$ rpki-client -vvf rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.mft File: 5725DFB2DC2786E4FC56BA0C11567032EA389E2B.mft (raw, json) Hash identifier: h5jWFnkUHFFl+lTR7J7QUN5PyLYqoGYYQ3WI10PRTNo= Subject key identifier: BF:23:B0:3A:33:ED:D0:C1:97:83:E4:10:E8:01:34:38:02:AA:5A:EA Authority key identifier: 57:25:DF:B2:DC:27:86:E4:FC:56:BA:0C:11:56:70:32:EA:38:9E:2B Certificate issuer: /CN=5725DFB2DC2786E4FC56BA0C11567032EA389E2B Certificate serial: 1C22EDFF97D0E7EDB9EB303F79AC21E28114371F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.cer Subject info access: rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.mft Manifest number: 01F7 Signing time: Fri 08 Aug 2025 22:08:20 +0000 Manifest this update: Fri 08 Aug 2025 22:03:20 +0000 Manifest next update: Sat 09 Aug 2025 23:59:20 +0000 Files and hashes: 1: 3139322e3134342e3132342e302f32322d3234203d3e20323732343833.roa (hash: xB1yM8uvGqhBpUylreV+SOfIooIymRzer1Ue3ghc1C0=) 2: 323830343a383165303a3a2f33322d3438203d3e20323732343833.roa (hash: gGpb7QOWhrxLz+03Ox3Po1Me5Z0eXwZv1Sn7CGLLb4c=) 3: 5725DFB2DC2786E4FC56BA0C11567032EA389E2B.crl (hash: Pd+mqpBd4qJ43Kh4AJ7SgcKAizkGNuD7EET6A9JysGQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.crl rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 23:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:22:ed:ff:97:d0:e7:ed:b9:eb:30:3f:79:ac:21:e2:81:14:37:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5725DFB2DC2786E4FC56BA0C11567032EA389E2B Validity Not Before: Aug 8 22:03:20 2025 GMT Not After : Aug 9 23:59:20 2025 GMT Subject: CN=BF23B03A33EDD0C19783E410E801343802AA5AEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:af:f3:1b:69:10:5a:9c:ff:86:c8:40:3d:72: 5e:fa:f4:73:3c:fa:62:ef:1b:30:c1:28:ff:30:ad: aa:7d:be:d5:bd:4a:fa:4b:14:d8:59:56:1f:35:a1: fc:fb:b3:8c:78:08:45:fd:ae:88:2b:ce:d7:27:5a: 1b:60:f5:06:61:0d:33:51:5e:e9:db:12:54:81:64: 3a:c2:94:65:2d:46:d1:dd:23:12:4a:6d:7c:8d:73: 1e:08:3e:a1:97:b7:4d:55:ba:07:4a:e9:e0:32:ce: cf:95:d8:18:9f:d8:08:03:94:61:6e:55:88:47:f2: 5c:d0:82:be:5c:50:5a:ad:f6:13:29:72:a6:96:52: da:b6:06:d5:d7:a3:5d:18:b4:0b:c4:60:a2:72:44: cc:47:45:47:20:24:56:eb:0b:2b:2b:2f:a5:82:64: fe:d5:25:ec:1f:e2:93:9c:85:d4:bc:8b:83:ab:1e: 9d:a6:63:1b:23:6d:93:6a:7c:a5:4c:ac:0b:60:5b: 43:c9:84:2f:15:ac:42:a9:cb:e9:fc:cd:0c:60:82: b4:6c:9d:5b:3f:5c:34:90:68:dd:b4:59:9f:1c:34: 44:30:df:7e:8f:85:f4:2c:0a:03:e7:39:a7:c1:26: c3:9b:d1:d8:ff:56:f3:e7:88:74:5a:61:ae:3b:08: 82:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:23:B0:3A:33:ED:D0:C1:97:83:E4:10:E8:01:34:38:02:AA:5A:EA X509v3 Authority Key Identifier: keyid:57:25:DF:B2:DC:27:86:E4:FC:56:BA:0C:11:56:70:32:EA:38:9E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:85:3e:66:28:87:1a:9f:1e:21:40:19:f7:6e:de:88:ac:47: c0:66:53:96:f3:63:b6:6b:2d:fc:58:3b:3c:76:7d:29:d7:75: 6e:e6:30:f6:32:88:aa:65:9b:b3:bf:10:df:c6:7c:0b:d3:3a: 98:22:61:1f:57:b3:12:03:69:e9:6f:6f:d8:96:95:f0:e7:2c: ec:14:c6:58:62:d6:1c:c2:4e:54:00:ca:fb:5e:34:52:e9:01: 17:e4:cf:e3:27:ee:eb:3e:55:0b:c3:65:7e:b9:3d:76:3f:f8: c6:41:30:bf:7a:04:91:f7:fd:80:89:94:7a:ec:81:98:ee:2a: 36:2c:f4:d6:06:b9:a9:24:b2:e8:88:d2:02:b8:d9:40:1f:73: 0c:62:86:84:fd:91:d6:12:ef:7e:4d:79:ca:c2:e7:e6:d9:c6: ae:f9:1b:7b:7e:b6:75:6e:2b:45:7b:40:33:1d:eb:bc:f3:a0: 5f:bf:36:58:83:3c:8e:36:1c:bc:6b:35:10:b7:ae:36:6b:c5: 72:cf:ba:99:b4:7a:60:14:a3:20:71:c0:1c:b6:bd:bf:52:53: 50:12:fc:02:00:52:a4:6a:0a:3d:ce:6b:e6:b0:6a:ac:7c:96: af:06:65:44:f3:68:a2:2d:04:98:74:bf:a4:c7:86:40:03:68: 49:10:6c:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHCLt/5fQ5+256zA/eawh4oEUNx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcyNURGQjJEQzI3ODZFNEZDNTZCQTBDMTE1NjcwMzJF QTM4OUUyQjAeFw0yNTA4MDgyMjAzMjBaFw0yNTA4MDkyMzU5MjBaMDMxMTAvBgNV BAMTKEJGMjNCMDNBMzNFREQwQzE5NzgzRTQxMEU4MDEzNDM4MDJBQTVBRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOr/MbaRBanP+GyEA9cl769HM8 +mLvGzDBKP8wrap9vtW9SvpLFNhZVh81ofz7s4x4CEX9rogrztcnWhtg9QZhDTNR XunbElSBZDrClGUtRtHdIxJKbXyNcx4IPqGXt01VugdK6eAyzs+V2Bif2AgDlGFu VYhH8lzQgr5cUFqt9hMpcqaWUtq2BtXXo10YtAvEYKJyRMxHRUcgJFbrCysrL6WC ZP7VJewf4pOchdS8i4OrHp2mYxsjbZNqfKVMrAtgW0PJhC8VrEKpy+n8zQxggrRs nVs/XDSQaN20WZ8cNEQw336PhfQsCgPnOafBJsOb0dj/VvPniHRaYa47CILvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvyOwOjPt0MGXg+QQ6AE0OAKqWuowHwYDVR0j BBgwFoAUVyXfstwnhuT8VroMEVZwMuo4niswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHpZVHF3Ykhha0M1QVp0ZlBicTZtRXVIdVFWdU5aRnZ2NzdVYWFGNUV6 VFIvMC81NzI1REZCMkRDMjc4NkU0RkM1NkJBMEMxMTU2NzAzMkVBMzg5RTJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3MjVERkIyREMyNzg2RTRG QzU2QkEwQzExNTY3MDMyRUEzODlFMkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHpZVHF3Ykhha0M1QVp0ZlBicTZtRXVIdVFWdU5aRnZ2NzdVYWFGNUV6VFIvMC81 NzI1REZCMkRDMjc4NkU0RkM1NkJBMEMxMTU2NzAzMkVBMzg5RTJCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaoU+ZiiHGp8eIUAZ927eiKxHwGZTlvNjtmst/Fg7PHZ9Kdd1buYw9jKIqmWb s78Q38Z8C9M6mCJhH1ezEgNp6W9v2JaV8Ocs7BTGWGLWHMJOVADK+140UukBF+TP 4yfu6z5VC8Nlfrk9dj/4xkEwv3oEkff9gImUeuyBmO4qNiz01ga5qSSy6IjSArjZ QB9zDGKGhP2R1hLvfk15ysLn5tnGrvkbe362dW4rRXtAMx3rvPOgX782WIM8jjYc vGs1ELeuNmvFcs+6mbR6YBSjIHHAHLa9v1JTUBL8AgBSpGoKPc5r5rBqrHyWrwZl RPNooi0EmHS/pMeGQANoSRBsww== -----END CERTIFICATE-----Generated at Sat Aug 9 02:58:45 2025 by rpki-client