$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft File: 8AD497903AB3566443C9C794694A61EFE427FA7A.mft (raw, json) Hash identifier: Fu0qy4wGSPhtNSrqyudl51wv+3/NOo97nPgUW1j7CW0= Subject key identifier: 35:30:8D:D9:68:25:3D:BE:0F:32:54:C5:99:40:AA:D8:EF:E9:0C:25 Authority key identifier: 8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A Certificate issuer: /CN=8AD497903AB3566443C9C794694A61EFE427FA7A Certificate serial: 634D6A116771DD6205BA9A4778A4757A70AD1F7F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft Manifest number: 02A6 Signing time: Tue 19 Aug 2025 22:49:25 +0000 Manifest this update: Tue 19 Aug 2025 22:44:25 +0000 Manifest next update: Thu 21 Aug 2025 02:11:25 +0000 Files and hashes: 1: 323830343a383630343a3a2f33322d3332203d3e20323732363134.roa (hash: UuJdu9oNRzQAzqGiZTO4vBqCVsMzpdiamCVuQEkL6sg=) 2: 8AD497903AB3566443C9C794694A61EFE427FA7A.crl (hash: 4DiU+2rjyraIGFLGggcQOC1oZvSe0+BAtdQu3SPfLXE=) 3: 323830343a383630343a3a2f33332d3333203d3e20323732363134.roa (hash: Cx4646zrPKq6xD6iBJPkGxFHe6jY6KpJK0fDkBl/7Jo=) 4: 323830343a383630343a383030303a3a2f33332d3333203d3e20323732363134.roa (hash: ORpItz/kBb3bXBiU/q9Su7SYmZ2oQTmI/c9DsHZIB4Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 02:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:4d:6a:11:67:71:dd:62:05:ba:9a:47:78:a4:75:7a:70:ad:1f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AD497903AB3566443C9C794694A61EFE427FA7A Validity Not Before: Aug 19 22:44:25 2025 GMT Not After : Aug 21 02:11:25 2025 GMT Subject: CN=35308DD968253DBE0F3254C59940AAD8EFE90C25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:62:ea:a6:e0:a7:94:0b:ee:a4:22:da:fd:16: bf:eb:6d:71:94:30:66:32:f3:48:ec:bf:c1:4a:bb: a9:d9:68:d7:ef:f7:15:eb:9e:bf:90:c9:77:e1:3c: 1b:0f:9e:f8:e0:70:65:26:d0:4b:40:d0:78:4d:06: 2a:5e:aa:70:33:cf:45:8d:29:ab:9d:25:a3:0d:09: 77:bc:ae:ea:fe:53:ea:77:47:67:bc:eb:9f:dc:17: b0:70:28:ee:56:b1:bc:cf:6f:31:2f:e5:b7:20:04: cc:e8:2f:b7:9a:b4:e2:8c:2b:3a:cd:17:ad:11:36: 97:15:c5:7f:63:c6:56:33:8b:df:cd:db:3a:32:81: 13:44:92:95:21:db:5d:2a:5c:43:cd:63:a4:67:42: 8d:70:61:77:0f:b7:3b:35:22:f5:29:a0:88:2e:f5: 2b:59:0d:38:69:a6:df:bb:69:ae:84:e1:97:f5:46: 38:a4:54:9c:25:fb:70:9f:d0:83:4e:35:72:45:00: 03:ca:ea:d1:d0:93:5d:55:d3:5c:1a:c1:07:70:57: 92:b0:8d:10:d9:d3:38:05:0f:81:1e:af:a3:0f:2f: 62:91:0f:fa:56:9c:96:9f:4f:47:d0:a3:3b:be:53: eb:aa:8f:61:fc:a9:21:68:7a:8c:28:c6:80:35:a0: e6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:30:8D:D9:68:25:3D:BE:0F:32:54:C5:99:40:AA:D8:EF:E9:0C:25 X509v3 Authority Key Identifier: keyid:8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:24:28:07:f5:b4:c2:d5:71:e7:b6:52:0f:c1:e3:1e:de:b8: a0:db:d2:82:17:5a:fa:77:6e:38:47:66:ad:5a:16:57:95:fa: 18:35:3d:67:b1:d3:1a:ff:14:d2:52:7a:56:42:f4:6f:3a:40: f9:67:20:89:f2:7d:56:ae:f9:58:d5:3b:57:a5:9d:0e:da:ee: c3:9c:1c:b6:30:4a:cd:9d:48:f2:90:8d:91:84:db:5a:c2:cf: 02:a1:00:5e:d8:4f:25:c7:ac:00:c2:18:a2:91:07:2b:ee:5e: 01:87:81:f2:92:4d:fa:e5:86:18:bc:fa:8e:72:8e:48:c0:bb: 83:75:51:c9:3c:dc:e3:9e:7a:17:8c:d9:c6:1b:c2:93:c8:73: 4e:ea:3d:e0:d9:c0:e9:7f:cf:d5:e1:ea:13:f1:c2:79:82:3a: 91:4a:d0:c4:49:38:e3:32:cb:a5:0c:c8:ff:2c:f5:31:35:31: 0c:90:04:84:43:eb:22:65:d1:c3:5e:ff:d8:c2:b5:33:4d:fb: 93:ba:8b:e8:ec:dd:a0:e8:db:f1:82:7f:4d:55:0b:36:e2:0c: 21:12:4a:d0:54:0d:b8:4b:66:96:04:57:af:cb:0c:26:3d:21: 88:37:d5:3c:d3:37:9b:a2:f8:e9:ce:29:33:d8:1a:86:eb:5d: ae:ad:27:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUY01qEWdx3WIFuppHeKR1enCtH38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFENDk3OTAzQUIzNTY2NDQzQzlDNzk0Njk0QTYxRUZF NDI3RkE3QTAeFw0yNTA4MTkyMjQ0MjVaFw0yNTA4MjEwMjExMjVaMDMxMTAvBgNV BAMTKDM1MzA4REQ5NjgyNTNEQkUwRjMyNTRDNTk5NDBBQUQ4RUZFOTBDMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Yuqm4KeUC+6kItr9Fr/rbXGU MGYy80jsv8FKu6nZaNfv9xXrnr+QyXfhPBsPnvjgcGUm0EtA0HhNBipeqnAzz0WN KaudJaMNCXe8rur+U+p3R2e865/cF7BwKO5WsbzPbzEv5bcgBMzoL7eatOKMKzrN F60RNpcVxX9jxlYzi9/N2zoygRNEkpUh210qXEPNY6RnQo1wYXcPtzs1IvUpoIgu 9StZDThppt+7aa6E4Zf1RjikVJwl+3Cf0INONXJFAAPK6tHQk11V01wawQdwV5Kw jRDZ0zgFD4Eer6MPL2KRD/pWnJafT0fQozu+U+uqj2H8qSFoeowoxoA1oOY5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNTCN2WglPb4PMlTFmUCq2O/pDCUwHwYDVR0j BBgwFoAUitSXkDqzVmRDyceUaUph7+Qn+nowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFl5NGFKTVB2emFja2tMSGc0azlvSEhIWjdnam5FcmtRUEpVYXN2cDZh bk4vMS84QUQ0OTc5MDNBQjM1NjY0NDNDOUM3OTQ2OTRBNjFFRkU0MjdGQTdBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBRDQ5NzkwM0FCMzU2NjQ0 M0M5Qzc5NDY5NEE2MUVGRTQyN0ZBN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFl5NGFKTVB2emFja2tMSGc0azlvSEhIWjdnam5FcmtRUEpVYXN2cDZhbk4vMS84 QUQ0OTc5MDNBQjM1NjY0NDNDOUM3OTQ2OTRBNjFFRkU0MjdGQTdBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnCQoB/W0wtVx57ZSD8HjHt64oNvSghda+nduOEdmrVoWV5X6GDU9Z7HTGv8U 0lJ6VkL0bzpA+WcgifJ9Vq75WNU7V6WdDtruw5wctjBKzZ1I8pCNkYTbWsLPAqEA XthPJcesAMIYopEHK+5eAYeB8pJN+uWGGLz6jnKOSMC7g3VRyTzc4556F4zZxhvC k8hzTuo94NnA6X/P1eHqE/HCeYI6kUrQxEk44zLLpQzI/yz1MTUxDJAEhEPrImXR w17/2MK1M037k7qL6OzdoOjb8YJ/TVULNuIMIRJK0FQNuEtmlgRXr8sMJj0hiDfV PNM3m6L46c4pM9gahutdrq0nOg== -----END CERTIFICATE-----Generated at Wed Aug 20 15:39:00 2025 by rpki-client