$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft File: 250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft (raw, json) Hash identifier: hVLRakU7BdV3uXhiLnnRLAYWObuwIagvQdNlLfjrCgg= Subject key identifier: 99:FC:1B:E7:8C:70:CC:7B:EB:03:CC:3D:95:B8:CB:CD:D3:36:27:59 Authority key identifier: 25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D Certificate issuer: /CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D Certificate serial: 4307D83820791F62DFE367118CEC4D17DFD0FD76 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer Subject info access: rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft Manifest number: 0289 Signing time: Tue 05 Aug 2025 14:28:51 +0000 Manifest this update: Tue 05 Aug 2025 14:23:50 +0000 Manifest next update: Wed 06 Aug 2025 14:46:50 +0000 Files and hashes: 1: 3139312e3234322e3139362e302f32332d3233203d3e20323633313433.roa (hash: /odd+Ifzze3NEC/rWSCGt7sN+x7Rpz4jrkNYIPyVaU8=) 2: 3139312e3234322e3139382e302f32332d3233203d3e20323633313433.roa (hash: bwRfzRBEN6OCYcWYenNjpcybKLc7h5APupWGkAS6aoA=) 3: 323830343a313736343a3a2f33322d3332203d3e20323633313433.roa (hash: bF23rWLfiATcolX7e+WvWEMbkjG+FJddzU4ENbylUas=) 4: 250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl (hash: IiAEyVOUNuUdD+DIxG5ribXJTQJ2YHfrUb9JwA5sbhA=) 5: 3139312e3234322e3139382e302f32342d3234203d3e20323633313433.roa (hash: SLdN7miKDj6zZuAzWis/kDxA3bVq8JmQYeBgk9u4V2o=) 6: 3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa (hash: +EL9N8Kkyxh/h6Yu6nkKSNBOQxAiEN0kM3VLnapBiMk=) 7: 3139312e3234322e3139362e302f32342d3234203d3e20323633313433.roa (hash: +FZe3/GZkagt33qvR402xt+sHt5bbMI94in3uZcKxU0=) 8: 3139312e3234322e3139362e302f32322d3232203d3e20323633313433.roa (hash: O4umjiYVU7j4EsoyzkJkKmVp7SWzfxGg5KPRjQx133g=) 9: 3139312e3234322e3139392e302f32342d3234203d3e20323633313433.roa (hash: qEUNQRMsYNR1m04gVAHTSFhJbxEs97UqSXwSoKGJ62o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:07:d8:38:20:79:1f:62:df:e3:67:11:8c:ec:4d:17:df:d0:fd:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D Validity Not Before: Aug 5 14:23:50 2025 GMT Not After : Aug 6 14:46:50 2025 GMT Subject: CN=99FC1BE78C70CC7BEB03CC3D95B8CBCDD3362759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:df:32:a2:f4:cc:d8:06:5f:af:2a:f6:78:77: a6:15:43:8f:ae:3f:5b:2d:07:59:c7:d5:3b:d8:8d: e4:41:91:32:87:5b:23:71:e9:a4:68:e0:c0:d7:41: 13:77:f9:e4:58:35:34:3d:6a:a0:11:28:9a:3d:a1: 91:4a:a0:3a:e9:6f:67:77:c8:91:c2:c2:9a:d0:7f: 9f:56:56:42:28:8c:dd:f9:cc:38:7f:86:6a:d0:55: 25:38:46:db:50:a6:ce:cc:2c:76:c7:99:e4:9b:20: ee:01:1a:a2:3d:fe:c6:88:14:a4:ed:f9:3f:35:76: fe:13:76:16:c9:b8:5b:79:84:5b:fd:e6:66:cc:be: b8:6b:b1:6e:73:99:df:7e:c3:a7:3b:31:cc:19:8b: 00:4d:fe:88:94:70:cb:6c:85:c4:bb:bf:ab:60:14: 36:84:af:5b:05:f4:4c:9d:b3:7c:49:9a:a2:1e:45: e0:35:a1:30:37:41:e3:c3:1f:cd:47:51:e7:f5:af: 68:06:08:1b:40:0e:e7:08:b3:66:a0:ac:f1:e3:90: dd:84:5d:bd:76:b3:63:7f:02:83:c5:e4:db:ef:e2: 81:43:20:de:78:d7:2e:24:6c:54:77:e0:e0:86:6b: 4e:37:1c:89:08:f3:fc:f8:c3:1d:3b:b0:05:4e:57: ba:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FC:1B:E7:8C:70:CC:7B:EB:03:CC:3D:95:B8:CB:CD:D3:36:27:59 X509v3 Authority Key Identifier: keyid:25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:aa:cf:63:33:20:f1:25:12:c2:7f:3f:93:cd:91:b8:e1:55: 3e:df:6d:46:23:67:f6:29:52:d8:61:44:df:57:56:83:26:de: d1:a0:12:cc:f5:fd:9a:64:15:9e:1d:f2:cf:d8:7b:c3:bb:1e: f7:f2:c7:14:03:73:28:b8:87:15:84:0c:fa:d2:c8:35:f6:09: f8:e3:c1:af:54:64:cd:86:08:62:ee:3a:f8:d0:d6:09:ed:60: 9d:3c:12:4b:de:a0:00:14:73:30:da:f9:bf:d7:36:3e:29:46: c0:76:d3:ec:78:36:e4:09:7e:6e:9c:b7:48:9a:0b:ea:cd:cf: c1:01:20:56:c6:ba:1f:2f:05:8e:af:28:1d:ba:aa:6e:2b:25: 5e:51:bd:23:92:a9:a4:25:14:70:74:e4:ec:92:cd:4f:de:97: 30:08:b9:64:3d:57:0c:fb:24:87:95:f4:14:33:9d:ec:aa:a7: d5:06:f8:f4:88:5c:f2:a0:a3:0e:e5:7a:1b:07:af:83:c5:89: 9f:7a:89:17:e4:64:7b:6b:6d:d3:8a:84:0d:fb:96:b5:d9:25: ac:ef:67:0f:0f:0f:c5:3b:2e:b3:dc:fd:53:69:ac:22:17:cf: 92:c2:51:0c:20:c6:14:31:67:12:85:d3:6c:77:78:89:ce:d1: 92:fb:bf:8e -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUQwfYOCB5H2Lf42cRjOxNF9/Q/XYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUwQjBBRDY1QTRCNzhDNjRERDRENTY4QTI1RDJDMkJC MjdDRjg2RDAeFw0yNTA4MDUxNDIzNTBaFw0yNTA4MDYxNDQ2NTBaMDMxMTAvBgNV BAMTKDk5RkMxQkU3OEM3MENDN0JFQjAzQ0MzRDk1QjhDQkNERDMzNjI3NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD63zKi9MzYBl+vKvZ4d6YVQ4+u P1stB1nH1TvYjeRBkTKHWyNx6aRo4MDXQRN3+eRYNTQ9aqARKJo9oZFKoDrpb2d3 yJHCwprQf59WVkIojN35zDh/hmrQVSU4RttQps7MLHbHmeSbIO4BGqI9/saIFKTt +T81dv4TdhbJuFt5hFv95mbMvrhrsW5zmd9+w6c7McwZiwBN/oiUcMtshcS7v6tg FDaEr1sF9Eyds3xJmqIeReA1oTA3QePDH81HUef1r2gGCBtADucIs2agrPHjkN2E Xb12s2N/AoPF5Nvv4oFDIN541y4kbFR34OCGa043HIkI8/z4wx07sAVOV7pXAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUmfwb54xwzHvrA8w9lbjLzdM2J1kwHwYDVR0j BBgwFoAUJQsK1lpLeMZN1NVool0sK7J8+G0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby94cFF1Z1U2WVdXWFN3N2JINDZRbnhvcTVIaTlQSHJIMWhBWUdVMmVyalJ3 LzEvMjUwQjBBRDY1QTRCNzhDNjRERDRENTY4QTI1RDJDMkJCMjdDRjg2RC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNTBCMEFENjVBNEI3OEM2NERE NEQ1NjhBMjVEMkMyQkIyN0NGODZELmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3hw UXVnVTZZV1dYU3c3Ykg0NlFueG9xNUhpOVBIckgxaEFZR1UyZXJqUncvMS8yNTBC MEFENjVBNEI3OEM2NERENEQ1NjhBMjVEMkMyQkIyN0NGODZELm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA DqrPYzMg8SUSwn8/k82RuOFVPt9tRiNn9ilS2GFE31dWgybe0aASzPX9mmQVnh3y z9h7w7se9/LHFANzKLiHFYQM+tLINfYJ+OPBr1RkzYYIYu46+NDWCe1gnTwSS96g ABRzMNr5v9c2PilGwHbT7Hg25Al+bpy3SJoL6s3PwQEgVsa6Hy8Fjq8oHbqqbisl XlG9I5KppCUUcHTk7JLNT96XMAi5ZD1XDPskh5X0FDOd7Kqn1Qb49Ihc8qCjDuV6 Gwevg8WJn3qJF+Rke2tt04qEDfuWtdklrO9nDw8PxTsus9z9U2msIhfPksJRDCDG FDFnEoXTbHd4ic7Rkvu/jg== -----END CERTIFICATE-----Generated at Tue Aug 5 22:56:00 2025 by rpki-client