$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft File: CD119443A2689BA4FC616BCD6929E636B5032FC0.mft (raw, json) Hash identifier: TiaxE8i7KKyFVBXdq1eVebD0O/+xzqS+8pGOwS15zsM= Subject key identifier: 45:D6:54:4C:9C:F2:76:B2:09:30:CC:C2:EC:F6:D7:79:36:4E:81:F0 Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0 Certificate issuer: /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0 Certificate serial: 35CF2109F95D0B3AB7E73B559E429880DC531488 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer Subject info access: rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft Manifest number: 0289 Signing time: Tue 05 Aug 2025 20:30:40 +0000 Manifest this update: Tue 05 Aug 2025 20:25:40 +0000 Manifest next update: Wed 06 Aug 2025 22:30:40 +0000 Files and hashes: 1: CD119443A2689BA4FC616BCD6929E636B5032FC0.crl (hash: fNCSsw4YbSrny6rzij5MNlwqz9xmjBnueBCie0oWvhY=) 2: 3136382e3138312e34302e302f32322d3332203d3e203533303239.roa (hash: DigxLgwOCkJqaxHXJWceoasL0PEbNpzDZ+ACjp/5uT8=) 3: 3137372e37332e38302e302f32322d3332203d3e203533303239.roa (hash: Qek/xs/EKmEb9IFoScEonrCyzkJUGy3pixZFP0HNsFI=) 4: 3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa (hash: 0yz5B0vFU4y+5bFNlnsgvOAMOkwGTpRZj0IDhhUzrRA=) 5: 323830343a3632383a3a2f33322d313238203d3e203533303239.roa (hash: wXzHyexM8HZC0ahdh68QW2mTL8oWKucBoRBb4ywNBSU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 22:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:cf:21:09:f9:5d:0b:3a:b7:e7:3b:55:9e:42:98:80:dc:53:14:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0 Validity Not Before: Aug 5 20:25:40 2025 GMT Not After : Aug 6 22:30:40 2025 GMT Subject: CN=45D6544C9CF276B20930CCC2ECF6D779364E81F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:93:6d:93:71:5c:ab:9e:1d:71:e2:9c:4c:f6: a7:7e:a9:ca:77:2c:b7:0f:9f:f0:0c:56:61:05:87: 6e:42:8a:53:2c:6b:3d:9c:5a:c3:af:8d:92:83:23: a0:fb:60:81:2c:d4:07:3e:d0:ac:43:06:b7:53:1b: 09:2e:72:e3:61:41:15:56:17:9f:30:da:ee:c8:06: 2e:ac:27:cd:c8:f2:81:96:8e:c7:d2:9a:aa:4c:ac: 4d:b1:6e:d2:48:56:6c:48:c5:10:18:d1:d7:8a:0e: 12:f4:72:7c:aa:a4:dc:c4:1d:50:b3:cc:1d:10:36: 14:fa:bf:2e:e8:b9:0f:a3:50:f6:43:d8:f2:35:7a: 58:48:65:9e:4a:be:cd:95:93:c4:af:83:1c:56:65: 24:c5:e0:84:9c:5b:9d:e8:e2:a1:ba:59:39:da:b0: 7b:76:7e:d1:c0:48:66:f0:e8:97:02:c2:87:43:2b: 49:85:71:6e:66:a6:f3:55:ca:5f:be:e5:23:69:91: d3:67:d4:45:f8:ca:29:96:c1:6c:ff:87:c4:c0:3b: 9f:c9:8e:68:bd:33:ac:1d:70:6d:16:9c:db:bd:ac: 91:6b:41:ea:70:89:1c:fb:22:6c:c0:9f:3a:4d:d8: c1:50:96:0a:f6:f7:06:5c:a6:3b:a8:bd:f8:71:d6: c9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D6:54:4C:9C:F2:76:B2:09:30:CC:C2:EC:F6:D7:79:36:4E:81:F0 X509v3 Authority Key Identifier: keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:89:47:8c:8a:34:f8:c5:d6:f3:7b:54:33:84:67:9b:05:8f: 6e:33:c0:2b:a9:fd:dd:97:ba:15:22:ff:d1:64:0e:60:ff:87: 98:be:94:7a:9e:be:e0:d9:5e:ee:da:2b:33:40:72:ba:ef:2c: 60:98:a1:19:cf:bc:e1:97:11:9f:1d:bc:37:ae:dd:bc:02:21: 1a:39:46:bb:d0:c4:89:4d:47:cb:54:4b:94:9c:5c:d9:cf:64: 63:eb:ab:b6:f2:7b:ec:23:89:5e:b2:2b:0b:ac:d3:a5:d1:88: 46:81:3d:e2:07:d0:bd:b4:55:d3:ee:58:ca:25:92:b7:e3:0b: 5a:ce:d9:8e:77:12:78:f4:a0:cf:0c:52:48:1d:63:cc:a5:53: f8:52:73:ea:03:dc:19:fc:81:6c:ec:60:36:71:54:73:bf:2a: d3:34:26:8c:cd:44:5e:26:7f:b8:41:97:78:c0:9c:e0:67:17: 76:c3:06:44:55:5f:45:58:f9:00:74:2b:27:7b:e6:ee:a8:bf: d9:4a:08:26:6c:89:6f:19:9e:1d:8d:2f:72:16:df:9b:33:89: 52:09:36:bc:e2:f8:4e:c2:90:02:1b:85:27:43:7d:2c:bb:74: 91:8b:cc:d5:c9:82:3b:b5:96:98:20:13:83:82:63:1f:c1:6f: ba:32:19:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNc8hCfldCzq35ztVnkKYgNxTFIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QxMTk0NDNBMjY4OUJBNEZDNjE2QkNENjkyOUU2MzZC NTAzMkZDMDAeFw0yNTA4MDUyMDI1NDBaFw0yNTA4MDYyMjMwNDBaMDMxMTAvBgNV BAMTKDQ1RDY1NDRDOUNGMjc2QjIwOTMwQ0NDMkVDRjZENzc5MzY0RTgxRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0k22TcVyrnh1x4pxM9qd+qcp3 LLcPn/AMVmEFh25CilMsaz2cWsOvjZKDI6D7YIEs1Ac+0KxDBrdTGwkucuNhQRVW F58w2u7IBi6sJ83I8oGWjsfSmqpMrE2xbtJIVmxIxRAY0deKDhL0cnyqpNzEHVCz zB0QNhT6vy7ouQ+jUPZD2PI1elhIZZ5Kvs2Vk8SvgxxWZSTF4IScW53o4qG6WTna sHt2ftHASGbw6JcCwodDK0mFcW5mpvNVyl++5SNpkdNn1EX4yimWwWz/h8TAO5/J jmi9M6wdcG0WnNu9rJFrQepwiRz7ImzAnzpN2MFQlgr29wZcpjuovfhx1smpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURdZUTJzydrIJMMzC7PbXeTZOgfAwHwYDVR0j BBgwFoAUzRGUQ6Jom6T8YWvNaSnmNrUDL8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDNacUVNekM5cG0yRmhWNlpxMlhyTnpKMUJ1QmY1TkM4Rmo0WDZLQkdW RkUvMS9DRDExOTQ0M0EyNjg5QkE0RkM2MTZCQ0Q2OTI5RTYzNkI1MDMyRkMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMTE5NDQzQTI2ODlCQTRG QzYxNkJDRDY5MjlFNjM2QjUwMzJGQzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDNacUVNekM5cG0yRmhWNlpxMlhyTnpKMUJ1QmY1TkM4Rmo0WDZLQkdWRkUvMS9D RDExOTQ0M0EyNjg5QkE0RkM2MTZCQ0Q2OTI5RTYzNkI1MDMyRkMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApolHjIo0+MXW83tUM4RnmwWPbjPAK6n93Ze6FSL/0WQOYP+HmL6Uep6+4Nle 7torM0Byuu8sYJihGc+84ZcRnx28N67dvAIhGjlGu9DEiU1Hy1RLlJxc2c9kY+ur tvJ77COJXrIrC6zTpdGIRoE94gfQvbRV0+5YyiWSt+MLWs7ZjncSePSgzwxSSB1j zKVT+FJz6gPcGfyBbOxgNnFUc78q0zQmjM1EXiZ/uEGXeMCc4GcXdsMGRFVfRVj5 AHQrJ3vm7qi/2UoIJmyJbxmeHY0vchbfmzOJUgk2vOL4TsKQAhuFJ0N9LLt0kYvM 1cmCO7WWmCATg4JjH8FvujIZig== -----END CERTIFICATE-----Generated at Wed Aug 6 09:43:31 2025 by rpki-client