$ rpki-client -vvf rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft File: 0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft (raw, json) Hash identifier: qr9ucZbpRGVVqOgg+aZcup/DznIWiE+1Dk87CET7sUY= Subject key identifier: 2D:35:96:25:E4:02:1E:A9:57:BA:18:63:7E:86:BC:FE:48:A8:A7:03 Authority key identifier: 0E:F7:13:1E:83:15:CF:BC:2A:0C:8E:B2:A6:84:48:B4:0D:F9:DD:EB Certificate issuer: /CN=0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB Certificate serial: 65E546222DE501E7488F3061305E1C444C5742DF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft Manifest number: 029A Signing time: Wed 20 Aug 2025 05:16:45 +0000 Manifest this update: Wed 20 Aug 2025 05:11:45 +0000 Manifest next update: Thu 21 Aug 2025 05:19:45 +0000 Files and hashes: 1: 323830313a38303a336537303a3a2f34372d3437203d3e20323731353431.roa (hash: gQvqAbK6gQBmP0J6nHXKQ8gCtZEaiIVsEdHKjqQvV/Q=) 2: 0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl (hash: o88NW+mJviGtydqRayfEa0fZIWCGX/hypHH3+nhgvhQ=) 3: 3138312e3233322e3235302e302f32332d3234203d3e20323731353431.roa (hash: 4IIa4k60q+t0mOSWWa3xktMr2fL1MMbexf0+Pk1A8dU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 05:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e5:46:22:2d:e5:01:e7:48:8f:30:61:30:5e:1c:44:4c:57:42:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB Validity Not Before: Aug 20 05:11:45 2025 GMT Not After : Aug 21 05:19:45 2025 GMT Subject: CN=2D359625E4021EA957BA18637E86BCFE48A8A703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:93:a0:b4:28:27:dd:b3:19:93:22:5f:cc:6b: 7c:dc:8d:2e:4c:23:02:41:bd:19:ae:69:16:20:43: a1:5b:4a:e6:2f:60:a6:a7:44:be:7d:ff:d1:00:97: 03:13:d0:d5:d2:25:a8:95:b6:e7:af:d6:83:4f:f5: cd:50:f0:b7:3f:e3:f7:22:a4:8b:df:4b:dc:56:9f: 36:d5:08:bd:7b:78:e8:ab:e2:1d:ed:ae:0a:5f:07: 37:cb:1d:e1:7e:9a:34:27:05:ab:3c:52:8f:62:22: 02:08:db:5c:64:6b:59:75:ba:6e:06:31:e1:e1:57: bc:0f:e5:90:85:b8:b0:39:9f:63:c2:0c:f1:26:31: f4:7c:cd:67:90:98:46:a5:a7:85:a1:01:01:4e:2e: 15:bc:43:c1:03:a0:e7:02:7f:ea:48:39:3b:2d:e5: 01:6e:50:05:50:0f:9c:0b:87:db:50:2e:8f:bf:d6: f5:3b:42:bc:82:3a:98:fc:55:7c:91:4e:21:44:cc: 2b:8a:9d:c3:46:01:de:b7:68:fa:62:df:e3:b6:f8: 13:74:4c:f4:e9:f4:e5:2b:fa:06:de:fd:3f:09:c9: 27:91:d0:b5:8c:52:88:94:32:7a:26:4d:28:07:16: 01:66:41:f7:85:4e:1b:cd:8d:5f:c0:2d:bb:c6:50: ff:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:35:96:25:E4:02:1E:A9:57:BA:18:63:7E:86:BC:FE:48:A8:A7:03 X509v3 Authority Key Identifier: keyid:0E:F7:13:1E:83:15:CF:BC:2A:0C:8E:B2:A6:84:48:B4:0D:F9:DD:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:6e:b5:5e:0f:4f:7a:e0:2e:8c:fb:66:46:3b:c7:81:24:b0: 6b:af:7f:e7:73:b6:db:0e:df:61:87:e8:43:f6:84:6d:cd:a8: f3:7f:01:f5:3a:14:1e:0e:86:bd:2a:43:d1:5a:4b:00:19:a9: 6b:a9:2e:0a:20:b3:b9:a0:83:ca:e0:0c:4b:0e:78:13:22:e6: af:f2:2f:84:47:48:7c:f5:21:ae:b9:63:b1:9a:f1:ae:13:89: f8:26:8b:41:b7:66:b5:db:86:59:03:0f:0c:c8:db:2d:57:e9: 00:a6:18:89:7d:5c:c4:b7:2e:c1:e9:70:99:28:8e:4c:36:cb: 51:c3:5e:af:1f:4b:2a:e1:7b:d5:3d:34:26:01:3b:5d:db:ca: 03:ba:b4:70:25:6d:b5:ee:97:06:63:f2:5c:56:29:36:9e:90: 06:05:5d:3b:e0:b9:03:e8:81:c9:95:34:7a:0b:04:94:d5:cd: 96:8b:45:c2:8b:b4:56:1f:34:4b:8c:25:72:49:10:9e:da:f6: 14:e6:50:23:25:2a:1b:a3:32:9f:73:6e:d9:f5:e1:5a:ec:93: dd:aa:d4:f9:9e:cf:62:bb:2d:53:4a:8b:09:77:fc:96:ab:3f: 1d:56:ca:50:81:a8:13:38:58:13:07:98:69:b1:27:34:d0:62: f7:0c:b6:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZeVGIi3lAedIjzBhMF4cRExXQt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVGNzEzMUU4MzE1Q0ZCQzJBMEM4RUIyQTY4NDQ4QjQw REY5RERFQjAeFw0yNTA4MjAwNTExNDVaFw0yNTA4MjEwNTE5NDVaMDMxMTAvBgNV BAMTKDJEMzU5NjI1RTQwMjFFQTk1N0JBMTg2MzdFODZCQ0ZFNDhBOEE3MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtk6C0KCfdsxmTIl/Ma3zcjS5M IwJBvRmuaRYgQ6FbSuYvYKanRL59/9EAlwMT0NXSJaiVtuev1oNP9c1Q8Lc/4/ci pIvfS9xWnzbVCL17eOir4h3trgpfBzfLHeF+mjQnBas8Uo9iIgII21xka1l1um4G MeHhV7wP5ZCFuLA5n2PCDPEmMfR8zWeQmEalp4WhAQFOLhW8Q8EDoOcCf+pIOTst 5QFuUAVQD5wLh9tQLo+/1vU7QryCOpj8VXyRTiFEzCuKncNGAd63aPpi3+O2+BN0 TPTp9OUr+gbe/T8JySeR0LWMUoiUMnomTSgHFgFmQfeFThvNjV/ALbvGUP/nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULTWWJeQCHqlXuhhjfoa8/kiopwMwHwYDVR0j BBgwFoAUDvcTHoMVz7wqDI6ypoRItA353eswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmE1MThTbjVDWWh3SnZFaWh5dHhDdkplUHU2d3k0eUhFWDZlZkx5aUFY RkEvMS8wRUY3MTMxRTgzMTVDRkJDMkEwQzhFQjJBNjg0NDhCNDBERjlEREVCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFRjcxMzFFODMxNUNGQkMy QTBDOEVCMkE2ODQ0OEI0MERGOURERUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmE1MThTbjVDWWh3SnZFaWh5dHhDdkplUHU2d3k0eUhFWDZlZkx5aUFYRkEvMS8w RUY3MTMxRTgzMTVDRkJDMkEwQzhFQjJBNjg0NDhCNDBERjlEREVCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFG61Xg9PeuAujPtmRjvHgSSwa69/53O22w7fYYfoQ/aEbc2o838B9ToUHg6G vSpD0VpLABmpa6kuCiCzuaCDyuAMSw54EyLmr/IvhEdIfPUhrrljsZrxrhOJ+CaL QbdmtduGWQMPDMjbLVfpAKYYiX1cxLcuwelwmSiOTDbLUcNerx9LKuF71T00JgE7 XdvKA7q0cCVtte6XBmPyXFYpNp6QBgVdO+C5A+iByZU0egsElNXNlotFwou0Vh80 S4wlckkQntr2FOZQIyUqG6Myn3Nu2fXhWuyT3arU+Z7PYrstU0qLCXf8lqs/HVbK UIGoEzhYEweYabEnNNBi9wy2Eg== -----END CERTIFICATE-----Generated at Wed Aug 20 16:17:10 2025 by rpki-client