$ rpki-client -vvf rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.mft File: FB2788BCFA95BF2224E49278CDA51747D625BC3F.mft (raw, json) Hash identifier: gOl9SAQk6I8aqA/QyzcZ44ual4PqSKZdE2CCgsmgiy8= Subject key identifier: 5C:F7:C8:8E:56:6D:5F:21:A8:2E:95:44:AF:7F:1B:5F:F9:BD:DB:6C Authority key identifier: FB:27:88:BC:FA:95:BF:22:24:E4:92:78:CD:A5:17:47:D6:25:BC:3F Certificate issuer: /CN=FB2788BCFA95BF2224E49278CDA51747D625BC3F Certificate serial: 04868E93EC839E1D058D167D8DF5B98EA619F54B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB2788BCFA95BF2224E49278CDA51747D625BC3F.cer Subject info access: rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.mft Manifest number: 01BA Signing time: Wed 06 Aug 2025 10:43:18 +0000 Manifest this update: Wed 06 Aug 2025 10:38:18 +0000 Manifest next update: Thu 07 Aug 2025 12:58:18 +0000 Files and hashes: 1: 3230302e3130382e3136382e302f32322d3332203d3e20323730323535.roa (hash: 90FIqDBHIiI7TKSY0kz9few7LZCPZNq7P6S8/wRB72k=) 2: FB2788BCFA95BF2224E49278CDA51747D625BC3F.crl (hash: Nmq6IQTs10ilU63YbZCd59wslH9YpO/TZPATJ8zcNl8=) 3: 323830343a363933343a3a2f33322d313238203d3e20323730323535.roa (hash: 46jzNsw6gz2N895FcUgxaXDtvQRSnfh3Stz4cLcX04o=) 4: 34352e3138342e38382e302f32322d3332203d3e20323730323535.roa (hash: Up64O9ooU5+PPcYCHpuP3BeIS7d73iqR5fnXxhP9leI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.crl rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB2788BCFA95BF2224E49278CDA51747D625BC3F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 07 Aug 2025 12:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:86:8e:93:ec:83:9e:1d:05:8d:16:7d:8d:f5:b9:8e:a6:19:f5:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB2788BCFA95BF2224E49278CDA51747D625BC3F Validity Not Before: Aug 6 10:38:18 2025 GMT Not After : Aug 7 12:58:18 2025 GMT Subject: CN=5CF7C88E566D5F21A82E9544AF7F1B5FF9BDDB6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f0:ad:1f:51:82:aa:24:75:fd:48:9a:9b:bf: 05:5b:1e:52:f9:fb:ce:70:34:00:bc:12:58:38:ae: 84:2b:2c:50:5f:42:10:14:07:93:d0:ad:2d:90:46: 7c:6b:df:95:96:62:a3:0f:33:ad:9d:68:b6:17:c4: bd:c5:c8:b0:f4:88:0f:82:a9:aa:bb:2a:94:e9:fa: 66:0c:12:b9:ee:a9:a9:6b:03:44:36:33:f3:a6:d9: 8b:11:71:c0:46:83:92:94:12:81:ce:2b:91:bb:c0: 99:74:61:f8:36:d3:80:e1:b7:f0:f6:b4:af:79:62: 0c:43:e0:2e:61:c6:11:de:3e:16:07:df:3a:42:98: 49:18:be:54:66:c0:0b:14:94:08:e6:cc:c6:dd:c3: cb:29:79:6a:21:f2:1f:8d:01:b9:f4:26:ab:d0:92: e9:ac:28:58:f8:cd:94:d4:f9:68:7c:8c:f0:32:47: 09:82:ad:fd:3b:cf:ff:d3:b5:c5:19:9e:ff:e4:ff: 36:df:44:6c:e7:d3:29:ff:7e:b8:24:95:d4:ea:38: 23:4f:ea:f1:98:58:99:66:9a:b8:a7:82:d4:d8:35: d7:73:66:1d:31:e4:62:b1:2b:cb:c4:57:55:80:83: 8e:91:7a:ad:ee:ce:5d:c9:e3:7d:14:bf:2f:f9:1c: 9b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F7:C8:8E:56:6D:5F:21:A8:2E:95:44:AF:7F:1B:5F:F9:BD:DB:6C X509v3 Authority Key Identifier: keyid:FB:27:88:BC:FA:95:BF:22:24:E4:92:78:CD:A5:17:47:D6:25:BC:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB2788BCFA95BF2224E49278CDA51747D625BC3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b9:2d:93:2e:6d:2d:0d:8c:d2:bb:e4:51:18:0e:41:50:04: 1e:ff:de:cb:ed:19:04:30:a5:4d:49:f1:8d:c0:64:ea:23:16: f4:38:01:91:0c:af:1b:a4:d8:96:5b:47:e7:d2:92:6e:a6:87: 52:30:7d:50:3e:ff:d3:99:9a:1c:0f:c6:d4:79:7b:14:67:9e: 75:24:fd:de:77:cf:8e:b9:ff:ba:bd:47:76:26:e2:eb:f2:dd: 95:a6:cd:a5:0e:8a:e3:fc:ee:2c:c3:aa:94:50:62:42:56:c1: 42:aa:3e:09:e9:c1:3d:19:77:9f:a5:41:f2:f4:17:64:58:78: e6:e6:2b:13:88:aa:5f:c3:32:ee:49:38:e6:94:16:e9:1e:f2: 3a:4a:39:61:26:bf:1f:75:90:81:2c:46:82:16:de:d6:0a:d9: 18:8b:80:99:54:39:ff:be:3e:6a:77:84:0d:aa:c9:fc:35:24: c4:88:08:7f:11:ac:e1:34:d1:1a:5b:83:db:85:b0:a6:aa:df: bc:2a:18:ab:0d:11:0c:0e:ae:d2:e2:cd:92:23:82:6e:f3:11: ad:d4:8f:39:b0:2e:a2:c5:6d:3e:c8:ca:d9:b9:e7:dc:d4:d5: 5d:87:3f:55:47:b9:d7:cf:ed:e6:a6:90:b7:9d:aa:a3:d0:82: 10:0d:ea:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBIaOk+yDnh0FjRZ9jfW5jqYZ9UswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIyNzg4QkNGQTk1QkYyMjI0RTQ5Mjc4Q0RBNTE3NDdE NjI1QkMzRjAeFw0yNTA4MDYxMDM4MThaFw0yNTA4MDcxMjU4MThaMDMxMTAvBgNV BAMTKDVDRjdDODhFNTY2RDVGMjFBODJFOTU0NEFGN0YxQjVGRjlCRERCNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8K0fUYKqJHX9SJqbvwVbHlL5 +85wNAC8Elg4roQrLFBfQhAUB5PQrS2QRnxr35WWYqMPM62daLYXxL3FyLD0iA+C qaq7KpTp+mYMErnuqalrA0Q2M/Om2YsRccBGg5KUEoHOK5G7wJl0Yfg204Dht/D2 tK95YgxD4C5hxhHePhYH3zpCmEkYvlRmwAsUlAjmzMbdw8speWoh8h+NAbn0JqvQ kumsKFj4zZTU+Wh8jPAyRwmCrf07z//TtcUZnv/k/zbfRGzn0yn/frgkldTqOCNP 6vGYWJlmmringtTYNddzZh0x5GKxK8vEV1WAg46Req3uzl3J430Uvy/5HJsPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXPfIjlZtXyGoLpVEr38bX/m922wwHwYDVR0j BBgwFoAU+yeIvPqVvyIk5JJ4zaUXR9YlvD8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREVDUGd3YWNkUU0yeURRZnNZTlVzR3VHV0F6QkJYeENQZmpkV05SUTdR czMvMC9GQjI3ODhCQ0ZBOTVCRjIyMjRFNDkyNzhDREE1MTc0N0Q2MjVCQzNGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCMjc4OEJDRkE5NUJGMjIy NEU0OTI3OENEQTUxNzQ3RDYyNUJDM0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REVDUGd3YWNkUU0yeURRZnNZTlVzR3VHV0F6QkJYeENQZmpkV05SUTdRczMvMC9G QjI3ODhCQ0ZBOTVCRjIyMjRFNDkyNzhDREE1MTc0N0Q2MjVCQzNGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK7ktky5tLQ2M0rvkURgOQVAEHv/ey+0ZBDClTUnxjcBk6iMW9DgBkQyvG6TY lltH59KSbqaHUjB9UD7/05maHA/G1Hl7FGeedST93nfPjrn/ur1Hdibi6/LdlabN pQ6K4/zuLMOqlFBiQlbBQqo+CenBPRl3n6VB8vQXZFh45uYrE4iqX8My7kk45pQW 6R7yOko5YSa/H3WQgSxGghbe1grZGIuAmVQ5/74+aneEDarJ/DUkxIgIfxGs4TTR GluD24WwpqrfvCoYqw0RDA6u0uLNkiOCbvMRrdSPObAuosVtPsjK2bnn3NTVXYc/ VUe518/t5qaQt52qo9CCEA3q0w== -----END CERTIFICATE-----Generated at Wed Aug 6 16:05:05 2025 by rpki-client