$ rpki-client -vvf rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/12C134EB24E98B21A2D6816B023560C23DA02BE0.mft File: 12C134EB24E98B21A2D6816B023560C23DA02BE0.mft (raw, json) Hash identifier: 2pYeTT+dQsLcWzK+Eovb2nckg8ZzHH1IcPvf5qVLbkg= Subject key identifier: 12:C8:99:AB:64:E6:04:C7:C9:B2:EB:A6:38:84:10:84:82:BF:66:83 Authority key identifier: 12:C1:34:EB:24:E9:8B:21:A2:D6:81:6B:02:35:60:C2:3D:A0:2B:E0 Certificate issuer: /CN=12C134EB24E98B21A2D6816B023560C23DA02BE0 Certificate serial: 52BAF0A0CDBC42764274167FEA1CA499E1F287F4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C134EB24E98B21A2D6816B023560C23DA02BE0.cer Subject info access: rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/12C134EB24E98B21A2D6816B023560C23DA02BE0.mft Manifest number: 25 Signing time: Wed 20 Aug 2025 13:20:03 +0000 Manifest this update: Wed 20 Aug 2025 13:15:03 +0000 Manifest next update: Thu 21 Aug 2025 16:41:03 +0000 Files and hashes: 1: 323830343a366239383a3a2f33322d313238203d3e20323730343131.roa (hash: 5QA4lA3mV4VufAyce7gjqSGby0WktCUzJE2IVoqw5wk=) 2: 3139302e38392e3232342e302f32332d3234203d3e20323730343131.roa (hash: F0mXnXF+35TeEZ/qII3RJYuYeqfQxRlLRt/ww5m1WtA=) 3: 3139302e38392e3232372e302f32342d3234203d3e20323730343131.roa (hash: NxytjmURymebGL31JFRgY2udtswSy6yPTMjYE3TflOM=) 4: 3139302e38392e3232362e302f32342d3234203d3e20323730343131.roa (hash: NJVWbpLNridAhJR3SjF9E5vS731j4d/YSPFV3sfOThg=) 5: 12C134EB24E98B21A2D6816B023560C23DA02BE0.crl (hash: jgjEn/uU1eUTn+DQ13eyyrrINHDBwl7w9Z4up2sPBEc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/12C134EB24E98B21A2D6816B023560C23DA02BE0.crl rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/12C134EB24E98B21A2D6816B023560C23DA02BE0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C134EB24E98B21A2D6816B023560C23DA02BE0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 16:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ba:f0:a0:cd:bc:42:76:42:74:16:7f:ea:1c:a4:99:e1:f2:87:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12C134EB24E98B21A2D6816B023560C23DA02BE0 Validity Not Before: Aug 20 13:15:03 2025 GMT Not After : Aug 21 16:41:03 2025 GMT Subject: CN=12C899AB64E604C7C9B2EBA63884108482BF6683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ca:07:32:26:04:bf:c7:6b:a9:ea:2e:44:fb: 08:25:db:eb:8d:40:b9:56:c0:8c:88:91:94:93:94: 49:8f:fa:eb:ed:ed:98:f5:ff:75:ea:2e:e8:10:31: 3c:92:dd:7f:3b:3d:b5:34:d4:16:ad:d6:f3:e6:29: 34:1a:ca:88:a3:fb:95:23:c0:ea:57:f5:5f:fa:fd: 1c:d1:11:3d:b0:43:9e:b5:f5:dc:0c:3e:36:b7:d7: c9:70:03:a0:e8:a6:b3:f6:7d:77:e7:ff:5d:a9:ae: d1:34:1c:63:28:8a:1e:ac:b9:fe:00:58:bc:f2:1b: 7e:b7:f8:50:a5:4e:e7:07:84:62:3d:2f:93:4c:37: 3d:9e:e9:5f:eb:a7:d0:3f:31:d1:31:19:2c:32:48: bc:9a:d2:cf:b8:ea:94:af:28:47:12:08:bf:a0:0a: 7e:4d:b3:0a:10:32:03:1a:dc:ae:ec:95:10:e8:76: db:a4:69:3f:b9:91:db:93:76:84:9f:5b:1d:bd:d8: 1b:1f:3b:6b:aa:ac:37:ed:a4:7f:3e:ee:a4:b1:18: 97:be:38:f0:b4:8c:90:81:a3:05:6c:b4:81:5d:9e: 1a:c2:31:69:ca:5d:8e:c7:28:45:2c:0b:f5:c0:b6: 18:09:2a:3d:ac:dc:3a:52:69:c9:05:48:b1:44:c6: 30:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C8:99:AB:64:E6:04:C7:C9:B2:EB:A6:38:84:10:84:82:BF:66:83 X509v3 Authority Key Identifier: keyid:12:C1:34:EB:24:E9:8B:21:A2:D6:81:6B:02:35:60:C2:3D:A0:2B:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/12C134EB24E98B21A2D6816B023560C23DA02BE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C134EB24E98B21A2D6816B023560C23DA02BE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/12C134EB24E98B21A2D6816B023560C23DA02BE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:9a:38:7f:2f:0e:3c:6d:31:03:2e:62:4b:9b:50:94:df:49: 27:00:8e:e9:06:af:97:ae:77:f6:e6:13:ff:6a:70:74:72:5d: 48:5e:18:71:ab:6d:cd:0a:5e:b1:f3:54:62:73:5b:d8:06:62: 48:a9:3b:f2:b3:d2:ef:c7:21:06:39:32:29:10:6e:c1:90:5f: 70:cb:af:78:bd:ad:96:98:e0:f7:46:01:88:8a:79:11:4b:f2: 4f:ed:6e:41:48:df:f0:ff:9b:5c:c0:1d:2c:be:dd:66:5d:3d: 12:31:bf:e3:3f:9c:d8:99:92:0c:68:69:63:37:c9:e5:1a:bf: 33:17:e6:4b:c4:d4:7e:69:97:18:f2:a3:f0:05:ab:d2:2b:50: a0:48:de:76:07:bf:f9:7d:ff:37:57:82:e3:95:8f:57:b3:36: b0:01:83:e2:d8:a4:64:c1:89:a8:71:02:1c:60:fe:34:e5:f2: 53:d1:4c:9f:fb:00:0a:9a:c4:2a:44:94:80:f3:c0:1d:b6:a6: 4e:f2:90:37:cc:38:66:cc:71:a5:8c:d8:c6:b4:a7:5d:e7:2d: 9f:f6:67:98:39:40:9e:8d:ff:fc:45:49:e6:9d:64:5a:11:59: 4b:4c:9c:e2:87:6a:53:85:e1:38:e8:6e:39:1b:59:ba:6e:64: 8d:fe:62:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUrrwoM28QnZCdBZ/6hykmeHyh/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJDMTM0RUIyNEU5OEIyMUEyRDY4MTZCMDIzNTYwQzIz REEwMkJFMDAeFw0yNTA4MjAxMzE1MDNaFw0yNTA4MjExNjQxMDNaMDMxMTAvBgNV BAMTKDEyQzg5OUFCNjRFNjA0QzdDOUIyRUJBNjM4ODQxMDg0ODJCRjY2ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPygcyJgS/x2up6i5E+wgl2+uN QLlWwIyIkZSTlEmP+uvt7Zj1/3XqLugQMTyS3X87PbU01Bat1vPmKTQayoij+5Uj wOpX9V/6/RzRET2wQ5619dwMPja318lwA6DoprP2fXfn/12prtE0HGMoih6suf4A WLzyG363+FClTucHhGI9L5NMNz2e6V/rp9A/MdExGSwySLya0s+46pSvKEcSCL+g Cn5NswoQMgMa3K7slRDodtukaT+5kduTdoSfWx292BsfO2uqrDftpH8+7qSxGJe+ OPC0jJCBowVstIFdnhrCMWnKXY7HKEUsC/XAthgJKj2s3DpSackFSLFExjA7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEsiZq2TmBMfJsuumOIQQhIK/ZoMwHwYDVR0j BBgwFoAUEsE06yTpiyGi1oFrAjVgwj2gK+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFhnWU53eEtTclNUeEVKY2VueURjOHF2Q21GVHdzemhBUldLRzdzZ2tG ZXcvMC8xMkMxMzRFQjI0RTk4QjIxQTJENjgxNkIwMjM1NjBDMjNEQTAyQkUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyQzEzNEVCMjRFOThCMjFB MkQ2ODE2QjAyMzU2MEMyM0RBMDJCRTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFhnWU53eEtTclNUeEVKY2VueURjOHF2Q21GVHdzemhBUldLRzdzZ2tGZXcvMC8x MkMxMzRFQjI0RTk4QjIxQTJENjgxNkIwMjM1NjBDMjNEQTAyQkUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWpo4fy8OPG0xAy5iS5tQlN9JJwCO6Qavl6539uYT/2pwdHJdSF4YcattzQpe sfNUYnNb2AZiSKk78rPS78chBjkyKRBuwZBfcMuveL2tlpjg90YBiIp5EUvyT+1u QUjf8P+bXMAdLL7dZl09EjG/4z+c2JmSDGhpYzfJ5Rq/MxfmS8TUfmmXGPKj8AWr 0itQoEjedge/+X3/N1eC45WPV7M2sAGD4tikZMGJqHECHGD+NOXyU9FMn/sACprE KkSUgPPAHbamTvKQN8w4ZsxxpYzYxrSnXectn/ZnmDlAno3//EVJ5p1kWhFZS0yc 4odqU4XhOOhuORtZum5kjf5i5g== -----END CERTIFICATE-----Generated at Wed Aug 20 18:26:28 2025 by rpki-client