$ rpki-client -vvf rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/BF1ED920124A956078F54EF2E74C46A4BFC3F517.mft File: BF1ED920124A956078F54EF2E74C46A4BFC3F517.mft (raw, json) Hash identifier: 1LPYe96j40klz0wYuM5a8B1x3RxF2XGBu8zXIBUZY1U= Subject key identifier: 36:EB:39:51:0B:AC:AE:A2:64:09:16:D7:E3:C4:22:DD:77:22:B2:CC Authority key identifier: BF:1E:D9:20:12:4A:95:60:78:F5:4E:F2:E7:4C:46:A4:BF:C3:F5:17 Certificate issuer: /CN=BF1ED920124A956078F54EF2E74C46A4BFC3F517 Certificate serial: 36A87C76D8C6BA4C75B118FB637AFE04149F437A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF1ED920124A956078F54EF2E74C46A4BFC3F517.cer Subject info access: rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/BF1ED920124A956078F54EF2E74C46A4BFC3F517.mft Manifest number: 0C Signing time: Wed 20 Aug 2025 02:14:32 +0000 Manifest this update: Wed 20 Aug 2025 02:09:32 +0000 Manifest next update: Thu 21 Aug 2025 05:00:32 +0000 Files and hashes: 1: BF1ED920124A956078F54EF2E74C46A4BFC3F517.crl (hash: DYibSIO8lpM2TxbgLE1hZ11RgXIMNDFbRYzcPs/P2mA=) 2: 3134332e3230382e3131362e302f32322d3332203d3e20323635313231.roa (hash: dXDJ6YoxUXhFQYoMDXxtxdEXvR4fl5E+h4OB9EbcOno=) 3: 323830343a326164343a3a2f33322d313238203d3e20323635313231.roa (hash: xEsjrLVlzs6H2k1W806SdCCQJvr6MukqwhqFSSjEPR4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/BF1ED920124A956078F54EF2E74C46A4BFC3F517.crl rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/BF1ED920124A956078F54EF2E74C46A4BFC3F517.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF1ED920124A956078F54EF2E74C46A4BFC3F517.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 05:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:a8:7c:76:d8:c6:ba:4c:75:b1:18:fb:63:7a:fe:04:14:9f:43:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF1ED920124A956078F54EF2E74C46A4BFC3F517 Validity Not Before: Aug 20 02:09:32 2025 GMT Not After : Aug 21 05:00:32 2025 GMT Subject: CN=36EB39510BACAEA2640916D7E3C422DD7722B2CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4b:f3:56:bc:22:4a:8b:a6:36:c3:bd:94:6b: 21:35:43:fc:5f:57:da:f4:cb:17:61:8f:fe:82:58: 46:76:c8:14:00:c8:80:39:18:15:a9:6d:aa:54:32: 8a:11:83:32:a8:87:1e:72:9e:74:a8:3c:06:81:0a: de:7f:10:e4:a2:e6:23:c3:71:27:65:24:af:9f:71: ce:fa:16:99:cc:d9:f5:d5:c0:75:d8:07:70:c4:b1: eb:6c:61:03:09:91:13:08:53:c1:da:91:17:e9:c1: d5:1b:d5:25:fe:6a:17:2f:1c:00:0b:96:44:02:23: ab:2d:39:93:6c:45:11:da:2f:94:cd:3d:8a:4c:22: 23:3a:52:fb:d2:9d:f2:b0:b4:20:ce:f8:b3:2f:3c: c9:4d:45:8c:e4:a9:36:2c:90:75:f9:95:bb:2f:ca: 54:a7:b8:f7:04:59:bc:b6:9f:ef:0a:80:4e:28:d8: 80:75:25:ef:fc:d9:ca:9b:81:72:44:5d:c8:fc:f0: 2a:7c:a7:30:07:54:19:fd:d4:b0:77:9e:f5:0f:9b: 5f:81:0d:b4:53:8c:a7:9f:04:91:11:c2:dc:9a:83: 6f:db:d7:f9:67:26:3e:9f:c7:81:3a:b5:e3:05:4c: 85:92:e9:8d:b5:38:f6:09:9f:86:14:1f:7c:7c:fd: 36:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EB:39:51:0B:AC:AE:A2:64:09:16:D7:E3:C4:22:DD:77:22:B2:CC X509v3 Authority Key Identifier: keyid:BF:1E:D9:20:12:4A:95:60:78:F5:4E:F2:E7:4C:46:A4:BF:C3:F5:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/BF1ED920124A956078F54EF2E74C46A4BFC3F517.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF1ED920124A956078F54EF2E74C46A4BFC3F517.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/BF1ED920124A956078F54EF2E74C46A4BFC3F517.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:63:4a:b3:20:80:62:36:ee:98:6f:60:18:91:f4:5f:a3:fb: c4:d3:17:01:40:78:b0:ec:15:3f:1e:f1:22:85:48:d6:6b:1b: 91:29:ea:17:3a:39:b7:47:f3:be:16:53:9f:b3:45:4d:e3:d7: 6a:e2:a5:e2:f3:6e:27:a2:7a:29:37:6c:76:8b:69:57:4f:77: 4e:4a:e3:a6:ad:44:db:04:24:38:89:1d:81:f4:76:0c:7f:58: ff:71:1c:4b:54:29:a3:8a:67:7d:c2:1d:30:41:7e:79:68:bc: bf:a9:e1:c5:19:93:72:fb:a4:a6:06:49:23:bb:c8:60:02:d7: b3:4f:e8:72:e6:3b:cd:c5:2d:22:fe:4e:24:4c:3a:5a:42:84: 77:b6:59:8e:d2:87:47:a1:d0:96:54:c5:e2:84:f9:0a:e3:67: 8a:88:77:fa:89:fd:ac:db:5c:48:a0:f5:b3:c2:ae:94:86:fb: 8f:e7:fb:58:52:05:ee:b9:c5:a8:0f:d5:dc:28:8a:77:55:fc: 91:df:3e:b9:83:c4:3a:34:db:6a:ef:93:37:6a:c1:00:93:13: 96:7d:e5:2c:01:8c:b6:4c:eb:ea:41:99:5e:98:b2:4b:51:70: 06:28:1d:5b:dd:e3:18:7b:69:a5:78:80:7f:c7:52:af:34:1b: f5:4d:8e:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNqh8dtjGukx1sRj7Y3r+BBSfQ3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYxRUQ5MjAxMjRBOTU2MDc4RjU0RUYyRTc0QzQ2QTRC RkMzRjUxNzAeFw0yNTA4MjAwMjA5MzJaFw0yNTA4MjEwNTAwMzJaMDMxMTAvBgNV BAMTKDM2RUIzOTUxMEJBQ0FFQTI2NDA5MTZEN0UzQzQyMkRENzcyMkIyQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsS/NWvCJKi6Y2w72UayE1Q/xf V9r0yxdhj/6CWEZ2yBQAyIA5GBWpbapUMooRgzKohx5ynnSoPAaBCt5/EOSi5iPD cSdlJK+fcc76FpnM2fXVwHXYB3DEsetsYQMJkRMIU8HakRfpwdUb1SX+ahcvHAAL lkQCI6stOZNsRRHaL5TNPYpMIiM6UvvSnfKwtCDO+LMvPMlNRYzkqTYskHX5lbsv ylSnuPcEWby2n+8KgE4o2IB1Je/82cqbgXJEXcj88Cp8pzAHVBn91LB3nvUPm1+B DbRTjKefBJERwtyag2/b1/lnJj6fx4E6teMFTIWS6Y21OPYJn4YUH3x8/TbPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNus5UQusrqJkCRbX48Qi3XcisswwHwYDVR0j BBgwFoAUvx7ZIBJKlWB49U7y50xGpL/D9RcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHNDN2ZnajNuUERSMWJHSlZTMUE2b0JMSm9aRGczVXR4UXZZcGl0TTZI U1gvMC9CRjFFRDkyMDEyNEE5NTYwNzhGNTRFRjJFNzRDNDZBNEJGQzNGNTE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGMUVEOTIwMTI0QTk1NjA3 OEY1NEVGMkU3NEM0NkE0QkZDM0Y1MTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHNDN2ZnajNuUERSMWJHSlZTMUE2b0JMSm9aRGczVXR4UXZZcGl0TTZIU1gvMC9C RjFFRDkyMDEyNEE5NTYwNzhGNTRFRjJFNzRDNDZBNEJGQzNGNTE3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtGNKsyCAYjbumG9gGJH0X6P7xNMXAUB4sOwVPx7xIoVI1msbkSnqFzo5t0fz vhZTn7NFTePXauKl4vNuJ6J6KTdsdotpV093Tkrjpq1E2wQkOIkdgfR2DH9Y/3Ec S1Qpo4pnfcIdMEF+eWi8v6nhxRmTcvukpgZJI7vIYALXs0/ocuY7zcUtIv5OJEw6 WkKEd7ZZjtKHR6HQllTF4oT5CuNnioh3+on9rNtcSKD1s8KulIb7j+f7WFIF7rnF qA/V3CiKd1X8kd8+uYPEOjTbau+TN2rBAJMTln3lLAGMtkzr6kGZXpiyS1FwBigd W93jGHtppXiAf8dSrzQb9U2Otw== -----END CERTIFICATE-----Generated at Wed Aug 20 15:40:28 2025 by rpki-client