$ rpki-client -vvf rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft File: 9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft (raw, json) Hash identifier: zGlDOE6fSCnntY0F4ArWwrBj60WIiPe3P+e56D/WhsQ= Subject key identifier: 93:33:BF:F7:A3:A3:F4:BB:9E:2D:93:42:F1:E6:05:D7:5A:6F:FB:10 Authority key identifier: 9E:1D:7C:47:8D:88:0E:09:3C:83:DC:BE:1D:E4:0D:E8:8E:F8:54:6F Certificate issuer: /CN=9E1D7C478D880E093C83DCBE1DE40DE88EF8546F Certificate serial: 33196E9BA6C4135D981E7571FF47E27DE002DB0C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer Subject info access: rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft Manifest number: 029E Signing time: Wed 20 Aug 2025 10:35:01 +0000 Manifest this update: Wed 20 Aug 2025 10:30:01 +0000 Manifest next update: Thu 21 Aug 2025 11:06:01 +0000 Files and hashes: 1: 3137372e31302e32382e302f32322d3234203d3e20323632383431.roa (hash: psmOj8EmDDzyd0bmAsj109hherhULfNzcjmq4S7y+B4=) 2: 9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl (hash: 6gATaToen8twIVboYKt43e6AaGJFWK7trZ7Q/oee7W4=) 3: 323830343a6662303a3a2f33322d3332203d3e20323632383431.roa (hash: RbYXVffjJdvIeDJVoaVQ4H7OCdhMNRWApBNY9cjM2es=) 4: 3137372e3133362e3231362e302f32312d3234203d3e20323632383431.roa (hash: pkwtlkOIUTOW0vCXw7qG1lC1xTCoa8/0oVE1nZMmSW4=) 5: 3137372e31302e32342e302f32322d3234203d3e20323632383431.roa (hash: U+A01WCuvZZPHwlM0t2T4L3RVjEHPKcBpkgoSeAHY4M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 11:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:19:6e:9b:a6:c4:13:5d:98:1e:75:71:ff:47:e2:7d:e0:02:db:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E1D7C478D880E093C83DCBE1DE40DE88EF8546F Validity Not Before: Aug 20 10:30:01 2025 GMT Not After : Aug 21 11:06:01 2025 GMT Subject: CN=9333BFF7A3A3F4BB9E2D9342F1E605D75A6FFB10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:87:59:a8:11:d2:b7:1d:7b:a6:28:f1:62:6c: 0e:84:f2:f1:1f:77:62:23:a6:a4:22:95:0f:76:2d: 0b:b8:52:f9:26:fd:2e:2b:57:94:4b:48:2d:2f:e9: 63:6a:00:30:f4:f6:7f:fd:5f:c5:6d:f2:c7:56:fc: 09:49:4a:c0:d6:19:11:85:92:f4:ec:ec:44:b2:24: ef:69:5e:6c:17:d9:c5:1a:b0:15:f7:cc:b5:89:b4: 8f:62:31:b0:b8:ea:e3:e8:ef:c0:70:77:02:fa:fa: 1c:3e:fa:9f:d2:a7:79:67:e4:cd:d7:e8:47:0c:69: 5b:32:82:05:df:d5:d1:48:b1:e7:4a:a6:ae:60:24: c5:86:81:4d:1e:c9:57:d5:7e:79:14:9f:e5:9d:14: 3a:c0:4d:1f:11:2b:e9:e5:2f:22:03:3d:f5:6b:fb: aa:70:18:14:9b:29:71:cd:93:00:c7:a5:f9:3d:d0: 9a:30:69:47:04:24:ba:24:c9:68:25:8d:ba:1e:3a: e3:77:67:90:6d:a8:9a:d8:6e:44:31:e0:eb:7f:2a: 72:81:b7:ab:95:0c:92:11:1f:ce:3a:3f:ca:4c:1c: 09:87:3a:e9:dd:72:7b:cc:5e:4f:da:35:b9:41:68: d0:98:fa:c3:8d:49:c1:cc:d0:bb:73:f4:f0:dc:d9: de:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:33:BF:F7:A3:A3:F4:BB:9E:2D:93:42:F1:E6:05:D7:5A:6F:FB:10 X509v3 Authority Key Identifier: keyid:9E:1D:7C:47:8D:88:0E:09:3C:83:DC:BE:1D:E4:0D:E8:8E:F8:54:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:fe:04:0c:e4:b9:2a:bf:1e:dc:92:75:8a:1b:1c:c2:1a:89: 10:dc:8d:ff:a2:7e:5d:45:84:17:8e:97:b4:28:c5:27:5b:60: 6a:d7:26:68:b9:33:7b:40:42:14:8d:c5:c6:7a:84:cc:69:cf: 14:1f:1e:fa:14:f9:36:2b:2b:cf:1c:64:fd:c8:df:63:d3:78: 27:be:69:4f:db:1d:96:49:9c:3d:ee:d5:2f:ba:19:af:7c:15: 3c:f3:93:3e:1e:79:67:6b:b7:f8:33:c2:36:6c:4a:9c:52:10: a3:d9:22:14:cc:a6:99:43:fc:09:8f:b2:eb:bd:e0:c7:f3:b3: 02:86:f8:78:40:31:1b:eb:1a:e4:d3:7a:41:f1:1a:28:08:fd: a3:0c:05:12:ca:bf:54:23:8d:f8:b6:c6:19:58:47:be:84:99: b9:cb:a9:fc:eb:1e:d9:95:dc:97:1e:0f:77:a8:99:0b:62:e2: 20:d8:4e:2f:c6:d0:41:f3:d6:05:c1:7c:ee:e4:b9:f1:95:53: a2:d7:e2:f2:ac:89:9f:7c:52:b7:d7:1c:fe:ea:18:2c:2e:df: 88:83:a3:15:e4:7f:46:51:b1:07:cc:79:03:a0:85:fa:ca:29: 64:18:94:06:89:ef:d4:bf:5d:d8:23:11:09:92:37:63:82:ba: 78:96:a4:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMxlum6bEE12YHnVx/0fifeAC2wwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUxRDdDNDc4RDg4MEUwOTNDODNEQ0JFMURFNDBERTg4 RUY4NTQ2RjAeFw0yNTA4MjAxMDMwMDFaFw0yNTA4MjExMTA2MDFaMDMxMTAvBgNV BAMTKDkzMzNCRkY3QTNBM0Y0QkI5RTJEOTM0MkYxRTYwNUQ3NUE2RkZCMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8h1moEdK3HXumKPFibA6E8vEf d2IjpqQilQ92LQu4Uvkm/S4rV5RLSC0v6WNqADD09n/9X8Vt8sdW/AlJSsDWGRGF kvTs7ESyJO9pXmwX2cUasBX3zLWJtI9iMbC46uPo78BwdwL6+hw++p/Sp3ln5M3X 6EcMaVsyggXf1dFIsedKpq5gJMWGgU0eyVfVfnkUn+WdFDrATR8RK+nlLyIDPfVr +6pwGBSbKXHNkwDHpfk90JowaUcEJLokyWgljboeOuN3Z5BtqJrYbkQx4Ot/KnKB t6uVDJIRH846P8pMHAmHOundcnvMXk/aNblBaNCY+sONScHM0Ltz9PDc2d5jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkzO/96Oj9LueLZNC8eYF11pv+xAwHwYDVR0j BBgwFoAUnh18R42IDgk8g9y+HeQN6I74VG8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSE1MVXZuOXRnV2NTalZGc3VHMldac3BpZEFIamRpaThnelByd1JGUEYy UG4vMS85RTFEN0M0NzhEODgwRTA5M0M4M0RDQkUxREU0MERFODhFRjg1NDZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFMUQ3QzQ3OEQ4ODBFMDkz QzgzRENCRTFERTQwREU4OEVGODU0NkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SE1MVXZuOXRnV2NTalZGc3VHMldac3BpZEFIamRpaThnelByd1JGUEYyUG4vMS85 RTFEN0M0NzhEODgwRTA5M0M4M0RDQkUxREU0MERFODhFRjg1NDZGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALv4EDOS5Kr8e3JJ1ihscwhqJENyN/6J+XUWEF46XtCjFJ1tgatcmaLkze0BC FI3FxnqEzGnPFB8e+hT5Nisrzxxk/cjfY9N4J75pT9sdlkmcPe7VL7oZr3wVPPOT Ph55Z2u3+DPCNmxKnFIQo9kiFMymmUP8CY+y673gx/OzAob4eEAxG+sa5NN6QfEa KAj9owwFEsq/VCON+LbGGVhHvoSZucup/Ose2ZXclx4Pd6iZC2LiINhOL8bQQfPW BcF87uS58ZVTotfi8qyJn3xSt9cc/uoYLC7fiIOjFeR/RlGxB8x5A6CF+sopZBiU Bonv1L9d2CMRCZI3Y4K6eJakbA== -----END CERTIFICATE-----Generated at Wed Aug 20 16:29:16 2025 by rpki-client