$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft File: 2D59905C3FCA5BDA34D7101B088D80451D026C47.mft (raw, json) Hash identifier: 2lEKhtz+PEzz/6xAvT1TssXBy5K6tOhGkDc+xkx8UBg= Subject key identifier: E2:10:46:2A:0D:51:04:05:F0:44:1B:25:0D:3F:FD:6B:1A:E5:57:0D Authority key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 Certificate issuer: /CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Certificate serial: 5FD7290601965FE1ADB6F47ADF91B623ECEDC3A5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer Subject info access: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft Manifest number: 028B Signing time: Tue 05 Aug 2025 19:35:00 +0000 Manifest this update: Tue 05 Aug 2025 19:30:00 +0000 Manifest next update: Wed 06 Aug 2025 20:32:00 +0000 Files and hashes: 1: 3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa (hash: GZELRNfuplahvPNzTKoCXKCGe7m/TvcDFJFlJBobK9k=) 2: 323830343a323439633a3a2f33322d3438203d3e20323634323333.roa (hash: NawnnPEHbMCtTiXRZuqs51ycbe695zSEZpiIfj2SEO8=) 3: 3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa (hash: zTSSMFG/lgVqOaFeXf9pCktuzCsj0jIoIIi1uaEYa0I=) 4: 2D59905C3FCA5BDA34D7101B088D80451D026C47.crl (hash: 2s+skOAWPxSfpKDK70KRMkPULUsGjn81596wj50Ps8g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 20:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d7:29:06:01:96:5f:e1:ad:b6:f4:7a:df:91:b6:23:ec:ed:c3:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Validity Not Before: Aug 5 19:30:00 2025 GMT Not After : Aug 6 20:32:00 2025 GMT Subject: CN=E210462A0D510405F0441B250D3FFD6B1AE5570D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e4:cf:e2:48:ab:98:ea:ec:d7:25:a2:03:e8: 02:e0:e4:3a:0b:ed:ff:54:a7:4a:53:22:81:ee:c4: 2c:23:be:e9:75:2c:01:4f:98:3f:a4:23:0e:88:73: 46:39:fe:c8:1d:b6:29:71:ad:3b:be:57:d0:d9:6f: e1:c9:7f:61:d2:66:13:8d:1e:32:0e:f3:86:87:14: d9:bb:28:83:ef:bd:04:c6:dd:99:ea:fe:29:d9:17: 50:6d:32:1f:96:be:78:56:73:87:5c:b1:2d:2b:c8: ee:0e:60:23:5c:45:09:7e:75:b6:19:04:e1:4a:2c: b2:92:c3:ab:ca:ac:8a:e6:0e:6f:c0:02:35:c1:26: 29:b6:9c:78:9e:25:ac:da:97:56:93:b6:d0:ae:fb: 1e:d0:21:f2:6b:17:89:09:c9:65:40:2a:2b:cc:bb: 50:01:59:cc:39:e4:51:7d:ee:4a:a3:09:ba:75:3d: 42:fc:74:e8:05:1e:14:77:c2:c8:35:52:ec:98:98: 3e:12:a4:e1:2a:8d:d4:ae:5a:ec:22:dc:09:9c:e1: e9:21:13:75:83:1d:fc:c6:0e:0b:19:bb:93:28:85: 1d:70:e0:24:c5:2b:d3:8c:9c:53:6f:a1:03:6f:99: ed:e5:bc:dd:ca:f0:8f:7f:cb:a9:a3:08:28:2c:45: ea:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:10:46:2A:0D:51:04:05:F0:44:1B:25:0D:3F:FD:6B:1A:E5:57:0D X509v3 Authority Key Identifier: keyid:2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:2d:df:a9:e1:c5:ce:40:54:58:9b:95:74:89:43:a9:9c:3e: ae:62:47:96:a7:91:79:38:81:a8:0b:b1:ad:91:23:e8:d2:98: a4:de:ad:db:ce:6d:44:99:66:26:28:2b:a0:16:ca:6e:66:38: 08:ed:fe:a4:51:da:44:5d:90:3b:c0:a0:c0:91:f7:b1:72:51: c4:4a:cc:5a:be:60:ee:ff:73:e4:0f:5d:42:65:cf:5a:36:1e: 24:bb:50:f0:26:1b:8c:4a:23:95:8e:45:e6:82:32:72:88:eb: a9:77:1c:2c:42:f7:1a:6b:c0:66:0f:53:33:fa:d9:b4:c2:5b: 48:da:13:b6:b7:85:e5:84:71:f3:05:20:19:bd:c2:68:31:fd: f1:b7:44:bb:86:e1:48:8b:58:87:53:bd:d8:81:f8:42:da:19: 4d:24:db:0b:6f:f3:95:64:1b:f0:fd:9c:34:30:a6:22:b3:b3: dd:b6:18:b2:85:73:d2:70:14:8e:dd:b4:8e:f0:20:d7:5d:9c: 07:b0:1f:56:39:3e:f8:6e:c9:74:d7:8e:3b:98:60:8f:8d:9b: 12:4e:b6:66:3e:15:5a:62:71:49:9d:12:1a:e3:5f:c7:c9:58: 91:30:01:1a:13:71:32:10:7f:a8:f3:de:ad:2d:3e:54:b8:57: ba:5a:73:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUX9cpBgGWX+GttvR635G2I+ztw6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1OTkwNUMzRkNBNUJEQTM0RDcxMDFCMDg4RDgwNDUx RDAyNkM0NzAeFw0yNTA4MDUxOTMwMDBaFw0yNTA4MDYyMDMyMDBaMDMxMTAvBgNV BAMTKEUyMTA0NjJBMEQ1MTA0MDVGMDQ0MUIyNTBEM0ZGRDZCMUFFNTU3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85M/iSKuY6uzXJaID6ALg5DoL 7f9Up0pTIoHuxCwjvul1LAFPmD+kIw6Ic0Y5/sgdtilxrTu+V9DZb+HJf2HSZhON HjIO84aHFNm7KIPvvQTG3Znq/inZF1BtMh+WvnhWc4dcsS0ryO4OYCNcRQl+dbYZ BOFKLLKSw6vKrIrmDm/AAjXBJim2nHieJazal1aTttCu+x7QIfJrF4kJyWVAKivM u1ABWcw55FF97kqjCbp1PUL8dOgFHhR3wsg1UuyYmD4SpOEqjdSuWuwi3Amc4ekh E3WDHfzGDgsZu5MohR1w4CTFK9OMnFNvoQNvme3lvN3K8I9/y6mjCCgsReo/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4hBGKg1RBAXwRBslDT/9axrlVw0wHwYDVR0j BBgwFoAULVmQXD/KW9o01xAbCI2ARR0CbEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5 QUgvMS8yRDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENTk5MDVDM0ZDQTVCREEz NEQ3MTAxQjA4OEQ4MDQ1MUQwMjZDNDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5QUgvMS8y RDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyy3fqeHFzkBUWJuVdIlDqZw+rmJHlqeReTiBqAuxrZEj6NKYpN6t285tRJlm JigroBbKbmY4CO3+pFHaRF2QO8CgwJH3sXJRxErMWr5g7v9z5A9dQmXPWjYeJLtQ 8CYbjEojlY5F5oIycojrqXccLEL3GmvAZg9TM/rZtMJbSNoTtreF5YRx8wUgGb3C aDH98bdEu4bhSItYh1O92IH4QtoZTSTbC2/zlWQb8P2cNDCmIrOz3bYYsoVz0nAU jt20jvAg112cB7AfVjk++G7JdNeOO5hgj42bEk62Zj4VWmJxSZ0SGuNfx8lYkTAB GhNxMhB/qPPerS0+VLhXulpzIw== -----END CERTIFICATE-----Generated at Wed Aug 6 04:02:54 2025 by rpki-client