$ rpki-client -vvf rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft File: 806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft (raw, json) Hash identifier: TPmALvvMN0bxVRsH78IiQgK8jN1nmMKNo4r1SRF8Ck8= Subject key identifier: 2A:F4:98:03:98:37:B2:80:4F:DA:D1:77:FF:26:BB:09:2F:3B:2E:9E Authority key identifier: 80:6E:0B:40:C6:7F:11:AA:3B:FD:31:E2:84:4B:8D:C3:A0:CA:14:52 Certificate issuer: /CN=806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452 Certificate serial: 4E3D01E151015830F282C62D119DE55A1B490FD7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer Subject info access: rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft Manifest number: 0299 Signing time: Wed 20 Aug 2025 03:21:00 +0000 Manifest this update: Wed 20 Aug 2025 03:16:00 +0000 Manifest next update: Thu 21 Aug 2025 07:01:00 +0000 Files and hashes: 1: 323830343a383266633a3a2f33322d313238203d3e20323732313639.roa (hash: aJepNlwBajDAqgc6KneJ78CpKDsJPHnN/0pqAA8sjeQ=) 2: 806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.crl (hash: upqFlf7iByp9+HtsvyFFqI3i8C6NAiY+nEiuewhSopY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.crl rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 07:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3d:01:e1:51:01:58:30:f2:82:c6:2d:11:9d:e5:5a:1b:49:0f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452 Validity Not Before: Aug 20 03:16:00 2025 GMT Not After : Aug 21 07:01:00 2025 GMT Subject: CN=2AF498039837B2804FDAD177FF26BB092F3B2E9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a1:73:86:44:a0:34:56:de:eb:5a:5f:d2:67: 74:8b:9f:fe:36:16:91:0c:9d:37:d9:8b:04:f1:fe: 0a:52:38:10:cc:05:c7:ce:53:d0:18:1f:09:90:64: 48:85:2c:7a:f0:2f:b6:f8:3f:ee:49:0f:6a:49:2b: 50:ca:08:69:62:69:68:b1:b5:ca:51:1a:a3:c1:fe: 79:cb:52:94:66:6e:cb:db:8f:eb:27:0e:95:88:d3: e9:4e:f0:e9:7f:14:eb:0b:8a:ff:bd:09:44:8a:73: 1f:09:78:de:d9:de:0e:9e:f1:02:32:ce:9e:17:42: f0:7d:3c:cb:65:bc:ef:07:0b:fc:fc:e3:62:b2:d6: 36:66:8d:42:97:14:eb:53:99:22:09:cf:1e:13:79: 8f:3f:55:67:f9:27:47:7b:5e:4a:9d:35:2c:a9:3e: 4c:fd:ce:02:a5:12:72:d4:fd:56:db:5d:fb:23:84: 31:cf:16:d4:16:b9:8b:c3:32:ad:01:b9:fc:c1:a6: a8:26:29:2b:3c:41:59:50:26:82:ab:e2:6f:b5:d5: 28:00:c8:41:d8:d1:ba:52:21:c3:bf:d9:10:3a:50: 18:e4:0c:ea:9c:17:03:fb:e8:3f:5c:a7:fc:19:8d: 53:9e:24:da:a2:e6:33:0d:a2:3f:15:66:90:cf:88: 12:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F4:98:03:98:37:B2:80:4F:DA:D1:77:FF:26:BB:09:2F:3B:2E:9E X509v3 Authority Key Identifier: keyid:80:6E:0B:40:C6:7F:11:AA:3B:FD:31:E2:84:4B:8D:C3:A0:CA:14:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:09:ac:30:f3:4b:02:44:8f:bf:ae:22:ae:02:ec:61:e7:a0: b1:69:d4:a5:c4:c8:60:e3:f6:b6:ca:42:77:9d:f8:13:1a:f1: ea:df:22:d2:09:c4:f4:4d:29:5d:8f:79:8e:81:4f:f2:2a:4d: 83:dc:88:57:74:e3:cd:13:8b:c3:96:f5:85:85:db:14:a4:85: 05:8d:78:1e:44:e8:69:67:00:1e:a3:bd:58:cf:d6:be:e9:f5: de:b3:61:10:48:a6:bb:59:48:59:11:4b:57:6e:1d:0b:18:1a: 7a:71:dc:51:b4:a1:33:20:bb:38:8b:d3:9e:57:82:a2:55:fe: cf:fe:0f:3b:22:82:33:56:59:2a:6c:49:3c:8a:55:90:ee:67: 09:10:b4:67:59:67:c8:b8:58:75:0b:4e:e0:17:aa:8b:fc:a1: b9:7a:c3:1b:fe:bc:a4:4a:95:78:38:ea:27:ef:2a:9b:7c:a8: 53:2b:86:25:e1:fd:94:0a:29:3d:6f:69:74:b8:0b:10:f1:89: d8:6d:f6:1e:c8:9e:72:70:72:03:5d:40:c8:ba:69:10:79:9a: e9:a2:ca:e8:5b:01:b8:c8:b2:3f:e6:35:ac:bc:36:4f:30:93: 44:86:dd:b4:f9:9c:1c:a3:2b:00:58:21:08:43:e8:80:8e:45: 1a:f2:ac:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTj0B4VEBWDDygsYtEZ3lWhtJD9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA2RTBCNDBDNjdGMTFBQTNCRkQzMUUyODQ0QjhEQzNB MENBMTQ1MjAeFw0yNTA4MjAwMzE2MDBaFw0yNTA4MjEwNzAxMDBaMDMxMTAvBgNV BAMTKDJBRjQ5ODAzOTgzN0IyODA0RkRBRDE3N0ZGMjZCQjA5MkYzQjJFOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHoXOGRKA0Vt7rWl/SZ3SLn/42 FpEMnTfZiwTx/gpSOBDMBcfOU9AYHwmQZEiFLHrwL7b4P+5JD2pJK1DKCGliaWix tcpRGqPB/nnLUpRmbsvbj+snDpWI0+lO8Ol/FOsLiv+9CUSKcx8JeN7Z3g6e8QIy zp4XQvB9PMtlvO8HC/z842Ky1jZmjUKXFOtTmSIJzx4TeY8/VWf5J0d7XkqdNSyp Pkz9zgKlEnLU/VbbXfsjhDHPFtQWuYvDMq0BufzBpqgmKSs8QVlQJoKr4m+11SgA yEHY0bpSIcO/2RA6UBjkDOqcFwP76D9cp/wZjVOeJNqi5jMNoj8VZpDPiBLBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKvSYA5g3soBP2tF3/ya7CS87Lp4wHwYDVR0j BBgwFoAUgG4LQMZ/Eao7/THihEuNw6DKFFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ25TRWE0SGhDWlFiTHM4c2d5YWF4clkyaGZFVTdQVGdkbnNlNExxblJN dVgvMS84MDZFMEI0MEM2N0YxMUFBM0JGRDMxRTI4NDRCOERDM0EwQ0ExNDUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwNkUwQjQwQzY3RjExQUEz QkZEMzFFMjg0NEI4REMzQTBDQTE0NTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q25TRWE0SGhDWlFiTHM4c2d5YWF4clkyaGZFVTdQVGdkbnNlNExxblJNdVgvMS84 MDZFMEI0MEM2N0YxMUFBM0JGRDMxRTI4NDRCOERDM0EwQ0ExNDUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMgmsMPNLAkSPv64irgLsYeegsWnUpcTIYOP2tspCd534Exrx6t8i0gnE9E0p XY95joFP8ipNg9yIV3TjzROLw5b1hYXbFKSFBY14HkToaWcAHqO9WM/Wvun13rNh EEimu1lIWRFLV24dCxgaenHcUbShMyC7OIvTnleColX+z/4POyKCM1ZZKmxJPIpV kO5nCRC0Z1lnyLhYdQtO4Beqi/yhuXrDG/68pEqVeDjqJ+8qm3yoUyuGJeH9lAop PW9pdLgLEPGJ2G32HsiecnByA11AyLppEHma6aLK6FsBuMiyP+Y1rLw2TzCTRIbd tPmcHKMrAFghCEPogI5FGvKs3Q== -----END CERTIFICATE-----Generated at Wed Aug 20 16:32:12 2025 by rpki-client