$ rpki-client -vvf rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft File: 8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft (raw, json) Hash identifier: cM0xJNyBPJMGXZGd6glmWTQlBHWYk7KxXxO93wmPEoc= Subject key identifier: F5:FE:9D:D6:1A:33:59:CC:8C:5C:E1:AE:F0:89:90:97:21:45:80:F2 Authority key identifier: 8F:A5:DE:96:82:20:D6:6A:91:64:CA:3A:A2:46:77:EF:9C:12:7E:E8 Certificate issuer: /CN=8FA5DE968220D66A9164CA3AA24677EF9C127EE8 Certificate serial: 1D81941A9E5B66AB58B4DD501CCE8610D0582B6D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft Manifest number: 028D Signing time: Sat 26 Jul 2025 16:19:49 +0000 Manifest this update: Sat 26 Jul 2025 16:14:49 +0000 Manifest next update: Sun 27 Jul 2025 19:40:49 +0000 Files and hashes: 1: 323830343a3661633a3a2f33322d3333203d3e20323632363031.roa (hash: bVJ51Xgk4Od1w28rYgBH1+HLLM5myBZZHXOSJEw0m8o=) 2: 323830343a3661633a376630303a3a2f34302d3430203d3e20323632363031.roa (hash: 2snvYOGpJCtNy79KrVoIQ+1upEgisrvIe+PcymU3JxA=) 3: 3137372e37352e3234302e302f32302d3234203d3e20323632363031.roa (hash: gfBJAuNHH60Mk6JXfLpN58DbrfIj+i/D/Aa1r4O8jp4=) 4: 8FA5DE968220D66A9164CA3AA24677EF9C127EE8.crl (hash: gX8vM2biVaPhsnuLOLmc1gOVtPBCHMN3xzAizpEPKjQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.crl rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 19:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:81:94:1a:9e:5b:66:ab:58:b4:dd:50:1c:ce:86:10:d0:58:2b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FA5DE968220D66A9164CA3AA24677EF9C127EE8 Validity Not Before: Jul 26 16:14:49 2025 GMT Not After : Jul 27 19:40:49 2025 GMT Subject: CN=F5FE9DD61A3359CC8C5CE1AEF0899097214580F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:22:16:36:f6:80:62:27:d2:9c:91:b3:da:7c: ed:c2:7a:46:49:77:31:da:5c:bd:10:0e:3b:10:99: 17:a4:dd:ca:55:24:98:6e:0c:16:db:a0:71:6d:e2: c2:f5:57:ec:76:ee:1f:97:59:8a:a6:b5:bd:e3:08: e4:2c:2f:a1:d4:e6:15:a2:c0:e9:a0:37:ee:b5:b7: a9:1e:c0:5b:ff:50:5c:9d:f9:45:b0:f8:b1:e8:47: 5a:d2:ce:00:96:59:e5:f4:da:38:98:d9:37:70:96: 35:11:d2:0c:52:82:67:af:ee:e5:8a:ea:46:6c:74: 2a:7c:bc:3e:11:0a:a9:d9:0e:0d:f3:b4:84:e6:2d: d8:37:8c:b2:62:f9:4b:2e:f8:2e:d0:af:f8:5c:de: 7e:15:08:76:e7:3e:ff:98:51:ff:b3:98:6c:7d:f8: 50:cc:d8:21:e8:72:53:de:27:d1:e7:4b:f1:f8:3e: b4:96:15:fb:ae:6e:b7:e7:34:e4:b6:b8:7d:07:df: f4:91:d7:7a:71:be:df:fc:43:ad:7e:bc:0f:50:5e: ef:73:92:06:09:05:50:d8:04:fb:b7:4c:59:65:f8: e1:de:08:b3:5a:64:7f:c3:66:c7:64:25:3a:4f:31: 74:dc:4c:33:5a:2a:c4:39:cc:1a:9d:e1:f8:b1:78: 0e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FE:9D:D6:1A:33:59:CC:8C:5C:E1:AE:F0:89:90:97:21:45:80:F2 X509v3 Authority Key Identifier: keyid:8F:A5:DE:96:82:20:D6:6A:91:64:CA:3A:A2:46:77:EF:9C:12:7E:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:10:76:0a:bc:19:6b:41:d2:58:32:a2:cb:87:b0:14:06:4b: e3:1f:8a:dd:d5:0c:79:f7:40:c7:b3:4d:27:98:84:c5:a0:16: 5b:16:3a:a9:17:e6:bb:81:4d:c0:c0:47:d8:df:4e:6d:8d:1f: db:b4:ae:ed:e2:9b:98:2f:45:91:39:ee:a5:20:71:87:ef:35: 8c:90:00:50:67:7f:29:1c:b8:70:c8:ca:2f:8e:83:ab:a4:32: 23:c6:59:3d:6b:95:d3:8c:1d:ce:4f:4b:1d:b7:62:63:42:2a: 8c:3e:2e:36:82:94:32:83:db:9d:ff:b0:e3:82:86:1b:80:bb: a9:19:e1:1c:12:9d:27:7e:55:ed:d5:89:3b:2c:19:65:f0:01: 70:93:73:66:e3:c9:bd:8b:ef:21:fd:f3:7f:b6:a7:bf:69:14: 35:8e:58:42:35:21:86:7e:bf:1f:a1:d2:ac:c3:d4:58:47:19: 74:3c:91:59:2d:fa:16:f8:b4:7c:ff:70:2c:05:a6:4f:fc:9a: 7c:64:1f:4e:9a:ba:94:77:45:a8:c2:d1:97:b9:71:54:46:d8: 01:63:72:36:59:f6:d4:a7:64:27:74:9b:46:75:a1:5f:c4:1f: bf:37:2b:5a:8f:64:7b:05:ff:fb:fc:a7:7e:02:d8:69:9e:aa: a5:d0:4f:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHYGUGp5bZqtYtN1QHM6GENBYK20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZBNURFOTY4MjIwRDY2QTkxNjRDQTNBQTI0Njc3RUY5 QzEyN0VFODAeFw0yNTA3MjYxNjE0NDlaFw0yNTA3MjcxOTQwNDlaMDMxMTAvBgNV BAMTKEY1RkU5REQ2MUEzMzU5Q0M4QzVDRTFBRUYwODk5MDk3MjE0NTgwRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+IhY29oBiJ9KckbPafO3CekZJ dzHaXL0QDjsQmRek3cpVJJhuDBbboHFt4sL1V+x27h+XWYqmtb3jCOQsL6HU5hWi wOmgN+61t6kewFv/UFyd+UWw+LHoR1rSzgCWWeX02jiY2TdwljUR0gxSgmev7uWK 6kZsdCp8vD4RCqnZDg3ztITmLdg3jLJi+Usu+C7Qr/hc3n4VCHbnPv+YUf+zmGx9 +FDM2CHoclPeJ9HnS/H4PrSWFfuubrfnNOS2uH0H3/SR13pxvt/8Q61+vA9QXu9z kgYJBVDYBPu3TFll+OHeCLNaZH/DZsdkJTpPMXTcTDNaKsQ5zBqd4fixeA5xAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9f6d1hozWcyMXOGu8ImQlyFFgPIwHwYDVR0j BBgwFoAUj6XeloIg1mqRZMo6okZ375wSfugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0NXSGlvZzgxMldoRlF0WkRvaXNRNDlvMm51bXJKcEhuMVZCaU56Tmo4 TnAvMS84RkE1REU5NjgyMjBENjZBOTE2NENBM0FBMjQ2NzdFRjlDMTI3RUU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGQTVERTk2ODIyMEQ2NkE5 MTY0Q0EzQUEyNDY3N0VGOUMxMjdFRTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0NXSGlvZzgxMldoRlF0WkRvaXNRNDlvMm51bXJKcEhuMVZCaU56Tmo4TnAvMS84 RkE1REU5NjgyMjBENjZBOTE2NENBM0FBMjQ2NzdFRjlDMTI3RUU4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbRB2CrwZa0HSWDKiy4ewFAZL4x+K3dUMefdAx7NNJ5iExaAWWxY6qRfmu4FN wMBH2N9ObY0f27Su7eKbmC9FkTnupSBxh+81jJAAUGd/KRy4cMjKL46Dq6QyI8ZZ PWuV04wdzk9LHbdiY0IqjD4uNoKUMoPbnf+w44KGG4C7qRnhHBKdJ35V7dWJOywZ ZfABcJNzZuPJvYvvIf3zf7anv2kUNY5YQjUhhn6/H6HSrMPUWEcZdDyRWS36Fvi0 fP9wLAWmT/yafGQfTpq6lHdFqMLRl7lxVEbYAWNyNln21KdkJ3SbRnWhX8Qfvzcr Wo9kewX/+/ynfgLYaZ6qpdBPPw== -----END CERTIFICATE-----Generated at Sun Jul 27 12:00:30 2025 by rpki-client