$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft File: F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft (raw, json) Hash identifier: G2nG3+NOcff6hdajWCszkU1O9mxVz/uHun2eHLjZRMo= Subject key identifier: 54:A4:58:34:A6:22:EC:32:9B:57:77:B4:4D:55:83:A3:47:F7:32:38 Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2 Certificate issuer: /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2 Certificate serial: 31B8ECD8B767F69E515BE03B255A7E3D9106C872 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer Subject info access: rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft Manifest number: 02D8 Signing time: Sun 10 Aug 2025 11:04:22 +0000 Manifest this update: Sun 10 Aug 2025 10:59:22 +0000 Manifest next update: Mon 11 Aug 2025 14:14:22 +0000 Files and hashes: 1: F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl (hash: ywitK+TTo+l8nZZlvSftBh+CYStywaJ/VxqkSSbnhW8=) 2: 3136382e39302e3131322e302f32322d3234203d3e20323635313837.roa (hash: 9LvONKF4erH2R8GeIIVHhkcX+ks1yW+W0ep8+m+RpNk=) 3: 323830343a326330303a3a2f33322d3432203d3e20323635313837.roa (hash: RrHcCYXQ8Xp8vNv84YyfCnia5ExBbApKrg/hYtwt0GY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 14:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b8:ec:d8:b7:67:f6:9e:51:5b:e0:3b:25:5a:7e:3d:91:06:c8:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2 Validity Not Before: Aug 10 10:59:22 2025 GMT Not After : Aug 11 14:14:22 2025 GMT Subject: CN=54A45834A622EC329B5777B44D5583A347F73238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7f:4d:d7:4d:ab:19:d0:b7:cc:a7:91:35:5e: cc:87:92:64:59:78:b9:ab:9b:12:26:e8:02:27:30: 86:bd:13:c0:41:0c:7b:d2:69:12:71:66:60:f4:39: b9:90:f1:cc:81:4d:b7:5b:59:b6:6b:25:ee:c5:d9: 96:42:7c:15:ac:ba:5b:06:e0:a6:00:2c:55:99:fb: bc:51:59:68:3e:2a:c5:3d:27:26:5a:4e:12:7a:9b: 32:c9:14:32:7b:55:91:20:70:5c:03:17:47:9b:96: f7:a0:ea:d5:3d:62:30:44:dc:b1:9b:1d:f8:27:41: 8c:61:55:01:0a:24:cb:c5:18:a9:6a:ef:ea:68:cd: 70:95:07:ca:38:ff:b2:0d:0a:1c:9d:f3:ed:29:fc: a3:3a:cb:62:9b:35:ea:2b:84:e7:b9:d8:df:cd:8d: 8f:10:06:11:a0:4d:41:27:2e:19:92:95:b0:2a:d4: 73:9a:0c:0c:ff:ff:7b:d4:07:85:26:8f:2e:53:36: f0:96:3d:67:f4:7c:06:56:ed:e8:80:60:28:36:24: a0:05:2c:c2:2f:0b:0b:1d:72:63:0c:26:08:ee:f4: 68:b5:b4:39:eb:d0:52:75:f1:f6:e7:ab:81:80:e6: 02:71:49:48:31:1c:30:1c:5c:f1:6b:8c:a8:af:c2: 33:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A4:58:34:A6:22:EC:32:9B:57:77:B4:4D:55:83:A3:47:F7:32:38 X509v3 Authority Key Identifier: keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:bb:6d:bb:8c:4d:0e:87:70:5b:a4:f8:41:ae:06:fe:eb:2d: c3:03:40:68:dc:f3:eb:15:81:ff:8a:ae:9e:6b:ad:0f:af:6b: ba:54:1b:ad:3f:3b:67:42:cf:5a:b2:a3:70:e7:6d:a5:a5:58: 77:66:51:07:6e:e8:5e:44:fc:a0:5f:f5:9d:bd:bc:4d:7e:b1: fe:91:bc:c1:8b:bf:88:15:26:f3:c0:ec:3e:d1:7a:e6:9f:3f: 9b:c1:74:48:75:be:61:e7:6e:e7:d6:55:4f:83:e5:0b:ab:02: a0:e1:c4:d9:5b:7b:0d:50:57:f5:de:15:e2:39:14:c4:eb:62: 22:07:d2:0b:db:88:e6:64:87:ee:bd:da:06:f1:e9:d7:8d:25: 34:89:7f:be:40:cf:15:c1:7d:59:39:5e:aa:9d:ac:1c:5c:d1: b5:97:32:f4:24:d6:c5:6b:f8:3a:c5:a5:17:2e:bc:1d:10:75: 1f:be:db:8e:fa:4e:7d:97:09:8e:68:2b:08:d7:f9:58:68:ca: df:0a:31:9c:25:b6:40:7a:ab:69:6e:c4:3a:49:d3:2e:8a:f9: 3f:92:3e:43:b4:1e:79:e6:a6:4d:a1:c2:cf:fc:11:80:d4:93: 14:0c:92:c2:ea:f5:44:8a:69:9a:b1:6f:bc:7f:02:94:41:79: 32:a5:9d:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMbjs2Ldn9p5RW+A7JVp+PZEGyHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQ1NUQwQkU1MTM4QUU1NTJCNDg1NzI3MEVFRDJBN0NF NUI1QzZGMjAeFw0yNTA4MTAxMDU5MjJaFw0yNTA4MTExNDE0MjJaMDMxMTAvBgNV BAMTKDU0QTQ1ODM0QTYyMkVDMzI5QjU3NzdCNDRENTU4M0EzNDdGNzMyMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCf03XTasZ0LfMp5E1XsyHkmRZ eLmrmxIm6AInMIa9E8BBDHvSaRJxZmD0ObmQ8cyBTbdbWbZrJe7F2ZZCfBWsulsG 4KYALFWZ+7xRWWg+KsU9JyZaThJ6mzLJFDJ7VZEgcFwDF0eblveg6tU9YjBE3LGb HfgnQYxhVQEKJMvFGKlq7+pozXCVB8o4/7INChyd8+0p/KM6y2KbNeorhOe52N/N jY8QBhGgTUEnLhmSlbAq1HOaDAz//3vUB4Umjy5TNvCWPWf0fAZW7eiAYCg2JKAF LMIvCwsdcmMMJgju9Gi1tDnr0FJ18fbnq4GA5gJxSUgxHDAcXPFrjKivwjMRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVKRYNKYi7DKbV3e0TVWDo0f3MjgwHwYDVR0j BBgwFoAU9FXQvlE4rlUrSFcnDu0qfOW1xvIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDdGSFE3YlkzN1Z4VkpvM2RFVmpwUGFweHBiekhrTUxnUUtUem5HYlFh eGIvMC9GNDU1RDBCRTUxMzhBRTU1MkI0ODU3MjcwRUVEMkE3Q0U1QjVDNkYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0NTVEMEJFNTEzOEFFNTUy QjQ4NTcyNzBFRUQyQTdDRTVCNUM2RjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDdGSFE3YlkzN1Z4VkpvM2RFVmpwUGFweHBiekhrTUxnUUtUem5HYlFheGIvMC9G NDU1RDBCRTUxMzhBRTU1MkI0ODU3MjcwRUVEMkE3Q0U1QjVDNkYyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW7ttu4xNDodwW6T4Qa4G/ustwwNAaNzz6xWB/4qunmutD69rulQbrT87Z0LP WrKjcOdtpaVYd2ZRB27oXkT8oF/1nb28TX6x/pG8wYu/iBUm88DsPtF65p8/m8F0 SHW+Yedu59ZVT4PlC6sCoOHE2Vt7DVBX9d4V4jkUxOtiIgfSC9uI5mSH7r3aBvHp 140lNIl/vkDPFcF9WTleqp2sHFzRtZcy9CTWxWv4OsWlFy68HRB1H77bjvpOfZcJ jmgrCNf5WGjK3woxnCW2QHqraW7EOknTLor5P5I+Q7QeeeamTaHCz/wRgNSTFAyS wur1RIppmrFvvH8ClEF5MqWdaw== -----END CERTIFICATE-----Generated at Sun Aug 10 16:00:04 2025 by rpki-client