$ rpki-client -vvf rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.mft File: FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.mft (raw, json) Hash identifier: 4AA3s5Zrveclkfn0zbdj1hPtOWiVTgeU0IG3Z4tLS1I= Subject key identifier: D3:67:71:1B:09:76:58:F1:0B:E3:D7:19:D7:E6:94:7D:9D:4A:F3:39 Authority key identifier: FF:7F:52:96:B0:F2:ED:E1:0E:D5:7E:3B:FB:8D:49:70:31:8D:7D:C5 Certificate issuer: /CN=FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5 Certificate serial: 0D0B57D3C8C8402940B7774A14EFB4B682BB849E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.cer Subject info access: rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.mft Manifest number: 5C Signing time: Sun 10 Aug 2025 05:20:35 +0000 Manifest this update: Sun 10 Aug 2025 05:15:35 +0000 Manifest next update: Mon 11 Aug 2025 06:06:35 +0000 Files and hashes: 1: FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.crl (hash: KDvn0Oe22uoT+V4idrZaMHtfRXlkTxLGRPhBF0Ubq2U=) 2: 3230302e37312e37362e302f32322d3332203d3e203631353939.roa (hash: CaVVHJo0LSZdJMM6ZFVMcgNJs76Zbb9uuX/EB8OanUw=) 3: 323830343a336361303a3a2f33322d313238203d3e203631353939.roa (hash: Az1HRYxCLtmiNCgqQqg333qg8goKl+ij8ML1bdBt9PQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.crl rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 06:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:0b:57:d3:c8:c8:40:29:40:b7:77:4a:14:ef:b4:b6:82:bb:84:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5 Validity Not Before: Aug 10 05:15:35 2025 GMT Not After : Aug 11 06:06:35 2025 GMT Subject: CN=D367711B097658F10BE3D719D7E6947D9D4AF339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:3e:24:74:c7:92:e4:f8:f0:15:b4:28:7c: fd:07:ee:fe:1a:76:1c:39:fc:f2:ea:7c:b8:c7:1a: 01:4a:31:3c:b7:2d:02:85:65:63:e1:c2:ac:ea:3c: 11:ea:cf:ba:19:3a:39:06:94:2d:90:08:c7:0a:8e: 96:90:ea:00:f9:eb:fb:93:92:42:9b:af:3c:dd:f9: 43:3b:07:83:e7:6d:a0:1e:fa:57:4c:2d:3f:58:05: f5:6a:1a:20:d1:ba:51:7e:51:8d:b0:fe:0f:f7:32: 93:bc:a4:d6:2e:a4:21:b7:ee:ba:d4:35:3e:d7:b1: b7:e8:bf:b9:4d:18:63:8b:3c:cc:58:3f:c4:51:51: 10:e4:15:88:fa:7e:c2:7c:2a:92:42:bb:9e:61:81: 08:33:f7:7f:af:08:55:2a:fb:39:62:da:07:97:51: 0e:30:91:99:b7:20:3c:73:57:52:17:8f:f2:b8:b9: ac:d9:66:a8:37:b6:cb:19:d9:bc:00:da:ef:10:5c: 9a:45:61:44:6c:15:b7:e5:48:d6:fa:35:90:40:98: 21:72:53:85:ca:9a:4c:3e:d9:d0:19:4d:2b:d0:7e: 8e:7c:cb:10:42:c6:44:c5:25:64:35:21:c0:60:4a: 82:cf:5a:72:c8:83:0f:55:6b:22:04:4d:4c:74:46: 6c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:67:71:1B:09:76:58:F1:0B:E3:D7:19:D7:E6:94:7D:9D:4A:F3:39 X509v3 Authority Key Identifier: keyid:FF:7F:52:96:B0:F2:ED:E1:0E:D5:7E:3B:FB:8D:49:70:31:8D:7D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:08:6b:1b:78:3a:fe:cf:76:45:fa:56:72:a1:9f:99:f7:a5: 8b:c6:23:98:3c:27:d3:84:bf:d0:79:18:3f:76:f3:fc:9f:b4: 8d:6c:52:71:bd:eb:f1:56:bb:3f:07:d5:49:01:af:70:d4:e3: 62:68:12:a0:c7:5b:4f:c1:0d:95:2b:f7:45:05:d8:0d:6f:3d: 7e:8e:88:35:d7:00:8e:47:b9:90:c4:ac:a0:8a:a9:4d:e4:33: 33:1f:35:96:c2:6b:9c:1b:81:21:af:84:7f:fe:68:e4:e1:3d: 23:d0:db:c4:d6:68:bf:4f:06:6f:b9:3f:d4:b6:73:67:35:11: b3:9d:b1:26:e4:6c:d8:95:b6:b6:33:ab:5c:0d:0a:87:c4:c1: 79:f2:2f:59:e5:1a:01:e8:b2:ad:38:92:6c:d3:91:df:ef:cb: 91:58:e9:f3:81:a2:64:e3:86:59:dc:72:c4:5f:70:e6:24:3e: 72:74:ce:08:9f:04:8b:09:15:92:00:16:a8:ac:23:3f:ed:1b: e9:64:d5:6a:7f:ae:11:6d:34:8a:02:22:88:38:49:fb:9d:26: c6:f8:68:c7:c5:af:73:e0:1c:47:be:0f:30:c3:63:47:aa:47: b4:dc:8a:f5:b2:be:89:12:69:82:61:2e:ff:4d:6b:c3:99:7f: b1:51:65:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDQtX08jIQClAt3dKFO+0toK7hJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3RjUyOTZCMEYyRURFMTBFRDU3RTNCRkI4RDQ5NzAz MThEN0RDNTAeFw0yNTA4MTAwNTE1MzVaFw0yNTA4MTEwNjA2MzVaMDMxMTAvBgNV BAMTKEQzNjc3MTFCMDk3NjU4RjEwQkUzRDcxOUQ3RTY5NDdEOUQ0QUYzMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPT4kdMeS5PjwFbQofP0H7v4a dhw5/PLqfLjHGgFKMTy3LQKFZWPhwqzqPBHqz7oZOjkGlC2QCMcKjpaQ6gD56/uT kkKbrzzd+UM7B4PnbaAe+ldMLT9YBfVqGiDRulF+UY2w/g/3MpO8pNYupCG37rrU NT7Xsbfov7lNGGOLPMxYP8RRURDkFYj6fsJ8KpJCu55hgQgz93+vCFUq+zli2geX UQ4wkZm3IDxzV1IXj/K4uazZZqg3tssZ2bwA2u8QXJpFYURsFbflSNb6NZBAmCFy U4XKmkw+2dAZTSvQfo58yxBCxkTFJWQ1IcBgSoLPWnLIgw9VayIETUx0RmyfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU02dxGwl2WPEL49cZ1+aUfZ1K8zkwHwYDVR0j BBgwFoAU/39SlrDy7eEO1X47+41JcDGNfcUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE5pVkZ2c3FZS3RDMVNpMVNEYkEyM3d4V1dBZW1rcko4Q1N4elV2c0ht Tm8vMC9GRjdGNTI5NkIwRjJFREUxMEVENTdFM0JGQjhENDk3MDMxOEQ3REM1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGN0Y1Mjk2QjBGMkVERTEw RUQ1N0UzQkZCOEQ0OTcwMzE4RDdEQzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE5pVkZ2c3FZS3RDMVNpMVNEYkEyM3d4V1dBZW1rcko4Q1N4elV2c0htTm8vMC9G RjdGNTI5NkIwRjJFREUxMEVENTdFM0JGQjhENDk3MDMxOEQ3REM1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWQhrG3g6/s92RfpWcqGfmfeli8YjmDwn04S/0HkYP3bz/J+0jWxScb3r8Va7 PwfVSQGvcNTjYmgSoMdbT8ENlSv3RQXYDW89fo6INdcAjke5kMSsoIqpTeQzMx81 lsJrnBuBIa+Ef/5o5OE9I9DbxNZov08Gb7k/1LZzZzURs52xJuRs2JW2tjOrXA0K h8TBefIvWeUaAeiyrTiSbNOR3+/LkVjp84GiZOOGWdxyxF9w5iQ+cnTOCJ8EiwkV kgAWqKwjP+0b6WTVan+uEW00igIiiDhJ+50mxvhox8Wvc+AcR74PMMNjR6pHtNyK 9bK+iRJpgmEu/01rw5l/sVFlCQ== -----END CERTIFICATE-----Generated at Sun Aug 10 18:22:14 2025 by rpki-client