$ rpki-client -vvf rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft File: C37D443ACE2088B9542008EA9127A8D95802391D.mft (raw, json) Hash identifier: B5HqBy31EenQBt/6MeBScZLscdfkSY+oqWX6Pf/oE9A= Subject key identifier: 40:C8:98:F1:1A:23:31:67:44:2F:F1:2A:C2:C8:44:33:DA:4E:85:20 Authority key identifier: C3:7D:44:3A:CE:20:88:B9:54:20:08:EA:91:27:A8:D9:58:02:39:1D Certificate issuer: /CN=C37D443ACE2088B9542008EA9127A8D95802391D Certificate serial: 259E84CD8DD0C1E49D15B084C4F193348D678EEE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer Subject info access: rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft Manifest number: 019F Signing time: Wed 20 Aug 2025 11:29:03 +0000 Manifest this update: Wed 20 Aug 2025 11:24:03 +0000 Manifest next update: Thu 21 Aug 2025 14:44:03 +0000 Files and hashes: 1: C37D443ACE2088B9542008EA9127A8D95802391D.crl (hash: m3qF5ZXvJ1lf7ZVHGHw8+HTkU5Y3nvScZXAVsnTqGg0=) 2: 323830343a356637633a3a2f33322d313238203d3e20323639313033.roa (hash: IEQYH61AZNUIPQqaQD7CtYAT9RoDCMuJFawTWAELlFc=) 3: 34352e3137392e3231322e302f32322d3332203d3e20323639313033.roa (hash: bF8jdgP21ds28/Sm19mkH3KFquAJR3FIxHkXVV451es=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.crl rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 14:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:9e:84:cd:8d:d0:c1:e4:9d:15:b0:84:c4:f1:93:34:8d:67:8e:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C37D443ACE2088B9542008EA9127A8D95802391D Validity Not Before: Aug 20 11:24:03 2025 GMT Not After : Aug 21 14:44:03 2025 GMT Subject: CN=40C898F11A233167442FF12AC2C84433DA4E8520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b4:b4:8f:51:4d:96:fb:10:7c:b9:c4:07:8b: cb:f6:1a:32:c0:96:6a:63:fc:66:fd:6e:34:e1:26: 1a:e2:b5:17:ec:41:da:ab:08:4d:c6:01:de:ae:fd: 45:95:7d:31:24:b7:f1:4c:a4:b5:5e:dc:e2:c2:50: 7b:1f:89:d5:0d:e6:dd:2c:b7:10:ee:6c:f5:4b:ba: 94:0c:9e:9a:20:b3:fd:54:00:8e:fb:2f:9f:cd:c4: db:89:d3:41:f3:d9:5c:08:a6:10:16:e5:d5:c3:59: d2:e5:0d:bd:47:fe:26:cd:00:9d:d3:c7:5e:0e:c1: 6f:ee:5a:c2:12:25:70:e0:44:d1:51:c2:dc:16:42: 7c:20:2b:0d:a9:d0:66:1e:7f:a6:5b:6f:41:fb:2d: c9:28:e4:81:75:f7:43:8e:88:13:09:cb:49:81:fb: c0:ec:bd:09:bf:38:40:3a:4c:ce:a3:c2:a6:21:ca: c0:7c:ef:25:49:d4:02:5c:6b:5e:b5:48:c0:0c:04: 13:e9:fe:3b:e3:51:f8:6c:c8:2e:77:22:c3:4a:3a: e5:43:66:ab:47:00:c5:de:68:1d:21:6d:59:a5:39: 8e:eb:ac:50:e0:8e:9e:c6:4b:5d:c3:b0:c6:52:49: 54:0d:3c:60:5a:21:eb:26:de:82:6e:40:3c:c0:97: 08:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C8:98:F1:1A:23:31:67:44:2F:F1:2A:C2:C8:44:33:DA:4E:85:20 X509v3 Authority Key Identifier: keyid:C3:7D:44:3A:CE:20:88:B9:54:20:08:EA:91:27:A8:D9:58:02:39:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:79:74:23:41:72:73:30:c0:8c:bb:8a:46:35:ba:37:cf:69: 66:44:8f:ea:cb:01:34:ed:c3:79:14:d4:31:be:e9:82:f9:f5: 71:b5:14:f0:3e:a5:76:37:68:12:7c:f3:92:af:5d:06:29:2a: 22:9e:a2:3e:65:ae:ed:6d:b6:6a:8c:cb:91:eb:ad:9e:aa:da: 62:1e:83:78:1f:5f:b3:f4:72:5f:06:95:97:2b:b2:7b:ed:48: 2c:5e:ab:a3:76:2b:31:61:e4:61:37:98:d9:96:8a:a1:00:18: db:54:39:36:98:61:f7:0a:a8:28:13:4f:a3:96:4a:90:80:58: 4a:3a:3f:18:d8:a1:d6:87:9f:71:f3:bb:13:c0:fc:93:5f:9d: 52:58:55:92:5e:cf:20:9f:d2:8a:71:af:e0:0c:b1:68:27:ee: 65:91:a0:31:7e:ee:57:8c:88:1f:4c:7d:2c:75:40:7e:c0:3c: 77:33:d0:39:93:c6:f2:62:1e:40:3f:65:fe:17:97:60:e8:f3: d0:6f:4a:50:d0:89:bb:ba:6b:d1:a1:a2:c0:e4:dc:fd:17:87: 0d:b1:a1:1d:32:47:ab:ac:1d:ef:07:6c:c6:8a:d3:24:8a:c1: bd:ea:38:50:cd:b7:ff:ba:e8:58:4c:d5:e9:45:14:35:1d:16: f7:de:33:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJZ6EzY3QweSdFbCExPGTNI1nju4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM3RDQ0M0FDRTIwODhCOTU0MjAwOEVBOTEyN0E4RDk1 ODAyMzkxRDAeFw0yNTA4MjAxMTI0MDNaFw0yNTA4MjExNDQ0MDNaMDMxMTAvBgNV BAMTKDQwQzg5OEYxMUEyMzMxNjc0NDJGRjEyQUMyQzg0NDMzREE0RTg1MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1tLSPUU2W+xB8ucQHi8v2GjLA lmpj/Gb9bjThJhritRfsQdqrCE3GAd6u/UWVfTEkt/FMpLVe3OLCUHsfidUN5t0s txDubPVLupQMnpogs/1UAI77L5/NxNuJ00Hz2VwIphAW5dXDWdLlDb1H/ibNAJ3T x14OwW/uWsISJXDgRNFRwtwWQnwgKw2p0GYef6Zbb0H7Lcko5IF190OOiBMJy0mB +8DsvQm/OEA6TM6jwqYhysB87yVJ1AJca161SMAMBBPp/jvjUfhsyC53IsNKOuVD ZqtHAMXeaB0hbVmlOY7rrFDgjp7GS13DsMZSSVQNPGBaIesm3oJuQDzAlwiTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQMiY8RojMWdEL/EqwshEM9pOhSAwHwYDVR0j BBgwFoAUw31EOs4giLlUIAjqkSeo2VgCOR0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkM4ZlBmVDZNVkZtTWp3V0JQMk5CM0xrYm81M0RLOTM5ZFlram5TQk02 c3UvMC9DMzdENDQzQUNFMjA4OEI5NTQyMDA4RUE5MTI3QThEOTU4MDIzOTFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzN0Q0NDNBQ0UyMDg4Qjk1 NDIwMDhFQTkxMjdBOEQ5NTgwMjM5MUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkM4ZlBmVDZNVkZtTWp3V0JQMk5CM0xrYm81M0RLOTM5ZFlram5TQk02c3UvMC9D MzdENDQzQUNFMjA4OEI5NTQyMDA4RUE5MTI3QThEOTU4MDIzOTFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmHl0I0FyczDAjLuKRjW6N89pZkSP6ssBNO3DeRTUMb7pgvn1cbUU8D6ldjdo Enzzkq9dBikqIp6iPmWu7W22aozLkeutnqraYh6DeB9fs/RyXwaVlyuye+1ILF6r o3YrMWHkYTeY2ZaKoQAY21Q5Nphh9wqoKBNPo5ZKkIBYSjo/GNih1oefcfO7E8D8 k1+dUlhVkl7PIJ/SinGv4AyxaCfuZZGgMX7uV4yIH0x9LHVAfsA8dzPQOZPG8mIe QD9l/heXYOjz0G9KUNCJu7pr0aGiwOTc/ReHDbGhHTJHq6wd7wdsxorTJIrBveo4 UM23/7roWEzV6UUUNR0W994z5Q== -----END CERTIFICATE-----Generated at Wed Aug 20 21:34:00 2025 by rpki-client