$ rpki-client -vvf rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft File: 314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft (raw, json) Hash identifier: zVnKTCWO8nfDcoYuVLkcNmQMxcLMf8jYOZ1EX8rF0Ws= Subject key identifier: 35:DF:E4:F7:C1:85:45:7E:7E:DB:D0:1D:A6:36:0F:A3:36:94:79:BE Authority key identifier: 31:4A:86:09:35:4C:2E:3C:17:25:89:3D:52:1D:35:CC:5F:C4:AF:DB Certificate issuer: /CN=314A8609354C2E3C1725893D521D35CC5FC4AFDB Certificate serial: 672609D947FCFA6A273B9E7D9CCA2F6FAA3B1A3E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer Subject info access: rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft Manifest number: 0286 Signing time: Tue 05 Aug 2025 05:16:35 +0000 Manifest this update: Tue 05 Aug 2025 05:11:35 +0000 Manifest next update: Wed 06 Aug 2025 06:53:35 +0000 Files and hashes: 1: 3137372e35352e3230382e302f32302d3234203d3e20323632353331.roa (hash: URz6JtOdk6yC4FUu3xELECMy9Zk+mnCtQPhECGH9DrU=) 2: 323830343a3561343a3a2f33322d3430203d3e20323632353331.roa (hash: gm33hy7PVx4pt79hAwr1MSkvUr+W0fBAGRIORciWQ/U=) 3: 314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl (hash: pjGoYgkRHL9+7AzXOza6mnDBCFXUztE/ZLRkoTeDjD8=) 4: 3137372e35352e3232332e312f33322d3332203d3e20323632353331.roa (hash: aZFVOMgpGQ5J4rg1azWk8+K2uFFGkeiysjVEOiSdFkY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 06:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:26:09:d9:47:fc:fa:6a:27:3b:9e:7d:9c:ca:2f:6f:aa:3b:1a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314A8609354C2E3C1725893D521D35CC5FC4AFDB Validity Not Before: Aug 5 05:11:35 2025 GMT Not After : Aug 6 06:53:35 2025 GMT Subject: CN=35DFE4F7C185457E7EDBD01DA6360FA3369479BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d3:da:0d:c5:00:9f:29:b8:67:e6:c0:71:e2: a4:b4:2b:32:57:80:b6:54:a5:b5:b3:94:5e:a0:8b: 6a:92:55:63:8e:53:b9:7d:3d:ce:c4:98:e7:c7:95: 66:04:50:82:8e:1e:af:9f:f3:18:7e:0a:1a:72:f6: ef:f7:10:4d:6d:6f:64:a3:2d:ea:db:73:f4:db:cf: 1c:78:cb:c1:90:df:ec:a5:55:91:51:93:a3:36:da: ab:3f:b2:32:e7:68:5f:f0:05:16:ad:bc:e2:dd:10: 2f:b7:0a:fd:14:16:45:b3:6a:0d:19:2e:98:68:b8: e8:23:08:f2:d8:ff:36:40:4d:86:14:08:9d:bb:46: b7:6e:9a:2d:0c:4c:a9:c8:61:9d:e2:d4:9e:7f:ab: f1:2f:e7:f7:11:d3:67:73:c2:d5:b9:57:e6:24:f2: 70:90:cc:ca:46:ec:5a:17:fa:28:ee:f5:eb:88:33: a5:c2:b0:d5:08:1f:4b:1f:cc:90:83:ab:2f:53:9a: ff:ca:e4:8f:23:7d:12:16:52:8c:cb:37:4e:78:68: 6e:3b:33:54:e6:1c:46:8a:e1:d4:3f:3e:63:b8:cc: 57:20:0c:b0:65:24:86:55:fc:d4:03:c9:c4:50:a0: 59:b1:21:be:6a:cc:36:4f:c1:67:2b:9d:4f:bc:ab: 96:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DF:E4:F7:C1:85:45:7E:7E:DB:D0:1D:A6:36:0F:A3:36:94:79:BE X509v3 Authority Key Identifier: keyid:31:4A:86:09:35:4C:2E:3C:17:25:89:3D:52:1D:35:CC:5F:C4:AF:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:e6:2e:dd:62:02:71:d4:8f:45:87:35:f4:71:32:f5:8c:26: 28:6d:ad:4b:69:48:51:41:b7:f1:4c:8b:ee:79:fd:fd:e1:ea: bf:76:ef:8c:0c:55:cd:34:a5:60:46:04:48:e5:9d:08:ce:02: f2:af:00:c1:06:fa:6c:d4:57:54:b3:68:8f:43:7e:96:40:f3: b4:9e:10:66:65:44:06:6b:ab:73:dd:7b:c9:45:cf:5b:1a:38: 6c:9b:22:7f:ad:af:b2:7a:9f:4f:d5:c0:c5:ce:fb:8b:0a:97: 38:22:18:54:da:ec:2d:e9:42:98:0b:08:fc:f7:85:3f:e2:9a: 63:90:b1:67:5d:a0:52:3a:a1:2e:4f:da:39:ca:fd:53:23:50: 0b:b0:52:38:30:fb:19:eb:a5:53:cb:bc:33:75:a2:bd:0e:97: c4:22:a5:82:1c:97:23:86:16:64:3b:53:8b:09:2b:27:30:08: 8a:d7:98:52:70:18:9a:56:2a:a8:c8:a7:41:c3:e1:79:b0:4a: 23:57:ee:32:f1:fe:4d:c4:40:4d:1e:a6:49:79:23:db:af:4e: 49:fc:a2:b7:9e:74:f2:f2:6e:91:a8:2a:bf:3b:c1:20:fb:8a: 68:c9:60:6a:ce:80:13:88:0b:4d:6a:61:cb:fa:09:65:34:5e: 88:1c:dd:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZyYJ2Uf8+monO559nMovb6o7Gj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0QTg2MDkzNTRDMkUzQzE3MjU4OTNENTIxRDM1Q0M1 RkM0QUZEQjAeFw0yNTA4MDUwNTExMzVaFw0yNTA4MDYwNjUzMzVaMDMxMTAvBgNV BAMTKDM1REZFNEY3QzE4NTQ1N0U3RURCRDAxREE2MzYwRkEzMzY5NDc5QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ09oNxQCfKbhn5sBx4qS0KzJX gLZUpbWzlF6gi2qSVWOOU7l9Pc7EmOfHlWYEUIKOHq+f8xh+Chpy9u/3EE1tb2Sj Lerbc/Tbzxx4y8GQ3+ylVZFRk6M22qs/sjLnaF/wBRatvOLdEC+3Cv0UFkWzag0Z LphouOgjCPLY/zZATYYUCJ27Rrdumi0MTKnIYZ3i1J5/q/Ev5/cR02dzwtW5V+Yk 8nCQzMpG7FoX+iju9euIM6XCsNUIH0sfzJCDqy9Tmv/K5I8jfRIWUozLN054aG47 M1TmHEaK4dQ/PmO4zFcgDLBlJIZV/NQDycRQoFmxIb5qzDZPwWcrnU+8q5bRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNd/k98GFRX5+29AdpjYPozaUeb4wHwYDVR0j BBgwFoAUMUqGCTVMLjwXJYk9Uh01zF/Er9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHVNSlFwaGZYZGE4RjhNbTRySzZUc296Z2pkOExnWG42QWMzN3NaYkxY S20vMS8zMTRBODYwOTM1NEMyRTNDMTcyNTg5M0Q1MjFEMzVDQzVGQzRBRkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxNEE4NjA5MzU0QzJFM0Mx NzI1ODkzRDUyMUQzNUNDNUZDNEFGREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHVNSlFwaGZYZGE4RjhNbTRySzZUc296Z2pkOExnWG42QWMzN3NaYkxYS20vMS8z MTRBODYwOTM1NEMyRTNDMTcyNTg5M0Q1MjFEMzVDQzVGQzRBRkRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWOYu3WICcdSPRYc19HEy9YwmKG2tS2lIUUG38UyL7nn9/eHqv3bvjAxVzTSl YEYESOWdCM4C8q8AwQb6bNRXVLNoj0N+lkDztJ4QZmVEBmurc917yUXPWxo4bJsi f62vsnqfT9XAxc77iwqXOCIYVNrsLelCmAsI/PeFP+KaY5CxZ12gUjqhLk/aOcr9 UyNQC7BSODD7GeulU8u8M3WivQ6XxCKlghyXI4YWZDtTiwkrJzAIiteYUnAYmlYq qMinQcPhebBKI1fuMvH+TcRATR6mSXkj269OSfyit5508vJukagqvzvBIPuKaMlg as6AE4gLTWphy/oJZTReiBzd6A== -----END CERTIFICATE-----Generated at Tue Aug 5 23:02:28 2025 by rpki-client