$ rpki-client -vvf rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/1591BF2B14A662F5F2EAE5C8440EEC20EBC0DD2B.mft File: 1591BF2B14A662F5F2EAE5C8440EEC20EBC0DD2B.mft (raw, json) Hash identifier: oIvaAmPldh3h/kWLIIVbRBercxj5YtRF39AYRD2Z8dw= Subject key identifier: 99:75:FA:E1:35:F1:5D:9D:8E:C0:7D:6C:5D:3B:90:F8:00:6D:A9:01 Authority key identifier: 15:91:BF:2B:14:A6:62:F5:F2:EA:E5:C8:44:0E:EC:20:EB:C0:DD:2B Certificate issuer: /CN=1591BF2B14A662F5F2EAE5C8440EEC20EBC0DD2B Certificate serial: 1D842A33EF227929BCA68FE8AA78C8CFCEC4AED2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1591BF2B14A662F5F2EAE5C8440EEC20EBC0DD2B.cer Subject info access: rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/1591BF2B14A662F5F2EAE5C8440EEC20EBC0DD2B.mft Manifest number: 01E8 Signing time: Wed 20 Aug 2025 04:18:39 +0000 Manifest this update: Wed 20 Aug 2025 04:13:39 +0000 Manifest next update: Thu 21 Aug 2025 07:14:39 +0000 Files and hashes: 1: 34352e3232342e3138352e302f32342d3234203d3e20323637303836.roa (hash: kmNDPtMd5vg3NrG3rfAyJSTZk3YUs1Y1dTzArEV81Zs=) 2: 323830313a38303a323265303a3a2f34382d3438203d3e20323637303836.roa (hash: 3YkpeN5/LmicmMJBRdlGOYeqdPDbg3UjbzkCbOpV+ZE=) 3: 1591BF2B14A662F5F2EAE5C8440EEC20EBC0DD2B.crl (hash: x3L6U4WUnawaMkW+bLOCrHd4hqeYqbEnkJhJIHLfMZM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/1591BF2B14A662F5F2EAE5C8440EEC20EBC0DD2B.crl rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/1591BF2B14A662F5F2EAE5C8440EEC20EBC0DD2B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1591BF2B14A662F5F2EAE5C8440EEC20EBC0DD2B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 07:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:84:2a:33:ef:22:79:29:bc:a6:8f:e8:aa:78:c8:cf:ce:c4:ae:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1591BF2B14A662F5F2EAE5C8440EEC20EBC0DD2B Validity Not Before: Aug 20 04:13:39 2025 GMT Not After : Aug 21 07:14:39 2025 GMT Subject: CN=9975FAE135F15D9D8EC07D6C5D3B90F8006DA901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:95:04:f5:1f:4d:06:2c:21:7b:54:03:62:65: fc:4e:77:de:83:65:73:05:fd:79:ac:c4:77:3c:55: 79:d3:c4:95:d6:25:ee:e0:4b:19:ec:d0:0a:34:58: 73:7d:a6:10:1c:1d:e2:7e:76:4e:35:89:ba:56:3f: db:97:69:58:ab:7a:b9:d4:a3:1e:03:c6:73:e1:2d: 4e:71:d4:bd:aa:2f:6a:c2:32:a3:2d:57:2b:45:a7: 74:8c:7e:d7:1c:b0:21:c4:a7:e1:70:21:55:7a:dd: 55:08:65:c9:43:4c:0e:70:b5:c8:3e:97:87:1b:40: c9:32:d5:be:9c:71:fb:bd:5b:65:c1:ea:9c:1f:a7: 12:4c:ef:e5:ab:5c:77:61:f3:3a:77:c5:c5:50:6e: 94:af:16:31:5d:00:21:d5:8e:22:e9:1d:db:a8:b7: b3:c9:cc:95:5c:7c:00:4c:ba:8d:19:47:b3:10:e8: ca:af:e1:4e:dd:5b:26:99:73:ea:66:56:24:ee:9b: 0c:ab:54:99:9f:21:c8:f5:4c:9d:b3:a4:7d:4f:d2: 91:0b:bd:22:70:4b:2e:49:51:c8:9d:73:d5:da:29: 32:3e:cf:7c:18:7d:a2:ce:b6:6a:9c:4a:c3:e3:58: 91:4f:93:9d:03:fa:48:de:f5:3a:e9:d3:d4:19:6c: ec:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:75:FA:E1:35:F1:5D:9D:8E:C0:7D:6C:5D:3B:90:F8:00:6D:A9:01 X509v3 Authority Key Identifier: keyid:15:91:BF:2B:14:A6:62:F5:F2:EA:E5:C8:44:0E:EC:20:EB:C0:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/1591BF2B14A662F5F2EAE5C8440EEC20EBC0DD2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1591BF2B14A662F5F2EAE5C8440EEC20EBC0DD2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/1591BF2B14A662F5F2EAE5C8440EEC20EBC0DD2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:00:ed:49:e8:bb:58:e1:24:ef:0a:03:dd:b9:8a:57:82:ff: b9:ba:7d:86:15:7e:aa:25:98:1a:66:25:fa:f2:68:14:7e:56: a9:46:26:dd:a7:c4:3c:45:63:d9:03:04:25:ce:b5:32:bf:d6: b4:8d:cf:aa:11:25:7e:c0:6c:73:da:35:cf:11:5a:96:34:4f: 94:38:84:14:e2:33:16:c8:e8:73:56:1f:01:30:15:1d:37:65: e5:45:be:23:a3:77:e4:cb:a3:b3:e6:2f:e6:ec:30:23:17:99: 5f:90:fa:94:a6:81:87:c8:2e:bb:70:97:44:98:65:c5:ed:45: 4b:8a:b1:80:37:a4:5d:98:c2:61:5f:f3:c5:ee:e1:c5:f9:1d: 5c:d9:12:9d:33:87:5b:23:2d:7b:17:c7:8e:86:92:bd:76:35: 30:36:0f:5e:e6:06:58:1b:79:ee:bc:13:62:65:76:fb:f3:52: a8:c9:2d:e6:60:6e:bd:9e:36:c7:69:76:ff:3d:d0:8a:b5:e9: f8:02:0a:05:c6:f2:6c:03:7b:9b:12:d8:41:f8:d4:26:5f:bd: 9f:d9:5c:a4:99:35:7d:ce:d2:ca:78:5f:08:34:78:d0:7b:5f: 8c:ca:e1:7d:45:81:a4:6d:ef:d5:80:38:47:96:f8:a9:b9:ee: 22:40:f7:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHYQqM+8ieSm8po/oqnjIz87ErtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU5MUJGMkIxNEE2NjJGNUYyRUFFNUM4NDQwRUVDMjBF QkMwREQyQjAeFw0yNTA4MjAwNDEzMzlaFw0yNTA4MjEwNzE0MzlaMDMxMTAvBgNV BAMTKDk5NzVGQUUxMzVGMTVEOUQ4RUMwN0Q2QzVEM0I5MEY4MDA2REE5MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5lQT1H00GLCF7VANiZfxOd96D ZXMF/XmsxHc8VXnTxJXWJe7gSxns0Ao0WHN9phAcHeJ+dk41ibpWP9uXaVirernU ox4DxnPhLU5x1L2qL2rCMqMtVytFp3SMftccsCHEp+FwIVV63VUIZclDTA5wtcg+ l4cbQMky1b6ccfu9W2XB6pwfpxJM7+WrXHdh8zp3xcVQbpSvFjFdACHVjiLpHduo t7PJzJVcfABMuo0ZR7MQ6Mqv4U7dWyaZc+pmViTumwyrVJmfIcj1TJ2zpH1P0pEL vSJwSy5JUcidc9XaKTI+z3wYfaLOtmqcSsPjWJFPk50D+kje9Trp09QZbOyfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmXX64TXxXZ2OwH1sXTuQ+ABtqQEwHwYDVR0j BBgwFoAUFZG/KxSmYvXy6uXIRA7sIOvA3SswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjdBQmhYQ1k4bnBrSzlqU0VzaEhabXZnUzhQTkQ3UzlyTUpzOWlteFdB Q04vMC8xNTkxQkYyQjE0QTY2MkY1RjJFQUU1Qzg0NDBFRUMyMEVCQzBERDJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1OTFCRjJCMTRBNjYyRjVG MkVBRTVDODQ0MEVFQzIwRUJDMEREMkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RjdBQmhYQ1k4bnBrSzlqU0VzaEhabXZnUzhQTkQ3UzlyTUpzOWlteFdBQ04vMC8x NTkxQkYyQjE0QTY2MkY1RjJFQUU1Qzg0NDBFRUMyMEVCQzBERDJCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANQDtSei7WOEk7woD3bmKV4L/ubp9hhV+qiWYGmYl+vJoFH5WqUYm3afEPEVj 2QMEJc61Mr/WtI3PqhElfsBsc9o1zxFaljRPlDiEFOIzFsjoc1YfATAVHTdl5UW+ I6N35Mujs+Yv5uwwIxeZX5D6lKaBh8guu3CXRJhlxe1FS4qxgDekXZjCYV/zxe7h xfkdXNkSnTOHWyMtexfHjoaSvXY1MDYPXuYGWBt57rwTYmV2+/NSqMkt5mBuvZ42 x2l2/z3QirXp+AIKBcbybAN7mxLYQfjUJl+9n9lcpJk1fc7SynhfCDR40HtfjMrh fUWBpG3v1YA4R5b4qbnuIkD3PA== -----END CERTIFICATE-----Generated at Wed Aug 20 16:27:23 2025 by rpki-client