$ rpki-client -vvf rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft File: 5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft (raw, json) Hash identifier: SjCAjdzad1PcGaDhBIlb+R9t277wDFLFz4NAZGf/iw0= Subject key identifier: A9:51:8F:DD:E6:74:8B:6F:2C:84:BB:E0:D5:43:35:4B:AC:F8:31:78 Authority key identifier: 5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED Certificate issuer: /CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED Certificate serial: 0137EBFCC38453FB0C3DE75E8B261F7E790C9742 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer Subject info access: rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft Manifest number: 0289 Signing time: Wed 06 Aug 2025 07:22:04 +0000 Manifest this update: Wed 06 Aug 2025 07:17:04 +0000 Manifest next update: Thu 07 Aug 2025 07:49:04 +0000 Files and hashes: 1: 3136342e3136332e35322e302f32322d3234203d3e20323635393533.roa (hash: N0btAFtvDXp7wrWYpNQVZV54i7RyzNCdiBD/oCt2wRo=) 2: 5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl (hash: xRLZ4Fxw+Cr4Em+dQ8sIlQq41StXESfpAybYCK5PSvQ=) 3: 323830343a343035383a3a2f33322d3438203d3e20323635393533.roa (hash: P1kjWEGrObzZJrYICVUDSoEdRZLmjZ79Ee/h/Dakbdo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 07 Aug 2025 07:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:37:eb:fc:c3:84:53:fb:0c:3d:e7:5e:8b:26:1f:7e:79:0c:97:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED Validity Not Before: Aug 6 07:17:04 2025 GMT Not After : Aug 7 07:49:04 2025 GMT Subject: CN=A9518FDDE6748B6F2C84BBE0D543354BACF83178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:11:99:4d:e1:75:7f:86:fc:10:df:89:72: 1e:5c:cb:1d:99:93:05:47:e7:38:c9:ee:f0:e9:46: 29:e1:dc:51:75:f1:83:fc:a8:0f:0c:ee:63:dc:df: 9a:da:94:c4:ab:21:53:36:11:f6:12:d0:7c:44:c8: 95:b4:d1:40:bf:08:22:51:2e:7a:3d:d0:47:f7:0a: 0f:ef:a1:07:ca:52:e8:53:80:53:f6:20:79:3c:e0: a0:99:b2:0c:d5:cc:8e:3f:a0:ce:38:41:02:be:d7: 04:0d:42:af:46:14:d4:2b:f0:09:56:39:f2:33:d2: 43:a4:17:9a:84:ef:df:42:75:aa:0d:ae:80:4d:56: da:eb:92:ab:6d:59:89:f6:95:62:4d:81:03:f4:e2: 52:d0:68:01:bc:9a:a4:cb:9c:ff:89:43:06:28:f9: 72:38:8b:53:42:b1:5c:d8:d1:2d:c0:1c:f8:38:f4: 1b:87:22:b1:5d:79:7c:fd:77:94:03:36:73:62:8f: 27:a6:5b:ea:f6:91:6c:79:33:8c:84:67:47:3c:04: 69:46:e4:c5:2b:fa:29:d0:49:24:68:5e:0f:63:f4: 36:5d:36:6e:70:d6:71:3d:85:0e:c7:2c:fe:e6:14: e4:f9:80:e1:d2:1e:b6:42:de:3d:00:d1:f4:f0:61: 17:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:51:8F:DD:E6:74:8B:6F:2C:84:BB:E0:D5:43:35:4B:AC:F8:31:78 X509v3 Authority Key Identifier: keyid:5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:81:e1:dc:d3:74:ac:8a:ad:6f:08:f5:7e:ca:eb:ce:df:38: 61:9a:d4:99:d2:50:eb:fb:08:89:c6:e2:2d:18:56:af:fb:29: 22:f9:3c:a8:68:23:bc:50:fd:98:51:a9:57:c7:b3:ca:30:6d: 10:c7:1a:81:0e:fd:83:df:23:f2:56:c7:9c:5d:f8:db:10:20: 68:31:3d:45:3f:0f:b0:b5:e5:6d:43:fb:27:07:bc:b1:d3:82: e1:5b:cb:1b:97:f6:eb:3b:6c:33:3f:17:53:5b:24:56:ab:f4: 4d:1d:ac:08:20:2a:66:f9:33:3d:f3:e3:18:a7:b9:79:fd:85: 9e:4c:a3:cc:85:5c:31:d4:1c:2e:d0:a5:37:7b:ea:4e:2b:0b: 49:0d:b5:c7:fb:d1:7f:e1:9a:a3:03:59:8d:50:db:71:3b:dc: 73:fa:1c:21:de:2b:7f:70:5f:5a:11:40:04:ca:f6:c0:d6:9a: 7e:fb:01:b5:7d:ef:b3:1d:cd:04:84:b0:b3:99:38:0a:5e:04: 08:9b:64:e5:87:82:bf:2e:1d:4b:06:3b:1d:8c:a0:10:bf:3a: 8a:ff:7d:39:6a:30:35:b7:ed:52:8a:c4:e5:1f:3d:92:fa:ed: 4d:b7:3c:e4:50:05:0c:8c:1a:b4:86:2f:3f:18:7b:dc:80:b0: 9b:6b:12:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUATfr/MOEU/sMPedeiyYffnkMl0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFGOTU1RENCM0ZBNkM2QkE3QUVDM0Q4QkMxMzcyNzA4 Njk2QjhFRDAeFw0yNTA4MDYwNzE3MDRaFw0yNTA4MDcwNzQ5MDRaMDMxMTAvBgNV BAMTKEE5NTE4RkRERTY3NDhCNkYyQzg0QkJFMEQ1NDMzNTRCQUNGODMxNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3MBGZTeF1f4b8EN+Jch5cyx2Z kwVH5zjJ7vDpRinh3FF18YP8qA8M7mPc35ralMSrIVM2EfYS0HxEyJW00UC/CCJR Lno90Ef3Cg/voQfKUuhTgFP2IHk84KCZsgzVzI4/oM44QQK+1wQNQq9GFNQr8AlW OfIz0kOkF5qE799CdaoNroBNVtrrkqttWYn2lWJNgQP04lLQaAG8mqTLnP+JQwYo +XI4i1NCsVzY0S3AHPg49BuHIrFdeXz9d5QDNnNijyemW+r2kWx5M4yEZ0c8BGlG 5MUr+inQSSRoXg9j9DZdNm5w1nE9hQ7HLP7mFOT5gOHSHrZC3j0A0fTwYRe/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqVGP3eZ0i28shLvg1UM1S6z4MXgwHwYDVR0j BBgwFoAUWvlV3LP6bGunrsPYvBNycIaWuO0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkpIY3lLQTQyeXNWNDNqelJSZmZLVlNUM2VTMzl3dGhVRGVjMXc3RlI4 TmQvMS81QUY5NTVEQ0IzRkE2QzZCQTdBRUMzRDhCQzEzNzI3MDg2OTZCOEVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBRjk1NURDQjNGQTZDNkJB N0FFQzNEOEJDMTM3MjcwODY5NkI4RUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkpIY3lLQTQyeXNWNDNqelJSZmZLVlNUM2VTMzl3dGhVRGVjMXc3RlI4TmQvMS81 QUY5NTVEQ0IzRkE2QzZCQTdBRUMzRDhCQzEzNzI3MDg2OTZCOEVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJIHh3NN0rIqtbwj1fsrrzt84YZrUmdJQ6/sIicbiLRhWr/spIvk8qGgjvFD9 mFGpV8ezyjBtEMcagQ79g98j8lbHnF342xAgaDE9RT8PsLXlbUP7Jwe8sdOC4VvL G5f26ztsMz8XU1skVqv0TR2sCCAqZvkzPfPjGKe5ef2FnkyjzIVcMdQcLtClN3vq TisLSQ21x/vRf+GaowNZjVDbcTvcc/ocId4rf3BfWhFABMr2wNaafvsBtX3vsx3N BISws5k4Cl4ECJtk5YeCvy4dSwY7HYygEL86iv99OWowNbftUorE5R89kvrtTbc8 5FAFDIwatIYvPxh73ICwm2sS5g== -----END CERTIFICATE-----Generated at Wed Aug 6 10:58:16 2025 by rpki-client