$ rpki-client -vvf rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft File: 488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft (raw, json) Hash identifier: /91j/7KOY6+i7vx/Qn82BD74kmrPQvMJzMWgRGdNbQE= Subject key identifier: F1:62:58:F7:55:29:28:D7:BF:B2:64:44:76:3C:3A:6A:DE:B7:D3:2B Authority key identifier: 48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71 Certificate issuer: /CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71 Certificate serial: 680721B016C57D3BE6E4515A96E662314D2B010B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer Subject info access: rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft Manifest number: 028E Signing time: Wed 20 Aug 2025 05:42:05 +0000 Manifest this update: Wed 20 Aug 2025 05:37:05 +0000 Manifest next update: Thu 21 Aug 2025 07:19:05 +0000 Files and hashes: 1: 488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl (hash: j7DVdm9cEGXoGcxfUQuIOlI8enncxf9gKRE50cdLOtI=) 2: 323830343a373836303a3a2f33322d3332203d3e20323731323338.roa (hash: ob/Dwvax52q+vhxyPcSWE0mkKcMCWrMtLj4d7yXoKhY=) 3: 3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa (hash: I9G3ex2XveORcAEqGBwplD5mNPbZvqU6abd1zjBCLKY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 07:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:07:21:b0:16:c5:7d:3b:e6:e4:51:5a:96:e6:62:31:4d:2b:01:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71 Validity Not Before: Aug 20 05:37:05 2025 GMT Not After : Aug 21 07:19:05 2025 GMT Subject: CN=F16258F7552928D7BFB26444763C3A6ADEB7D32B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f4:c9:7f:04:a2:48:bb:52:43:30:f7:66:3f: 5e:25:f3:3e:cf:6f:3b:9a:95:ff:dc:d9:22:88:0d: af:51:9d:b7:3e:f0:48:53:dc:c5:5d:ba:13:fd:21: 2e:dc:e2:b9:1a:50:6d:3a:2e:f3:0b:01:8a:a4:7d: 9b:c1:21:b1:a2:21:82:b6:0c:67:c4:da:f3:39:6c: 46:b3:6b:f6:d4:a5:70:d4:a4:b0:f8:56:d3:80:e6: f6:36:d9:b4:a8:3d:56:7b:17:c8:d0:cd:cc:34:6f: 75:5f:46:7f:0b:6e:6e:21:2f:28:9b:2f:88:d7:02: fd:a9:12:69:b5:0b:78:39:5f:77:42:f6:f0:99:a4: 92:f6:9a:c3:9d:a7:71:07:a7:b9:e8:42:ff:06:0d: d0:7e:34:10:6f:f7:50:5d:5d:74:37:cd:d2:2e:c9: be:a6:d6:3b:04:53:c0:d6:6c:66:98:13:27:69:a7: 8f:89:c7:b9:de:46:03:cb:b4:93:7d:a2:28:a0:5f: 87:05:dd:27:b2:58:eb:0e:3c:2e:cf:50:96:bb:9e: 66:43:f0:98:3a:a3:c2:0b:84:f7:98:0e:bd:1a:11: fa:97:61:44:dc:45:fa:c2:ae:1a:98:f9:c4:3b:62: 40:bf:65:5f:89:3b:33:96:be:f3:29:96:34:c5:35: 30:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:62:58:F7:55:29:28:D7:BF:B2:64:44:76:3C:3A:6A:DE:B7:D3:2B X509v3 Authority Key Identifier: keyid:48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:1d:3a:03:d1:f0:83:c7:f0:14:19:35:8e:65:ca:eb:cd:15: 14:6b:df:86:f6:7a:42:f4:66:b8:6c:e9:4a:fd:3a:60:0e:d6: b6:98:ae:df:ea:e1:73:c6:b2:e5:91:05:c6:44:c4:82:69:d2: d5:97:80:4b:81:56:56:05:96:54:89:51:44:ca:97:67:de:ee: 9c:d8:26:50:4b:78:04:98:e8:1e:8d:8c:55:2e:cd:e6:ef:40: e5:d7:12:70:f0:8e:90:0f:67:38:3b:66:a3:ef:87:c6:74:9b: f9:0a:ff:ba:e0:e6:0f:b1:48:ab:a8:b2:4e:79:45:7d:fb:fb: 05:97:29:9b:1a:9d:27:bb:6f:89:e6:52:fd:d2:86:a5:c5:a9: 66:f3:03:37:1e:e9:86:a6:9f:44:ed:7d:14:85:32:26:fe:7e: 37:dd:69:e2:4a:e7:bb:ce:05:2f:94:af:98:a5:c2:8e:86:7d: 53:5e:5a:9c:ed:e1:5a:17:77:66:58:91:e9:ea:01:13:11:4c: bc:bb:7a:a1:ad:0f:c2:c7:d2:ed:1b:e4:16:b5:ac:cb:70:08: 4d:0c:18:7b:29:21:73:99:45:3c:17:5c:55:8e:e6:6a:30:96: 8b:40:08:92:38:58:85:9b:a3:32:6f:25:ba:85:fb:b8:31:56: 47:9b:97:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaAchsBbFfTvm5FFaluZiMU0rAQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4RDYxMzY3RjRDNDJFMDNBRTVDNUFFOEJFMDA3NkU0 OTYxQkU3MTAeFw0yNTA4MjAwNTM3MDVaFw0yNTA4MjEwNzE5MDVaMDMxMTAvBgNV BAMTKEYxNjI1OEY3NTUyOTI4RDdCRkIyNjQ0NDc2M0MzQTZBREVCN0QzMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH9Ml/BKJIu1JDMPdmP14l8z7P bzualf/c2SKIDa9Rnbc+8EhT3MVduhP9IS7c4rkaUG06LvMLAYqkfZvBIbGiIYK2 DGfE2vM5bEaza/bUpXDUpLD4VtOA5vY22bSoPVZ7F8jQzcw0b3VfRn8Lbm4hLyib L4jXAv2pEmm1C3g5X3dC9vCZpJL2msOdp3EHp7noQv8GDdB+NBBv91BdXXQ3zdIu yb6m1jsEU8DWbGaYEydpp4+Jx7neRgPLtJN9oiigX4cF3SeyWOsOPC7PUJa7nmZD 8Jg6o8ILhPeYDr0aEfqXYUTcRfrCrhqY+cQ7YkC/ZV+JOzOWvvMpljTFNTCPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8WJY91UpKNe/smREdjw6at630yswHwYDVR0j BBgwFoAUSI1hNn9MQuA65cWui+AHbklhvnEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0dZTnFlUVhHQ3VyV2Qxd3ZTYUFoaDFpTTNFeUNFdG12WkREUzhWdDRQ c2cvMC80ODhENjEzNjdGNEM0MkUwM0FFNUM1QUU4QkUwMDc2RTQ5NjFCRTcxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4OEQ2MTM2N0Y0QzQyRTAz QUU1QzVBRThCRTAwNzZFNDk2MUJFNzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0dZTnFlUVhHQ3VyV2Qxd3ZTYUFoaDFpTTNFeUNFdG12WkREUzhWdDRQc2cvMC80 ODhENjEzNjdGNEM0MkUwM0FFNUM1QUU4QkUwMDc2RTQ5NjFCRTcxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtR06A9Hwg8fwFBk1jmXK680VFGvfhvZ6QvRmuGzpSv06YA7Wtpiu3+rhc8ay 5ZEFxkTEgmnS1ZeAS4FWVgWWVIlRRMqXZ97unNgmUEt4BJjoHo2MVS7N5u9A5dcS cPCOkA9nODtmo++HxnSb+Qr/uuDmD7FIq6iyTnlFffv7BZcpmxqdJ7tvieZS/dKG pcWpZvMDNx7phqafRO19FIUyJv5+N91p4krnu84FL5SvmKXCjoZ9U15anO3hWhd3 ZliR6eoBExFMvLt6oa0PwsfS7RvkFrWsy3AITQwYeykhc5lFPBdcVY7majCWi0AI kjhYhZujMm8luoX7uDFWR5uXXw== -----END CERTIFICATE-----Generated at Wed Aug 20 16:30:09 2025 by rpki-client