$ rpki-client -vvf rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft File: 7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft (raw, json) Hash identifier: E9V21xAOSrC7Amf9ypOIsMiHhYDbr9E/JQGCpP7tfLw= Subject key identifier: 68:C2:7F:3B:D1:42:A3:E9:EC:72:A7:78:C3:DD:4C:9E:A3:0D:80:75 Authority key identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 Certificate issuer: /CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1 Certificate serial: 565D71B5A66C6129A46EF8F24E50001C39A77BE3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer Subject info access: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft Manifest number: 02A0 Signing time: Wed 20 Aug 2025 03:18:32 +0000 Manifest this update: Wed 20 Aug 2025 03:13:32 +0000 Manifest next update: Thu 21 Aug 2025 05:56:32 +0000 Files and hashes: 1: 3133382e39372e3130342e302f32322d3232203d3e203533313037.roa (hash: YxmutoTj6CF7MhqKkZWdp2PcBcnZPzoU+yCAdwcvIH8=) 2: 3133382e39372e3130372e302f32342d3234203d3e203533313037.roa (hash: d37RWCzmBlHMXyTEoKWy+EnzDGvUsG4ci+hJH2k1A/Q=) 3: 7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl (hash: 4+yuLj9TT0ab7f3wt+LvSTVhHlOCymOgtMaJ/1oV0Hg=) 4: 323830343a323363383a3a2f33322d3332203d3e20323634313832.roa (hash: 3F2e2/DDYn3RX1xMVmaKyyDfXDqpy3jTInAQP0qhGc4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 05:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5d:71:b5:a6:6c:61:29:a4:6e:f8:f2:4e:50:00:1c:39:a7:7b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1 Validity Not Before: Aug 20 03:13:32 2025 GMT Not After : Aug 21 05:56:32 2025 GMT Subject: CN=68C27F3BD142A3E9EC72A778C3DD4C9EA30D8075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:28:cc:8b:bc:1a:22:7b:4a:2c:9d:26:fb: 14:71:13:ff:24:8c:50:7a:13:eb:e8:66:71:e1:81: 4f:be:88:82:32:c2:05:1d:b6:68:01:e1:1c:07:f0: c4:40:f6:fd:a4:32:73:e4:4d:ef:1f:d2:f5:2e:7b: 66:44:09:b9:fe:97:07:7d:35:85:38:d5:dc:b6:cf: 0d:d2:75:c7:ef:06:e4:5d:58:a7:8d:de:9e:8d:be: 21:18:48:af:46:91:55:f0:2e:4a:72:4e:ec:1d:89: 0d:6a:99:3a:53:0a:99:2f:ed:44:5c:e9:fe:e6:37: 3f:77:40:31:9b:ee:4f:0a:db:76:c3:44:1b:52:f2: 79:35:19:a4:a1:6f:7a:e5:cc:12:46:06:9a:9f:13: 95:c8:5e:eb:b9:f5:0b:e9:73:d4:8e:85:a3:8b:44: c4:c5:63:49:1f:8b:11:5b:98:3e:07:bb:ed:24:d3: 75:b7:cf:0f:6b:d1:02:07:47:56:51:04:92:73:f1: 2d:b2:e6:3c:54:db:db:0b:e8:d4:4d:95:ab:d2:9f: c0:d5:f7:a1:33:2e:ed:39:8f:91:25:83:0a:20:e3: 26:39:67:e8:66:67:43:9a:d5:6a:8f:13:08:2f:98: 1d:35:c7:3d:e1:9b:a7:a8:47:9b:69:65:ac:31:9c: 1f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C2:7F:3B:D1:42:A3:E9:EC:72:A7:78:C3:DD:4C:9E:A3:0D:80:75 X509v3 Authority Key Identifier: keyid:71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f9:cc:15:08:aa:85:bf:01:3a:f9:c3:4e:2e:10:66:8e:87: 2e:22:6e:26:1a:ce:23:da:e2:a8:71:7c:67:ed:22:bd:9c:0a: 57:1d:72:18:f7:b5:66:4b:f5:06:0f:57:37:82:cc:ec:0c:af: a5:56:d4:fc:8d:7a:58:ee:d2:99:c6:86:48:25:0a:48:50:1f: ed:7e:87:04:3f:24:3c:74:70:88:73:eb:79:65:50:e7:74:a4: cc:02:c8:b6:a5:a0:de:83:e1:d3:ae:a7:96:21:08:4a:a7:4e: bb:73:c6:aa:44:af:d1:0f:32:e4:71:a3:27:e1:7c:af:9c:02: 48:ce:f8:cd:cf:af:02:2a:6d:40:d8:c3:01:21:55:e1:40:c5: 78:8f:f4:30:32:a1:24:9a:13:4a:36:82:7a:e5:3b:ce:ec:5c: 5d:c4:5b:6f:cd:bd:0b:06:14:63:52:76:c1:df:13:ac:d9:85: 56:e8:d5:6c:45:07:5e:08:20:00:71:3f:63:ef:12:71:1e:4c: ac:35:12:0f:a1:9d:56:5d:c1:31:18:a7:bb:8f:94:20:80:e7: b4:91:d1:ac:25:bf:1f:fc:97:87:7a:b4:43:51:b8:cd:1f:ba: 62:e1:f0:a8:79:56:4a:17:76:45:3e:f6:aa:e3:88:39:36:42: 22:6b:76:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVl1xtaZsYSmkbvjyTlAAHDmne+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEyNUJFRERGRUMyOUMwQTRDRjU5MUU1RUI0MDgzOEJG RTNDN0FDMTAeFw0yNTA4MjAwMzEzMzJaFw0yNTA4MjEwNTU2MzJaMDMxMTAvBgNV BAMTKDY4QzI3RjNCRDE0MkEzRTlFQzcyQTc3OEMzREQ0QzlFQTMwRDgwNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8wyjMi7waIntKLJ0m+xRxE/8k jFB6E+voZnHhgU++iIIywgUdtmgB4RwH8MRA9v2kMnPkTe8f0vUue2ZECbn+lwd9 NYU41dy2zw3SdcfvBuRdWKeN3p6NviEYSK9GkVXwLkpyTuwdiQ1qmTpTCpkv7URc 6f7mNz93QDGb7k8K23bDRBtS8nk1GaShb3rlzBJGBpqfE5XIXuu59Qvpc9SOhaOL RMTFY0kfixFbmD4Hu+0k03W3zw9r0QIHR1ZRBJJz8S2y5jxU29sL6NRNlavSn8DV 96EzLu05j5Elgwog4yY5Z+hmZ0Oa1WqPEwgvmB01xz3hm6eoR5tpZawxnB9/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaMJ/O9FCo+nscqd4w91MnqMNgHUwHwYDVR0j BBgwFoAUcSW+3f7CnApM9ZHl60CDi/48esEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEhnSnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRi eksvMS83MTI1QkVEREZFQzI5QzBBNENGNTkxRTVFQjQwODM4QkZFM0M3QUMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxMjVCRURERkVDMjlDMEE0 Q0Y1OTFFNUVCNDA4MzhCRkUzQzdBQzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEhnSnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRieksvMS83 MTI1QkVEREZFQzI5QzBBNENGNTkxRTVFQjQwODM4QkZFM0M3QUMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJPnMFQiqhb8BOvnDTi4QZo6HLiJuJhrOI9riqHF8Z+0ivZwKVx1yGPe1Zkv1 Bg9XN4LM7AyvpVbU/I16WO7SmcaGSCUKSFAf7X6HBD8kPHRwiHPreWVQ53SkzALI tqWg3oPh066nliEISqdOu3PGqkSv0Q8y5HGjJ+F8r5wCSM74zc+vAiptQNjDASFV 4UDFeI/0MDKhJJoTSjaCeuU7zuxcXcRbb829CwYUY1J2wd8TrNmFVujVbEUHXggg AHE/Y+8ScR5MrDUSD6GdVl3BMRinu4+UIIDntJHRrCW/H/yXh3q0Q1G4zR+6YuHw qHlWShd2RT72quOIOTZCImt2qQ== -----END CERTIFICATE-----Generated at Wed Aug 20 20:40:26 2025 by rpki-client