$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft File: D539CF929B6A6A2B9596B922F417FAD917799ED7.mft (raw, json) Hash identifier: s8snQkOsYcCPx0xSU2lzR4eFRxTGcIAzggQWjy33upg= Subject key identifier: 4E:13:0F:B6:58:BE:98:B8:8C:28:9E:0A:AF:6B:75:10:5A:16:56:1B Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 Certificate issuer: /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Certificate serial: 27ACF7597263C6B97AC7EFE8849336AF3CC2B8E7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft Manifest number: 0295 Signing time: Fri 08 Aug 2025 22:59:27 +0000 Manifest this update: Fri 08 Aug 2025 22:54:27 +0000 Manifest next update: Sun 10 Aug 2025 00:01:27 +0000 Files and hashes: 1: D539CF929B6A6A2B9596B922F417FAD917799ED7.crl (hash: Mkz1KseCZq++dEujGMXuIPiZ9i+DZ0JyHJDMae2udjI=) 2: 34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (hash: FE+7zbwcRwFNCNZQz6JTL4PFhynEDJA2jUUaWQGOwlw=) 3: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (hash: 01pAW4QCHBpNqYLYxhHBFF+Hirycj7LT0087UnT0sog=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 10 Aug 2025 00:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ac:f7:59:72:63:c6:b9:7a:c7:ef:e8:84:93:36:af:3c:c2:b8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Validity Not Before: Aug 8 22:54:27 2025 GMT Not After : Aug 10 00:01:27 2025 GMT Subject: CN=4E130FB658BE98B88C289E0AAF6B75105A16561B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b7:4c:5e:8a:f8:36:06:16:6b:1b:87:4c:74: f0:e6:b9:22:58:a4:08:33:6c:0d:c1:3c:2b:b2:4c: 96:db:4c:28:39:58:5c:37:28:22:c2:89:1f:e9:33: 8e:be:04:6e:89:b7:cf:1e:33:f5:c5:d3:54:87:cc: 86:8e:10:42:6d:6c:18:c1:56:0d:12:24:34:67:fc: 0b:5c:d9:a2:23:cc:bb:15:09:e8:e4:01:6c:7b:e2: ec:45:11:9a:bc:84:ee:da:16:9b:2e:bf:b0:d8:1d: b2:4d:e6:eb:91:0c:ce:04:c2:bd:8a:02:59:e0:a4: 69:4f:5b:1b:53:83:98:5e:85:07:5f:13:01:0d:1c: e8:08:0e:ce:2a:3f:de:50:5b:26:40:b2:59:8a:21: da:94:6a:a0:8d:d6:8b:9f:f2:e8:d5:0e:51:4f:f3: 6e:f0:0c:b8:a9:02:be:08:e5:15:da:e6:5b:fb:f6: ea:4b:42:7d:41:72:43:8c:06:83:a0:b5:ae:44:73: fc:04:b2:89:da:90:9f:ea:19:fa:c2:52:3e:a0:56: 37:9c:a1:3d:ef:1e:df:76:81:45:72:c4:07:70:ac: df:ca:ec:7d:ef:17:ef:43:9f:c7:dc:8e:91:62:94: e3:a3:50:68:2c:77:d2:8e:70:66:0f:ef:02:84:c1: 31:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:13:0F:B6:58:BE:98:B8:8C:28:9E:0A:AF:6B:75:10:5A:16:56:1B X509v3 Authority Key Identifier: keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:87:1e:df:d6:24:8b:dc:27:80:bc:49:69:9a:6d:35:5f:87: 85:b3:e5:e2:e7:b9:9b:3e:03:80:c8:0f:b2:2b:4c:b9:a9:d3: a2:8b:24:14:0a:95:4a:3d:85:05:39:cf:16:0e:4e:73:bd:a2: 6b:96:91:25:a0:2a:fd:0b:16:b6:a4:41:ca:16:c8:db:64:f8: 51:be:a7:39:09:ef:e7:fd:b9:7a:d7:b5:e7:c2:f2:08:84:97: 6d:6e:c7:62:0a:58:8f:dc:fb:b0:f6:bc:2e:60:b2:84:ed:68: 50:02:b8:d7:c9:d1:22:4f:fe:da:da:17:84:bd:e8:87:93:11: 5f:0a:de:8e:69:0e:a6:d4:35:c3:cc:33:8f:4e:26:25:a2:b0: f2:5e:a7:69:69:f6:d6:fe:ae:81:bc:85:7b:c1:0b:5c:34:ce: 7a:00:13:ef:aa:6c:97:b1:34:07:ab:4f:11:97:f3:de:10:d9: b6:3f:8b:34:56:49:f0:91:af:c7:ac:d9:a5:4c:47:6c:16:df: b6:df:06:f3:d9:75:1b:9f:83:ec:c8:56:ad:6d:4c:38:20:af: 46:21:55:bf:f0:70:5d:c6:42:d6:47:f9:8b:be:f9:7f:d8:e3: 5a:20:f7:0b:de:31:8e:3e:33:12:c2:cf:00:bf:e0:06:11:d1: 72:35:c5:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJ6z3WXJjxrl6x+/ohJM2rzzCuOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUzOUNGOTI5QjZBNkEyQjk1OTZCOTIyRjQxN0ZBRDkx Nzc5OUVENzAeFw0yNTA4MDgyMjU0MjdaFw0yNTA4MTAwMDAxMjdaMDMxMTAvBgNV BAMTKDRFMTMwRkI2NThCRTk4Qjg4QzI4OUUwQUFGNkI3NTEwNUExNjU2MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbt0xeivg2BhZrG4dMdPDmuSJY pAgzbA3BPCuyTJbbTCg5WFw3KCLCiR/pM46+BG6Jt88eM/XF01SHzIaOEEJtbBjB Vg0SJDRn/Atc2aIjzLsVCejkAWx74uxFEZq8hO7aFpsuv7DYHbJN5uuRDM4Ewr2K AlngpGlPWxtTg5hehQdfEwENHOgIDs4qP95QWyZAslmKIdqUaqCN1ouf8ujVDlFP 827wDLipAr4I5RXa5lv79upLQn1BckOMBoOgta5Ec/wEsonakJ/qGfrCUj6gVjec oT3vHt92gUVyxAdwrN/K7H3vF+9Dn8fcjpFilOOjUGgsd9KOcGYP7wKEwTHBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUThMPtli+mLiMKJ4Kr2t1EFoWVhswHwYDVR0j BBgwFoAU1TnPkptqaiuVlrki9Bf62Rd5ntcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNT M1QvMS9ENTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MzlDRjkyOUI2QTZBMkI5 NTk2QjkyMkY0MTdGQUQ5MTc3OTlFRDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNTM1QvMS9E NTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjoce39Yki9wngLxJaZptNV+HhbPl4ue5mz4DgMgPsitMuanTooskFAqVSj2F BTnPFg5Oc72ia5aRJaAq/QsWtqRByhbI22T4Ub6nOQnv5/25ete158LyCISXbW7H YgpYj9z7sPa8LmCyhO1oUAK418nRIk/+2toXhL3oh5MRXwrejmkOptQ1w8wzj04m JaKw8l6naWn21v6ugbyFe8ELXDTOegAT76psl7E0B6tPEZfz3hDZtj+LNFZJ8JGv x6zZpUxHbBbftt8G89l1G5+D7MhWrW1MOCCvRiFVv/BwXcZC1kf5i775f9jjWiD3 C94xjj4zEsLPAL/gBhHRcjXFdQ== -----END CERTIFICATE-----Generated at Sat Aug 9 10:39:01 2025 by rpki-client