$ rpki-client -vvf rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft File: D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft (raw, json) Hash identifier: vFWnhwLISZwaxwQLB/lukGSlsZLt43XEmIuma+YjTME= Subject key identifier: 77:92:51:B9:15:DF:9E:EB:B0:FE:AD:BF:F9:3D:6A:59:87:A3:AA:C2 Authority key identifier: D2:3F:9B:F7:7C:C1:B3:2D:E1:FE:EA:20:8F:14:CD:34:38:A4:DC:BE Certificate issuer: /CN=D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE Certificate serial: 1695E9B47B865FD137F6A83918BE51B3BCBCF994 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer Subject info access: rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft Manifest number: 7D Signing time: Wed 20 Aug 2025 07:18:55 +0000 Manifest this update: Wed 20 Aug 2025 07:13:55 +0000 Manifest next update: Thu 21 Aug 2025 09:39:55 +0000 Files and hashes: 1: 3133382e302e3230342e302f32322d3234203d3e20323634353536.roa (hash: Bp/MXpC4FvWK4Yo9ZUl+rpN/2KDLvDApID7I3LrdZiw=) 2: 3136382e3232372e38382e302f32322d3234203d3e20323634353536.roa (hash: am5A4bo+CeX/idLnSOVp8k4cvl+rRIWfZDIw8duCyYA=) 3: D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl (hash: yrEPWz+wiGZo7Z0G7pgvOefTOyxtbNr0eFgfPKBJ5sQ=) 4: 323830343a323137383a3a2f33322d3438203d3e20323634353536.roa (hash: GksSVdLS7K0cl550vTDzKqmAY2+LTjqW45XiI8cG9xk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 09:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:95:e9:b4:7b:86:5f:d1:37:f6:a8:39:18:be:51:b3:bc:bc:f9:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE Validity Not Before: Aug 20 07:13:55 2025 GMT Not After : Aug 21 09:39:55 2025 GMT Subject: CN=779251B915DF9EEBB0FEADBFF93D6A5987A3AAC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c0:06:e2:6d:f1:0a:4a:8b:6c:c9:a5:d2:78: 83:13:58:95:e4:c5:bd:01:3f:d5:6a:30:7e:22:e6: ac:a5:2b:64:3f:5f:73:5e:9e:9a:35:d0:be:8e:8d: a9:2e:aa:b4:7e:a6:68:ff:f3:77:cb:31:a2:ac:51: b0:35:52:79:c3:f9:1a:da:5c:f3:48:9b:40:49:1c: 24:bc:08:bf:cc:b3:99:6f:29:d3:40:24:67:17:6b: 81:d5:44:12:1c:47:f5:be:26:c4:c3:0a:bb:95:71: 7f:cf:80:9f:c3:b6:a4:b7:6d:ce:3b:b0:0b:f9:53: 04:e1:d1:ac:dd:28:c8:92:fd:15:c2:03:47:5b:eb: ca:ea:6a:89:e2:a9:a8:47:41:a2:45:a7:ca:f6:4e: 41:97:ae:5d:8d:18:5a:fe:29:61:8b:7d:43:5a:d8: 16:e7:b6:c6:f9:df:e3:9d:28:9c:42:cb:d7:11:d6: 9d:bb:a0:73:fc:4d:6f:a7:95:b1:79:9a:50:d4:d6: 6e:91:21:0c:52:c4:3d:54:71:3f:a8:92:6f:00:0e: 61:b9:50:ba:71:0e:d7:10:ab:0b:a9:21:8d:e1:1d: dd:cd:5b:ae:23:aa:81:71:de:ab:9f:d1:51:d3:ff: d4:81:36:c4:09:bd:95:20:73:14:14:05:02:ba:45: 00:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:92:51:B9:15:DF:9E:EB:B0:FE:AD:BF:F9:3D:6A:59:87:A3:AA:C2 X509v3 Authority Key Identifier: keyid:D2:3F:9B:F7:7C:C1:B3:2D:E1:FE:EA:20:8F:14:CD:34:38:A4:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:fd:3a:07:8b:63:5b:51:24:00:5a:78:21:32:e0:52:3a:90: 37:6c:30:50:6c:82:4c:06:f1:b7:21:64:98:41:ea:a5:6b:c2: 52:c6:ed:16:e3:6c:69:f3:d7:e4:63:f8:be:50:92:d2:df:52: a1:c8:cd:19:e5:80:ca:23:c8:0a:22:da:a8:a8:45:31:13:b7: 76:c4:f5:f1:e3:c8:1b:12:b9:6f:60:a8:93:95:87:80:36:f6: 65:81:38:9c:fe:7b:32:65:d3:ae:cf:fd:49:f5:e6:ea:ae:cd: 60:0c:a4:f4:b6:7e:37:e8:80:7e:88:bb:aa:21:b8:89:fd:51: b1:8e:d2:f6:07:dd:e8:7f:1c:e0:84:d7:5f:f6:35:0a:9e:c8: a6:1a:ba:e2:db:0e:cf:04:2f:3a:a2:0e:66:63:85:f3:aa:3b: 43:12:6a:2e:fa:5d:c6:0a:77:90:e2:00:90:1d:21:48:4d:cb: b5:a5:a0:93:56:19:09:9a:dc:bc:5a:25:6a:19:54:70:9b:4c: fb:07:0f:62:dc:de:8e:34:d7:69:14:29:51:86:4f:8b:bd:cf: 02:62:e8:dc:39:6a:94:bc:c5:be:d5:6d:08:bc:d2:91:40:6d: c8:da:6c:34:ca:b2:ec:2f:29:62:d5:ea:b4:7f:cf:b9:e9:ab: 60:dd:b8:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFpXptHuGX9E39qg5GL5Rs7y8+ZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIzRjlCRjc3Q0MxQjMyREUxRkVFQTIwOEYxNENEMzQz OEE0RENCRTAeFw0yNTA4MjAwNzEzNTVaFw0yNTA4MjEwOTM5NTVaMDMxMTAvBgNV BAMTKDc3OTI1MUI5MTVERjlFRUJCMEZFQURCRkY5M0Q2QTU5ODdBM0FBQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqwAbibfEKSotsyaXSeIMTWJXk xb0BP9VqMH4i5qylK2Q/X3Nenpo10L6OjakuqrR+pmj/83fLMaKsUbA1UnnD+Rra XPNIm0BJHCS8CL/Ms5lvKdNAJGcXa4HVRBIcR/W+JsTDCruVcX/PgJ/DtqS3bc47 sAv5UwTh0azdKMiS/RXCA0db68rqaoniqahHQaJFp8r2TkGXrl2NGFr+KWGLfUNa 2Bbntsb53+OdKJxCy9cR1p27oHP8TW+nlbF5mlDU1m6RIQxSxD1UcT+okm8ADmG5 ULpxDtcQqwupIY3hHd3NW64jqoFx3quf0VHT/9SBNsQJvZUgcxQUBQK6RQDFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUd5JRuRXfnuuw/q2/+T1qWYejqsIwHwYDVR0j BBgwFoAU0j+b93zBsy3h/uogjxTNNDik3L4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHhuWGlSQjN6c0NMQkdjc1pnYVJzS0xiN3Mzc3dIeDN2b1Z4NHlUa0px cnMvMC9EMjNGOUJGNzdDQzFCMzJERTFGRUVBMjA4RjE0Q0QzNDM4QTREQ0JFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyM0Y5QkY3N0NDMUIzMkRF MUZFRUEyMDhGMTRDRDM0MzhBNERDQkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHhuWGlSQjN6c0NMQkdjc1pnYVJzS0xiN3Mzc3dIeDN2b1Z4NHlUa0pxcnMvMC9E MjNGOUJGNzdDQzFCMzJERTFGRUVBMjA4RjE0Q0QzNDM4QTREQ0JFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK/06B4tjW1EkAFp4ITLgUjqQN2wwUGyCTAbxtyFkmEHqpWvCUsbtFuNsafPX 5GP4vlCS0t9SocjNGeWAyiPICiLaqKhFMRO3dsT18ePIGxK5b2Cok5WHgDb2ZYE4 nP57MmXTrs/9SfXm6q7NYAyk9LZ+N+iAfoi7qiG4if1RsY7S9gfd6H8c4ITXX/Y1 Cp7Iphq64tsOzwQvOqIOZmOF86o7QxJqLvpdxgp3kOIAkB0hSE3LtaWgk1YZCZrc vFolahlUcJtM+wcPYtzejjTXaRQpUYZPi73PAmLo3DlqlLzFvtVtCLzSkUBtyNps NMqy7C8pYtXqtH/PuemrYN247Q== -----END CERTIFICATE-----Generated at Wed Aug 20 19:53:10 2025 by rpki-client