$ rpki-client -vvf rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft File: A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft (raw, json) Hash identifier: 9aGkS2AS06EzwQ0S5cw73dv9UwPet5hkbzIpL8XGWoA= Subject key identifier: 99:FE:EA:47:A5:F7:84:B5:3D:CA:23:6C:95:CB:D6:5E:E0:0D:95:AD Authority key identifier: A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A Certificate issuer: /CN=A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A Certificate serial: 02A26E3B82CCBDAF4A25853B70CEA52C18A73152 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer Subject info access: rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft Manifest number: 5D Signing time: Sun 10 Aug 2025 06:02:01 +0000 Manifest this update: Sun 10 Aug 2025 05:57:01 +0000 Manifest next update: Mon 11 Aug 2025 10:01:01 +0000 Files and hashes: 1: 323830343a323461383a3a2f33322d3438203d3e20323634323336.roa (hash: ibQcB0heJmCCHvRKHLau5TQQNa0nHWFomE8+cMwlq7M=) 2: A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl (hash: KHN/C8XEHTBcRfnPe39YGrmvIVzYG6x7MsPlk6BuGQM=) 3: 3136382e39302e33362e302f32322d3234203d3e20323634323336.roa (hash: HtqSGu9dBb0YYZ+ZbVBsu0Qzj5D0doY+P8Xbw0oRSSY=) 4: 3133382e3131372e38382e302f32322d3234203d3e20323634323336.roa (hash: FY7AnqAx4uALtv3sW2I80UpMHissxv0FiwkefwWNfi8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 10:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a2:6e:3b:82:cc:bd:af:4a:25:85:3b:70:ce:a5:2c:18:a7:31:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A Validity Not Before: Aug 10 05:57:01 2025 GMT Not After : Aug 11 10:01:01 2025 GMT Subject: CN=99FEEA47A5F784B53DCA236C95CBD65EE00D95AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ed:60:cc:22:f2:b7:34:15:0a:e0:09:ec:ff: 99:cd:fa:8e:d0:d4:6e:44:43:e8:23:22:7f:01:39: 3f:c9:35:27:43:17:3e:d2:fe:6d:a7:51:61:cb:fc: da:2c:3a:e9:b9:26:29:b7:ce:2a:13:ec:73:dc:bd: c1:e1:5c:eb:d6:46:50:1f:ff:d1:6a:e4:f2:f2:5e: 08:56:85:a3:ab:3d:ec:c0:44:a7:42:0c:51:b8:e2: 3a:be:ba:b7:c0:70:a4:4e:c6:da:6e:da:d9:f2:1f: 75:1e:5b:88:da:a9:ed:20:91:fa:0d:74:90:ea:9a: 4b:d1:3a:e8:b2:d6:72:fe:24:e0:d1:52:8e:fc:f0: c3:6d:81:58:4a:48:cc:3f:58:8c:31:10:b6:09:40: d0:99:17:e7:d1:3a:b0:15:7b:e6:4f:61:c6:53:e9: fe:ab:62:26:73:7c:9e:ca:ed:8b:99:c5:51:cf:5e: f6:b4:b0:33:6f:9e:46:97:52:42:09:b4:9d:16:d9: 50:f4:96:f8:4e:0a:51:6b:86:40:f6:a4:0e:ff:df: 22:96:76:6e:b3:9f:8d:2e:5b:ea:7f:63:aa:78:d3: d7:96:59:26:bc:ea:c4:f5:ae:0a:cf:db:a6:61:09: f2:91:a1:0f:6d:83:b3:c1:65:96:f0:ad:76:ce:e0: 41:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FE:EA:47:A5:F7:84:B5:3D:CA:23:6C:95:CB:D6:5E:E0:0D:95:AD X509v3 Authority Key Identifier: keyid:A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:7b:03:19:5b:f8:01:fc:ac:b7:d9:b3:0a:fc:de:68:34:00: 8e:f2:52:cf:2b:ed:97:45:03:bb:13:a9:f5:c1:66:0c:c5:71: 5b:69:a3:c7:14:8a:83:f9:b1:21:07:7b:80:7f:4f:9d:30:06: bf:a1:69:ea:b5:73:14:18:08:10:ae:57:b8:de:19:da:cc:28: d1:ae:51:42:5a:34:52:cb:3a:dc:94:cd:16:d8:b8:37:c6:5a: fb:ac:8d:69:d5:99:03:2e:7f:b1:a2:1a:5a:e4:31:2e:ec:6a: 22:b9:99:4e:2a:57:5d:f0:59:3d:85:6c:17:6b:5a:34:9e:79: c1:ca:28:f2:39:50:73:65:cd:ec:29:ee:fd:c4:4e:f2:3f:94: dc:ec:1c:d6:f6:db:2a:69:ff:05:01:10:4e:ed:9a:50:be:7f: 7a:7f:34:5e:5a:5f:b5:c1:6d:aa:d9:15:9c:a7:ce:1a:4b:bb: e7:24:5f:9c:de:03:39:f3:a2:56:4c:14:90:11:51:55:d5:29: 62:85:11:17:33:ad:1f:2f:c6:47:5e:70:8c:2a:d8:1c:9b:8a: 1d:29:7d:56:92:db:d7:eb:90:61:31:8e:06:72:b7:a0:01:fe: 1a:4f:c8:14:8a:98:2c:e0:4a:d4:0b:53:0c:70:96:49:3b:0b: 5b:44:96:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAqJuO4LMva9KJYU7cM6lLBinMVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk0OEFCOTZGNkJCN0RBQzJDMTY3NkVGQkVFOEQ2MTA5 OUM2MUUwQTAeFw0yNTA4MTAwNTU3MDFaFw0yNTA4MTExMDAxMDFaMDMxMTAvBgNV BAMTKDk5RkVFQTQ3QTVGNzg0QjUzRENBMjM2Qzk1Q0JENjVFRTAwRDk1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa7WDMIvK3NBUK4Ans/5nN+o7Q 1G5EQ+gjIn8BOT/JNSdDFz7S/m2nUWHL/NosOum5Jim3zioT7HPcvcHhXOvWRlAf /9Fq5PLyXghWhaOrPezARKdCDFG44jq+urfAcKROxtpu2tnyH3UeW4jaqe0gkfoN dJDqmkvROuiy1nL+JODRUo788MNtgVhKSMw/WIwxELYJQNCZF+fROrAVe+ZPYcZT 6f6rYiZzfJ7K7YuZxVHPXva0sDNvnkaXUkIJtJ0W2VD0lvhOClFrhkD2pA7/3yKW dm6zn40uW+p/Y6p409eWWSa86sT1rgrP26ZhCfKRoQ9tg7PBZZbwrXbO4EGRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmf7qR6X3hLU9yiNslcvWXuANla0wHwYDVR0j BBgwFoAUqUirlva7fawsFnbvvujWEJnGHgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUFYYUI5S2JhZEhDU2oyTE10cEJSUW9IVUVKZG5yMjl3Z2R2dFoyTWZ2 RUovMC9BOTQ4QUI5NkY2QkI3REFDMkMxNjc2RUZCRUU4RDYxMDk5QzYxRTBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5NDhBQjk2RjZCQjdEQUMy QzE2NzZFRkJFRThENjEwOTlDNjFFMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUFYYUI5S2JhZEhDU2oyTE10cEJSUW9IVUVKZG5yMjl3Z2R2dFoyTWZ2RUovMC9B OTQ4QUI5NkY2QkI3REFDMkMxNjc2RUZCRUU4RDYxMDk5QzYxRTBBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADnsDGVv4Afyst9mzCvzeaDQAjvJSzyvtl0UDuxOp9cFmDMVxW2mjxxSKg/mx IQd7gH9PnTAGv6Fp6rVzFBgIEK5XuN4Z2swo0a5RQlo0Uss63JTNFti4N8Za+6yN adWZAy5/saIaWuQxLuxqIrmZTipXXfBZPYVsF2taNJ55wcoo8jlQc2XN7Cnu/cRO 8j+U3Owc1vbbKmn/BQEQTu2aUL5/en80XlpftcFtqtkVnKfOGku75yRfnN4DOfOi VkwUkBFRVdUpYoURFzOtHy/GR15wjCrYHJuKHSl9VpLb1+uQYTGOBnK3oAH+Gk/I FIqYLOBK1AtTDHCWSTsLW0SWmA== -----END CERTIFICATE-----Generated at Sun Aug 10 18:19:11 2025 by rpki-client