$ rpki-client -vvf rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft File: D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft (raw, json) Hash identifier: XQAVDcnrO92N/puR8RI79DxtIiGLhHrhxnKwC0/Jr/k= Subject key identifier: 9E:63:65:8B:40:4A:48:56:BB:01:BB:C9:FF:80:13:E6:FF:68:13:6F Authority key identifier: D5:C4:31:D1:7B:83:07:35:FE:B2:64:09:C6:9E:3E:F4:FE:61:DB:C2 Certificate issuer: /CN=D5C431D17B830735FEB26409C69E3EF4FE61DBC2 Certificate serial: 19858FCF00724D771E3E133417955FB643C5E239 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer Subject info access: rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft Manifest number: 2F Signing time: Wed 06 Aug 2025 19:08:07 +0000 Manifest this update: Wed 06 Aug 2025 19:03:07 +0000 Manifest next update: Thu 07 Aug 2025 19:36:07 +0000 Files and hashes: 1: D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl (hash: 1CCcb2MhvK63/Ayr1JrgCyGmTjwU4LJi3FJSM8Ke4VU=) 2: 323830343a386663343a3a2f33322d3438203d3e20323733353130.roa (hash: DETwoG/6qi/ZI8aHY1Z5rVUEPEzo75t1n/OyDZwKtCg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 07 Aug 2025 19:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:85:8f:cf:00:72:4d:77:1e:3e:13:34:17:95:5f:b6:43:c5:e2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C431D17B830735FEB26409C69E3EF4FE61DBC2 Validity Not Before: Aug 6 19:03:07 2025 GMT Not After : Aug 7 19:36:07 2025 GMT Subject: CN=9E63658B404A4856BB01BBC9FF8013E6FF68136F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d1:df:8b:a6:56:3b:b3:8c:d7:15:5b:25:b4: fc:39:db:22:87:78:bf:5e:6a:33:cb:57:e4:8d:86: ac:e3:32:c0:40:11:02:be:c7:72:0e:c4:2b:ab:a9: 43:ac:0d:ae:bf:7a:e2:98:da:6d:15:e1:0a:45:92: 07:49:19:5b:be:45:ac:0e:ef:c0:1a:a4:af:d3:5d: 5b:26:e4:95:18:13:7e:db:54:0a:a9:3c:3d:97:fe: 53:7a:4b:40:08:f5:b2:ac:73:1e:fd:12:68:1f:82: 0c:d0:cd:ea:31:ef:2c:4b:74:3e:30:c9:32:f1:09: 70:2b:e6:d5:6a:55:82:0d:ce:88:98:a2:d9:2c:2c: d4:c8:9d:a5:ae:4a:da:63:16:dc:c5:b2:0a:c1:b1: 56:8f:3a:2b:f2:16:cc:47:4b:98:f3:8c:bb:18:1e: 0f:2f:00:9b:e6:f5:20:32:eb:a1:e0:48:59:7b:a6: 36:03:dd:bb:4c:78:f8:1f:16:d7:80:3f:f5:14:80: 70:45:10:41:ae:f8:5f:25:4c:af:25:60:24:5d:10: af:a7:01:c3:8e:a9:db:8e:c2:a0:9b:16:2d:28:30: 99:25:a9:f1:21:52:11:3a:60:fe:4c:3c:f1:c4:12: 1f:db:ce:db:29:bf:ae:03:65:bc:a4:03:30:d1:9b: 10:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:63:65:8B:40:4A:48:56:BB:01:BB:C9:FF:80:13:E6:FF:68:13:6F X509v3 Authority Key Identifier: keyid:D5:C4:31:D1:7B:83:07:35:FE:B2:64:09:C6:9E:3E:F4:FE:61:DB:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ec:98:8e:2c:c2:7a:6f:2f:24:ee:c7:91:26:1e:95:a9:23: 51:01:e3:f4:05:07:30:89:8c:f5:33:f9:81:ad:af:f9:0f:b6: 1c:2d:37:e4:fd:3d:6e:bf:51:75:6e:9c:0d:c5:97:83:04:22: f9:25:df:fc:ad:4c:8f:f9:53:d2:8d:90:4c:b3:b7:36:f5:de: d1:ba:d0:5b:e7:69:5b:c6:f5:e2:36:6d:9a:a6:2f:86:2e:8b: df:ab:d9:a2:d3:6e:95:d6:6a:e0:4a:13:20:bf:cb:cd:08:e7: 84:ae:f3:20:23:64:b0:dc:fd:5b:51:78:19:2d:f7:98:d2:5c: 03:4b:72:06:24:1c:0d:bf:f2:67:a1:11:b4:bd:e7:29:c6:85: 90:88:39:85:da:db:03:dc:ff:82:e7:6e:e2:ce:0a:42:91:3d: d2:fa:ae:02:c8:cd:6b:77:20:3e:61:83:5b:71:28:2b:49:a9: 04:ad:96:08:97:db:e8:43:1d:12:6f:bd:3f:79:a8:cf:a4:90: 30:71:81:f8:72:c8:8b:bf:0f:54:03:f4:2b:f8:56:57:70:82: 49:ef:92:73:41:f8:ef:0a:ae:98:ee:f0:a0:3e:7b:56:5b:a0: d0:62:47:1a:e0:9d:ac:98:48:7c:7d:03:1a:02:18:c5:02:ec: 2b:cc:1f:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGYWPzwByTXcePhM0F5VftkPF4jkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDNDMxRDE3QjgzMDczNUZFQjI2NDA5QzY5RTNFRjRG RTYxREJDMjAeFw0yNTA4MDYxOTAzMDdaFw0yNTA4MDcxOTM2MDdaMDMxMTAvBgNV BAMTKDlFNjM2NThCNDA0QTQ4NTZCQjAxQkJDOUZGODAxM0U2RkY2ODEzNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY0d+LplY7s4zXFVsltPw52yKH eL9eajPLV+SNhqzjMsBAEQK+x3IOxCurqUOsDa6/euKY2m0V4QpFkgdJGVu+RawO 78AapK/TXVsm5JUYE37bVAqpPD2X/lN6S0AI9bKscx79EmgfggzQzeox7yxLdD4w yTLxCXAr5tVqVYINzoiYotksLNTInaWuStpjFtzFsgrBsVaPOivyFsxHS5jzjLsY Hg8vAJvm9SAy66HgSFl7pjYD3btMePgfFteAP/UUgHBFEEGu+F8lTK8lYCRdEK+n AcOOqduOwqCbFi0oMJklqfEhUhE6YP5MPPHEEh/bztspv64DZbykAzDRmxCfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnmNli0BKSFa7AbvJ/4AT5v9oE28wHwYDVR0j BBgwFoAU1cQx0XuDBzX+smQJxp4+9P5h28IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVNxeEY5b1ZHeHNjVWJzQ0haSm9ZOFRQeEc0M1N2OFBwa1VRbmJyMzVw TUQvMC9ENUM0MzFEMTdCODMwNzM1RkVCMjY0MDlDNjlFM0VGNEZFNjFEQkMyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1QzQzMUQxN0I4MzA3MzVG RUIyNjQwOUM2OUUzRUY0RkU2MURCQzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVNxeEY5b1ZHeHNjVWJzQ0haSm9ZOFRQeEc0M1N2OFBwa1VRbmJyMzVwTUQvMC9E NUM0MzFEMTdCODMwNzM1RkVCMjY0MDlDNjlFM0VGNEZFNjFEQkMyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMOyYjizCem8vJO7HkSYelakjUQHj9AUHMImM9TP5ga2v+Q+2HC035P09br9R dW6cDcWXgwQi+SXf/K1Mj/lT0o2QTLO3NvXe0brQW+dpW8b14jZtmqYvhi6L36vZ otNuldZq4EoTIL/LzQjnhK7zICNksNz9W1F4GS33mNJcA0tyBiQcDb/yZ6ERtL3n KcaFkIg5hdrbA9z/gudu4s4KQpE90vquAsjNa3cgPmGDW3EoK0mpBK2WCJfb6EMd Em+9P3moz6SQMHGB+HLIi78PVAP0K/hWV3CCSe+Sc0H47wqumO7woD57Vlug0GJH GuCdrJhIfH0DGgIYxQLsK8wf5w== -----END CERTIFICATE-----Generated at Thu Aug 7 02:04:11 2025 by rpki-client