$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft File: D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json) Hash identifier: 8iZqKbi6R0hocMGgTkgRw5c639uXIcC/XG/EnO6q59g= Subject key identifier: 45:9C:2D:68:48:6F:55:5B:3C:22:5F:2E:F9:C1:28:10:69:A4:88:DD Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 Certificate issuer: /CN=D2991FF0EF094685597EA5146C4730F0270A9201 Certificate serial: 6F0E4A15BD3A05D6BF85522C31B4C16138F3C420 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft Manifest number: 0175 Signing time: Wed 20 Aug 2025 07:42:32 +0000 Manifest this update: Wed 20 Aug 2025 07:37:32 +0000 Manifest next update: Thu 21 Aug 2025 08:18:32 +0000 Files and hashes: 1: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: KTNEcC6Y2VHqLL+qb3kt3ywe3wmftinMc6r4trZIlnw=) 2: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: c10/yp3tLDSoMtqWuOCNZ9P3p3SxIAgbmN+8NLDv9Uw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 08:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:0e:4a:15:bd:3a:05:d6:bf:85:52:2c:31:b4:c1:61:38:f3:c4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201 Validity Not Before: Aug 20 07:37:32 2025 GMT Not After : Aug 21 08:18:32 2025 GMT Subject: CN=459C2D68486F555B3C225F2EF9C1281069A488DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a0:59:12:74:77:0d:e9:0e:a7:7e:ae:11:13: dd:3c:15:01:a8:4e:3b:0c:ac:03:78:44:70:38:bf: 74:36:94:a0:22:a5:86:77:98:5a:88:7c:3b:65:81: 00:14:20:c5:8d:9d:32:53:0b:3e:a0:af:ed:d8:98: 9e:3e:4b:20:cc:1b:e2:a8:9d:c8:3e:1a:11:1c:ba: f7:78:3d:c0:da:b8:98:ba:87:9b:3b:b0:39:fa:a4: 03:52:5c:b0:b8:52:3b:82:34:df:b9:65:23:d1:fc: 9c:cc:6a:f1:d8:24:7f:27:7c:19:e7:6e:de:d8:b6: 48:f7:73:08:d5:69:01:e6:26:9e:cd:77:f7:55:62: 58:37:5a:99:ac:84:67:5d:cb:c5:fc:f3:46:98:0c: 9c:31:f1:69:5a:aa:2b:71:9d:ea:1a:d7:ac:a5:98: 54:79:b7:49:d5:fc:39:93:ec:c4:e6:33:bf:3c:05: 00:94:8b:ad:26:03:86:7d:bd:20:1d:39:7e:6f:46: 68:ea:54:01:43:cc:07:10:75:2a:2d:91:fa:3d:5d: c6:c7:b6:29:02:5f:f0:cb:2a:1b:fb:75:ab:27:5f: 63:2d:97:94:2d:e6:81:24:04:d0:89:3d:95:49:cc: 88:9a:8f:ad:c7:20:cb:2b:e6:72:38:00:31:18:c4: 7e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9C:2D:68:48:6F:55:5B:3C:22:5F:2E:F9:C1:28:10:69:A4:88:DD X509v3 Authority Key Identifier: keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:4a:d3:38:7c:31:d9:82:a2:25:24:d8:49:13:b4:1b:ca:eb: e4:d9:cb:a7:32:1e:cc:56:59:dc:f5:81:d3:ca:d3:bc:09:16: 31:47:a2:82:bf:26:41:ff:92:e9:54:0a:b7:8a:99:5c:81:0a: a2:a6:b6:d3:64:f3:27:cf:37:48:93:8d:02:c0:01:00:8d:cb: de:3b:14:42:5b:92:cf:6b:83:ea:8a:a4:c2:5f:f1:d6:b0:f6: ed:d8:c8:8e:71:95:05:ff:5f:b3:b8:d9:ae:85:96:c5:df:da: 6b:fd:0a:38:bf:14:e5:5a:5d:1f:4d:61:9c:64:71:8d:92:89: cb:2d:ce:ea:cf:0d:ff:3c:d7:aa:36:9f:06:50:cf:2c:62:97: 66:ca:41:82:e5:54:e0:cb:9a:02:f4:27:d9:18:65:e1:be:80: 85:1a:86:0c:93:0f:99:ee:6a:56:dd:0f:8b:77:ab:73:90:34: de:ef:c7:61:c5:9c:45:ac:c4:37:75:9f:e1:44:10:02:a2:27: 18:8d:a4:9a:d5:a2:76:30:ed:57:e3:a4:ad:cc:c0:ee:fa:94: 64:42:ee:4d:6a:22:36:b0:88:ea:e3:21:bc:20:f4:17:68:50: df:cc:d9:e7:62:ef:d4:14:83:e2:ad:88:52:6f:5f:9a:38:0a: 65:ea:b6:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbw5KFb06Bda/hVIsMbTBYTjzxCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5OTFGRjBFRjA5NDY4NTU5N0VBNTE0NkM0NzMwRjAy NzBBOTIwMTAeFw0yNTA4MjAwNzM3MzJaFw0yNTA4MjEwODE4MzJaMDMxMTAvBgNV BAMTKDQ1OUMyRDY4NDg2RjU1NUIzQzIyNUYyRUY5QzEyODEwNjlBNDg4REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSoFkSdHcN6Q6nfq4RE908FQGo TjsMrAN4RHA4v3Q2lKAipYZ3mFqIfDtlgQAUIMWNnTJTCz6gr+3YmJ4+SyDMG+Ko ncg+GhEcuvd4PcDauJi6h5s7sDn6pANSXLC4UjuCNN+5ZSPR/JzMavHYJH8nfBnn bt7Ytkj3cwjVaQHmJp7Nd/dVYlg3WpmshGddy8X880aYDJwx8Wlaqitxneoa16yl mFR5t0nV/DmT7MTmM788BQCUi60mA4Z9vSAdOX5vRmjqVAFDzAcQdSotkfo9XcbH tikCX/DLKhv7dasnX2Mtl5Qt5oEkBNCJPZVJzIiaj63HIMsr5nI4ADEYxH59AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURZwtaEhvVVs8Il8u+cEoEGmkiN0wHwYDVR0j BBgwFoAU0pkf8O8JRoVZfqUUbEcw8CcKkgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRW RnovMC9EMjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTkxRkYwRUYwOTQ2ODU1 OTdFQTUxNDZDNDczMEYwMjcwQTkyMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRWRnovMC9E Mjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFkrTOHwx2YKiJSTYSRO0G8rr5NnLpzIezFZZ3PWB08rTvAkWMUeigr8mQf+S 6VQKt4qZXIEKoqa202TzJ883SJONAsABAI3L3jsUQluSz2uD6oqkwl/x1rD27djI jnGVBf9fs7jZroWWxd/aa/0KOL8U5VpdH01hnGRxjZKJyy3O6s8N/zzXqjafBlDP LGKXZspBguVU4MuaAvQn2Rhl4b6AhRqGDJMPme5qVt0Pi3erc5A03u/HYcWcRazE N3Wf4UQQAqInGI2kmtWidjDtV+OkrczA7vqUZELuTWoiNrCI6uMhvCD0F2hQ38zZ 52Lv1BSD4q2IUm9fmjgKZeq2wg== -----END CERTIFICATE-----Generated at Wed Aug 20 18:39:48 2025 by rpki-client