ0QUYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi3Ihy6WsA9NZcs0X4vjpAHUf4zsXNF4PRhNbDPYsTegFEBBVmULbLu1EyhtG wHyjchmFZqgQ93VItydLmiELisSsPsV/t1TlacyDBeOvYbv3okN4AzW+EmvboJc9 nF7I6MQ5dq0JSIJynDuM+A3rLAMAzgwMI8AYXikhA9gHKMK24sIyYe/VkJu/h2XF 94KUtcUIYJ/69AO8Bm6v+fmzLKmLQEEH9udEWG1Eh6tYNMX8wzyMguRNEFuABj23 s5ke8RXbtrASzXIS6uLy8aJBc8QvZfrC1x/E8Jg33UyNJVpbb+Si7YKHiZtJtBVl FxPF/I7rVph8yXAZS0QSlHhNuQ== -----END CERTIFICATE-----Generated at Wed Aug 20 21:32:59 2025 by rpki-client