$ rpki-client -vvf rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.mft File: E3255E24DF417D9D2CF5A8A392C325F09432EA5E.mft (raw, json) Hash identifier: FW/uplR5+eV8XhBvk7wM+Rh626K/9GQP28TZKJqg7zw= Subject key identifier: 35:53:38:04:3C:26:0E:7C:16:E9:12:F5:F2:0C:B8:96:FB:7F:70:48 Authority key identifier: E3:25:5E:24:DF:41:7D:9D:2C:F5:A8:A3:92:C3:25:F0:94:32:EA:5E Certificate issuer: /CN=E3255E24DF417D9D2CF5A8A392C325F09432EA5E Certificate serial: 7C54D26FFB84D6D26CBF24BDCA57B8E1F4E3BE0E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.cer Subject info access: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.mft Manifest number: 0C Signing time: Wed 20 Aug 2025 13:14:12 +0000 Manifest this update: Wed 20 Aug 2025 13:09:12 +0000 Manifest next update: Thu 21 Aug 2025 14:12:12 +0000 Files and hashes: 1: E3255E24DF417D9D2CF5A8A392C325F09432EA5E.crl (hash: 8CHoBHqfKadLYjzRoCvONa3ktHpt1BVa2/Zw3OTODao=) 2: 3137372e38362e34382e302f32312d3332203d3e20323634323136.roa (hash: NvGUNNUTL+Xg6PVrRvuS3md8aJgENDZjmZ80pXSBIOQ=) 3: 3133382e39392e3139362e302f32322d3332203d3e20323634323136.roa (hash: nUVURxtskxjRDB8bSX5dLhrxDC/gBSXxkl6Cfb+5c+E=) 4: 323830343a323435383a3a2f33322d313238203d3e20323634323136.roa (hash: MZG1pWatGxwr0+bbifrxZdcTJXpxgFLz7Jve24qeGnY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.crl rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 14:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:54:d2:6f:fb:84:d6:d2:6c:bf:24:bd:ca:57:b8:e1:f4:e3:be:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3255E24DF417D9D2CF5A8A392C325F09432EA5E Validity Not Before: Aug 20 13:09:12 2025 GMT Not After : Aug 21 14:12:12 2025 GMT Subject: CN=355338043C260E7C16E912F5F20CB896FB7F7048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b5:fd:25:f0:4d:f4:8d:50:e8:a6:57:c0:3b: 0b:cd:c2:a3:5b:84:30:31:2d:47:37:63:28:95:77: 02:3e:8f:0e:fc:ec:46:b8:4d:90:4e:17:17:27:da: 8b:f9:2c:51:9a:aa:4f:ae:2f:93:4b:f8:09:9d:b3: 98:60:0c:d8:83:1a:e0:a6:b2:bc:1e:a3:d6:ff:7e: 09:be:57:3d:b6:2c:fa:64:4b:f1:4f:93:6b:c2:27: cc:93:22:9f:1b:bd:29:ae:27:6b:94:bf:05:c9:03: 12:e2:e5:bc:87:f1:ef:5b:f8:6c:02:62:0b:c5:2f: bf:39:37:d5:9a:40:53:e9:f8:59:f3:85:7f:ba:d2: 7e:d8:84:e4:53:17:9d:18:4d:f6:a7:bd:64:fe:2e: 46:3e:3f:34:e8:c6:cb:04:47:76:9a:f8:21:40:58: b4:bb:ca:3b:91:c5:c4:5a:cd:78:a8:09:6e:51:4c: 00:8a:90:42:7e:c6:37:83:15:05:91:e2:ba:60:d6: 1c:35:10:37:ed:77:4b:0a:3a:86:97:59:64:fa:44: cb:ba:ea:8f:3c:0d:bf:62:fb:52:55:a9:83:29:17: 9e:8a:ac:7e:be:59:a7:ac:35:4c:6a:37:a8:39:3f: d5:ad:1c:ac:b7:97:f0:2b:86:80:21:80:66:8b:f8: e5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:53:38:04:3C:26:0E:7C:16:E9:12:F5:F2:0C:B8:96:FB:7F:70:48 X509v3 Authority Key Identifier: keyid:E3:25:5E:24:DF:41:7D:9D:2C:F5:A8:A3:92:C3:25:F0:94:32:EA:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:18:91:50:bd:93:00:3a:64:1a:03:7d:2b:63:62:ab:00:fb: 3c:23:8d:96:3d:67:30:7a:c6:6a:61:cc:de:e6:1f:78:e3:cf: 77:68:d6:3f:e1:27:6a:a9:93:6e:ae:0d:57:66:af:74:a1:9a: 1e:a5:58:72:2e:a2:c4:66:ad:6d:aa:c9:02:90:5b:cf:b9:84: c9:7e:e4:c6:ba:40:8e:ca:56:47:62:98:79:05:8c:b9:8a:3b: ca:39:0f:a4:5d:42:37:56:08:30:fc:a5:f0:05:73:23:2a:87: 87:9a:2b:d3:3d:2e:0e:a0:27:52:fa:45:d9:a5:92:31:18:e9: 86:fa:2f:45:20:9c:2f:b6:19:67:de:f5:08:d7:90:1b:90:cc: dd:6d:d0:dd:69:8c:dc:3b:45:e9:ce:14:a0:95:f0:ba:89:3f: 68:04:80:ff:7e:be:a0:3b:3a:d8:ed:6f:98:76:14:a2:28:9a: 1f:02:e3:a9:cb:ef:29:0b:78:b8:c3:d4:c4:d0:5d:f9:c9:2f: 09:5d:67:fa:e6:a7:ba:42:af:0d:58:3f:29:aa:c7:f5:0b:ef: 63:91:85:70:ff:75:4a:eb:8c:98:b0:c2:10:f0:1d:74:d0:6c: b3:59:6a:03:0a:f2:eb:c5:2d:b4:a8:9f:51:8f:f9:b0:1e:05: b4:c0:65:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfFTSb/uE1tJsvyS9yle44fTjvg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMyNTVFMjRERjQxN0Q5RDJDRjVBOEEzOTJDMzI1RjA5 NDMyRUE1RTAeFw0yNTA4MjAxMzA5MTJaFw0yNTA4MjExNDEyMTJaMDMxMTAvBgNV BAMTKDM1NTMzODA0M0MyNjBFN0MxNkU5MTJGNUYyMENCODk2RkI3RjcwNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqtf0l8E30jVDoplfAOwvNwqNb hDAxLUc3YyiVdwI+jw787Ea4TZBOFxcn2ov5LFGaqk+uL5NL+Amds5hgDNiDGuCm srweo9b/fgm+Vz22LPpkS/FPk2vCJ8yTIp8bvSmuJ2uUvwXJAxLi5byH8e9b+GwC YgvFL785N9WaQFPp+FnzhX+60n7YhORTF50YTfanvWT+LkY+PzToxssER3aa+CFA WLS7yjuRxcRazXioCW5RTACKkEJ+xjeDFQWR4rpg1hw1EDftd0sKOoaXWWT6RMu6 6o88Db9i+1JVqYMpF56KrH6+WaesNUxqN6g5P9WtHKy3l/ArhoAhgGaL+OW9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNVM4BDwmDnwW6RL18gy4lvt/cEgwHwYDVR0j BBgwFoAU4yVeJN9BfZ0s9aijksMl8JQy6l4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3dFZnV1VEhnUWNVeGlNWEVOV0t3amZZakxyenN5NVNZUFFhV2JudnJq U1MvMC9FMzI1NUUyNERGNDE3RDlEMkNGNUE4QTM5MkMzMjVGMDk0MzJFQTVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzMjU1RTI0REY0MTdEOUQy Q0Y1QThBMzkyQzMyNUYwOTQzMkVBNUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3dFZnV1VEhnUWNVeGlNWEVOV0t3amZZakxyenN5NVNZUFFhV2JudnJqU1MvMC9F MzI1NUUyNERGNDE3RDlEMkNGNUE4QTM5MkMzMjVGMDk0MzJFQTVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVxiRUL2TADpkGgN9K2NiqwD7PCONlj1nMHrGamHM3uYfeOPPd2jWP+EnaqmT bq4NV2avdKGaHqVYci6ixGatbarJApBbz7mEyX7kxrpAjspWR2KYeQWMuYo7yjkP pF1CN1YIMPyl8AVzIyqHh5or0z0uDqAnUvpF2aWSMRjphvovRSCcL7YZZ971CNeQ G5DM3W3Q3WmM3DtF6c4UoJXwuok/aASA/36+oDs62O1vmHYUoiiaHwLjqcvvKQt4 uMPUxNBd+ckvCV1n+uanukKvDVg/KarH9QvvY5GFcP91SuuMmLDCEPAddNBss1lq Awry68UttKifUY/5sB4FtMBlpQ== -----END CERTIFICATE-----Generated at Wed Aug 20 22:30:36 2025 by rpki-client