$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft File: D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft (raw, json) Hash identifier: yL6gSIsDmRdbAc9O9cfP1Xm/tM/p+B2uO0WJ9XSoguY= Subject key identifier: BD:B5:8E:F3:3A:B9:46:DB:8B:F6:AA:4F:AC:92:FA:91:50:F3:A5:CC Authority key identifier: D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B Certificate issuer: /CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B Certificate serial: 687C9C7FE0EE779F8CFB7A853571042CA8702A19 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft Manifest number: 0132 Signing time: Sat 09 Aug 2025 16:37:15 +0000 Manifest this update: Sat 09 Aug 2025 16:32:15 +0000 Manifest next update: Sun 10 Aug 2025 18:25:15 +0000 Files and hashes: 1: 323830343a313234633a3a2f33322d3438203d3e20323633343638.roa (hash: T2k3XHzj+R5PWM1PAn1IiRXkMkZU+kzdLTKOTB9BdPU=) 2: D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl (hash: egb6b8BPDwfyfsVE4rxkDYZ4bDQyeSd5sdkD1hZQBL4=) 3: 3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa (hash: mQl+DqMitEfto4sm/J239pDInofAJ055830zO5LsIjU=) 4: 3137372e37332e36302e302f32322d3234203d3e20323633343638.roa (hash: ojNYwHHCihvNSk2FkbyfGPhui+Fo/NptmXx53NBSpaQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 10 Aug 2025 14:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7c:9c:7f:e0:ee:77:9f:8c:fb:7a:85:35:71:04:2c:a8:70:2a:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B Validity Not Before: Aug 9 16:32:15 2025 GMT Not After : Aug 10 18:25:15 2025 GMT Subject: CN=BDB58EF33AB946DB8BF6AA4FAC92FA9150F3A5CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8d:5b:18:64:a0:c1:7f:63:ce:99:48:5d:e3: 41:16:b3:da:f5:32:f7:5d:d0:da:69:8b:f9:4a:28: 61:b2:9b:c2:0e:11:80:37:c2:9e:af:cf:0b:47:5b: 52:88:88:61:bd:dd:a6:22:b9:5e:30:58:e2:99:fe: 88:fc:cb:98:ac:b8:72:7c:61:58:c1:73:74:ee:6e: 9d:e2:d4:5a:a3:29:5b:3e:6e:86:97:76:9b:ca:0d: 44:da:4f:81:24:a3:38:22:b2:d3:59:e0:d0:a6:dd: dd:03:12:07:17:3a:6a:a8:c6:ab:47:bd:71:f6:cc: b8:d8:0a:38:c4:35:7a:04:3d:d6:cf:e8:30:1f:9a: 75:47:7c:1b:9d:77:60:d7:ad:dc:5f:a0:df:38:9a: 65:6c:46:b2:8c:f0:02:08:e6:da:99:55:d1:bc:cb: 77:8f:ef:22:9e:1e:b3:e1:20:ed:ce:ff:11:20:b6: 33:ab:69:d4:94:47:6d:5b:01:6e:92:c5:fa:71:30: 3e:74:a9:1d:fd:24:ee:c3:cc:78:47:fe:2c:28:6a: 6e:94:f0:6d:7f:95:58:ed:57:f7:80:7e:a0:35:73: 4e:a9:e6:fa:cd:c0:af:7e:d5:ca:b0:e5:f8:dd:e3: a0:37:34:ff:66:e3:ce:6b:f9:ad:1c:d7:99:06:49: 7b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B5:8E:F3:3A:B9:46:DB:8B:F6:AA:4F:AC:92:FA:91:50:F3:A5:CC X509v3 Authority Key Identifier: keyid:D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e2:6f:4c:e6:e3:6b:cb:a2:cc:3e:76:52:22:48:1b:04:3e: 0c:ae:fb:31:af:92:f9:20:8a:f5:16:9f:e9:96:e2:e5:72:03: 74:e6:9b:39:68:55:ea:ae:07:71:98:bd:3d:73:5f:ca:62:34: 7c:58:d2:54:bb:27:28:a2:3b:53:73:bf:94:aa:41:9f:63:5a: eb:4f:a0:ad:45:5b:ef:ea:f2:83:3f:e8:c7:88:c5:cc:67:b4: cd:20:cc:36:11:37:bc:a9:69:71:35:7b:90:ba:0a:f4:76:a0: df:fb:c6:a9:0e:87:70:ab:cb:b2:36:24:67:12:44:13:75:d6: e8:ad:cc:1f:c1:cd:07:82:59:27:c6:18:50:78:c8:70:03:6d: 4f:f7:97:2a:ef:8c:ea:68:c1:72:89:df:c7:76:e5:70:54:90: 6c:7f:49:a6:d2:45:b9:3d:51:9e:9b:95:13:12:3b:86:70:4a: 81:e3:0b:44:73:8d:55:40:20:09:5a:69:74:6c:a4:bb:6e:9b: 1e:95:6b:83:94:59:62:30:93:21:52:f5:9d:58:bb:3e:dc:02: f0:e9:1b:b5:ba:3e:3b:20:ea:19:0c:39:fb:1c:ad:0a:17:e6: a2:eb:0a:97:9d:fb:1b:33:e6:70:80:c0:71:8e:3d:c6:be:43: a0:a5:3a:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaHycf+Dud5+M+3qFNXEELKhwKhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM3NEY1NDI4MEZDOUNGN0U5MDY4QzZGRjc0NEZBNUFE MTQ5RDcxQjAeFw0yNTA4MDkxNjMyMTVaFw0yNTA4MTAxODI1MTVaMDMxMTAvBgNV BAMTKEJEQjU4RUYzM0FCOTQ2REI4QkY2QUE0RkFDOTJGQTkxNTBGM0E1Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtjVsYZKDBf2POmUhd40EWs9r1 Mvdd0Nppi/lKKGGym8IOEYA3wp6vzwtHW1KIiGG93aYiuV4wWOKZ/oj8y5isuHJ8 YVjBc3Tubp3i1FqjKVs+boaXdpvKDUTaT4EkozgistNZ4NCm3d0DEgcXOmqoxqtH vXH2zLjYCjjENXoEPdbP6DAfmnVHfBudd2DXrdxfoN84mmVsRrKM8AII5tqZVdG8 y3eP7yKeHrPhIO3O/xEgtjOradSUR21bAW6SxfpxMD50qR39JO7DzHhH/iwoam6U 8G1/lVjtV/eAfqA1c06p5vrNwK9+1cqw5fjd46A3NP9m485r+a0c15kGSXsdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvbWO8zq5RtuL9qpPrJL6kVDzpcwwHwYDVR0j BBgwFoAU03T1QoD8nPfpBoxv90T6WtFJ1xswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0Vh blkvMC9EMzc0RjU0MjgwRkM5Q0Y3RTkwNjhDNkZGNzQ0RkE1QUQxNDlENzFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNzRGNTQyODBGQzlDRjdF OTA2OEM2RkY3NDRGQTVBRDE0OUQ3MUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0VhblkvMC9E Mzc0RjU0MjgwRkM5Q0Y3RTkwNjhDNkZGNzQ0RkE1QUQxNDlENzFCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALOJvTObja8uizD52UiJIGwQ+DK77Ma+S+SCK9Raf6Zbi5XIDdOabOWhV6q4H cZi9PXNfymI0fFjSVLsnKKI7U3O/lKpBn2Na60+grUVb7+rygz/ox4jFzGe0zSDM NhE3vKlpcTV7kLoK9Hag3/vGqQ6HcKvLsjYkZxJEE3XW6K3MH8HNB4JZJ8YYUHjI cANtT/eXKu+M6mjBconfx3blcFSQbH9JptJFuT1RnpuVExI7hnBKgeMLRHONVUAg CVppdGyku26bHpVrg5RZYjCTIVL1nVi7PtwC8Okbtbo+OyDqGQw5+xytChfmousK l537GzPmcIDAcY49xr5DoKU6Eg== -----END CERTIFICATE-----Generated at Sun Aug 10 03:51:18 2025 by rpki-client