$ rpki-client -vvf rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft File: 52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft (raw, json) Hash identifier: R3Kxyi2LA0plcTtbDRSydP/p0b3AZGo39Vv4cNeNuBU= Subject key identifier: 99:D3:DE:B0:96:54:CE:84:F2:AB:81:ED:78:46:55:26:2F:5E:02:07 Authority key identifier: 52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E Certificate issuer: /CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E Certificate serial: 1B2611D79453D482AC89A5F83F0EE80756F8A444 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer Subject info access: rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft Manifest number: 57 Signing time: Tue 05 Aug 2025 19:43:02 +0000 Manifest this update: Tue 05 Aug 2025 19:38:02 +0000 Manifest next update: Wed 06 Aug 2025 21:18:02 +0000 Files and hashes: 1: 323830343a386538633a3a2f33322d3332203d3e20323733343333.roa (hash: GKQiZSRTggPaFx/yFhowb4IhNVU02HJ7y8OaPzs+f/0=) 2: 52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl (hash: KxcVp/eZhhmwRW5avq+ShNVVQnUMr4rSP02kTgx7lZU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 21:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:26:11:d7:94:53:d4:82:ac:89:a5:f8:3f:0e:e8:07:56:f8:a4:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E Validity Not Before: Aug 5 19:38:02 2025 GMT Not After : Aug 6 21:18:02 2025 GMT Subject: CN=99D3DEB09654CE84F2AB81ED784655262F5E0207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ee:db:5d:8c:cc:2f:3f:37:2c:ca:48:01:28: da:2d:cf:2b:bc:68:df:f1:a0:ab:2b:2e:95:7d:79: a4:fc:3c:cf:2b:d4:77:9a:80:19:db:f2:d4:39:cc: 6f:54:d3:d2:16:06:3b:b3:a4:fe:80:ec:34:b9:2b: c1:a6:e9:42:91:65:80:c6:40:e3:4a:ac:bb:0e:70: 91:2e:86:ce:27:d6:83:16:1c:4d:38:48:e0:23:7c: 4c:b3:2d:e5:9f:2d:48:29:f0:33:b6:d8:4c:60:c5: 92:8a:43:f1:29:2f:f1:d8:b3:de:8a:58:f1:76:56: c3:11:e7:b9:b2:fd:ed:d0:f3:06:74:c1:9a:00:10: 0b:1e:d8:8a:5b:18:62:1a:e5:4f:87:6e:cf:ab:3a: 72:29:4d:f8:e1:a9:26:83:5d:e1:7f:f2:fb:3c:b8: 61:31:4e:e8:a6:f3:93:95:a7:e5:d6:47:3a:27:0d: f4:16:ae:00:09:f2:0b:9e:09:77:8a:4e:c6:5f:71: 80:7a:06:fb:fe:61:e7:34:5c:69:d6:69:c1:97:c8: 55:1a:21:57:45:6e:d8:62:de:11:d9:0d:aa:41:67: b9:61:54:e5:9a:b7:11:7f:59:ec:12:35:04:e7:fb: c3:34:7c:ca:37:ff:cc:92:6f:9e:e8:cf:66:e6:a2: 64:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D3:DE:B0:96:54:CE:84:F2:AB:81:ED:78:46:55:26:2F:5E:02:07 X509v3 Authority Key Identifier: keyid:52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:49:3d:04:69:ac:dd:49:ac:fc:11:5f:3c:ae:9c:61:6a:26: 0a:0a:a4:47:9a:2d:da:d2:47:f4:09:60:df:8f:2c:ad:c2:03: e4:da:9b:3e:2d:e4:2e:db:82:6f:3e:e6:51:64:6c:56:3f:ea: cc:68:ac:56:09:e3:65:64:ce:40:e3:95:6d:ed:ea:13:20:ef: 67:e6:ed:95:5d:69:55:04:32:e1:d1:d8:56:8b:d1:0a:34:03: 2f:d4:b7:86:57:b5:83:85:de:7d:30:c8:f1:85:f6:04:38:2e: 93:70:ea:17:e8:56:e2:72:55:d5:86:9e:38:d0:3a:ef:a5:c2: eb:88:d1:c1:85:fc:19:be:c0:dd:50:fa:ec:98:bf:30:6e:8e: 99:03:87:8a:dd:16:65:1a:57:6f:54:d6:43:e3:75:a6:14:86: 0a:b8:c4:3e:ca:e1:6b:78:ca:fb:d0:4e:99:82:39:6a:c5:2b: 24:ab:f0:4c:72:46:53:11:0c:ec:f2:5e:35:a0:4b:fd:28:d2: 25:bd:79:e6:23:2a:c0:62:74:7e:2e:a5:3b:71:de:03:57:85: 8b:23:9e:16:f6:e1:e5:e1:43:c4:a5:bf:51:46:81:3b:01:3d: 08:f9:32:cf:1d:76:78:1d:8c:f5:c7:45:a3:ef:30:39:49:69: 6d:92:55:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGyYR15RT1IKsiaX4Pw7oB1b4pEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGRDM4QzVEMERGMzY1Q0Q4REUzQkQxREQwRTkyQzFB NkI2OUY3RTAeFw0yNTA4MDUxOTM4MDJaFw0yNTA4MDYyMTE4MDJaMDMxMTAvBgNV BAMTKDk5RDNERUIwOTY1NENFODRGMkFCODFFRDc4NDY1NTI2MkY1RTAyMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY7ttdjMwvPzcsykgBKNotzyu8 aN/xoKsrLpV9eaT8PM8r1HeagBnb8tQ5zG9U09IWBjuzpP6A7DS5K8Gm6UKRZYDG QONKrLsOcJEuhs4n1oMWHE04SOAjfEyzLeWfLUgp8DO22ExgxZKKQ/EpL/HYs96K WPF2VsMR57my/e3Q8wZ0wZoAEAse2IpbGGIa5U+Hbs+rOnIpTfjhqSaDXeF/8vs8 uGExTuim85OVp+XWRzonDfQWrgAJ8gueCXeKTsZfcYB6Bvv+Yec0XGnWacGXyFUa IVdFbthi3hHZDapBZ7lhVOWatxF/WewSNQTn+8M0fMo3/8ySb57oz2bmomTDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmdPesJZUzoTyq4HteEZVJi9eAgcwHwYDVR0j BBgwFoAUUv04xdDfNlzY3jvR3Q6Swaa2n34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1lOeGVGVjU2elNOdkthZDR6WnZIeUtiallYd1BLM0NGTFNkWHExVUxn TUovMC81MkZEMzhDNUQwREYzNjVDRDhERTNCRDFERDBFOTJDMUE2QjY5RjdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyRkQzOEM1RDBERjM2NUNE OERFM0JEMUREMEU5MkMxQTZCNjlGN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1lOeGVGVjU2elNOdkthZDR6WnZIeUtiallYd1BLM0NGTFNkWHExVUxnTUovMC81 MkZEMzhDNUQwREYzNjVDRDhERTNCRDFERDBFOTJDMUE2QjY5RjdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfEk9BGms3Ums/BFfPK6cYWomCgqkR5ot2tJH9Alg348srcID5NqbPi3kLtuC bz7mUWRsVj/qzGisVgnjZWTOQOOVbe3qEyDvZ+btlV1pVQQy4dHYVovRCjQDL9S3 hle1g4XefTDI8YX2BDguk3DqF+hW4nJV1YaeONA676XC64jRwYX8Gb7A3VD67Ji/ MG6OmQOHit0WZRpXb1TWQ+N1phSGCrjEPsrha3jK+9BOmYI5asUrJKvwTHJGUxEM 7PJeNaBL/SjSJb155iMqwGJ0fi6lO3HeA1eFiyOeFvbh5eFDxKW/UUaBOwE9CPky zx12eB2M9cdFo+8wOUlpbZJVZg== -----END CERTIFICATE-----Generated at Wed Aug 6 11:25:33 2025 by rpki-client