$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft File: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft (raw, json) Hash identifier: JvEoo1fRFu36SvVUXGUZgrv000H79er3C9znVXQr4s0= Subject key identifier: 59:5B:8B:D9:2B:81:88:5F:B1:C0:C7:6D:03:13:F5:CE:A6:E8:80:17 Authority key identifier: 9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D Certificate issuer: /CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D Certificate serial: 04FB0AD00136F481BC5A8971948C76AD5C75B43B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer Subject info access: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft Manifest number: 0125 Signing time: Fri 25 Jul 2025 17:13:50 +0000 Manifest this update: Fri 25 Jul 2025 17:08:50 +0000 Manifest next update: Sat 26 Jul 2025 20:12:50 +0000 Files and hashes: 1: 34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa (hash: zwE7+BkACCSkaLuprz1tnvVDwiMXOKL8M0S4eDl2SuI=) 2: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl (hash: pZYiieV7VrZ3u4Mioa/QeqIVLaRRDsHz9nvydvlLh08=) 3: 323830343a363861383a3a2f33322d313238203d3e20323639373037.roa (hash: z8KvPm2mQOim4DJBvpBUShLU77s/9n6vTftmZoh8lWE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Jul 2025 20:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:fb:0a:d0:01:36:f4:81:bc:5a:89:71:94:8c:76:ad:5c:75:b4:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D Validity Not Before: Jul 25 17:08:50 2025 GMT Not After : Jul 26 20:12:50 2025 GMT Subject: CN=595B8BD92B81885FB1C0C76D0313F5CEA6E88017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:34:1b:ec:5a:1d:7e:45:ca:f3:d1:a6:1f:c2: f8:38:66:b2:04:4f:b3:55:33:b5:c9:82:92:ee:73: 8d:9f:1d:45:69:17:e4:a0:b1:67:bb:07:c7:fa:59: e8:c5:f4:a4:b9:82:5f:5c:17:ce:e3:9d:54:3e:4d: fe:b3:8a:78:f5:c8:53:c0:1a:d7:3c:00:71:01:70: ba:68:21:9a:61:a4:66:22:74:cf:f6:d6:de:b4:90: 22:f5:e7:39:69:51:3d:6f:ef:2e:b2:6e:ea:61:fc: 84:4b:d0:31:fe:6f:63:69:b3:5f:e1:f2:b0:74:17: a7:ea:78:4c:1a:8c:62:b9:5f:c4:c4:a1:1a:64:0f: 02:f3:f4:ef:8b:7e:d7:c7:fd:c1:6d:ca:9b:cc:88: 81:17:fb:e7:5a:fe:d3:af:6b:70:c2:7a:ca:54:11: 39:63:1a:00:a4:1b:6f:2f:c9:f0:a2:4b:41:3b:ac: 1a:72:a7:0a:38:05:91:fc:1c:da:c7:35:77:26:ff: 90:fb:c1:19:2f:c2:3b:87:70:f5:2c:c6:ff:21:f0: 31:fa:91:c1:2f:c6:fc:f0:6b:ff:6f:4d:63:3d:37: db:11:9d:ee:cf:7c:b0:c3:5f:f2:d1:d5:9b:0f:85: 32:85:72:25:a0:2c:1f:c7:46:4a:5d:5a:59:a6:ea: d1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5B:8B:D9:2B:81:88:5F:B1:C0:C7:6D:03:13:F5:CE:A6:E8:80:17 X509v3 Authority Key Identifier: keyid:9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:88:bf:09:9b:b1:87:5f:a8:c0:7a:ab:d7:46:81:cf:5b:76: 8b:85:9b:fd:f5:36:60:db:24:d7:ba:27:b6:a8:2b:50:ee:33: 65:ae:17:b2:e5:11:35:d7:e7:15:a2:4b:b2:51:3a:c4:7c:6e: 4f:fe:ad:9c:0d:42:94:24:5e:c0:0f:cb:2a:84:8e:72:9f:00: f9:2f:a3:9d:c3:82:1d:06:82:a8:28:f5:c7:ce:15:92:c0:c4: c4:d6:01:cc:b8:0b:7a:03:fc:19:dc:1d:b6:fb:7e:fc:36:b4: b0:31:76:f1:b2:bf:f9:dd:67:c4:d0:92:b7:40:42:4e:f7:40: 35:43:ec:5c:2a:66:f8:39:bc:3b:6f:af:f4:11:fb:24:b5:b9: 74:dc:20:bc:4f:d3:95:4c:7b:5e:e4:8f:c5:88:f3:d8:6f:6d: 58:16:c1:20:7c:55:1b:c0:7b:43:14:3d:75:7b:32:44:fc:e3: 0b:9d:c9:b8:28:4c:ce:2a:b0:59:61:72:59:4a:85:f4:08:82: 5c:d4:95:1c:18:fb:9a:ba:76:a1:25:3e:b6:a8:de:bc:14:b5: 34:b5:41:1a:2a:d9:52:2f:3d:92:d9:32:4f:83:d0:41:e5:2d: c1:27:bb:1c:c2:07:8c:55:d3:52:60:09:5e:cd:a1:46:8f:cd: fa:04:aa:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBPsK0AE29IG8WolxlIx2rVx1tDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ0Rjk5QzUwQkNFNjIyQzI1RjZDRjQwODNCM0NCRTM2 NEM4QkExRDAeFw0yNTA3MjUxNzA4NTBaFw0yNTA3MjYyMDEyNTBaMDMxMTAvBgNV BAMTKDU5NUI4QkQ5MkI4MTg4NUZCMUMwQzc2RDAzMTNGNUNFQTZFODgwMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDONBvsWh1+Rcrz0aYfwvg4ZrIE T7NVM7XJgpLuc42fHUVpF+SgsWe7B8f6WejF9KS5gl9cF87jnVQ+Tf6zinj1yFPA Gtc8AHEBcLpoIZphpGYidM/21t60kCL15zlpUT1v7y6ybuph/IRL0DH+b2Nps1/h 8rB0F6fqeEwajGK5X8TEoRpkDwLz9O+LftfH/cFtypvMiIEX++da/tOva3DCespU ETljGgCkG28vyfCiS0E7rBpypwo4BZH8HNrHNXcm/5D7wRkvwjuHcPUsxv8h8DH6 kcEvxvzwa/9vTWM9N9sRne7PfLDDX/LR1ZsPhTKFciWgLB/HRkpdWlmm6tFBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWVuL2SuBiF+xwMdtAxP1zqbogBcwHwYDVR0j BBgwFoAUnU+ZxQvOYiwl9s9Ag7PL42TIuh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmFQQ25nTGtjTG9ja3JBTnNLWHV1dFVvTnJkNE5vNURWeDYzQmZoQ0w2 TUcvMC85RDRGOTlDNTBCQ0U2MjJDMjVGNkNGNDA4M0IzQ0JFMzY0QzhCQTFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlENEY5OUM1MEJDRTYyMkMy NUY2Q0Y0MDgzQjNDQkUzNjRDOEJBMUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmFQQ25nTGtjTG9ja3JBTnNLWHV1dFVvTnJkNE5vNURWeDYzQmZoQ0w2TUcvMC85 RDRGOTlDNTBCQ0U2MjJDMjVGNkNGNDA4M0IzQ0JFMzY0QzhCQTFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmoi/CZuxh1+owHqr10aBz1t2i4Wb/fU2YNsk17ontqgrUO4zZa4XsuURNdfn FaJLslE6xHxuT/6tnA1ClCRewA/LKoSOcp8A+S+jncOCHQaCqCj1x84VksDExNYB zLgLegP8Gdwdtvt+/Da0sDF28bK/+d1nxNCSt0BCTvdANUPsXCpm+Dm8O2+v9BH7 JLW5dNwgvE/TlUx7XuSPxYjz2G9tWBbBIHxVG8B7QxQ9dXsyRPzjC53JuChMziqw WWFyWUqF9AiCXNSVHBj7mrp2oSU+tqjevBS1NLVBGirZUi89ktkyT4PQQeUtwSe7 HMIHjFXTUmAJXs2hRo/N+gSq8w== -----END CERTIFICATE-----Generated at Sat Jul 26 11:39:41 2025 by rpki-client