$ rpki-client -vvf rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft File: CE444325009DC85BE712BCD01156510F2B6F4AB9.mft (raw, json) Hash identifier: ChG/XZYU7xMpgTU3fKwZUsebqOpztlD3UIAWgnrpEbY= Subject key identifier: B9:5C:10:57:0F:A2:D4:5E:AE:98:44:C4:60:5B:FF:63:EE:82:88:45 Authority key identifier: CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9 Certificate issuer: /CN=CE444325009DC85BE712BCD01156510F2B6F4AB9 Certificate serial: 4FCBD120B0A2BC6DAAA4F10F16E22595A95B2F9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer Subject info access: rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft Manifest number: 027E Signing time: Sun 27 Jul 2025 04:25:10 +0000 Manifest this update: Sun 27 Jul 2025 04:20:10 +0000 Manifest next update: Mon 28 Jul 2025 06:22:10 +0000 Files and hashes: 1: 3133382e3235352e3230302e302f32322d3234203d3e20323634353132.roa (hash: 0I6R76WFWVe6GvnC6HPSO5DNoIpkRloxekrdv5uaocA=) 2: 323830343a323063303a3a2f33322d3438203d3e20323634353132.roa (hash: xee9sI4lZhpA/ae1SfSHZt6s0IIwr6d9n4pRuri1Uv0=) 3: 3133322e3235352e3232382e302f32322d3234203d3e20323634353132.roa (hash: 5G9Dy/D8jUa6k6N7o6A0OHuAONqqnFUQzjSegVsSatU=) 4: CE444325009DC85BE712BCD01156510F2B6F4AB9.crl (hash: AVsa7uLTLCXW3NivJ+t7+KpEMFNF58DqiJfQwAj1f/g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Jul 2025 06:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:cb:d1:20:b0:a2:bc:6d:aa:a4:f1:0f:16:e2:25:95:a9:5b:2f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE444325009DC85BE712BCD01156510F2B6F4AB9 Validity Not Before: Jul 27 04:20:10 2025 GMT Not After : Jul 28 06:22:10 2025 GMT Subject: CN=B95C10570FA2D45EAE9844C4605BFF63EE828845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:66:2b:ed:36:e5:51:aa:90:1f:91:3f:5f:46: 13:16:ed:07:3a:d2:c0:30:fe:57:e3:26:4e:e5:b4: 94:a9:7e:fd:8f:f9:72:62:5a:46:35:e5:2d:70:3b: b5:56:c7:16:2b:f6:98:aa:8b:34:68:8f:f6:b4:71: 86:f9:2c:64:81:46:d8:b6:97:03:dc:6e:92:97:f5: df:d5:bd:b3:24:bc:c9:b2:f4:14:75:8c:a2:93:eb: 24:83:f2:7e:c2:be:04:b6:29:a4:a0:31:c1:01:c9: 25:07:37:ca:40:8f:cc:e5:41:e4:4c:11:55:f8:63: bd:07:db:99:2f:bc:d0:2d:dd:52:01:37:89:69:2f: 07:8a:38:f5:9a:6c:19:ac:c5:ba:d7:d9:48:02:e8: a9:28:ff:87:50:b3:7b:12:11:82:43:7b:fe:92:11: db:90:a9:e8:58:23:b9:f1:56:58:05:19:2d:da:4e: 42:85:26:1a:7f:a1:06:62:0f:06:4f:3d:f8:b5:cf: fa:9d:2c:db:56:db:8d:fd:5d:3c:65:09:00:44:58: 6d:38:c9:74:ec:70:62:d3:84:66:b6:61:88:39:53: fd:29:3d:ed:57:1a:4d:16:ea:94:14:db:c7:63:fc: 61:57:a9:ff:47:bd:93:ef:bc:35:98:d9:87:7c:66: d1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5C:10:57:0F:A2:D4:5E:AE:98:44:C4:60:5B:FF:63:EE:82:88:45 X509v3 Authority Key Identifier: keyid:CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:83:62:4c:40:da:0b:d9:00:4e:ff:b4:73:4c:ac:29:00:94: 8f:fb:32:c9:8d:d4:31:71:64:77:e9:ad:f6:a4:4d:91:f0:61: 73:b1:af:65:b8:03:e6:86:c0:9f:72:5e:85:5c:95:b4:5c:cb: 1a:65:69:85:97:f7:e6:31:c5:61:b9:b7:e7:a2:f3:7f:86:08: ba:67:21:74:70:30:6f:01:b4:60:c4:6d:ed:3c:51:52:bc:0c: d2:4d:ed:2b:98:7c:5b:4d:7a:ac:bd:c7:56:36:06:23:eb:16: d7:ca:a6:a5:20:ff:82:b1:ea:e4:06:1f:1f:a4:59:6b:8e:73: 07:88:30:6e:79:7a:e3:19:69:4f:ad:2b:4e:7e:5e:4d:ce:30: 19:e0:5c:04:b1:42:20:54:3b:36:6a:90:5b:56:c9:c2:a4:70: 4d:bb:eb:5b:16:f0:ba:c2:31:17:29:f8:e3:62:c5:cc:e2:ef: 48:a5:85:4e:10:55:e9:8b:c9:a2:28:3a:4f:f9:16:f2:73:e2: 3e:a9:96:08:2d:fe:d5:0a:c7:b9:fe:29:46:cb:61:ff:fd:9b: a9:84:3f:ca:f3:e6:8f:02:ff:ef:25:c8:a7:5f:d5:43:1e:35: af:65:c8:4f:37:67:ec:38:ec:7a:42:92:67:35:eb:bb:b5:3c: 7f:5c:05:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUT8vRILCivG2qpPEPFuIllalbL58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U0NDQzMjUwMDlEQzg1QkU3MTJCQ0QwMTE1NjUxMEYy QjZGNEFCOTAeFw0yNTA3MjcwNDIwMTBaFw0yNTA3MjgwNjIyMTBaMDMxMTAvBgNV BAMTKEI5NUMxMDU3MEZBMkQ0NUVBRTk4NDRDNDYwNUJGRjYzRUU4Mjg4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZivtNuVRqpAfkT9fRhMW7Qc6 0sAw/lfjJk7ltJSpfv2P+XJiWkY15S1wO7VWxxYr9piqizRoj/a0cYb5LGSBRti2 lwPcbpKX9d/VvbMkvMmy9BR1jKKT6ySD8n7CvgS2KaSgMcEBySUHN8pAj8zlQeRM EVX4Y70H25kvvNAt3VIBN4lpLweKOPWabBmsxbrX2UgC6Kko/4dQs3sSEYJDe/6S EduQqehYI7nxVlgFGS3aTkKFJhp/oQZiDwZPPfi1z/qdLNtW2439XTxlCQBEWG04 yXTscGLThGa2YYg5U/0pPe1XGk0W6pQU28dj/GFXqf9HvZPvvDWY2Yd8ZtE1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuVwQVw+i1F6umETEYFv/Y+6CiEUwHwYDVR0j BBgwFoAUzkRDJQCdyFvnErzQEVZRDytvSrkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRVp4UmJKY1hoQk01b2ttMTZUMmRyU2VKbkJvZ29mREw0MXZTZEZoOVJS V00vMS9DRTQ0NDMyNTAwOURDODVCRTcxMkJDRDAxMTU2NTEwRjJCNkY0QUI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNDQ0MzI1MDA5REM4NUJF NzEyQkNEMDExNTY1MTBGMkI2RjRBQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RVp4UmJKY1hoQk01b2ttMTZUMmRyU2VKbkJvZ29mREw0MXZTZEZoOVJSV00vMS9D RTQ0NDMyNTAwOURDODVCRTcxMkJDRDAxMTU2NTEwRjJCNkY0QUI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs4NiTEDaC9kATv+0c0ysKQCUj/syyY3UMXFkd+mt9qRNkfBhc7GvZbgD5obA n3JehVyVtFzLGmVphZf35jHFYbm356Lzf4YIumchdHAwbwG0YMRt7TxRUrwM0k3t K5h8W016rL3HVjYGI+sW18qmpSD/grHq5AYfH6RZa45zB4gwbnl64xlpT60rTn5e Tc4wGeBcBLFCIFQ7NmqQW1bJwqRwTbvrWxbwusIxFyn442LFzOLvSKWFThBV6YvJ oig6T/kW8nPiPqmWCC3+1QrHuf4pRsth//2bqYQ/yvPmjwL/7yXIp1/VQx41r2XI Tzdn7DjsekKSZzXru7U8f1wF1Q== -----END CERTIFICATE-----Generated at Sun Jul 27 13:19:44 2025 by rpki-client