$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft File: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft (raw, json) Hash identifier: DBWFePipNJvxQCEZG3hyHwqRlkZ+sZF3hGaEvtUa5y4= Subject key identifier: 2E:4E:7E:9D:D6:D5:C1:C0:62:87:E4:25:9B:D3:F3:93:73:D2:32:A2 Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 Certificate issuer: /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Certificate serial: 3B96D0CC6C50EDB6B315D6832934804938A4DAD7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft Manifest number: 0246 Signing time: Fri 25 Jul 2025 08:18:31 +0000 Manifest this update: Fri 25 Jul 2025 08:13:31 +0000 Manifest next update: Sat 26 Jul 2025 10:56:31 +0000 Files and hashes: 1: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl (hash: JCIQfa3qSufkGao2hEbmVd+TFy0RoIhwneBqtP2rmvE=) 2: 3136382e39302e34382e302f32322d3332203d3e20323635323634.roa (hash: Bv6Lyj5+VhdPqvZ/TGH9M1sdk0ISaNwfb7BbI7c/FPE=) 3: 323830343a326432383a3a2f33322d313238203d3e20323635323634.roa (hash: 0xs1tTdh2Qke0fip6d1TEfj28igzF6NdDvyXj3IPtmI=) 4: 3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa (hash: WqEYa1LHKO/TdU02rXFXLwns464zC4VFuzHF7wOxsfA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Jul 2025 10:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:96:d0:cc:6c:50:ed:b6:b3:15:d6:83:29:34:80:49:38:a4:da:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Validity Not Before: Jul 25 08:13:31 2025 GMT Not After : Jul 26 10:56:31 2025 GMT Subject: CN=2E4E7E9DD6D5C1C06287E4259BD3F39373D232A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:67:d0:13:35:01:6f:72:38:75:3b:39:8b:f1: ea:ae:c0:76:8b:54:f2:c1:3f:1d:f3:60:4b:d2:d1: 73:41:cc:2d:ea:67:98:b2:af:99:ef:7d:33:fc:8f: 01:e1:3b:81:55:c4:81:dd:38:8a:c6:45:a7:27:25: 2e:95:d4:f4:3c:d2:fd:c4:16:aa:a1:2e:22:47:f4: 1f:fc:43:16:83:fc:fb:c4:79:3e:0c:b8:1f:de:a6: d3:49:88:a2:c4:bd:21:b4:63:d3:21:86:31:75:77: ac:8c:08:1f:0d:d3:c7:8c:f5:8c:50:d2:19:7f:79: 84:c2:95:fa:f8:0a:5c:bd:08:2a:4c:b8:d4:f1:3b: b1:8e:64:d4:fd:a7:4c:9f:7d:f4:ea:14:da:60:21: ec:8f:b3:b0:91:99:14:5b:59:96:b0:25:9f:95:7b: 88:60:fc:86:55:a1:cb:54:e6:62:fd:7e:26:f9:71: c3:76:3f:78:48:58:85:c4:90:61:4f:fe:77:86:d7: 0d:15:aa:b3:1c:8d:49:d3:0e:48:66:76:7c:48:43: cf:d6:ec:8d:b5:62:a3:bd:f6:91:19:bd:8a:0e:58: a1:42:8d:07:ee:3c:94:f0:70:2e:8d:7b:37:54:02: 15:e1:09:4c:c4:0f:71:ea:df:af:55:77:fa:60:85: 9f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4E:7E:9D:D6:D5:C1:C0:62:87:E4:25:9B:D3:F3:93:73:D2:32:A2 X509v3 Authority Key Identifier: keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:8f:52:2d:5a:af:62:cc:22:07:e0:9c:50:62:2b:5c:93:bb: 7c:dc:ec:b4:39:03:89:19:b8:a0:90:70:91:20:f5:e2:25:f1: 0b:bd:b7:1e:46:69:45:d1:7b:53:a3:93:92:ba:1d:d2:79:c0: 78:a6:08:3e:03:e0:db:18:3d:69:f7:72:f3:ee:cc:65:33:ff: c6:7a:15:28:16:1a:98:5a:56:71:20:5d:b8:95:a7:30:52:59: 7f:e9:64:5e:7d:06:12:02:4c:9a:2a:1c:88:62:20:cd:4f:3e: e7:68:70:eb:a2:e1:0a:1d:54:01:c9:67:92:d4:61:13:0b:f0: e1:d8:5f:2b:6c:10:90:19:90:2c:ac:9d:d4:f0:75:08:7c:41: ed:07:76:ea:48:79:05:fa:e1:4f:c9:ed:be:70:3d:a8:b8:28: d4:2f:17:c9:1d:c6:f3:49:81:b2:66:62:42:16:fc:cd:cf:77: be:ac:ca:5c:47:9e:e7:ff:8e:3b:14:6e:50:23:98:d0:0d:61: cb:6b:98:e3:4a:70:61:ac:86:a7:d5:6f:d0:be:bf:2a:db:7b: 3f:d2:f4:93:2d:c7:9f:2d:2b:d5:16:69:e0:e4:b6:e1:e0:ed: c1:63:7e:d2:5e:00:c8:5e:23:ed:9a:4c:8d:99:00:82:d3:ec: fc:16:dd:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO5bQzGxQ7bazFdaDKTSASTik2tcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzODM3RDdFQ0ExRkUxMTQ1RDBDRTE1RTBCRjg5NUVF MDZBMjdFMjAeFw0yNTA3MjUwODEzMzFaFw0yNTA3MjYxMDU2MzFaMDMxMTAvBgNV BAMTKDJFNEU3RTlERDZENUMxQzA2Mjg3RTQyNTlCRDNGMzkzNzNEMjMyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcZ9ATNQFvcjh1OzmL8equwHaL VPLBPx3zYEvS0XNBzC3qZ5iyr5nvfTP8jwHhO4FVxIHdOIrGRacnJS6V1PQ80v3E FqqhLiJH9B/8QxaD/PvEeT4MuB/eptNJiKLEvSG0Y9MhhjF1d6yMCB8N08eM9YxQ 0hl/eYTClfr4Cly9CCpMuNTxO7GOZNT9p0yfffTqFNpgIeyPs7CRmRRbWZawJZ+V e4hg/IZVoctU5mL9fib5ccN2P3hIWIXEkGFP/neG1w0VqrMcjUnTDkhmdnxIQ8/W 7I21YqO99pEZvYoOWKFCjQfuPJTwcC6NezdUAhXhCUzED3Hq369Vd/pghZ8ZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULk5+ndbVwcBih+Qlm9Pzk3PSMqIwHwYDVR0j BBgwFoAUZTg31+yh/hFF0M4V4L+JXuBqJ+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZl UFMvMC82NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MzgzN0Q3RUNBMUZFMTE0 NUQwQ0UxNUUwQkY4OTVFRTA2QTI3RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZlUFMvMC82 NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWY9SLVqvYswiB+CcUGIrXJO7fNzstDkDiRm4oJBwkSD14iXxC723HkZpRdF7 U6OTkrod0nnAeKYIPgPg2xg9afdy8+7MZTP/xnoVKBYamFpWcSBduJWnMFJZf+lk Xn0GEgJMmiociGIgzU8+52hw66LhCh1UAclnktRhEwvw4dhfK2wQkBmQLKyd1PB1 CHxB7Qd26kh5BfrhT8ntvnA9qLgo1C8XyR3G80mBsmZiQhb8zc93vqzKXEee5/+O OxRuUCOY0A1hy2uY40pwYayGp9Vv0L6/Ktt7P9L0ky3Hny0r1RZp4OS24eDtwWN+ 0l4AyF4j7ZpMjZkAgtPs/BbdLQ== -----END CERTIFICATE-----Generated at Fri Jul 25 12:53:01 2025 by rpki-client