$ rpki-client -vvf rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft File: 421509EE0B333FF7D576BF479ED0155BADFB2A90.mft (raw, json) Hash identifier: uxLZNBGgo0sKR+uxbe+bO9vWS4WQgKKXRHQSSJ1GVWw= Subject key identifier: D5:6C:79:41:CF:71:D3:74:B6:10:09:E4:40:E7:B4:0E:3A:C6:61:E2 Authority key identifier: 42:15:09:EE:0B:33:3F:F7:D5:76:BF:47:9E:D0:15:5B:AD:FB:2A:90 Certificate issuer: /CN=421509EE0B333FF7D576BF479ED0155BADFB2A90 Certificate serial: 643724BEF7EB5417440174FC58F52BA02674BC98 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer Subject info access: rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft Manifest number: C9 Signing time: Sun 10 Aug 2025 02:25:29 +0000 Manifest this update: Sun 10 Aug 2025 02:20:29 +0000 Manifest next update: Mon 11 Aug 2025 04:44:29 +0000 Files and hashes: 1: 34352e3136362e39362e302f32342d3234203d3e20323637393539.roa (hash: HmIVPaWFHQDFb9ehHmUe+M86a5PovezP3h348KDU/vg=) 2: 421509EE0B333FF7D576BF479ED0155BADFB2A90.crl (hash: jtub4GiWcM6091yFb/VVs6WKYm6HnOGG9z1QrcomNaE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.crl rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 04:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:37:24:be:f7:eb:54:17:44:01:74:fc:58:f5:2b:a0:26:74:bc:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=421509EE0B333FF7D576BF479ED0155BADFB2A90 Validity Not Before: Aug 10 02:20:29 2025 GMT Not After : Aug 11 04:44:29 2025 GMT Subject: CN=D56C7941CF71D374B61009E440E7B40E3AC661E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a3:7b:76:a3:a3:27:e7:dd:44:b1:8b:4a:3c: 8d:d6:21:ae:1d:e4:ea:0a:50:3b:67:f3:c2:5a:f3: cd:71:a6:f9:ef:77:9a:72:41:5d:b8:b1:a9:ae:40: c6:0f:ae:3d:c1:cf:50:17:f2:e0:d6:96:ca:c1:9f: 5f:e0:0b:8b:c9:83:f5:40:99:8f:67:36:a7:58:cd: 4e:dc:73:bd:ad:78:47:cf:b3:77:56:1f:f4:06:64: 13:8a:0a:b5:d1:c8:a8:a1:a8:0d:97:33:08:ae:a3: 3a:a0:b7:1e:08:a2:0c:17:8e:21:0b:22:3b:c3:2c: 8c:9b:9e:28:5a:fd:39:f5:24:70:0b:3d:c4:9d:d1: f5:fd:b2:45:f9:b0:a9:72:82:7b:24:85:d9:d9:90: a5:f5:be:f3:1a:35:6f:5d:33:b3:e6:36:c6:79:64: be:5b:a2:a2:f5:43:3a:03:cc:65:63:a3:8d:25:58: f7:1e:fa:8c:01:c4:11:35:72:16:8c:c8:c7:78:e4: cb:5f:87:16:62:21:35:3b:8f:d3:ca:2c:26:7d:f6: ba:18:89:27:0a:2c:0f:56:f1:cc:9c:2f:ea:a5:ae: 9e:5a:38:8d:9f:14:de:ae:32:81:61:52:61:96:61: 61:90:9e:70:b9:98:f2:83:6a:9d:d9:ca:24:9b:a3: 8f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6C:79:41:CF:71:D3:74:B6:10:09:E4:40:E7:B4:0E:3A:C6:61:E2 X509v3 Authority Key Identifier: keyid:42:15:09:EE:0B:33:3F:F7:D5:76:BF:47:9E:D0:15:5B:AD:FB:2A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a4:ac:8c:01:b2:bf:09:9b:94:57:96:bb:02:ab:ef:2d:6a: 98:16:f5:19:cd:8c:c1:6e:97:14:52:2c:14:1a:96:94:2c:4f: e2:69:97:34:f2:da:55:b4:6c:f9:3c:6f:c9:e9:15:1d:84:8c: 0d:51:4a:8c:d9:20:79:e6:51:e6:42:00:73:e3:32:b0:82:db: d3:2b:a9:2d:ec:a1:fd:50:c1:3c:a1:8b:dc:84:73:0a:96:21: 59:4f:a9:f6:d0:68:19:0d:68:18:1c:b6:33:b5:35:8b:83:ea: d1:81:78:e6:f0:4d:f1:63:60:d6:d2:be:82:71:ef:c5:60:7b: 65:b4:32:9b:3f:78:4f:84:16:f1:3e:96:34:77:11:b5:c7:59: 5f:b6:91:09:04:a7:bb:81:46:29:f0:60:a8:a9:24:b5:0d:01: a3:10:0f:bb:05:e4:75:48:1c:c2:3f:86:bc:bc:fc:7e:28:af: 2d:34:81:2d:2d:ba:aa:0c:b2:e5:94:91:b4:b2:c7:70:98:88: db:03:21:37:09:7f:e0:f6:4e:e8:ec:aa:b1:6b:03:de:98:2c: cf:79:ab:e4:94:51:f1:95:51:77:5a:64:47:45:41:5d:df:db: 25:13:32:d8:b7:56:8a:06:3e:bf:d8:04:6a:0d:e4:23:b2:52: 4a:5e:54:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZDckvvfrVBdEAXT8WPUroCZ0vJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIxNTA5RUUwQjMzM0ZGN0Q1NzZCRjQ3OUVEMDE1NUJB REZCMkE5MDAeFw0yNTA4MTAwMjIwMjlaFw0yNTA4MTEwNDQ0MjlaMDMxMTAvBgNV BAMTKEQ1NkM3OTQxQ0Y3MUQzNzRCNjEwMDlFNDQwRTdCNDBFM0FDNjYxRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLo3t2o6Mn591EsYtKPI3WIa4d 5OoKUDtn88Ja881xpvnvd5pyQV24samuQMYPrj3Bz1AX8uDWlsrBn1/gC4vJg/VA mY9nNqdYzU7cc72teEfPs3dWH/QGZBOKCrXRyKihqA2XMwiuozqgtx4IogwXjiEL IjvDLIybniha/Tn1JHALPcSd0fX9skX5sKlygnskhdnZkKX1vvMaNW9dM7PmNsZ5 ZL5boqL1QzoDzGVjo40lWPce+owBxBE1chaMyMd45MtfhxZiITU7j9PKLCZ99roY iScKLA9W8cycL+qlrp5aOI2fFN6uMoFhUmGWYWGQnnC5mPKDap3ZyiSbo48pAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1Wx5Qc9x03S2EAnkQOe0DjrGYeIwHwYDVR0j BBgwFoAUQhUJ7gszP/fVdr9HntAVW637KpAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRG1UdmJYVVZtTVR2WnJGbjFvd0U5RXhHUDV6ekxOYW1kc3o1b2FwdUxL NVovMC80MjE1MDlFRTBCMzMzRkY3RDU3NkJGNDc5RUQwMTU1QkFERkIyQTkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyMTUwOUVFMEIzMzNGRjdE NTc2QkY0NzlFRDAxNTVCQURGQjJBOTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RG1UdmJYVVZtTVR2WnJGbjFvd0U5RXhHUDV6ekxOYW1kc3o1b2FwdUxLNVovMC80 MjE1MDlFRTBCMzMzRkY3RDU3NkJGNDc5RUQwMTU1QkFERkIyQTkwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWqSsjAGyvwmblFeWuwKr7y1qmBb1Gc2MwW6XFFIsFBqWlCxP4mmXNPLaVbRs +TxvyekVHYSMDVFKjNkgeeZR5kIAc+MysILb0yupLeyh/VDBPKGL3IRzCpYhWU+p 9tBoGQ1oGBy2M7U1i4Pq0YF45vBN8WNg1tK+gnHvxWB7ZbQymz94T4QW8T6WNHcR tcdZX7aRCQSnu4FGKfBgqKkktQ0BoxAPuwXkdUgcwj+GvLz8fiivLTSBLS26qgyy 5ZSRtLLHcJiI2wMhNwl/4PZO6OyqsWsD3pgsz3mr5JRR8ZVRd1pkR0VBXd/bJRMy 2LdWigY+v9gEag3kI7JSSl5U9A== -----END CERTIFICATE-----Generated at Sun Aug 10 13:59:50 2025 by rpki-client