$ rpki-client -vvf rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft File: 849A24446B9E3C80503AA50B35CDFE864B50F299.mft (raw, json) Hash identifier: WtT/NTDBMGD8RD0bu4hZUbVfdE7Dn0xqs4gOhYrWmmM= Subject key identifier: 15:28:92:CE:BA:19:68:B4:3B:2C:0B:F6:19:89:C0:D6:8D:24:16:38 Authority key identifier: 84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99 Certificate issuer: /CN=849A24446B9E3C80503AA50B35CDFE864B50F299 Certificate serial: 38E99960FB014CB20BE30791A03B482C197918BB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer Subject info access: rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft Manifest number: 02A2 Signing time: Wed 20 Aug 2025 11:44:52 +0000 Manifest this update: Wed 20 Aug 2025 11:39:52 +0000 Manifest next update: Thu 21 Aug 2025 12:56:52 +0000 Files and hashes: 1: 323830343a323731633a3a2f33322d313238203d3e20323633383737.roa (hash: 9czPyLHsQNqWtZD0T0xfr5722IdYCGLe69IPEwzSaLE=) 2: 849A24446B9E3C80503AA50B35CDFE864B50F299.crl (hash: bMcJl+K0IyEg/nDO04SCHtYHCZeStKOEeX5Xt2Nqwnw=) 3: 3137302e3234362e3231322e302f32322d3332203d3e20323633383737.roa (hash: EW0bF1u4bur/zPzPb4/jkaTrzF2NSPUcuwmp/N5eHog=) 4: 3133382e3138362e3137322e302f32322d3332203d3e20323633383737.roa (hash: F+6Q3rR9mW/bBvV3KMqzfE04ygqDKYoVUaMdkKLEkhA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 12:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e9:99:60:fb:01:4c:b2:0b:e3:07:91:a0:3b:48:2c:19:79:18:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849A24446B9E3C80503AA50B35CDFE864B50F299 Validity Not Before: Aug 20 11:39:52 2025 GMT Not After : Aug 21 12:56:52 2025 GMT Subject: CN=152892CEBA1968B43B2C0BF61989C0D68D241638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c3:6e:10:06:f4:5a:d4:52:d3:2b:05:1a:22: a2:07:e5:93:ad:08:ee:ae:51:66:b6:8a:fe:f1:cb: b6:60:ad:63:05:52:cb:b0:68:5e:f7:df:e4:22:61: d3:d8:f2:a0:2e:e4:d1:0f:d0:cf:bf:4f:1c:d2:ed: f3:5c:fd:7e:e2:31:21:ca:0e:30:32:6a:92:ac:94: e3:01:77:21:a6:f0:99:7d:12:cf:b4:53:f6:47:d6: 2d:25:d0:6f:cb:14:fd:80:58:09:3f:a7:63:a6:66: 7c:93:a6:59:f2:c6:31:31:f0:c2:fc:a2:94:55:d0: e3:71:9d:5b:38:4b:1f:ef:2e:7e:13:5e:f2:0b:32: a9:13:a4:52:ca:77:0e:d2:e4:0d:bf:22:17:01:7a: 7e:d9:bf:fa:df:c6:03:71:7f:d5:1f:8a:2b:f6:f8: a3:98:4c:ea:b4:19:03:da:44:89:05:92:56:eb:4b: 2c:59:b6:d6:58:07:86:99:d8:06:b0:38:10:f5:a7: 1c:49:70:bf:68:ae:c0:bc:d1:7a:e3:29:e8:94:2e: 3f:e4:16:18:16:9e:bb:b3:e1:e6:86:a9:9e:10:39: f6:48:e3:19:5f:0d:02:e7:87:08:e8:e6:ba:48:33: 7c:3d:91:42:38:49:1a:ad:83:3d:9a:1b:c4:65:4d: 6f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:28:92:CE:BA:19:68:B4:3B:2C:0B:F6:19:89:C0:D6:8D:24:16:38 X509v3 Authority Key Identifier: keyid:84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e1:f7:80:8c:e3:80:db:9a:b2:ce:80:66:0b:0c:00:05:d1: 84:c8:98:48:36:44:b6:49:a5:7a:5b:9c:e1:4e:37:e8:72:ef: 2a:14:2d:da:31:fe:17:c0:89:50:cf:72:38:47:6c:05:1b:6a: 43:32:31:08:c3:93:29:af:b9:ee:47:10:4d:17:74:bd:21:bd: 76:94:a2:ed:a3:23:0c:5f:17:1f:ab:92:d3:ba:aa:8c:a2:19: c2:9f:4a:78:7e:2e:2a:1d:d7:eb:66:f6:f4:b0:b6:9b:76:7a: 64:63:b5:94:80:7d:41:32:d5:a4:17:53:8c:16:93:d3:34:b2: bb:a6:0f:84:b7:73:55:15:08:0e:af:91:dc:97:7e:02:9c:6d: 41:f8:52:c5:c2:a1:a4:7c:58:95:28:72:0c:e9:ab:99:58:58: 22:59:44:6a:1f:48:62:4b:f9:f4:59:8a:b5:07:b6:17:17:6b: ca:5d:ad:98:9d:64:b4:b0:63:d3:45:b2:9b:e0:c5:f3:3f:6d: ed:56:75:ae:0b:11:da:f6:6a:63:89:a5:5f:98:29:11:2c:bd: 26:7b:b6:0a:d7:43:7a:87:c6:74:f1:38:d0:29:2d:4f:fa:5e: 07:2a:fc:ae:77:1a:dc:fe:ca:4c:58:44:57:61:0d:4d:3f:c2: 55:4f:84:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOOmZYPsBTLIL4weRoDtILBl5GLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5QTI0NDQ2QjlFM0M4MDUwM0FBNTBCMzVDREZFODY0 QjUwRjI5OTAeFw0yNTA4MjAxMTM5NTJaFw0yNTA4MjExMjU2NTJaMDMxMTAvBgNV BAMTKDE1Mjg5MkNFQkExOTY4QjQzQjJDMEJGNjE5ODlDMEQ2OEQyNDE2MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhw24QBvRa1FLTKwUaIqIH5ZOt CO6uUWa2iv7xy7ZgrWMFUsuwaF733+QiYdPY8qAu5NEP0M+/TxzS7fNc/X7iMSHK DjAyapKslOMBdyGm8Jl9Es+0U/ZH1i0l0G/LFP2AWAk/p2OmZnyTplnyxjEx8ML8 opRV0ONxnVs4Sx/vLn4TXvILMqkTpFLKdw7S5A2/IhcBen7Zv/rfxgNxf9Ufiiv2 +KOYTOq0GQPaRIkFklbrSyxZttZYB4aZ2AawOBD1pxxJcL9orsC80XrjKeiULj/k FhgWnruz4eaGqZ4QOfZI4xlfDQLnhwjo5rpIM3w9kUI4SRqtgz2aG8RlTW/BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFSiSzroZaLQ7LAv2GYnA1o0kFjgwHwYDVR0j BBgwFoAUhJokRGuePIBQOqULNc3+hktQ8pkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHVEZXQzZmthUGhiMUY1dEdmMTg4dXJZOUJETmt4b0RpSkRnVThCQTFy YzkvMS84NDlBMjQ0NDZCOUUzQzgwNTAzQUE1MEIzNUNERkU4NjRCNTBGMjk5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0OUEyNDQ0NkI5RTNDODA1 MDNBQTUwQjM1Q0RGRTg2NEI1MEYyOTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHVEZXQzZmthUGhiMUY1dEdmMTg4dXJZOUJETmt4b0RpSkRnVThCQTFyYzkvMS84 NDlBMjQ0NDZCOUUzQzgwNTAzQUE1MEIzNUNERkU4NjRCNTBGMjk5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ+H3gIzjgNuass6AZgsMAAXRhMiYSDZEtkmleluc4U436HLvKhQt2jH+F8CJ UM9yOEdsBRtqQzIxCMOTKa+57kcQTRd0vSG9dpSi7aMjDF8XH6uS07qqjKIZwp9K eH4uKh3X62b29LC2m3Z6ZGO1lIB9QTLVpBdTjBaT0zSyu6YPhLdzVRUIDq+R3Jd+ ApxtQfhSxcKhpHxYlShyDOmrmVhYIllEah9IYkv59FmKtQe2Fxdryl2tmJ1ktLBj 00Wym+DF8z9t7VZ1rgsR2vZqY4mlX5gpESy9Jnu2CtdDeofGdPE40CktT/peByr8 rnca3P7KTFhEV2ENTT/CVU+Etg== -----END CERTIFICATE-----Generated at Wed Aug 20 16:12:43 2025 by rpki-client