$ rpki-client -vvf rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.mft File: 5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.mft (raw, json) Hash identifier: O3vM/6R/kjtpdON2Ai7XGhoKZVnC9BjM+M/yMRJjgj0= Subject key identifier: 5D:F9:4A:F1:A9:78:5E:B0:2D:B6:5A:F0:D0:66:14:25:E3:1B:D8:78 Authority key identifier: 5F:A9:2D:08:2A:D8:BD:E2:E6:BF:B7:90:DA:3F:33:25:9A:D5:3F:0C Certificate issuer: /CN=5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C Certificate serial: 522EB29EBBA955DE3B0D97EB4812E87E7128BE11 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.cer Subject info access: rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.mft Manifest number: 0296 Signing time: Sun 10 Aug 2025 11:05:20 +0000 Manifest this update: Sun 10 Aug 2025 11:00:20 +0000 Manifest next update: Mon 11 Aug 2025 11:29:20 +0000 Files and hashes: 1: 5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.crl (hash: CvzsOBKybAj+tDJJK860YQThgMzjRYCeoZGgK2NmHwQ=) 2: 3139312e3234312e3136302e302f32312d3332203d3e203532393034.roa (hash: CkGv2W1wQmwIX6WxUgizF8ZQ1ADx3LtR8oN2aj7dYos=) 3: 3137372e31312e3138342e302f32312d3332203d3e203532393034.roa (hash: APqqRMUHA7oyqYSRxpcztfLH2YJTNOmX/bbMAPZg6Ls=) 4: 323830343a313136383a3a2f33322d313238203d3e203532393034.roa (hash: noKRj1Eb47X30XeivmJwMyI/NGeWMDCIBPtcYmudZ0k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.crl rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 11:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:2e:b2:9e:bb:a9:55:de:3b:0d:97:eb:48:12:e8:7e:71:28:be:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C Validity Not Before: Aug 10 11:00:20 2025 GMT Not After : Aug 11 11:29:20 2025 GMT Subject: CN=5DF94AF1A9785EB02DB65AF0D0661425E31BD878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5c:0e:6e:8d:ca:b0:04:f4:ce:42:32:f4:e8: ab:6d:7b:9c:9c:81:73:37:ca:30:7d:50:e8:89:79: ae:82:e9:bc:14:2d:e3:25:bf:7b:fb:37:66:a9:02: 85:1d:56:99:69:7d:03:3c:ab:f2:52:46:a3:09:b1: ae:12:f5:f6:9d:14:fa:a4:37:54:02:43:21:a4:47: 92:ee:12:26:8e:74:97:f3:37:52:d1:6f:83:a4:ed: 49:84:ff:dc:c9:cc:3c:17:79:44:98:d1:bd:2a:63: 35:0d:84:4e:d4:f5:45:d7:2a:91:80:76:de:f9:2a: e8:71:b9:82:1a:a3:15:23:31:51:0d:5c:f0:ea:e2: 50:a6:3b:b2:68:f9:3d:c1:b2:83:79:7a:cc:d5:fc: 4f:73:00:77:14:de:78:cb:89:70:43:a3:69:f5:63: be:b8:df:7f:6e:b3:f5:dd:95:bf:ff:6a:3f:24:f6: d9:7e:b0:e6:c9:c4:e7:8f:9e:e9:a3:8e:28:04:88: ce:4e:72:70:19:65:e1:f6:b0:10:ce:86:20:c5:3b: da:39:74:2b:50:91:56:2a:fd:03:90:37:1b:06:8b: d3:81:66:d7:bd:c2:1e:c7:4a:5f:fb:e6:0a:18:c7: 99:03:9c:fb:ed:3e:fb:d6:dc:0b:0f:dc:0a:68:b2: d3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F9:4A:F1:A9:78:5E:B0:2D:B6:5A:F0:D0:66:14:25:E3:1B:D8:78 X509v3 Authority Key Identifier: keyid:5F:A9:2D:08:2A:D8:BD:E2:E6:BF:B7:90:DA:3F:33:25:9A:D5:3F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvcMk3Ww6Jc2LqhbNfnjnV1ZwZbDymg3FyxUoJNQRHAt/1/5FA92D082AD8BDE2E6BFB790DA3F33259AD53F0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:70:65:36:6d:f6:f2:25:d2:44:5d:6b:e9:6f:af:3c:66:2b: 7d:1f:50:95:37:6a:66:91:e4:ec:57:ff:08:75:41:c6:d1:1f: 57:ea:c1:a3:d9:3d:6d:67:65:9a:53:e6:77:2f:48:46:a9:01: 00:53:f2:56:cc:4a:0e:05:54:35:9f:4d:16:91:c9:98:d8:9e: ef:53:c2:4b:85:93:57:49:af:be:5e:78:bd:24:47:21:f4:af: dd:75:9c:86:5c:d5:f5:5a:4f:2d:9d:95:5a:cf:bf:be:e1:5d: 89:6d:4a:ac:6e:3b:ef:1a:54:6e:c7:43:11:81:2c:e4:53:51: b0:f9:99:36:4f:a8:25:a7:0d:33:2a:1f:a1:95:d0:5b:9b:0c: 24:a8:61:a5:46:c3:45:19:ac:2d:ba:18:f7:8e:ea:e2:35:23: 22:83:72:38:6b:6d:a2:b4:d6:84:4d:2c:62:71:8c:e5:62:0c: c4:45:a6:ea:39:90:a6:cb:c5:e4:64:49:8b:de:9a:9b:ac:ab: 92:21:63:24:ed:c8:57:48:25:86:01:60:74:86:f5:f5:b7:93: 7f:1d:4e:42:19:b5:97:1e:a4:76:4b:b4:e6:80:81:e4:d4:3a: 26:79:09:78:ea:85:b8:69:cf:69:7f:bf:d7:10:10:d4:59:d9: 3f:b3:91:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUi6ynrupVd47DZfrSBLofnEovhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZBOTJEMDgyQUQ4QkRFMkU2QkZCNzkwREEzRjMzMjU5 QUQ1M0YwQzAeFw0yNTA4MTAxMTAwMjBaFw0yNTA4MTExMTI5MjBaMDMxMTAvBgNV BAMTKDVERjk0QUYxQTk3ODVFQjAyREI2NUFGMEQwNjYxNDI1RTMxQkQ4NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpXA5ujcqwBPTOQjL06Ktte5yc gXM3yjB9UOiJea6C6bwULeMlv3v7N2apAoUdVplpfQM8q/JSRqMJsa4S9fadFPqk N1QCQyGkR5LuEiaOdJfzN1LRb4Ok7UmE/9zJzDwXeUSY0b0qYzUNhE7U9UXXKpGA dt75KuhxuYIaoxUjMVENXPDq4lCmO7Jo+T3BsoN5eszV/E9zAHcU3njLiXBDo2n1 Y764339us/Xdlb//aj8k9tl+sObJxOePnumjjigEiM5OcnAZZeH2sBDOhiDFO9o5 dCtQkVYq/QOQNxsGi9OBZte9wh7HSl/75goYx5kDnPvtPvvW3AsP3ApostOXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXflK8al4XrAttlrw0GYUJeMb2HgwHwYDVR0j BBgwFoAUX6ktCCrYveLmv7eQ2j8zJZrVPwwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3ZjTWszV3c2SmMyTHFoYk5mbmpuVjFad1piRHltZzNGeXhVb0pOUVJI QXQvMS81RkE5MkQwODJBRDhCREUyRTZCRkI3OTBEQTNGMzMyNTlBRDUzRjBDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGQTkyRDA4MkFEOEJERTJF NkJGQjc5MERBM0YzMzI1OUFENTNGMEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3ZjTWszV3c2SmMyTHFoYk5mbmpuVjFad1piRHltZzNGeXhVb0pOUVJIQXQvMS81 RkE5MkQwODJBRDhCREUyRTZCRkI3OTBEQTNGMzMyNTlBRDUzRjBDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt3BlNm328iXSRF1r6W+vPGYrfR9QlTdqZpHk7Ff/CHVBxtEfV+rBo9k9bWdl mlPmdy9IRqkBAFPyVsxKDgVUNZ9NFpHJmNie71PCS4WTV0mvvl54vSRHIfSv3XWc hlzV9VpPLZ2VWs+/vuFdiW1KrG477xpUbsdDEYEs5FNRsPmZNk+oJacNMyofoZXQ W5sMJKhhpUbDRRmsLboY947q4jUjIoNyOGttorTWhE0sYnGM5WIMxEWm6jmQpsvF 5GRJi96am6yrkiFjJO3IV0glhgFgdIb19beTfx1OQhm1lx6kdku05oCB5NQ6JnkJ eOqFuGnPaX+/1xAQ1FnZP7ORoQ== -----END CERTIFICATE-----Generated at Sun Aug 10 18:24:42 2025 by rpki-client