$ rpki-client -vvf rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft File: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft (raw, json) Hash identifier: UZH/fzq8eMqh60eamW7Y8idRBay7pkXluop9vbZo0LM= Subject key identifier: 1E:18:E8:6D:D6:AC:61:0A:24:73:14:7A:78:56:D4:0F:C0:4F:C9:F7 Authority key identifier: CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D Certificate issuer: /CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D Certificate serial: 53CB3A5FA3084484ED1AFA55FD682438815C9BDB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft Manifest number: 0284 Signing time: Wed 20 Aug 2025 14:21:15 +0000 Manifest this update: Wed 20 Aug 2025 14:16:15 +0000 Manifest next update: Thu 21 Aug 2025 16:59:15 +0000 Files and hashes: 1: 3137392e39372e31362e302f32312d3234203d3e203238313831.roa (hash: h2W8XM2at3NYFJYnufJYaTXSX9GJvpJOp/TMajp4JtE=) 2: 323830343a6461633a3a2f33322d3438203d3e203238313831.roa (hash: JvwegUUzqtOYrCDplzNKYzOOoU16ChE9rMTQfVBPQa0=) 3: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl (hash: dGdPoBQAVnZS1z9w2As+1XAyg0F7PJ5H7iYGAoXXAkA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 16:59:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:cb:3a:5f:a3:08:44:84:ed:1a:fa:55:fd:68:24:38:81:5c:9b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D Validity Not Before: Aug 20 14:16:15 2025 GMT Not After : Aug 21 16:59:15 2025 GMT Subject: CN=1E18E86DD6AC610A2473147A7856D40FC04FC9F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:40:e8:59:bb:db:71:60:5a:d0:e9:50:1b:86: 33:19:4b:17:2e:31:d6:53:f8:7d:7d:61:b0:c0:96: 23:da:e9:4a:da:b3:9f:0a:a2:60:06:ef:63:3f:94: 44:6d:7d:bf:78:78:de:95:6f:04:95:17:3c:59:a4: 14:41:0d:20:7d:53:d9:40:9c:9e:66:b9:14:5a:cb: 38:d4:14:8f:c3:1e:f2:0d:b6:44:52:24:0d:85:7e: 75:0a:8c:4f:ee:89:eb:16:32:23:87:2e:37:dc:19: ef:b7:54:d6:5c:1d:be:88:47:3c:56:16:b4:01:e7: 01:fc:5f:fa:1a:25:a9:f0:c3:ad:41:73:e6:36:2b: 91:39:a4:b6:0e:a9:af:1f:96:75:7e:f3:bb:10:27: 02:cf:9d:33:99:f1:48:8e:63:1b:fb:4e:19:59:dc: 48:e7:71:69:ce:51:6e:a2:d3:e6:0d:4c:6e:9c:86: dd:a0:43:be:34:b6:2d:c8:d5:16:b9:44:2f:4f:91: b0:26:8e:45:6c:a8:27:91:08:ae:f9:11:19:f4:3a: 61:32:59:11:cb:ac:f0:79:de:9c:8e:1e:78:bb:f9: 53:9a:8d:b4:fe:15:3a:02:b5:5d:65:8f:59:9c:98: e7:0b:59:96:95:bd:23:ee:b8:fe:9b:ac:4c:ff:64: 90:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:18:E8:6D:D6:AC:61:0A:24:73:14:7A:78:56:D4:0F:C0:4F:C9:F7 X509v3 Authority Key Identifier: keyid:CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:6f:44:4a:3e:08:d0:1d:9b:fe:f6:4b:46:eb:56:02:e5:88: b4:c0:9c:6a:9a:87:aa:6a:73:a8:7f:80:b3:00:f8:a0:ef:03: a1:34:a5:f3:d5:d1:fb:b0:28:62:bd:f0:2b:3b:7f:3d:59:c2: 0f:a6:f9:75:0a:f4:f1:69:73:fe:cc:94:f9:ab:44:37:46:15: f6:ec:ab:72:9f:10:f7:f5:ff:5c:39:f5:23:96:76:45:74:f9: bf:0d:42:9d:f9:cc:c4:92:31:01:fa:40:cc:8a:c2:a2:30:9c: 28:2c:e2:a7:92:e5:7f:25:86:dc:f4:78:79:bf:8e:3f:cf:fb: fa:99:64:69:1e:da:21:dc:81:64:c3:a0:5c:51:13:1e:c2:3c: e2:0d:b3:b1:73:3b:ce:4c:e9:45:2c:b2:c6:64:46:a5:89:6a: 98:61:89:f9:1e:ec:25:2f:ad:0d:ef:b2:09:16:ae:06:6d:8a: 7c:2e:c6:b9:c7:85:e4:82:51:d1:82:0d:17:1c:3c:6e:11:59: 08:2c:68:95:04:b3:81:25:ff:c7:2a:7b:1d:df:ff:15:8e:09: d6:6f:24:c3:ec:d2:4a:e1:01:49:74:fd:02:b7:4c:c2:c7:28: 7b:40:bb:b1:d3:e8:ce:61:c4:a7:a5:db:d6:f4:11:d2:d5:2c: 3a:f5:07:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUU8s6X6MIRITtGvpV/WgkOIFcm9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyMEVGQzBCOTlBOEE4NkI0QjRDRkExMDdCMDAxRDUw OEI3MjkwRDAeFw0yNTA4MjAxNDE2MTVaFw0yNTA4MjExNjU5MTVaMDMxMTAvBgNV BAMTKDFFMThFODZERDZBQzYxMEEyNDczMTQ3QTc4NTZENDBGQzA0RkM5RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5QOhZu9txYFrQ6VAbhjMZSxcu MdZT+H19YbDAliPa6Uras58KomAG72M/lERtfb94eN6VbwSVFzxZpBRBDSB9U9lA nJ5muRRayzjUFI/DHvINtkRSJA2FfnUKjE/uiesWMiOHLjfcGe+3VNZcHb6IRzxW FrQB5wH8X/oaJanww61Bc+Y2K5E5pLYOqa8flnV+87sQJwLPnTOZ8UiOYxv7ThlZ 3EjncWnOUW6i0+YNTG6cht2gQ740ti3I1Ra5RC9PkbAmjkVsqCeRCK75ERn0OmEy WRHLrPB53pyOHni7+VOajbT+FToCtV1lj1mcmOcLWZaVvSPuuP6brEz/ZJDnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHhjobdasYQokcxR6eFbUD8BPyfcwHwYDVR0j BBgwFoAUyiDvwLmaioa0tM+hB7AB1Qi3KQ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9Y R0cvMC9DQTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMjBFRkMwQjk5QThBODZC NEI0Q0ZBMTA3QjAwMUQ1MDhCNzI5MEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9YR0cvMC9D QTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ29ESj4I0B2b/vZLRutWAuWItMCcapqHqmpzqH+AswD4oO8DoTSl89XR+7Ao Yr3wKzt/PVnCD6b5dQr08Wlz/syU+atEN0YV9uyrcp8Q9/X/XDn1I5Z2RXT5vw1C nfnMxJIxAfpAzIrCojCcKCzip5LlfyWG3PR4eb+OP8/7+plkaR7aIdyBZMOgXFET HsI84g2zsXM7zkzpRSyyxmRGpYlqmGGJ+R7sJS+tDe+yCRauBm2KfC7GuceF5IJR 0YINFxw8bhFZCCxolQSzgSX/xyp7Hd//FY4J1m8kw+zSSuEBSXT9ArdMwscoe0C7 sdPozmHEp6Xb1vQR0tUsOvUHhw== -----END CERTIFICATE-----Generated at Wed Aug 20 18:28:11 2025 by rpki-client