$ rpki-client -vvf rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft File: FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft (raw, json) Hash identifier: enSxB+fHp109+meAlkSz0SkMJaRSuua/oL1cS92HVbM= Subject key identifier: 57:FA:36:4A:B6:03:CE:D1:83:FE:B7:36:62:E3:99:C8:85:31:9F:70 Authority key identifier: FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC Certificate issuer: /CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC Certificate serial: 72841404EFC8AEF4B66B30D49C00D7AD582BA0F5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer Subject info access: rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft Manifest number: 0251 Signing time: Sat 21 Jun 2025 11:10:00 +0000 Manifest this update: Sat 21 Jun 2025 11:05:00 +0000 Manifest next update: Sun 22 Jun 2025 15:01:00 +0000 Files and hashes: 1: 323830343a6335303a3a2f33322d3332203d3e20323632383931.roa (hash: ITQMBvTGBiikzI5qdesahbbD3JrhUHyu1ehznc/4lOo=) 2: FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl (hash: ynBmXvYuI3esXETcGPE5uXn0f51F+Q/pV5PfEe5L60E=) 3: 3137372e32302e3138342e302f32312d3231203d3e20323632383931.roa (hash: i+7aJRXIDVIC9vh3rUcud6KPOg2SjcOiWfqugP70TnA=) 4: 3139312e3235332e37322e302f32312d3231203d3e20323632383931.roa (hash: ue0KIFxkSNxF1hg1eqfMteBqRDWhn+AgxTOPK+eRZEA=) 5: 3137372e32332e36342e302f32312d3231203d3e20323632383931.roa (hash: AgtcgCVZSW5SD4ILY0kbTBdAy9HYB3s0Xt8UeZ77VBM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Jun 2025 15:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:84:14:04:ef:c8:ae:f4:b6:6b:30:d4:9c:00:d7:ad:58:2b:a0:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC Validity Not Before: Jun 21 11:05:00 2025 GMT Not After : Jun 22 15:01:00 2025 GMT Subject: CN=57FA364AB603CED183FEB73662E399C885319F70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:c5:24:be:06:9e:e3:0a:0d:34:58:c2:b6: 49:bf:4c:16:70:bb:aa:0d:5d:bb:2c:7e:8f:a9:eb: fb:35:1a:38:54:dc:20:ba:c3:bc:99:74:14:cf:cd: d4:73:05:f5:46:f0:02:bc:e2:79:aa:d0:38:18:ec: 66:ef:bf:84:6c:9c:d6:64:36:7a:c1:a7:d3:b3:34: a8:b5:0b:0b:93:9b:7b:71:43:c8:dc:f6:62:8a:b8: 62:1c:a8:e9:a4:b0:2b:d6:1d:37:e0:05:40:b7:d7: 0f:29:ff:dd:37:35:b2:dd:8a:10:2c:1a:8a:d0:37: 00:88:b8:a2:0d:0c:eb:94:4e:1c:65:fe:32:b9:56: b0:d5:8b:35:77:ad:42:85:48:c1:8a:7f:82:68:2e: f0:56:d1:49:47:54:1d:0e:c1:af:72:30:f7:7f:4a: 23:30:b8:42:c9:98:f4:d3:62:26:92:d0:6e:68:fc: ba:06:71:52:8b:95:25:37:35:5e:ce:57:0e:ab:9b: 4e:0c:32:69:14:07:a5:c8:26:cf:07:e5:7b:cb:d6: 40:b4:34:70:9a:53:33:56:0a:98:61:fd:7d:13:c4: 26:d6:d6:5d:de:73:4b:06:12:ac:1e:da:6f:ce:52: 6c:05:d9:6a:3a:d9:12:8f:29:44:be:db:fa:6d:0b: 92:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FA:36:4A:B6:03:CE:D1:83:FE:B7:36:62:E3:99:C8:85:31:9F:70 X509v3 Authority Key Identifier: keyid:FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:8e:cb:84:0f:9d:7b:94:12:8d:47:84:44:08:7f:a8:f6:e2: 81:c0:87:bb:18:1f:50:34:c7:75:12:d2:6e:c2:92:55:ff:b4: 66:1a:6b:65:8f:5e:38:9f:c2:f3:2e:17:d2:67:13:25:5c:aa: 96:03:a5:7c:7d:4a:c3:ea:87:0b:2c:ad:2a:cb:50:45:62:41: 96:6f:89:50:3a:52:1c:3e:21:15:75:b8:17:63:50:1a:eb:6a: ce:79:fe:1a:8e:28:e3:13:12:24:9c:c3:4a:3c:a4:ff:6a:75: 6f:1e:f6:cd:dc:1c:86:ee:54:28:cb:e3:90:e3:ea:3e:5c:78: fc:59:79:45:1c:bf:76:cf:d9:e0:38:26:1c:75:2c:90:a2:08: 8f:9d:b4:21:4a:cf:18:da:60:d3:93:e4:8b:77:f5:4f:18:ef: 17:31:11:79:19:f5:b6:8a:86:b6:22:a7:de:a8:19:43:75:87: 5d:5c:dc:2f:81:62:49:61:6b:19:ee:90:e7:c0:86:fc:2c:60: b0:84:67:55:09:d8:d3:e5:28:59:8c:02:f6:32:55:a0:d0:9f: 0c:25:5b:72:61:33:b0:43:df:b1:9e:40:20:e6:c6:ee:ef:b3: 19:d1:96:a8:29:7d:99:c2:eb:6e:ff:c1:03:da:ee:51:9a:7a: 51:b9:65:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcoQUBO/IrvS2azDUnADXrVgroPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkExNTg1RTQyRTczOEVFNTk2REIyRjJCOTcwQ0MzQ0I3 NDNCRDhGQzAeFw0yNTA2MjExMTA1MDBaFw0yNTA2MjIxNTAxMDBaMDMxMTAvBgNV BAMTKDU3RkEzNjRBQjYwM0NFRDE4M0ZFQjczNjYyRTM5OUM4ODUzMTlGNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL1sUkvgae4woNNFjCtkm/TBZw u6oNXbssfo+p6/s1GjhU3CC6w7yZdBTPzdRzBfVG8AK84nmq0DgY7Gbvv4RsnNZk NnrBp9OzNKi1CwuTm3txQ8jc9mKKuGIcqOmksCvWHTfgBUC31w8p/903NbLdihAs GorQNwCIuKINDOuUThxl/jK5VrDVizV3rUKFSMGKf4JoLvBW0UlHVB0Owa9yMPd/ SiMwuELJmPTTYiaS0G5o/LoGcVKLlSU3NV7OVw6rm04MMmkUB6XIJs8H5XvL1kC0 NHCaUzNWCphh/X0TxCbW1l3ec0sGEqwe2m/OUmwF2Wo62RKPKUS+2/ptC5J3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUV/o2SrYDztGD/rc2YuOZyIUxn3AwHwYDVR0j BBgwFoAU+hWF5C5zjuWW2y8rlwzDy3Q72PwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWZjVmZ3YWJUa2d5b2hTTks2cjVOOVZYeHZ3TUFLRzZWWHJDVlJ4a1hQ YWQvMS9GQTE1ODVFNDJFNzM4RUU1OTZEQjJGMkI5NzBDQzNDQjc0M0JEOEZDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBMTU4NUU0MkU3MzhFRTU5 NkRCMkYyQjk3MENDM0NCNzQzQkQ4RkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWZjVmZ3YWJUa2d5b2hTTks2cjVOOVZYeHZ3TUFLRzZWWHJDVlJ4a1hQYWQvMS9G QTE1ODVFNDJFNzM4RUU1OTZEQjJGMkI5NzBDQzNDQjc0M0JEOEZDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAco7LhA+de5QSjUeERAh/qPbigcCHuxgfUDTHdRLSbsKSVf+0ZhprZY9eOJ/C 8y4X0mcTJVyqlgOlfH1Kw+qHCyytKstQRWJBlm+JUDpSHD4hFXW4F2NQGutqznn+ Go4o4xMSJJzDSjyk/2p1bx72zdwchu5UKMvjkOPqPlx4/Fl5RRy/ds/Z4DgmHHUs kKIIj520IUrPGNpg05Pki3f1TxjvFzEReRn1toqGtiKn3qgZQ3WHXVzcL4FiSWFr Ge6Q58CG/CxgsIRnVQnY0+UoWYwC9jJVoNCfDCVbcmEzsEPfsZ5AIObG7u+zGdGW qCl9mcLrbv/BA9ruUZp6UbllLg== -----END CERTIFICATE-----Generated at Sun Jun 22 05:59:04 2025 by rpki-client