$ rpki-client -vvf rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.mft File: B85CAE3AAD278302E7E84DE574CABFB2535CBC59.mft (raw, json) Hash identifier: dmsh32ktmkWQQA3rTzwThwL6tdyVO8PVLR9BWl07QP8= Subject key identifier: 91:A7:51:E6:C9:BC:BE:94:8B:97:9B:5C:F9:9A:83:09:25:1D:93:CB Authority key identifier: B8:5C:AE:3A:AD:27:83:02:E7:E8:4D:E5:74:CA:BF:B2:53:5C:BC:59 Certificate issuer: /CN=B85CAE3AAD278302E7E84DE574CABFB2535CBC59 Certificate serial: 34D4238B237ECFD0E7392B2FACB198765FA546CA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.cer Subject info access: rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.mft Manifest number: 2A Signing time: Wed 20 Aug 2025 12:16:05 +0000 Manifest this update: Wed 20 Aug 2025 12:11:05 +0000 Manifest next update: Thu 21 Aug 2025 14:59:05 +0000 Files and hashes: 1: 3133312e3130302e3130342e302f32322d3332203d3e203631363730.roa (hash: WDt8RKT06PvFDXQ0UcocBAidzkP7Us+T/mJ5qfkFAu0=) 2: B85CAE3AAD278302E7E84DE574CABFB2535CBC59.crl (hash: wBaxpcCw21c03Qmoc0lrgi/Zy0MD5j/BUezpxoe2A6s=) 3: 323830343a316362343a3a2f33322d313238203d3e203631363730.roa (hash: vLY5+bxCcSz9keEk/hNNs2BxL9cgGA7sHwehEwHEaD8=) 4: 3230312e3134382e3136342e302f32322d3332203d3e203631363730.roa (hash: M+aeOuYcirPnGN/Ap75nXooikFZUJurf7i6P4Zse/x4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.crl rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 14:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d4:23:8b:23:7e:cf:d0:e7:39:2b:2f:ac:b1:98:76:5f:a5:46:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B85CAE3AAD278302E7E84DE574CABFB2535CBC59 Validity Not Before: Aug 20 12:11:05 2025 GMT Not After : Aug 21 14:59:05 2025 GMT Subject: CN=91A751E6C9BCBE948B979B5CF99A8309251D93CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6c:a8:d0:8c:46:24:de:3a:75:a4:b1:82:0d: 4f:78:b1:e8:6a:db:4c:c6:42:de:90:f3:aa:2e:8e: 38:43:d7:53:b5:a8:13:c6:d3:c3:46:94:0a:ed:a7: 21:1a:c8:c4:1c:f3:f5:78:25:0a:26:1e:9d:b4:de: 70:c3:e6:8d:4d:27:e8:58:fd:fc:ee:a1:37:ad:ad: cb:bc:f8:87:9c:03:41:71:20:b6:7e:11:57:cb:3c: 3d:85:2c:d4:4e:09:36:58:f8:30:d2:d3:2c:44:5e: f0:2d:e6:b5:83:7a:fe:a8:aa:c9:13:b4:0c:65:24: 01:d0:bb:f0:60:ab:d1:e3:0b:8b:cf:cd:7c:f0:bd: 9d:9b:7a:5b:44:e0:13:b1:23:96:3f:f1:01:a6:92: da:61:71:8f:5e:ab:98:8c:57:2f:44:a3:a5:76:1e: fc:a1:a0:81:52:7d:6d:1b:9a:5c:19:c0:e4:18:e9: 11:c0:5c:86:d3:3a:a3:00:05:54:57:a9:59:1c:21: b9:03:ed:af:f3:5e:54:d5:95:24:a4:c0:7b:3d:b6: 1d:1b:5b:7c:f5:a1:4a:a7:a6:0b:e5:9a:f9:45:5a: 71:07:cd:70:cd:8c:11:c0:e7:21:f2:79:6f:f4:06: d3:1d:8f:d5:95:30:75:90:83:fa:0c:12:fe:42:ca: c8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A7:51:E6:C9:BC:BE:94:8B:97:9B:5C:F9:9A:83:09:25:1D:93:CB X509v3 Authority Key Identifier: keyid:B8:5C:AE:3A:AD:27:83:02:E7:E8:4D:E5:74:CA:BF:B2:53:5C:BC:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/B85CAE3AAD278302E7E84DE574CABFB2535CBC59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:18:0e:dc:af:a3:59:18:be:b1:4d:ce:34:65:4e:d5:69:09: ee:f9:47:0a:68:af:65:ad:58:49:c1:0f:89:67:c4:fb:d9:b6: c0:e7:30:0c:be:8c:97:bd:e7:24:76:dc:af:b6:06:92:08:59: 1f:ae:2d:18:0f:4d:7f:a0:06:e8:ca:ac:28:50:07:c6:35:8e: 6d:8d:2f:e7:2d:49:8e:1c:63:79:e3:b4:d7:d7:b5:04:28:54: b2:5a:ac:e5:b9:10:12:37:82:ec:e2:3d:61:2b:d6:1a:86:8f: c2:d8:04:61:cf:22:53:a6:8f:65:f2:8b:8f:3a:ca:06:a1:3a: ac:1f:aa:44:d4:8c:a7:c3:e7:02:d9:3c:94:14:83:10:02:61: 1d:49:e1:5f:27:40:4b:a2:69:74:da:89:f0:bd:4b:59:bd:05: 25:17:ef:04:fd:35:20:b2:ef:e4:76:79:2d:93:00:93:f6:dd: 7b:cc:d3:a6:f7:1c:1f:11:0f:97:9d:fe:1d:8d:b9:af:9d:e6: ca:f8:71:dd:72:36:c7:a1:7d:eb:f4:db:1e:63:39:52:02:ac: d1:61:80:ec:e4:99:96:9f:50:fd:6d:c9:ee:29:b8:7f:37:d5: c2:6d:cf:c4:33:4e:b7:5d:c0:5a:37:61:2c:ee:6e:8f:e2:e6: 73:b8:bd:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNNQjiyN+z9DnOSsvrLGYdl+lRsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg1Q0FFM0FBRDI3ODMwMkU3RTg0REU1NzRDQUJGQjI1 MzVDQkM1OTAeFw0yNTA4MjAxMjExMDVaFw0yNTA4MjExNDU5MDVaMDMxMTAvBgNV BAMTKDkxQTc1MUU2QzlCQ0JFOTQ4Qjk3OUI1Q0Y5OUE4MzA5MjUxRDkzQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsbKjQjEYk3jp1pLGCDU94sehq 20zGQt6Q86oujjhD11O1qBPG08NGlArtpyEayMQc8/V4JQomHp203nDD5o1NJ+hY /fzuoTetrcu8+IecA0FxILZ+EVfLPD2FLNROCTZY+DDS0yxEXvAt5rWDev6oqskT tAxlJAHQu/Bgq9HjC4vPzXzwvZ2beltE4BOxI5Y/8QGmktphcY9eq5iMVy9Eo6V2 HvyhoIFSfW0bmlwZwOQY6RHAXIbTOqMABVRXqVkcIbkD7a/zXlTVlSSkwHs9th0b W3z1oUqnpgvlmvlFWnEHzXDNjBHA5yHyeW/0BtMdj9WVMHWQg/oMEv5CysiPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkadR5sm8vpSLl5tc+ZqDCSUdk8swHwYDVR0j BBgwFoAUuFyuOq0ngwLn6E3ldMq/slNcvFkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFVoTm1DZnBWVUJBQ21qTUw4bXc5R2hVOHNaTlJXbnpiQnRCaVNKRFlk cVovMC9CODVDQUUzQUFEMjc4MzAyRTdFODRERTU3NENBQkZCMjUzNUNCQzU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4NUNBRTNBQUQyNzgzMDJF N0U4NERFNTc0Q0FCRkIyNTM1Q0JDNTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFVoTm1DZnBWVUJBQ21qTUw4bXc5R2hVOHNaTlJXbnpiQnRCaVNKRFlkcVovMC9C ODVDQUUzQUFEMjc4MzAyRTdFODRERTU3NENBQkZCMjUzNUNCQzU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkBgO3K+jWRi+sU3ONGVO1WkJ7vlHCmivZa1YScEPiWfE+9m2wOcwDL6Ml73n JHbcr7YGkghZH64tGA9Nf6AG6MqsKFAHxjWObY0v5y1JjhxjeeO019e1BChUslqs 5bkQEjeC7OI9YSvWGoaPwtgEYc8iU6aPZfKLjzrKBqE6rB+qRNSMp8PnAtk8lBSD EAJhHUnhXydAS6JpdNqJ8L1LWb0FJRfvBP01ILLv5HZ5LZMAk/bde8zTpvccHxEP l53+HY25r53myvhx3XI2x6F96/TbHmM5UgKs0WGA7OSZlp9Q/W3J7im4fzfVwm3P xDNOt13AWjdhLO5uj+Lmc7i9ug== -----END CERTIFICATE-----Generated at Wed Aug 20 18:24:20 2025 by rpki-client