$ rpki-client -vvf rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft File: CA9298E26EC7D83F990DD29EFD395097A928590F.mft (raw, json) Hash identifier: 8kVzzBpE7eQ1AIcDbQqH432HiMtqYtrMjRKE6qqjecE= Subject key identifier: 8E:74:5E:C7:55:AB:4F:2E:EF:09:DC:6D:9C:92:6E:44:6F:79:0C:29 Authority key identifier: CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F Certificate issuer: /CN=CA9298E26EC7D83F990DD29EFD395097A928590F Certificate serial: 1556DA01881ABE49237EA733A41652FB896E67AA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer Subject info access: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft Manifest number: 01C7 Signing time: Wed 20 Aug 2025 13:27:30 +0000 Manifest this update: Wed 20 Aug 2025 13:22:30 +0000 Manifest next update: Thu 21 Aug 2025 16:58:30 +0000 Files and hashes: 1: 3136382e3232372e38302e302f32322d3234203d3e203631363938.roa (hash: S1X3FDjegEq67IqZtyansbQSwefFYc5W5CadNAvGNo4=) 2: 323830343a316165633a3a2f33322d3438203d3e203631363938.roa (hash: IFrUYpuj0d1bgr14YmgI4By335jGYf5cwE1I2H0w90A=) 3: CA9298E26EC7D83F990DD29EFD395097A928590F.crl (hash: xyz9cHDSK3X2SXxBUtH7xslo9Bq3fqPC57eSNAqjdtQ=) 4: 3133312e302e3136342e302f32322d3234203d3e203631363938.roa (hash: wtyTmXZbRgRsfoJNHLj8NWX0CbM90+xKZ4dA+uKkbSs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 16:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:56:da:01:88:1a:be:49:23:7e:a7:33:a4:16:52:fb:89:6e:67:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA9298E26EC7D83F990DD29EFD395097A928590F Validity Not Before: Aug 20 13:22:30 2025 GMT Not After : Aug 21 16:58:30 2025 GMT Subject: CN=8E745EC755AB4F2EEF09DC6D9C926E446F790C29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:97:66:56:5e:82:9e:f8:06:d4:7d:a7:0f:3a: cb:4c:f8:50:fa:21:94:d4:a7:e6:67:00:52:fb:bb: 04:e8:91:36:92:6a:53:31:b4:d6:8c:cc:33:50:62: 32:37:4b:b3:f6:a5:27:a4:9f:6e:4d:fc:50:6f:db: d8:23:ed:b4:16:f0:e4:8e:8d:6d:8c:0a:a5:35:9f: e4:45:9a:55:cf:ae:d0:64:75:03:c4:67:42:f1:7d: 93:94:11:2d:fc:f0:ca:7a:a6:56:dd:09:bd:3e:a3: 7a:41:e4:d0:88:5a:01:0d:ac:d5:66:9a:38:c2:42: f1:5f:f2:81:54:41:0a:b4:04:45:31:88:e0:c6:c2: 3f:61:5e:c5:b7:25:1a:c8:8f:33:4e:9b:ab:94:e8: 17:d0:86:b3:b2:3a:41:67:c8:04:3b:5b:9f:59:e0: a8:b8:f7:40:5d:d8:0e:a4:7d:1e:5d:45:f7:5f:e0: 7d:e7:b6:f7:25:13:24:44:9e:a9:cb:e3:23:a6:46: c9:33:69:e0:29:f4:00:a3:dd:ed:3c:da:0f:c8:4f: 01:64:f4:00:34:8d:3b:d7:19:00:4e:79:1b:17:37: bb:ef:0b:b4:fc:6a:2b:c6:d1:48:55:f8:fc:0e:43: 4f:a3:68:af:26:23:3b:31:23:4d:66:cd:0d:62:d1: 71:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:74:5E:C7:55:AB:4F:2E:EF:09:DC:6D:9C:92:6E:44:6F:79:0C:29 X509v3 Authority Key Identifier: keyid:CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d2:93:83:1f:33:b7:e8:ef:43:69:65:09:45:a9:6a:e9:9f: 9b:5b:4c:60:a8:80:ac:e6:73:fb:b1:f8:18:04:6c:54:6c:8a: 6b:fc:03:71:91:14:88:d3:82:65:ff:7d:3b:9f:a6:04:6c:d6: 16:e8:16:24:bb:7d:90:5f:a7:d7:c6:40:8e:18:f0:b3:c9:eb: 0b:10:b1:d6:77:53:61:59:18:da:7e:1d:23:8d:a0:14:42:57: e8:20:9e:51:81:2b:43:4c:7c:9f:e1:94:a6:05:1b:45:1e:84: 06:bb:dd:db:c0:c1:17:f4:15:ab:59:e2:8d:35:32:90:81:67: 2f:46:b3:b4:d4:5c:1d:01:e5:17:da:72:78:f0:4a:6e:d9:36: 0e:98:b5:42:c4:c2:28:f7:55:36:93:0d:5d:5f:c1:d1:6e:38: ba:bb:73:61:6a:83:5b:ce:71:51:c1:dc:b8:2e:55:e3:bf:0a: e2:b9:bc:66:7c:4d:49:fb:a7:2c:b8:65:8b:80:45:9a:50:65: cc:0b:cf:7e:5e:77:9b:45:02:05:c2:b5:b1:25:3d:e3:5e:b6: 5b:13:d2:78:84:f3:da:65:03:0b:54:d4:d4:f0:1b:f2:d0:4e: 19:44:27:30:1d:c3:41:23:7b:08:57:2e:69:84:02:e4:61:ae: fe:ad:13:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFVbaAYgavkkjfqczpBZS+4luZ6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5Mjk4RTI2RUM3RDgzRjk5MEREMjlFRkQzOTUwOTdB OTI4NTkwRjAeFw0yNTA4MjAxMzIyMzBaFw0yNTA4MjExNjU4MzBaMDMxMTAvBgNV BAMTKDhFNzQ1RUM3NTVBQjRGMkVFRjA5REM2RDlDOTI2RTQ0NkY3OTBDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1l2ZWXoKe+AbUfacPOstM+FD6 IZTUp+ZnAFL7uwTokTaSalMxtNaMzDNQYjI3S7P2pSekn25N/FBv29gj7bQW8OSO jW2MCqU1n+RFmlXPrtBkdQPEZ0LxfZOUES388Mp6plbdCb0+o3pB5NCIWgENrNVm mjjCQvFf8oFUQQq0BEUxiODGwj9hXsW3JRrIjzNOm6uU6BfQhrOyOkFnyAQ7W59Z 4Ki490Bd2A6kfR5dRfdf4H3ntvclEyREnqnL4yOmRskzaeAp9ACj3e082g/ITwFk 9AA0jTvXGQBOeRsXN7vvC7T8aivG0UhV+PwOQ0+jaK8mIzsxI01mzQ1i0XHFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjnRex1WrTy7vCdxtnJJuRG95DCkwHwYDVR0j BBgwFoAUypKY4m7H2D+ZDdKe/TlQl6koWQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmloa2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZm emovMC9DQTkyOThFMjZFQzdEODNGOTkwREQyOUVGRDM5NTA5N0E5Mjg1OTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBOTI5OEUyNkVDN0Q4M0Y5 OTBERDI5RUZEMzk1MDk3QTkyODU5MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qmloa2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZmemovMC9D QTkyOThFMjZFQzdEODNGOTkwREQyOUVGRDM5NTA5N0E5Mjg1OTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACtKTgx8zt+jvQ2llCUWpaumfm1tMYKiArOZz+7H4GARsVGyKa/wDcZEUiNOC Zf99O5+mBGzWFugWJLt9kF+n18ZAjhjws8nrCxCx1ndTYVkY2n4dI42gFEJX6CCe UYErQ0x8n+GUpgUbRR6EBrvd28DBF/QVq1nijTUykIFnL0aztNRcHQHlF9pyePBK btk2Dpi1QsTCKPdVNpMNXV/B0W44urtzYWqDW85xUcHcuC5V478K4rm8ZnxNSfun LLhli4BFmlBlzAvPfl53m0UCBcK1sSU94162WxPSeITz2mUDC1TU1PAb8tBOGUQn MB3DQSN7CFcuaYQC5GGu/q0Tsg== -----END CERTIFICATE-----Generated at Wed Aug 20 16:29:53 2025 by rpki-client