$ rpki-client -vvf rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft File: 5019A6C324130601793432FC2FAFF3DE1F1210C0.mft (raw, json) Hash identifier: dM0W9A1NTD/HzQ+zpCtQ6QbHoqug4gHVf6F0V9nnOLA= Subject key identifier: 0E:43:8B:77:CD:41:32:77:99:58:07:F9:40:7A:72:4C:E4:02:DB:51 Authority key identifier: 50:19:A6:C3:24:13:06:01:79:34:32:FC:2F:AF:F3:DE:1F:12:10:C0 Certificate issuer: /CN=5019A6C324130601793432FC2FAFF3DE1F1210C0 Certificate serial: 390480234260A0C3B914A1D4F3F9D9965997B5D4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer Subject info access: rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft Manifest number: 0289 Signing time: Tue 05 Aug 2025 06:15:00 +0000 Manifest this update: Tue 05 Aug 2025 06:10:00 +0000 Manifest next update: Wed 06 Aug 2025 07:10:00 +0000 Files and hashes: 1: 5019A6C324130601793432FC2FAFF3DE1F1210C0.crl (hash: U3/MyVCaIEktXwMncgph/JkcMmrJContpyC5ckxR8Is=) 2: 3137372e38342e32302e302f32322d3234203d3e203532373135.roa (hash: 8Jln5/8Uo9dSq+b7gMCxOW5PiC+lqOyIFD1Wuy3tzVw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.crl rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 07:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:04:80:23:42:60:a0:c3:b9:14:a1:d4:f3:f9:d9:96:59:97:b5:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5019A6C324130601793432FC2FAFF3DE1F1210C0 Validity Not Before: Aug 5 06:10:00 2025 GMT Not After : Aug 6 07:10:00 2025 GMT Subject: CN=0E438B77CD413277995807F9407A724CE402DB51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c7:43:66:78:c7:71:de:9c:ed:20:bf:d2:3c: d8:7d:97:f8:24:df:b4:42:46:93:39:72:4d:17:9a: 96:52:41:ec:9d:39:21:62:fe:a7:c4:be:52:43:6f: ba:dd:fc:6f:20:9c:38:3a:a2:ba:c2:7a:3e:65:e7: 30:5a:1e:a9:80:b5:81:f3:5b:3b:7b:fd:e8:48:09: 75:19:07:4a:32:89:b3:96:2b:7d:92:3f:a1:f1:4f: 1e:f1:59:d2:8c:bc:47:35:89:cb:67:22:47:09:31: 1b:80:59:56:7f:d1:7b:f8:80:81:5c:ce:a2:32:2f: 9f:f7:60:bf:18:f4:2b:94:4c:d5:00:17:ac:ab:ce: 89:07:95:01:f2:4d:d7:1e:8a:ce:f5:84:df:5e:f4: e3:72:6b:1c:62:25:6c:1c:70:4b:54:ce:3b:b0:82: 38:0a:fc:8a:8c:78:fc:0a:35:c8:58:c6:6c:63:38: 65:a5:da:d5:2a:98:e1:f4:01:63:8f:2f:cd:a8:71: 63:c2:a1:8f:ae:12:ac:e2:ef:24:08:a5:03:6a:75: 81:78:d7:54:0b:bb:87:19:4d:17:18:87:90:7a:58: fe:62:b7:1b:d9:b7:9b:2b:3d:3f:2e:12:b6:f3:4b: 8b:ee:65:12:cb:eb:a9:d4:05:b5:02:9b:db:a0:90: 0e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:43:8B:77:CD:41:32:77:99:58:07:F9:40:7A:72:4C:E4:02:DB:51 X509v3 Authority Key Identifier: keyid:50:19:A6:C3:24:13:06:01:79:34:32:FC:2F:AF:F3:DE:1F:12:10:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:fd:37:d0:02:07:92:2b:3f:6f:67:b9:a5:9e:24:03:0b:50: e0:ef:ef:ea:92:01:30:81:a0:77:a8:c1:9f:5b:07:7e:24:6e: 7b:43:f3:a3:14:b8:16:dc:54:67:ad:4d:29:f8:e5:b3:67:06: 16:2c:27:f4:35:34:c2:b0:15:7b:d0:30:63:d2:68:6b:f3:02: 65:67:5b:70:22:fb:a5:6f:48:da:a8:95:9d:a8:b7:9d:38:a8: 91:d0:9f:09:b3:bc:8b:9b:cd:79:6c:29:fa:f4:3d:05:75:4c: c1:33:a0:e2:c7:56:98:7a:c8:3e:78:c4:57:87:c2:2c:1c:d5: db:02:a7:a7:3f:f8:db:be:ba:a7:11:82:45:5a:04:c3:7e:d2: 3a:07:ff:d5:af:76:e7:dd:39:a0:f0:26:74:6e:ce:5a:d9:ce: 35:12:af:1a:1c:ad:bf:02:d7:e0:5a:f1:37:92:fb:47:97:cd: b0:21:0a:f8:26:8d:6d:7e:b6:d1:a0:ea:ed:6f:0a:86:30:35: 57:38:6c:a5:c2:a2:a5:90:08:05:e0:17:92:ef:32:1d:c9:8f: 19:6c:b2:49:a1:35:8b:df:59:d3:6f:c9:59:b2:8d:d7:9f:c0: 07:4a:11:40:83:6a:68:de:eb:06:35:19:f6:a0:01:7d:9c:10: 4a:d5:85:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOQSAI0JgoMO5FKHU8/nZllmXtdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTAxOUE2QzMyNDEzMDYwMTc5MzQzMkZDMkZBRkYzREUx RjEyMTBDMDAeFw0yNTA4MDUwNjEwMDBaFw0yNTA4MDYwNzEwMDBaMDMxMTAvBgNV BAMTKDBFNDM4Qjc3Q0Q0MTMyNzc5OTU4MDdGOTQwN0E3MjRDRTQwMkRCNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5x0NmeMdx3pztIL/SPNh9l/gk 37RCRpM5ck0XmpZSQeydOSFi/qfEvlJDb7rd/G8gnDg6orrCej5l5zBaHqmAtYHz Wzt7/ehICXUZB0oyibOWK32SP6HxTx7xWdKMvEc1ictnIkcJMRuAWVZ/0Xv4gIFc zqIyL5/3YL8Y9CuUTNUAF6yrzokHlQHyTdceis71hN9e9ONyaxxiJWwccEtUzjuw gjgK/IqMePwKNchYxmxjOGWl2tUqmOH0AWOPL82ocWPCoY+uEqzi7yQIpQNqdYF4 11QLu4cZTRcYh5B6WP5itxvZt5srPT8uErbzS4vuZRLL66nUBbUCm9ugkA47AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDkOLd81BMneZWAf5QHpyTOQC21EwHwYDVR0j BBgwFoAUUBmmwyQTBgF5NDL8L6/z3h8SEMAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ25QS2MyOXdQWmdWeHY4UE1iQ3Z1M1lQQVhNTmVSUVlOZEZGWnZkU3lK a04vMS81MDE5QTZDMzI0MTMwNjAxNzkzNDMyRkMyRkFGRjNERTFGMTIxMEMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwMTlBNkMzMjQxMzA2MDE3 OTM0MzJGQzJGQUZGM0RFMUYxMjEwQzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q25QS2MyOXdQWmdWeHY4UE1iQ3Z1M1lQQVhNTmVSUVlOZEZGWnZkU3lKa04vMS81 MDE5QTZDMzI0MTMwNjAxNzkzNDMyRkMyRkFGRjNERTFGMTIxMEMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALv030AIHkis/b2e5pZ4kAwtQ4O/v6pIBMIGgd6jBn1sHfiRue0PzoxS4FtxU Z61NKfjls2cGFiwn9DU0wrAVe9AwY9Joa/MCZWdbcCL7pW9I2qiVnai3nTiokdCf CbO8i5vNeWwp+vQ9BXVMwTOg4sdWmHrIPnjEV4fCLBzV2wKnpz/42766pxGCRVoE w37SOgf/1a925905oPAmdG7OWtnONRKvGhytvwLX4FrxN5L7R5fNsCEK+CaNbX62 0aDq7W8KhjA1VzhspcKipZAIBeAXku8yHcmPGWyySaE1i99Z02/JWbKN15/AB0oR QINqaN7rBjUZ9qABfZwQStWF8A== -----END CERTIFICATE-----Generated at Tue Aug 5 17:13:43 2025 by rpki-client