$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft File: CA9F7609986EAF1A517249B9120F2B69069A604A.mft (raw, json) Hash identifier: AQe7S5bHGrCo6cKjSF7mWl0GH56EAyStQyqic0Pnzw8= Subject key identifier: 41:69:BA:E0:AC:DB:9B:28:BB:40:EC:A2:CD:35:F5:17:DD:3B:34:92 Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A Certificate issuer: /CN=CA9F7609986EAF1A517249B9120F2B69069A604A Certificate serial: 0D5FA2BA7533EAE397BE286A4E329BE6C47D0545 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer Subject info access: rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft Manifest number: 0281 Signing time: Sun 27 Jul 2025 02:50:00 +0000 Manifest this update: Sun 27 Jul 2025 02:45:00 +0000 Manifest next update: Mon 28 Jul 2025 05:53:00 +0000 Files and hashes: 1: 3137302e3234342e37392e302f32342d3234203d3e20323636353035.roa (hash: YF8aSn8ZrakqqHsGkJ+aJMpg3UM2WIjA8ryfsST1/NQ=) 2: 3137302e3234342e37382e302f32342d3234203d3e20323636353035.roa (hash: P2xrOWpHLY6EnnxO2vbmZAQg+LiKo7wZq6AG1cS/2u4=) 3: 3137302e3234342e37362e302f32332d3233203d3e20323636353035.roa (hash: PVZgZ80ec1MnnTWZFJhH3Pekch5EzlVCo00ByHvruS8=) 4: 3137302e3234342e37362e302f32322d3232203d3e20323636353035.roa (hash: smiarjDG+OGsbjcVsk86Au5AndvkklCegjiEmQy0Xdw=) 5: 3137302e3234342e37362e302f32342d3234203d3e20323636353035.roa (hash: amplB2JLDJJAckH9IaBBkn+qJzqilzpjHxaNCTaCWYQ=) 6: 323830343a333864383a3a2f33322d3334203d3e20323636353035.roa (hash: t4980+rUmsxpFvMPiI7I8jUd83zOqWinNqdfWWIlnEA=) 7: 3137302e3234342e37372e302f32342d3234203d3e20323636353035.roa (hash: eJBkgue2M5PeX7HA+TZbr9kyv+9Hqw6VsgHSqBR6XUE=) 8: 3137302e3234342e37382e302f32332d3233203d3e20323636353035.roa (hash: zYfkxrKkqL3tYrhKgo7C4mfgls0J10QOQdD+qfnFkqw=) 9: CA9F7609986EAF1A517249B9120F2B69069A604A.crl (hash: atHiG+9eBOgm6tNjl85wUN0u59h7A98gHy1uaBMNRAs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Jul 2025 05:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:5f:a2:ba:75:33:ea:e3:97:be:28:6a:4e:32:9b:e6:c4:7d:05:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A Validity Not Before: Jul 27 02:45:00 2025 GMT Not After : Jul 28 05:53:00 2025 GMT Subject: CN=4169BAE0ACDB9B28BB40ECA2CD35F517DD3B3492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:d4:20:e7:8f:49:5b:a5:10:ff:b1:30:58: 0e:f8:3e:2e:97:08:15:2b:a2:a1:34:46:91:01:dc: d3:3c:e1:c5:b3:5d:60:87:15:68:7e:fa:0a:1e:1a: e9:a5:5e:a3:7b:fe:23:b4:99:8a:07:77:77:8a:df: 68:e0:f5:b6:80:15:9c:c1:39:fe:11:a5:f8:66:1f: 49:51:0e:96:2d:fb:6e:15:ef:4f:dc:7a:d0:f7:16: 40:d2:79:26:9b:5d:bd:1d:f6:fb:45:35:3c:ca:34: e8:52:6d:57:04:cd:f3:ae:ee:58:8a:c5:54:ca:b1: 52:c1:2b:08:cc:09:2a:d9:11:60:8f:d5:78:b7:6c: 25:e6:b3:4d:f9:b1:40:bb:5d:48:87:f6:02:15:66: cf:1f:99:9c:ef:46:00:ab:f1:ca:ec:4b:74:f7:63: d4:d1:1c:0a:00:79:dd:4f:be:bd:c1:37:03:a9:37: e9:1e:bb:13:af:ba:7e:d3:fa:90:90:83:04:92:b4: aa:87:2e:c9:83:13:6a:3d:51:04:18:9c:a7:04:f9: 77:32:52:6c:1d:74:2a:69:f0:33:f3:47:1c:52:b2: ba:38:1e:9f:6f:53:cc:aa:b0:59:35:b5:de:8c:0a: 01:d1:06:a5:60:cc:91:6c:ce:0c:2c:38:0c:ae:49: fb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:69:BA:E0:AC:DB:9B:28:BB:40:EC:A2:CD:35:F5:17:DD:3B:34:92 X509v3 Authority Key Identifier: keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:db:14:27:80:5c:39:b0:f5:69:47:34:1a:8b:55:85:f9:00: ae:0d:a1:9c:bc:6d:91:21:e6:86:0a:39:2a:eb:b4:a0:2d:18: 72:ce:9b:1a:73:2e:98:7f:8d:27:a9:a4:da:08:31:b0:d4:6e: a3:d1:8c:5d:9a:ae:5a:0c:58:71:ed:10:39:f2:9c:40:ca:65: d6:05:b1:e3:4c:c4:2c:79:28:3f:cf:0e:0a:b5:21:ed:3b:a9: 52:bc:83:32:a8:f4:95:cd:cc:16:8b:79:2e:ed:ea:38:b4:fe: 3f:59:fa:31:d4:d8:77:99:2d:05:36:c3:da:d0:cf:df:5c:7a: fe:d7:b5:34:00:92:c5:04:82:98:09:6b:89:96:16:03:a6:0d: 29:61:db:3b:2b:ab:b1:06:0f:58:00:4b:9d:26:a3:0c:db:84: a0:5c:fe:f2:30:98:ca:c3:f6:9c:5b:9f:d1:bb:fd:7d:1b:99: 62:71:33:1b:12:54:7c:66:6a:06:09:77:e8:ee:51:ef:08:06: 72:63:73:7a:e7:3d:5e:b0:9e:3b:13:10:f6:39:42:87:e8:14: 64:e2:fa:fd:94:1f:34:2f:c0:80:f5:98:21:61:b0:25:c4:90: 47:b4:ef:74:ae:e7:98:03:01:34:af:62:56:86:66:d4:c7:ff: a7:2b:a1:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDV+iunUz6uOXvihqTjKb5sR9BUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5Rjc2MDk5ODZFQUYxQTUxNzI0OUI5MTIwRjJCNjkw NjlBNjA0QTAeFw0yNTA3MjcwMjQ1MDBaFw0yNTA3MjgwNTUzMDBaMDMxMTAvBgNV BAMTKDQxNjlCQUUwQUNEQjlCMjhCQjQwRUNBMkNEMzVGNTE3REQzQjM0OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6odQg549JW6UQ/7EwWA74Pi6X CBUroqE0RpEB3NM84cWzXWCHFWh++goeGumlXqN7/iO0mYoHd3eK32jg9baAFZzB Of4RpfhmH0lRDpYt+24V70/cetD3FkDSeSabXb0d9vtFNTzKNOhSbVcEzfOu7liK xVTKsVLBKwjMCSrZEWCP1Xi3bCXms035sUC7XUiH9gIVZs8fmZzvRgCr8crsS3T3 Y9TRHAoAed1Pvr3BNwOpN+keuxOvun7T+pCQgwSStKqHLsmDE2o9UQQYnKcE+Xcy UmwddCpp8DPzRxxSsro4Hp9vU8yqsFk1td6MCgHRBqVgzJFszgwsOAyuSfsnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQWm64Kzbmyi7QOyizTX1F907NJIwHwYDVR0j BBgwFoAUyp92CZhurxpRckm5Eg8raQaaYEowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTdBVFVlNFJENTFZcUx5dkNHdUhTdlM2M2lBdHJyWGFFeEpqUmpydjk2 RGIvMS9DQTlGNzYwOTk4NkVBRjFBNTE3MjQ5QjkxMjBGMkI2OTA2OUE2MDRBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBOUY3NjA5OTg2RUFGMUE1 MTcyNDlCOTEyMEYyQjY5MDY5QTYwNEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTdBVFVlNFJENTFZcUx5dkNHdUhTdlM2M2lBdHJyWGFFeEpqUmpydjk2RGIvMS9D QTlGNzYwOTk4NkVBRjFBNTE3MjQ5QjkxMjBGMkI2OTA2OUE2MDRBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAadsUJ4BcObD1aUc0GotVhfkArg2hnLxtkSHmhgo5Kuu0oC0Ycs6bGnMumH+N J6mk2ggxsNRuo9GMXZquWgxYce0QOfKcQMpl1gWx40zELHkoP88OCrUh7TupUryD Mqj0lc3MFot5Lu3qOLT+P1n6MdTYd5ktBTbD2tDP31x6/te1NACSxQSCmAlriZYW A6YNKWHbOyursQYPWABLnSajDNuEoFz+8jCYysP2nFuf0bv9fRuZYnEzGxJUfGZq Bgl36O5R7wgGcmNzeuc9XrCeOxMQ9jlCh+gUZOL6/ZQfNC/AgPWYIWGwJcSQR7Tv dK7nmAMBNK9iVoZm1Mf/pyuhFA== -----END CERTIFICATE-----Generated at Sun Jul 27 12:13:19 2025 by rpki-client