$ rpki-client -vvf rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft File: C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft (raw, json) Hash identifier: 8Y3qCR9aD57tFrNZaaB4yv0oZIIMqDoG5zYydAsQ5Rg= Subject key identifier: 0D:F4:3B:56:B5:9F:E9:A7:5E:79:95:71:AB:2A:BE:F1:6F:42:A2:BC Authority key identifier: C1:1F:7C:20:B2:45:6B:A3:6E:BC:C8:92:70:AC:E9:76:DA:CF:C3:5C Certificate issuer: /CN=C11F7C20B2456BA36EBCC89270ACE976DACFC35C Certificate serial: 2357BCD4CF593FC9E4501A992242A444A9B79A6D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer Subject info access: rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft Manifest number: 0215 Signing time: Wed 20 Aug 2025 07:50:11 +0000 Manifest this update: Wed 20 Aug 2025 07:45:11 +0000 Manifest next update: Thu 21 Aug 2025 08:07:11 +0000 Files and hashes: 1: 3137372e3139302e3232342e302f32302d3332203d3e20323633343635.roa (hash: wKAb1UDvZiPDekR65fEEYenq6zheNgIFDzzMrJdoquA=) 2: C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl (hash: +C1WTH+Nss0j7x6jNYddbTAwwAWh09PUqeudYe3hmV0=) 3: 323830343a313234303a3a2f33322d313238203d3e20323633343635.roa (hash: VmhohPCz9KS+aX0cz1omXVFO2DRFWZR9rKAG0HIoc2o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 08:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:57:bc:d4:cf:59:3f:c9:e4:50:1a:99:22:42:a4:44:a9:b7:9a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C11F7C20B2456BA36EBCC89270ACE976DACFC35C Validity Not Before: Aug 20 07:45:11 2025 GMT Not After : Aug 21 08:07:11 2025 GMT Subject: CN=0DF43B56B59FE9A75E799571AB2ABEF16F42A2BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7e:3c:b0:34:00:66:d0:b6:dd:35:a6:5d:d9: 08:28:23:05:60:ef:7f:56:1f:28:a6:b6:7a:18:ef: 79:8b:98:b4:7c:24:b1:b8:64:d6:b0:76:03:6b:6c: 9f:9c:c1:9d:26:8f:95:35:4a:a0:16:73:7d:cc:7f: 9a:27:b8:bc:56:4f:7b:fb:f2:32:96:db:dc:c2:74: 0e:ef:a3:b0:28:b8:54:05:f4:f5:53:99:b4:80:4f: f4:70:cf:33:fd:04:0c:d9:43:e2:da:b1:f5:e8:f5: 74:49:59:48:bd:a0:15:91:e6:09:a4:30:84:ea:45: 99:9e:cd:df:85:ab:d6:4b:96:3a:b6:fd:54:1c:59: 89:6e:53:11:d8:ac:aa:e0:ff:96:bd:73:23:61:39: b4:d2:c8:45:79:ba:74:c6:fb:c6:8e:6b:79:9b:01: 8a:fe:e1:12:c2:3e:e9:c9:09:e8:4c:eb:6c:94:0c: 53:2c:3b:3f:69:a5:0b:cc:27:c1:1e:32:f5:14:30: cd:0a:a2:f2:8a:ed:fd:fd:d6:ec:8e:42:a7:b6:51: f9:35:0e:a9:f7:d6:a2:73:4f:98:15:a9:12:17:31: 3b:4c:8d:be:bd:d4:d5:bc:3b:6c:9f:2d:14:07:b7: cf:3c:8b:bf:f0:43:1b:7a:dd:8a:c3:2b:c8:49:67: 4f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F4:3B:56:B5:9F:E9:A7:5E:79:95:71:AB:2A:BE:F1:6F:42:A2:BC X509v3 Authority Key Identifier: keyid:C1:1F:7C:20:B2:45:6B:A3:6E:BC:C8:92:70:AC:E9:76:DA:CF:C3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:40:9b:15:98:16:6e:d9:c3:21:ad:e6:32:14:66:c2:a3:4c: ce:8f:19:fb:a4:e0:84:0e:86:01:1b:6a:59:34:99:cb:43:8c: af:f1:67:6f:76:35:de:d2:ee:2e:90:cc:9e:5c:00:0e:ba:33: af:94:70:6a:b6:24:c5:da:c3:07:e7:80:1d:28:e9:37:09:d2: 76:ec:bf:d6:9f:03:dc:49:86:51:78:ee:51:fe:62:c7:12:9e: b0:cb:94:a5:24:b6:1e:31:b5:0e:95:bd:79:f4:90:46:be:47: 76:85:aa:ea:48:dc:2b:db:24:5c:65:db:a8:c6:27:88:7c:8f: 43:55:70:ae:3c:ce:f5:0c:5a:ee:62:fb:21:f1:3e:eb:f8:8b: b0:c2:23:0b:d7:11:56:8c:91:7f:ac:b9:59:80:de:ba:df:4e: 4e:42:c3:ca:93:28:7b:ad:14:c4:1e:99:2e:d8:7f:70:13:5f: 22:ea:5e:24:03:60:df:55:88:8f:0d:0b:08:e4:35:28:8c:8f: 94:7d:ed:60:03:fa:54:d9:0c:a2:89:46:ed:48:40:d0:00:88: 74:53:fa:e1:7b:05:14:09:6e:c2:42:91:89:08:50:4c:7c:85: 43:30:bd:eb:30:ed:2a:f9:f4:43:ef:94:d0:c2:9c:6f:bc:52: aa:c2:de:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI1e81M9ZP8nkUBqZIkKkRKm3mm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzExRjdDMjBCMjQ1NkJBMzZFQkNDODkyNzBBQ0U5NzZE QUNGQzM1QzAeFw0yNTA4MjAwNzQ1MTFaFw0yNTA4MjEwODA3MTFaMDMxMTAvBgNV BAMTKDBERjQzQjU2QjU5RkU5QTc1RTc5OTU3MUFCMkFCRUYxNkY0MkEyQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVfjywNABm0LbdNaZd2QgoIwVg 739WHyimtnoY73mLmLR8JLG4ZNawdgNrbJ+cwZ0mj5U1SqAWc33Mf5onuLxWT3v7 8jKW29zCdA7vo7AouFQF9PVTmbSAT/RwzzP9BAzZQ+LasfXo9XRJWUi9oBWR5gmk MITqRZmezd+Fq9ZLljq2/VQcWYluUxHYrKrg/5a9cyNhObTSyEV5unTG+8aOa3mb AYr+4RLCPunJCehM62yUDFMsOz9ppQvMJ8EeMvUUMM0KovKK7f391uyOQqe2Ufk1 Dqn31qJzT5gVqRIXMTtMjb691NW8O2yfLRQHt888i7/wQxt63YrDK8hJZ0+fAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDfQ7VrWf6adeeZVxqyq+8W9CorwwHwYDVR0j BBgwFoAUwR98ILJFa6NuvMiScKzpdtrPw1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjJqRVNGbTN5QzFYdU4yZnhZNlBQZkJNUUhzcFJEa2dNS3djd1R5aldV MksvMC9DMTFGN0MyMEIyNDU2QkEzNkVCQ0M4OTI3MEFDRTk3NkRBQ0ZDMzVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMUY3QzIwQjI0NTZCQTM2 RUJDQzg5MjcwQUNFOTc2REFDRkMzNUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RjJqRVNGbTN5QzFYdU4yZnhZNlBQZkJNUUhzcFJEa2dNS3djd1R5aldVMksvMC9D MTFGN0MyMEIyNDU2QkEzNkVCQ0M4OTI3MEFDRTk3NkRBQ0ZDMzVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcUCbFZgWbtnDIa3mMhRmwqNMzo8Z+6TghA6GARtqWTSZy0OMr/Fnb3Y13tLu LpDMnlwADrozr5RwarYkxdrDB+eAHSjpNwnSduy/1p8D3EmGUXjuUf5ixxKesMuU pSS2HjG1DpW9efSQRr5HdoWq6kjcK9skXGXbqMYniHyPQ1VwrjzO9Qxa7mL7IfE+ 6/iLsMIjC9cRVoyRf6y5WYDeut9OTkLDypMoe60UxB6ZLth/cBNfIupeJANg31WI jw0LCOQ1KIyPlH3tYAP6VNkMoolG7UhA0ACIdFP64XsFFAluwkKRiQhQTHyFQzC9 6zDtKvn0Q++U0MKcb7xSqsLePg== -----END CERTIFICATE-----Generated at Wed Aug 20 19:57:45 2025 by rpki-client