$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft File: CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft (raw, json) Hash identifier: 4Iykd0LRtAToYDWneTFFJDcm089LUXZLpi8qWwGrI8k= Subject key identifier: 3E:42:8C:09:DD:35:48:BE:7E:46:CE:24:DB:02:54:71:12:DE:AA:1D Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6 Certificate issuer: /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6 Certificate serial: 409652DB1E4F7904E6E1CCBB660B3BD37DEDABAB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer Subject info access: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft Manifest number: 0294 Signing time: Sat 26 Jul 2025 18:43:05 +0000 Manifest this update: Sat 26 Jul 2025 18:38:05 +0000 Manifest next update: Sun 27 Jul 2025 19:01:05 +0000 Files and hashes: 1: CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl (hash: wjt39qt3gmtBy0fjl86YDd3M8fJv456HCuTgioI7F7E=) 2: 3139312e33372e302e302f32332d3332203d3e20323633333436.roa (hash: dk4B0gt3xtrzpqeQPsPPmX3X8Bi3YSdbr9PQbjrctok=) 3: 3139312e33372e342e302f32332d3332203d3e20323633333436.roa (hash: JBgbUMOSfuDRal8tFPKZ1hnVKHMRHXaPlhWoUlyXRt0=) 4: 323830343a313462383a3a2f33322d3438203d3e20323633333436.roa (hash: 2zUdDQoZI7lf2QCIRFGO2DVEseSLfvIofWeRJppw+oo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 19:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:96:52:db:1e:4f:79:04:e6:e1:cc:bb:66:0b:3b:d3:7d:ed:ab:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6 Validity Not Before: Jul 26 18:38:05 2025 GMT Not After : Jul 27 19:01:05 2025 GMT Subject: CN=3E428C09DD3548BE7E46CE24DB02547112DEAA1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c3:94:06:74:41:4d:52:e8:f1:57:61:7b:76: 27:7b:d2:0a:50:aa:35:c3:5f:be:d0:97:81:97:cb: 53:67:d4:7d:41:6b:cc:0f:61:a8:49:c7:ee:4f:f3: b8:60:f9:ca:bd:93:fd:35:f7:6c:99:f3:d6:0d:c4: d1:83:16:74:c8:2a:ec:14:d6:1b:ad:94:29:40:82: 67:a5:ca:48:2c:47:5e:cd:b3:b9:38:e7:4c:02:c9: 8f:90:37:ae:ed:47:96:a3:3a:5b:4a:5c:a4:28:8d: cd:32:28:3d:e1:8f:b1:42:7d:71:70:61:44:4a:11: ae:f9:12:b0:0d:db:a9:c6:74:95:48:42:47:b1:fc: d2:e5:8b:44:29:d8:b2:a2:7f:37:a3:e3:0d:aa:10: 9a:34:9a:da:38:28:e7:61:42:1a:bc:96:e6:49:64: fe:66:32:3d:8c:4f:8d:c6:e4:a6:76:24:b8:b9:0c: 56:3d:26:ee:eb:8c:a6:ee:30:0a:b4:8e:e0:c1:3d: 15:5b:19:7a:46:99:99:42:bd:32:d4:95:ac:be:10: 00:0d:18:0f:85:03:b4:33:8b:ee:e2:07:2f:fc:f4: af:63:24:89:94:d2:32:a4:44:03:6a:23:8a:fd:e8: 42:c5:c2:84:75:7e:0a:56:df:29:ef:d4:0d:98:76: 73:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:42:8C:09:DD:35:48:BE:7E:46:CE:24:DB:02:54:71:12:DE:AA:1D X509v3 Authority Key Identifier: keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:37:33:55:d4:3f:f4:d8:3f:b5:7c:c2:87:68:06:f8:7d:04: be:52:3a:7c:e3:f8:b9:ea:21:fe:54:b6:47:47:95:fe:96:c0: ca:33:a0:a7:4a:d9:5a:36:18:5f:5e:58:94:1c:f9:85:d1:eb: 11:f5:e3:f3:3f:bd:45:ad:31:89:fb:02:23:3f:65:5d:f9:2b: 02:7a:ad:85:f1:a0:9a:37:b6:48:24:5e:6e:dd:dd:ad:4e:92: ed:0e:62:13:b9:0e:fd:ae:a2:a2:de:4e:b1:ce:8c:15:85:1d: 4a:80:74:57:2c:a9:55:8b:5e:f0:e5:4e:f0:6e:7b:8a:fa:1a: 20:3d:b1:84:8c:16:26:8e:93:b0:7d:1b:b1:df:2b:23:45:57: db:64:ff:99:eb:db:a3:a0:0c:c5:f3:2f:b0:1b:77:6d:53:99: 25:c1:cf:2a:8a:b0:31:48:75:ac:9d:c6:dd:28:a9:9b:05:db: ee:2f:16:d6:5d:41:2c:f6:b9:c2:bd:ad:37:43:ac:0c:27:a9: fb:e4:5c:12:1f:f7:51:93:88:94:7e:9b:ca:14:21:61:7b:66: fe:b2:56:17:ad:b0:e1:cd:c4:e8:fd:e4:91:75:f8:66:63:70: 5d:8a:57:13:54:d9:0b:ca:ef:2c:08:21:60:b7:38:e7:42:9f: 28:d6:af:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQJZS2x5PeQTm4cy7Zgs7033tq6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E4NTc5MUE5MjY1RTg4MzUyRTM4MjM2MTFFNkQ4NEQ2 QkJCRENDNjAeFw0yNTA3MjYxODM4MDVaFw0yNTA3MjcxOTAxMDVaMDMxMTAvBgNV BAMTKDNFNDI4QzA5REQzNTQ4QkU3RTQ2Q0UyNERCMDI1NDcxMTJERUFBMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpw5QGdEFNUujxV2F7did70gpQ qjXDX77Ql4GXy1Nn1H1Ba8wPYahJx+5P87hg+cq9k/0192yZ89YNxNGDFnTIKuwU 1hutlClAgmelykgsR17Ns7k450wCyY+QN67tR5ajOltKXKQojc0yKD3hj7FCfXFw YURKEa75ErAN26nGdJVIQkex/NLli0Qp2LKifzej4w2qEJo0mto4KOdhQhq8luZJ ZP5mMj2MT43G5KZ2JLi5DFY9Ju7rjKbuMAq0juDBPRVbGXpGmZlCvTLUlay+EAAN GA+FA7Qzi+7iBy/89K9jJImU0jKkRANqI4r96ELFwoR1fgpW3ynv1A2YdnNTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPkKMCd01SL5+Rs4k2wJUcRLeqh0wHwYDVR0j BBgwFoAUyoV5GpJl6INS44I2EebYTWu73MYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkx a0ovMC9DQTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBODU3OTFBOTI2NUU4ODM1 MkUzODIzNjExRTZEODRENkJCQkRDQzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkxa0ovMC9D QTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaDczVdQ/9Ng/tXzCh2gG+H0EvlI6fOP4ueoh/lS2R0eV/pbAyjOgp0rZWjYY X15YlBz5hdHrEfXj8z+9Ra0xifsCIz9lXfkrAnqthfGgmje2SCRebt3drU6S7Q5i E7kO/a6iot5Osc6MFYUdSoB0VyypVYte8OVO8G57ivoaID2xhIwWJo6TsH0bsd8r I0VX22T/mevbo6AMxfMvsBt3bVOZJcHPKoqwMUh1rJ3G3SipmwXb7i8W1l1BLPa5 wr2tN0OsDCep++RcEh/3UZOIlH6byhQhYXtm/rJWF62w4c3E6P3kkXX4ZmNwXYpX E1TZC8rvLAghYLc450KfKNavkQ== -----END CERTIFICATE-----Generated at Sun Jul 27 08:50:29 2025 by rpki-client