$ rpki-client -vvf rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft File: 85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft (raw, json) Hash identifier: YqFtyxQX5Yd1hm0dhMBwciCFIvok1VHdFydWi924T0s= Subject key identifier: 53:CB:D5:EA:15:8A:39:9E:38:20:38:42:C0:49:A7:47:B4:3C:2B:AD Authority key identifier: 85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB Certificate issuer: /CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB Certificate serial: 747BD116F3C709F417B8AFA0F4753652E911B31C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer Subject info access: rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft Manifest number: 02A1 Signing time: Wed 20 Aug 2025 11:17:47 +0000 Manifest this update: Wed 20 Aug 2025 11:12:47 +0000 Manifest next update: Thu 21 Aug 2025 14:38:47 +0000 Files and hashes: 1: 85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl (hash: HwJX1tqDFzERZg0kx8zcBZb/jca7uHhd1+OjGASjI7M=) 2: 323830343a383532303a3a2f33322d3334203d3e20323732353539.roa (hash: 62LOMhvbmOJdbTGkjcygK0r0w7DTO+g8VM0cQfmxQ4g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 14:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:7b:d1:16:f3:c7:09:f4:17:b8:af:a0:f4:75:36:52:e9:11:b3:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB Validity Not Before: Aug 20 11:12:47 2025 GMT Not After : Aug 21 14:38:47 2025 GMT Subject: CN=53CBD5EA158A399E38203842C049A747B43C2BAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:37:35:ca:d2:90:b7:65:23:2f:51:8e:a9:c7: 04:d1:c7:06:40:09:53:1e:83:da:f8:eb:08:98:74: 94:12:38:29:7d:94:54:1d:64:15:1d:2b:58:23:a1: a0:9a:0e:14:5c:9f:36:3c:05:47:73:8b:c4:88:4a: df:6d:6f:eb:c9:05:f3:81:22:4d:b6:59:05:84:5c: 48:57:26:8d:22:82:da:d5:c4:af:c4:81:b6:a7:d8: bc:cd:bf:c4:63:47:07:b3:76:c4:7a:e1:f0:9f:02: bf:5c:30:43:d6:15:2f:b6:77:a7:e6:c1:f0:e2:cb: 3a:fa:8e:14:7b:a1:c0:4b:9b:6b:db:21:9e:79:24: 89:11:eb:9c:67:5f:45:03:21:b7:fe:a2:dd:85:06: 7d:49:3b:d1:cc:a8:de:fc:3a:05:95:a5:bd:ef:ea: b9:cd:b4:d6:34:89:ea:7e:e7:2f:6f:0b:0d:75:d0: c0:66:6b:d9:32:fe:41:fc:30:92:96:0f:27:e0:00: 91:e0:1e:b4:af:33:ac:53:57:0c:95:b2:f1:ae:41: 44:41:18:43:23:a7:66:96:2e:13:ec:a7:d1:de:03: 2c:d8:4c:b8:cd:69:e3:e9:dd:75:e9:57:aa:3c:9c: d3:d3:0c:df:6f:2c:73:97:76:04:a3:9c:c5:da:6c: f8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CB:D5:EA:15:8A:39:9E:38:20:38:42:C0:49:A7:47:B4:3C:2B:AD X509v3 Authority Key Identifier: keyid:85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:20:a9:12:a0:27:04:a8:3d:68:15:81:7c:02:d6:36:27:16: da:65:d7:9e:45:d0:ad:cd:a2:f7:06:99:73:57:bc:16:14:51: 1c:c1:0b:ac:28:25:ec:44:83:dd:25:b1:0f:10:91:09:73:1f: ee:16:63:e9:01:5d:07:2f:2f:6b:53:14:74:0a:bd:32:70:ba: 25:95:33:1c:b5:bf:25:5a:27:88:98:fa:1d:ae:d3:51:70:9a: ae:35:82:41:76:4d:27:18:47:52:1f:02:7b:87:79:11:7e:75: 55:90:49:a7:58:a0:8f:7e:b7:ff:f5:02:88:fa:c2:4d:a7:c4: 55:2e:39:3b:63:e8:de:3b:49:68:0c:eb:aa:ab:75:97:f7:46: 0f:6d:62:a3:a0:6f:49:36:33:da:9d:a1:91:67:0f:56:9f:dd: af:be:f2:43:ef:d9:3b:8a:c3:6b:4b:62:72:38:71:2e:ed:bd: 04:93:08:b6:7a:13:a5:b3:ec:9d:fa:4a:d1:80:c4:83:9d:ce: 79:95:41:e6:11:d5:50:5b:95:37:95:64:77:9d:47:45:e1:c6: 3b:f6:a3:98:c3:06:b8:5c:da:db:0c:ce:d7:1a:3f:17:1c:e0: db:4e:90:02:ba:56:d0:4b:7c:04:52:a5:33:4d:38:c8:20:08: 3d:3a:e5:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdHvRFvPHCfQXuK+g9HU2UukRsxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFRTBDRDY2MTg4N0NDODhGNjRGNkI0QkU5RDQyMDQy NkUyMDBEQjAeFw0yNTA4MjAxMTEyNDdaFw0yNTA4MjExNDM4NDdaMDMxMTAvBgNV BAMTKDUzQ0JENUVBMTU4QTM5OUUzODIwMzg0MkMwNDlBNzQ3QjQzQzJCQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXNzXK0pC3ZSMvUY6pxwTRxwZA CVMeg9r46wiYdJQSOCl9lFQdZBUdK1gjoaCaDhRcnzY8BUdzi8SISt9tb+vJBfOB Ik22WQWEXEhXJo0igtrVxK/Egban2LzNv8RjRwezdsR64fCfAr9cMEPWFS+2d6fm wfDiyzr6jhR7ocBLm2vbIZ55JIkR65xnX0UDIbf+ot2FBn1JO9HMqN78OgWVpb3v 6rnNtNY0iep+5y9vCw110MBma9ky/kH8MJKWDyfgAJHgHrSvM6xTVwyVsvGuQURB GEMjp2aWLhPsp9HeAyzYTLjNaePp3XXpV6o8nNPTDN9vLHOXdgSjnMXabPj7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUU8vV6hWKOZ44IDhCwEmnR7Q8K60wHwYDVR0j BBgwFoAUhe4M1mGIfMiPZPa0vp1CBCbiANswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOTdzd2gzOHBUQ3pTZzh4NWJMcHM3WUI2QUF4eUhyNW93YVZIRnNSYjJM RHAvMS84NUVFMENENjYxODg3Q0M4OEY2NEY2QjRCRTlENDIwNDI2RTIwMERCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1RUUwQ0Q2NjE4ODdDQzg4 RjY0RjZCNEJFOUQ0MjA0MjZFMjAwREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OTdzd2gzOHBUQ3pTZzh4NWJMcHM3WUI2QUF4eUhyNW93YVZIRnNSYjJMRHAvMS84 NUVFMENENjYxODg3Q0M4OEY2NEY2QjRCRTlENDIwNDI2RTIwMERCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgCCpEqAnBKg9aBWBfALWNicW2mXXnkXQrc2i9waZc1e8FhRRHMELrCgl7ESD 3SWxDxCRCXMf7hZj6QFdBy8va1MUdAq9MnC6JZUzHLW/JVoniJj6Ha7TUXCarjWC QXZNJxhHUh8Ce4d5EX51VZBJp1igj363//UCiPrCTafEVS45O2Po3jtJaAzrqqt1 l/dGD21io6BvSTYz2p2hkWcPVp/dr77yQ+/ZO4rDa0ticjhxLu29BJMItnoTpbPs nfpK0YDEg53OeZVB5hHVUFuVN5Vkd51HReHGO/ajmMMGuFza2wzO1xo/Fxzg206Q ArpW0Et8BFKlM004yCAIPTrlDw== -----END CERTIFICATE-----Generated at Wed Aug 20 18:23:35 2025 by rpki-client