$ rpki-client -vvf rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft File: 0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft (raw, json) Hash identifier: fk4na7f68kDzh+II/OmKx3MHKwJZD+csIsmmL3jx0Ec= Subject key identifier: CB:3C:73:0D:8E:E3:BE:CA:24:C1:2E:74:D0:39:91:51:22:A9:17:6B Authority key identifier: 0A:2B:2F:4D:32:F3:48:A3:E7:5A:31:A4:8F:A6:BC:E1:94:9A:E7:F0 Certificate issuer: /CN=0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0 Certificate serial: 0FF48EB7A86EC1AE9CD28B70075F2B2659D7DCE0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft Manifest number: 29 Signing time: Wed 20 Aug 2025 14:55:07 +0000 Manifest this update: Wed 20 Aug 2025 14:50:07 +0000 Manifest next update: Thu 21 Aug 2025 17:13:07 +0000 Files and hashes: 1: 34352e3136332e3131362e302f32322d3332203d3e20323638353737.roa (hash: Et77+LynBLMWqk+rHPa5qaEBgzJDRsbZGk2IR87u0z0=) 2: 0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.crl (hash: skECIEwpppxq4HngIJjSKUKFz6xtxs2aQZy9l1cLkHw=) 3: 323830343a353335343a3a2f33322d313238203d3e20323638353737.roa (hash: youEd1A6G9ZdagofZd+N94Vs6aXJfkDPw454AC/ppO0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.crl rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 17:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f4:8e:b7:a8:6e:c1:ae:9c:d2:8b:70:07:5f:2b:26:59:d7:dc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0 Validity Not Before: Aug 20 14:50:07 2025 GMT Not After : Aug 21 17:13:07 2025 GMT Subject: CN=CB3C730D8EE3BECA24C12E74D039915122A9176B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:28:bf:be:0f:c9:8c:75:68:52:f3:ef:94:63: 2d:e1:72:13:9d:2c:ed:30:76:dc:d9:13:77:b5:ec: a6:1c:8d:01:45:7e:55:a5:6d:97:73:7d:15:52:3f: 89:a9:34:ff:9f:99:12:cf:0b:25:c3:46:5a:a8:c2: 61:5c:8a:c2:50:c4:a6:8f:44:6f:cc:14:8d:e2:ee: 71:75:7c:c6:a5:f6:ba:30:91:00:30:42:5c:84:1e: 37:6b:bb:49:f2:f9:49:23:9f:87:39:df:eb:63:eb: 59:c2:0b:95:e9:18:c5:7d:56:27:65:67:7c:ec:7b: 9f:cb:a6:9c:e9:8f:dc:c9:9a:e4:75:be:0f:5d:5f: f8:e1:3b:5f:b9:a0:12:be:47:8f:81:20:22:27:fd: 2d:e1:9c:56:25:c5:4d:3c:fd:4b:d0:e8:aa:a5:fe: c7:2a:eb:13:f8:b8:de:38:fb:70:41:0d:c7:77:0a: 8c:28:28:94:68:ba:b3:68:93:e0:5a:d4:69:8b:b9: 29:cb:ea:b5:0a:df:14:ab:b5:10:17:bb:b2:a9:a3: dd:8e:53:20:f1:a5:c5:8d:74:69:83:59:16:43:fe: 28:90:5f:c2:1b:ed:eb:6e:80:a8:58:61:94:49:e8: f2:b4:54:17:7a:2f:5f:9f:5d:05:84:48:09:54:f6: ed:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3C:73:0D:8E:E3:BE:CA:24:C1:2E:74:D0:39:91:51:22:A9:17:6B X509v3 Authority Key Identifier: keyid:0A:2B:2F:4D:32:F3:48:A3:E7:5A:31:A4:8F:A6:BC:E1:94:9A:E7:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:5b:d4:cf:bf:7a:bd:ee:90:2b:f8:23:21:1f:2c:5f:a4:09: c3:fa:35:90:8b:73:db:45:67:5c:db:52:70:2b:a5:1d:d8:00: d7:09:f7:98:52:3d:2a:eb:ef:3c:fa:15:32:60:b4:4c:94:1a: 9a:c1:36:69:5e:45:2b:eb:f1:cd:36:af:3f:39:a0:10:de:96: 5f:0b:51:f5:6f:c2:c5:c5:fc:b0:da:22:dc:a9:2c:a4:89:0d: 78:c6:e2:f1:bb:85:13:e9:df:2a:f0:d6:b4:a1:36:6b:45:cd: 2c:38:2d:9d:81:5a:63:11:ef:0b:3e:cf:82:f3:8d:0a:dd:21: c3:e7:5c:b6:ea:d3:26:63:e2:0f:d3:9f:3e:27:25:2d:1c:0b: 85:7b:d9:5c:64:2d:39:3a:0c:17:70:ae:51:f5:e9:ad:e9:97: 9f:f5:3c:14:ea:5d:72:3e:0b:2c:f8:76:5c:21:bb:a8:1c:cf: 0d:da:31:8c:77:c4:8c:ca:1e:53:1e:a0:9c:18:bd:6b:18:77: 40:c2:cc:f8:5d:33:d6:da:72:1e:7a:a0:06:b4:37:3a:6a:be: 64:d7:a1:91:c4:82:88:36:02:a7:e8:a5:ba:70:e8:51:91:ff: 7a:94:2b:d1:0b:d6:51:fc:93:f9:c4:14:81:b6:db:f0:e2:d9: 8b:15:1f:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD/SOt6huwa6c0otwB18rJlnX3OAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEyQjJGNEQzMkYzNDhBM0U3NUEzMUE0OEZBNkJDRTE5 NDlBRTdGMDAeFw0yNTA4MjAxNDUwMDdaFw0yNTA4MjExNzEzMDdaMDMxMTAvBgNV BAMTKENCM0M3MzBEOEVFM0JFQ0EyNEMxMkU3NEQwMzk5MTUxMjJBOTE3NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdKL++D8mMdWhS8++UYy3hchOd LO0wdtzZE3e17KYcjQFFflWlbZdzfRVSP4mpNP+fmRLPCyXDRlqowmFcisJQxKaP RG/MFI3i7nF1fMal9rowkQAwQlyEHjdru0ny+Ukjn4c53+tj61nCC5XpGMV9Vidl Z3zse5/Lppzpj9zJmuR1vg9dX/jhO1+5oBK+R4+BICIn/S3hnFYlxU08/UvQ6Kql /scq6xP4uN44+3BBDcd3CowoKJRourNok+Ba1GmLuSnL6rUK3xSrtRAXu7Kpo92O UyDxpcWNdGmDWRZD/iiQX8Ib7etugKhYYZRJ6PK0VBd6L1+fXQWESAlU9u2nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyzxzDY7jvsokwS500DmRUSKpF2swHwYDVR0j BBgwFoAUCisvTTLzSKPnWjGkj6a84ZSa5/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRVl4Rzg3VUxNcGNHRlJONXR1cUpuQzRwUHZMUVNDRTlKVnZmOEM1OUZk SlIvMC8wQTJCMkY0RDMyRjM0OEEzRTc1QTMxQTQ4RkE2QkNFMTk0OUFFN0YwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBMkIyRjREMzJGMzQ4QTNF NzVBMzFBNDhGQTZCQ0UxOTQ5QUU3RjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RVl4Rzg3VUxNcGNHRlJONXR1cUpuQzRwUHZMUVNDRTlKVnZmOEM1OUZkSlIvMC8w QTJCMkY0RDMyRjM0OEEzRTc1QTMxQTQ4RkE2QkNFMTk0OUFFN0YwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtlvUz796ve6QK/gjIR8sX6QJw/o1kItz20VnXNtScCulHdgA1wn3mFI9Kuvv PPoVMmC0TJQamsE2aV5FK+vxzTavPzmgEN6WXwtR9W/CxcX8sNoi3KkspIkNeMbi 8buFE+nfKvDWtKE2a0XNLDgtnYFaYxHvCz7PgvONCt0hw+dcturTJmPiD9OfPicl LRwLhXvZXGQtOToMF3CuUfXpremXn/U8FOpdcj4LLPh2XCG7qBzPDdoxjHfEjMoe Ux6gnBi9axh3QMLM+F0z1tpyHnqgBrQ3Omq+ZNehkcSCiDYCp+ilunDoUZH/epQr 0QvWUfyT+cQUgbbb8OLZixUfMA== -----END CERTIFICATE-----Generated at Wed Aug 20 21:18:48 2025 by rpki-client