$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft File: FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft (raw, json) Hash identifier: enDdj1Ixadrf2a+cb09xh0UsDf2tLapyspdyqFkjiY0= Subject key identifier: 21:F2:17:F3:43:99:E2:D1:18:F5:80:E5:0A:E1:DE:50:21:FF:D3:84 Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1 Certificate issuer: /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1 Certificate serial: 12B58ED8AF1A1FE894992C98045FB9DCE749B44B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer Subject info access: rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft Manifest number: 0287 Signing time: Sun 10 Aug 2025 06:09:46 +0000 Manifest this update: Sun 10 Aug 2025 06:04:46 +0000 Manifest next update: Mon 11 Aug 2025 08:42:46 +0000 Files and hashes: 1: 3136382e3139352e3136382e302f32322d3234203d3e20323635343336.roa (hash: gLjzvqhIddRfRAKvMrLuHYyvGatKWXhSoNrRU1rlkBI=) 2: FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl (hash: +sueazQnY8jHRzgFe4Mir8ON511kTsWs0fHhRqzs+f8=) 3: 323830343a333431633a3a2f33322d3438203d3e20323635343336.roa (hash: TY7Y2G3iRjAjJqoZxwkdD7os1yzkmGn/C+7qaLrdHzE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 08:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b5:8e:d8:af:1a:1f:e8:94:99:2c:98:04:5f:b9:dc:e7:49:b4:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1 Validity Not Before: Aug 10 06:04:46 2025 GMT Not After : Aug 11 08:42:46 2025 GMT Subject: CN=21F217F34399E2D118F580E50AE1DE5021FFD384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:35:a0:3d:01:48:76:e1:55:9c:d2:83:a5:2b: aa:50:35:2f:3d:ab:1a:40:89:c4:60:95:7c:19:47: a8:b2:5e:80:08:dc:53:a0:70:8e:59:5a:f2:90:70: 81:77:8d:57:c0:61:d7:44:0a:60:ea:ce:67:de:4c: 7e:07:dc:c2:91:10:d1:c2:50:fc:68:9a:b9:7f:11: 52:04:86:e5:77:81:ef:22:a7:b7:6d:e5:c2:a9:f8: 3a:46:48:a0:d7:62:21:e8:a0:cd:46:25:fd:24:16: 35:b4:d6:ef:42:2c:5e:b6:c4:2f:3d:07:29:b1:75: 2f:3b:5d:46:a8:cb:50:92:48:b6:3a:ac:a8:b6:e7: 4e:dc:cb:b4:1c:e3:df:51:6d:83:93:31:23:9e:76: 18:3f:00:75:4b:9d:c2:5a:ac:40:33:f0:4f:0c:2a: 2c:e3:0f:56:9d:27:4f:4a:7e:2e:6f:f8:da:b1:3e: 62:e2:aa:a6:c1:45:b5:96:a8:e9:a3:2c:ef:c3:ab: f8:7b:ec:39:cf:2b:ef:6b:8a:e5:ff:53:01:83:ab: b0:d9:06:20:f4:98:fc:30:1e:5e:9b:ce:3a:4a:11: 08:9b:0b:c3:b8:2b:3a:f8:14:ff:29:03:fa:22:e8: 83:bf:48:23:14:83:50:69:1a:5f:3b:7b:82:4a:a4: 11:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F2:17:F3:43:99:E2:D1:18:F5:80:E5:0A:E1:DE:50:21:FF:D3:84 X509v3 Authority Key Identifier: keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:9a:15:ac:10:59:e1:f4:2d:0e:34:ce:ac:2b:ca:32:01:f1: 5a:8b:d4:4a:1c:86:fc:01:b8:7a:42:29:bb:3c:ae:e1:de:01: 41:1d:38:79:57:1e:99:7d:e9:88:7a:b3:d0:e6:34:9a:45:e8: b5:40:40:3f:83:32:7a:17:32:16:29:df:5e:86:a6:4c:ba:9d: cf:d9:95:18:a9:12:18:6d:96:21:6c:b6:b9:b3:ab:9d:9d:73: 80:52:81:d1:c7:2d:ea:de:51:d4:6b:9b:d6:1c:b7:10:2a:f6: 37:09:ff:6f:27:11:cf:0e:d3:c1:c8:4d:6e:38:64:f0:54:ea: 48:0e:56:3c:d3:9c:99:e0:19:5a:69:04:71:8c:42:db:1e:bb: 11:73:7f:5f:08:bb:1b:3b:1b:46:28:38:24:34:d8:07:66:f4: a7:5e:95:1f:37:97:76:f6:14:7c:b1:0f:14:97:03:31:1b:19: 58:f8:f2:c6:ba:81:73:89:e0:86:a8:f8:22:2b:2f:99:b8:d1: b5:3d:c8:fe:11:51:6b:2e:1f:d3:83:ed:78:2c:c9:9e:1b:f6: ae:f5:6a:b5:ce:8e:4e:28:8c:aa:cd:c9:61:fa:ba:31:a7:71: 32:d5:b9:50:3b:02:26:3a:a6:1c:c8:9e:27:fe:5c:a7:03:44: de:e7:c0:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUErWO2K8aH+iUmSyYBF+53OdJtEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ1NDI5QkJCMDJERUU4QkJFN0ZDNjc2NkI2RTBCNzRC Qzg1OThFMTAeFw0yNTA4MTAwNjA0NDZaFw0yNTA4MTEwODQyNDZaMDMxMTAvBgNV BAMTKDIxRjIxN0YzNDM5OUUyRDExOEY1ODBFNTBBRTFERTUwMjFGRkQzODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5NaA9AUh24VWc0oOlK6pQNS89 qxpAicRglXwZR6iyXoAI3FOgcI5ZWvKQcIF3jVfAYddECmDqzmfeTH4H3MKRENHC UPxomrl/EVIEhuV3ge8ip7dt5cKp+DpGSKDXYiHooM1GJf0kFjW01u9CLF62xC89 BymxdS87XUaoy1CSSLY6rKi2507cy7Qc499RbYOTMSOedhg/AHVLncJarEAz8E8M KizjD1adJ09Kfi5v+NqxPmLiqqbBRbWWqOmjLO/Dq/h77DnPK+9riuX/UwGDq7DZ BiD0mPwwHl6bzjpKEQibC8O4Kzr4FP8pA/oi6IO/SCMUg1BpGl87e4JKpBGVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIfIX80OZ4tEY9YDlCuHeUCH/04QwHwYDVR0j BBgwFoAU/VQpu7At7ou+f8Z2a24LdLyFmOEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2FnWWtKRnQzdXJacG1EZlBCRExvdW9SVkRVeWhvRGhUSDhqd3UzUHo0 OTMvMC9GRDU0MjlCQkIwMkRFRThCQkU3RkM2NzY2QjZFMEI3NEJDODU5OEUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZENTQyOUJCQjAyREVFOEJC RTdGQzY3NjZCNkUwQjc0QkM4NTk4RTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2FnWWtKRnQzdXJacG1EZlBCRExvdW9SVkRVeWhvRGhUSDhqd3UzUHo0OTMvMC9G RDU0MjlCQkIwMkRFRThCQkU3RkM2NzY2QjZFMEI3NEJDODU5OEUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKJoVrBBZ4fQtDjTOrCvKMgHxWovUShyG/AG4ekIpuzyu4d4BQR04eVcemX3p iHqz0OY0mkXotUBAP4MyehcyFinfXoamTLqdz9mVGKkSGG2WIWy2ubOrnZ1zgFKB 0cct6t5R1Gub1hy3ECr2Nwn/bycRzw7TwchNbjhk8FTqSA5WPNOcmeAZWmkEcYxC 2x67EXN/Xwi7GzsbRig4JDTYB2b0p16VHzeXdvYUfLEPFJcDMRsZWPjyxrqBc4ng hqj4IisvmbjRtT3I/hFRay4f04PteCzJnhv2rvVqtc6OTiiMqs3JYfq6MadxMtW5 UDsCJjqmHMieJ/5cpwNE3ufAZg== -----END CERTIFICATE-----Generated at Sun Aug 10 19:57:31 2025 by rpki-client