$ rpki-client -vvf rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.mft File: 43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.mft (raw, json) Hash identifier: CdXbqAz47/gtg/us2pDuuBbLTWA6fRRFgna0X3sRIts= Subject key identifier: 28:4F:27:9E:F9:4C:46:5F:81:31:D3:97:72:E1:9A:D1:E8:C0:F2:74 Authority key identifier: 43:EF:4E:8E:E5:9B:B6:23:05:EF:CD:46:24:CA:E9:D5:24:4E:DC:7A Certificate issuer: /CN=43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A Certificate serial: 39742DA0D8C77927149AED56FFB64F59B1B53463 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.cer Subject info access: rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.mft Manifest number: 0298 Signing time: Wed 20 Aug 2025 03:41:00 +0000 Manifest this update: Wed 20 Aug 2025 03:36:00 +0000 Manifest next update: Thu 21 Aug 2025 05:11:00 +0000 Files and hashes: 1: 43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.crl (hash: aukhyFfynEjJ3VydajdgTIs+nNFfDFmSN0AU8KEKpEs=) 2: 34352e3233322e3231362e302f32322d3332203d3e20323637323833.roa (hash: HZOMCQvACxK5hIcxem65Z0htR9GEeLOhQ6yQeHTZFOk=) 3: 323830343a346231383a3a2f33322d313238203d3e20323637323833.roa (hash: XSBxhaojS/anw53JSEpG22kpAgBvujSnoz+0hrLNHjc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.crl rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 05:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:74:2d:a0:d8:c7:79:27:14:9a:ed:56:ff:b6:4f:59:b1:b5:34:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A Validity Not Before: Aug 20 03:36:00 2025 GMT Not After : Aug 21 05:11:00 2025 GMT Subject: CN=284F279EF94C465F8131D39772E19AD1E8C0F274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a7:5b:ed:f9:a7:5d:e3:c5:1a:86:af:0f:1c: 4f:c5:83:79:dd:93:1a:ff:5b:59:56:10:39:b2:9e: f6:f7:8d:dc:86:e2:05:ca:a2:73:56:54:78:3d:15: e6:c4:ab:f2:22:3e:ca:88:f6:75:96:68:43:ba:37: 86:9a:6c:d0:d7:ba:3b:df:53:26:40:b5:e6:f8:cc: ff:c5:23:de:56:ec:d8:f9:6d:cf:32:55:6f:4d:5c: 49:3b:b6:7b:30:26:87:35:70:d1:c4:4a:51:49:30: 04:dd:2f:b9:58:68:a2:3a:4b:dd:7f:4c:4b:04:79: 2d:b2:3a:ef:e2:6d:64:e9:58:0d:47:4b:11:0e:90: 56:bd:27:cd:43:50:15:e1:7d:52:7c:89:09:39:e4: fd:a6:30:39:fd:15:06:44:22:38:c9:6c:fd:88:07: 80:8c:0e:07:e9:34:95:7a:43:0c:ad:54:94:eb:e6: 24:8f:1b:21:e5:37:f5:48:88:6a:51:fa:d9:28:dc: c5:51:8d:9e:cb:a4:fb:29:84:3b:82:80:f2:35:61: 06:96:c8:e7:aa:45:8f:0c:b9:c6:62:4f:73:e9:45: 02:1c:8d:43:04:04:9e:b7:3d:c5:ad:b1:a1:5b:fe: ab:3c:ad:1c:08:bb:ec:c7:7a:ba:e1:35:a3:84:f3: 8b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4F:27:9E:F9:4C:46:5F:81:31:D3:97:72:E1:9A:D1:E8:C0:F2:74 X509v3 Authority Key Identifier: keyid:43:EF:4E:8E:E5:9B:B6:23:05:EF:CD:46:24:CA:E9:D5:24:4E:DC:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:35:41:14:83:2f:e5:2c:95:36:76:6b:0d:a8:52:cb:ea:3b: f3:1e:75:0a:57:be:9d:ea:15:f1:b2:6a:67:e7:d3:e1:07:29: 31:19:3a:39:60:82:78:09:b0:3d:6f:2a:e5:5a:90:7c:a5:c7: 06:94:81:8d:39:c8:da:ab:66:fb:bc:21:8b:5f:e1:36:d2:0d: ac:b0:e9:54:c2:7c:ac:8a:ab:2c:f6:aa:41:ab:55:b8:ec:bb: 31:19:eb:21:7b:2b:ee:53:8f:9b:ab:e8:85:1d:47:66:d4:5f: fa:ab:8e:3e:ef:30:e4:78:d7:20:48:5c:2f:a4:d8:31:8e:8b: bf:ae:aa:78:f6:57:75:a6:f0:22:20:e0:e0:b2:35:d9:1f:0a: 1e:3e:d6:37:23:bb:53:28:1b:dc:7e:67:95:d9:2e:21:26:77: ab:21:9b:04:ff:2c:71:92:e4:24:f1:5a:37:82:5c:36:d5:2d: 12:02:11:d8:bd:59:0a:22:6a:b7:2b:18:b2:85:a7:ba:c5:49: 53:41:d3:92:d3:aa:1f:b0:54:c4:34:ff:0c:d0:1d:18:fb:28: e6:45:99:66:7e:62:87:dd:68:08:7d:4c:91:b4:05:79:1b:0e: 41:42:62:e0:07:00:f0:72:f2:5a:ec:8f:21:20:a9:a6:f7:e6: 14:07:a8:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOXQtoNjHeScUmu1W/7ZPWbG1NGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFRjRFOEVFNTlCQjYyMzA1RUZDRDQ2MjRDQUU5RDUy NDRFREM3QTAeFw0yNTA4MjAwMzM2MDBaFw0yNTA4MjEwNTExMDBaMDMxMTAvBgNV BAMTKDI4NEYyNzlFRjk0QzQ2NUY4MTMxRDM5NzcyRTE5QUQxRThDMEYyNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnp1vt+add48Uahq8PHE/Fg3nd kxr/W1lWEDmynvb3jdyG4gXKonNWVHg9FebEq/IiPsqI9nWWaEO6N4aabNDXujvf UyZAteb4zP/FI95W7Nj5bc8yVW9NXEk7tnswJoc1cNHESlFJMATdL7lYaKI6S91/ TEsEeS2yOu/ibWTpWA1HSxEOkFa9J81DUBXhfVJ8iQk55P2mMDn9FQZEIjjJbP2I B4CMDgfpNJV6QwytVJTr5iSPGyHlN/VIiGpR+tko3MVRjZ7LpPsphDuCgPI1YQaW yOeqRY8MucZiT3PpRQIcjUMEBJ63PcWtsaFb/qs8rRwIu+zHerrhNaOE84uDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKE8nnvlMRl+BMdOXcuGa0ejA8nQwHwYDVR0j BBgwFoAUQ+9OjuWbtiMF781GJMrp1SRO3HowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHZTYmlZRG1uN25ldTViR1hVYWRZY255dFp6ZVJLRWdRZFBUcjhLckJz aGcvMS80M0VGNEU4RUU1OUJCNjIzMDVFRkNENDYyNENBRTlENTI0NEVEQzdBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRUY0RThFRTU5QkI2MjMw NUVGQ0Q0NjI0Q0FFOUQ1MjQ0RURDN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHZTYmlZRG1uN25ldTViR1hVYWRZY255dFp6ZVJLRWdRZFBUcjhLckJzaGcvMS80 M0VGNEU4RUU1OUJCNjIzMDVFRkNENDYyNENBRTlENTI0NEVEQzdBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFTVBFIMv5SyVNnZrDahSy+o78x51Cle+neoV8bJqZ+fT4QcpMRk6OWCCeAmw PW8q5VqQfKXHBpSBjTnI2qtm+7whi1/hNtINrLDpVMJ8rIqrLPaqQatVuOy7MRnr IXsr7lOPm6vohR1HZtRf+quOPu8w5HjXIEhcL6TYMY6Lv66qePZXdabwIiDg4LI1 2R8KHj7WNyO7Uygb3H5nldkuISZ3qyGbBP8scZLkJPFaN4JcNtUtEgIR2L1ZCiJq tysYsoWnusVJU0HTktOqH7BUxDT/DNAdGPso5kWZZn5ih91oCH1MkbQFeRsOQUJi 4AcA8HLyWuyPISCppvfmFAeopg== -----END CERTIFICATE-----Generated at Wed Aug 20 16:17:40 2025 by rpki-client