$ rpki-client -vvf rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft File: 5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft (raw, json) Hash identifier: GrYOJWFKdSlh5Dl3M/lqNFoTokeq5iL7D2y/mgBJYLQ= Subject key identifier: 49:67:A6:41:71:A3:7F:05:9B:87:E5:31:4E:16:73:6C:EA:E4:AF:DF Authority key identifier: 5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9 Certificate issuer: /CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9 Certificate serial: 2DE18ABE34D6B99B0218A538C4A71B899750C56B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer Subject info access: rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft Manifest number: 0292 Signing time: Fri 08 Aug 2025 09:03:08 +0000 Manifest this update: Fri 08 Aug 2025 08:58:08 +0000 Manifest next update: Sat 09 Aug 2025 10:46:08 +0000 Files and hashes: 1: 3137392e39362e3230302e302f32312d3234203d3e203532353730.roa (hash: ThFay1lLsaEu2jVa7XfNcUJbNcEHJjS8TO7JyZdIDyo=) 2: 5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl (hash: WU/ZPhgElXiTrYznXG+PfUBfv2A8l2JYTlF4jylZ7RY=) 3: 323830343a313536343a3a2f33322d3336203d3e203532353730.roa (hash: FC1Wd69RrJidzRZVv4UIal/AXyu4NEituILPDllcaNg=) 4: 3137372e38362e3131362e302f32322d3234203d3e203532353730.roa (hash: OGh0oSMiAuqwOXO84p0Xsd8bUAebLrAgyXg0x2c44tg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 10:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e1:8a:be:34:d6:b9:9b:02:18:a5:38:c4:a7:1b:89:97:50:c5:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9 Validity Not Before: Aug 8 08:58:08 2025 GMT Not After : Aug 9 10:46:08 2025 GMT Subject: CN=4967A64171A37F059B87E5314E16736CEAE4AFDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3c:66:ba:f4:1c:85:f8:84:b7:3b:e5:74:a3: 59:80:4a:af:8c:cc:ef:eb:38:0c:85:49:5c:bf:67: 63:ca:08:55:1e:09:2d:b8:76:be:d2:b7:62:2f:a9: 79:33:b4:ce:ee:87:70:53:21:8a:df:8b:07:67:2a: e9:12:2c:62:9a:0e:e5:7c:4a:07:e1:e8:67:c2:b9: f2:24:d6:ac:30:8d:b5:75:92:f9:01:e3:4f:b0:b4: a7:e3:a6:d0:0e:23:6f:d3:d4:f0:70:d6:4d:b9:fb: 0d:36:44:c9:46:bb:17:bc:c1:a2:3b:d8:fd:be:49: ae:69:c1:3f:76:00:4e:3a:7f:b6:5e:96:f5:25:97: 68:a0:62:8d:e2:f2:27:8d:71:36:bd:53:3e:43:23: e0:f7:49:e5:75:29:df:1b:a2:4f:6f:36:25:10:35: 02:8b:48:4a:76:ab:ee:46:dc:d3:51:7b:ed:31:45: 09:ec:6f:72:c8:9c:bb:95:c9:dd:d0:fb:03:7f:de: 86:64:32:57:dd:b7:8e:13:5d:92:da:38:a8:06:a9: d1:c5:23:06:dc:e3:14:e1:5c:e6:01:45:8d:e1:30: 10:ec:97:44:1c:91:2b:d8:d9:98:38:99:66:a1:f7: 8b:cd:5b:60:4b:3c:29:fb:5f:ce:00:06:8f:29:1f: 64:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:67:A6:41:71:A3:7F:05:9B:87:E5:31:4E:16:73:6C:EA:E4:AF:DF X509v3 Authority Key Identifier: keyid:5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:7f:35:29:51:47:7f:0d:9d:2c:d4:d4:85:f6:82:63:17:65: 80:0d:e0:a3:34:7f:c4:3f:2e:84:42:36:bc:3d:eb:27:88:7e: a9:34:c9:60:e1:41:dd:eb:be:53:f8:5f:ff:26:94:29:22:5c: 59:b2:e0:7d:37:84:5a:6b:ad:3f:96:eb:a1:de:9c:40:3d:95: f2:a9:c3:6c:1a:a0:62:9e:44:4c:97:8e:17:50:28:60:ec:a4: 3b:6e:12:65:6f:be:30:d1:3c:dd:8d:98:70:35:4a:74:ec:1e: 77:2b:7d:02:f4:68:01:55:0e:4d:98:82:0e:2d:cf:fd:fe:f1: 32:9d:7b:57:51:15:28:e8:c2:25:07:8a:8d:76:52:41:e4:4f: 4d:b9:34:33:6e:17:97:33:5a:9d:83:5d:c4:74:d8:d1:d9:0c: c2:d6:d0:3c:bb:4d:f5:42:a0:50:dd:67:8a:33:61:00:fc:62: 2f:13:ba:4a:8d:e4:37:77:cd:ba:dc:97:69:1b:05:7d:a6:7b: 3a:cb:c2:8e:8b:de:54:43:28:16:23:c1:40:a5:19:eb:58:00: ce:cf:6e:41:81:2b:00:31:e7:60:5b:6b:24:47:be:59:53:74: ef:c1:59:1c:41:ee:f9:b6:60:23:b8:6e:5f:d5:8b:ab:f5:08: af:cd:18:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULeGKvjTWuZsCGKU4xKcbiZdQxWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNURDMjJDOUYzOEU0QjNBNUZGQUNDNzY4OUM2RUI1 MkE2NURCOTAeFw0yNTA4MDgwODU4MDhaFw0yNTA4MDkxMDQ2MDhaMDMxMTAvBgNV BAMTKDQ5NjdBNjQxNzFBMzdGMDU5Qjg3RTUzMTRFMTY3MzZDRUFFNEFGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdPGa69ByF+IS3O+V0o1mASq+M zO/rOAyFSVy/Z2PKCFUeCS24dr7St2IvqXkztM7uh3BTIYrfiwdnKukSLGKaDuV8 Sgfh6GfCufIk1qwwjbV1kvkB40+wtKfjptAOI2/T1PBw1k25+w02RMlGuxe8waI7 2P2+Sa5pwT92AE46f7ZelvUll2igYo3i8ieNcTa9Uz5DI+D3SeV1Kd8bok9vNiUQ NQKLSEp2q+5G3NNRe+0xRQnsb3LInLuVyd3Q+wN/3oZkMlfdt44TXZLaOKgGqdHF Iwbc4xThXOYBRY3hMBDsl0QckSvY2Zg4mWah94vNW2BLPCn7X84ABo8pH2RBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSWemQXGjfwWbh+UxThZzbOrkr98wHwYDVR0j BBgwFoAUX/XcIsnzjks6X/rMdonG61KmXbkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1J1UkxMYXVhenpxUWQ3NUdpWkxpdE5hUVp4bWRVcTZMREpaajhmcWV5 ZDIvMS81RkY1REMyMkM5RjM4RTRCM0E1RkZBQ0M3Njg5QzZFQjUyQTY1REI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGRjVEQzIyQzlGMzhFNEIz QTVGRkFDQzc2ODlDNkVCNTJBNjVEQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1J1UkxMYXVhenpxUWQ3NUdpWkxpdE5hUVp4bWRVcTZMREpaajhmcWV5ZDIvMS81 RkY1REMyMkM5RjM4RTRCM0E1RkZBQ0M3Njg5QzZFQjUyQTY1REI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAan81KVFHfw2dLNTUhfaCYxdlgA3gozR/xD8uhEI2vD3rJ4h+qTTJYOFB3eu+ U/hf/yaUKSJcWbLgfTeEWmutP5brod6cQD2V8qnDbBqgYp5ETJeOF1AoYOykO24S ZW++MNE83Y2YcDVKdOwedyt9AvRoAVUOTZiCDi3P/f7xMp17V1EVKOjCJQeKjXZS QeRPTbk0M24XlzNanYNdxHTY0dkMwtbQPLtN9UKgUN1nijNhAPxiLxO6So3kN3fN utyXaRsFfaZ7OsvCjoveVEMoFiPBQKUZ61gAzs9uQYErADHnYFtrJEe+WVN078FZ HEHu+bZgI7huX9WLq/UIr80YFg== -----END CERTIFICATE-----Generated at Fri Aug 8 19:24:03 2025 by rpki-client