$ rpki-client -vvf rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft File: BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft (raw, json) Hash identifier: wuR6JK/cWV75D/B7jC7TRpGtINGt54YpiUuPnjs+13A= Subject key identifier: 88:5B:36:08:9B:95:3B:C5:DA:A6:8D:27:B7:4A:66:F5:AD:AB:05:EC Authority key identifier: BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4 Certificate issuer: /CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4 Certificate serial: 2E2FC9EB353B857464903F761A1E8C4ABBEF2922 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer Subject info access: rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft Manifest number: 0260 Signing time: Fri 25 Jul 2025 08:53:17 +0000 Manifest this update: Fri 25 Jul 2025 08:48:17 +0000 Manifest next update: Sat 26 Jul 2025 12:31:17 +0000 Files and hashes: 1: 3138392e38342e3130362e302f32332d3234203d3e20323632373334.roa (hash: viidz0SzCgYo+ia6nn8hDFdjIUuWSnTz3zW/AEiDL+c=) 2: 3138362e3139352e302e302f32302d3234203d3e20323632373334.roa (hash: DhRxrtfQjT4NB8Bt8sfdP4LqhknKF3f3iI3zG7ssbkg=) 3: BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl (hash: V7VK/6uqkwbvY9qwNw5XgBgvNf49H1J+gmPvcs9HKaM=) 4: 323830343a353738303a3a2f33322d3438203d3e20323632373334.roa (hash: 6PmjmTg0qFj+Vpl+t8ICe23yuGtZx6ZXcO49cR71Yp8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Jul 2025 12:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:2f:c9:eb:35:3b:85:74:64:90:3f:76:1a:1e:8c:4a:bb:ef:29:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4 Validity Not Before: Jul 25 08:48:17 2025 GMT Not After : Jul 26 12:31:17 2025 GMT Subject: CN=885B36089B953BC5DAA68D27B74A66F5ADAB05EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:98:a1:ea:88:02:d3:4a:3b:d6:e5:98:44:6f: 9d:c6:02:7f:91:60:ad:41:37:6c:91:0e:9d:6f:97: c8:6a:79:f4:46:a0:08:a9:e3:1c:30:c0:b2:57:a8: 07:76:04:57:2a:74:08:22:2d:08:c8:15:14:0e:6c: 2c:1b:3f:30:dd:2e:f0:21:eb:e5:82:10:20:98:d8: 2a:f2:be:7a:ac:9f:4b:e0:bf:65:07:01:6b:7a:83: fd:af:c6:5f:3b:8f:a3:c7:0b:80:30:5f:97:8c:a6: 1c:f6:9a:45:00:30:c4:b6:0c:9b:b4:d8:60:18:d3: a2:6b:5f:36:e4:a2:ec:28:41:3a:c2:6a:f6:e3:e7: 2b:83:6e:46:81:8e:b6:49:69:e1:ac:71:79:f6:2b: ef:3c:60:76:a2:52:58:d2:6d:10:b2:6c:2e:e8:9c: 5f:9c:c8:c3:58:56:fc:2b:a8:32:d1:a9:2e:2f:89: ed:d9:fb:14:bb:98:43:6a:2f:c2:02:0b:94:04:c0: e2:d7:54:28:c7:7c:b4:a8:d9:f7:13:87:b9:48:09: 39:1b:ab:31:c6:2d:e5:37:f1:4f:8e:f9:27:ec:b6: 50:d3:8e:c4:57:5c:0e:48:24:0b:5d:92:6c:42:d7: 60:82:c5:ca:b9:f7:a8:f7:33:8e:3d:9a:39:27:a3: ba:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5B:36:08:9B:95:3B:C5:DA:A6:8D:27:B7:4A:66:F5:AD:AB:05:EC X509v3 Authority Key Identifier: keyid:BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:05:ae:ca:3c:bb:8d:ef:57:b4:f8:28:94:ce:c1:dc:47:54: 83:8c:cc:1a:15:cb:b6:5e:2f:35:5e:65:53:e1:01:96:06:93: af:5e:5e:2e:ca:a4:c1:cd:13:b9:5e:0e:dd:ec:7a:f6:1b:12: ec:4b:2c:41:9c:5f:a9:df:9b:ec:45:1e:44:26:e5:b9:3c:22: 2d:87:13:41:11:26:a5:92:39:37:6c:23:aa:b5:5e:e0:23:5c: 7f:6a:68:07:84:02:2b:5c:4b:dd:b8:30:a1:c5:22:27:c1:b4: 67:7f:33:a9:5f:c8:e2:0d:aa:d6:14:ad:84:5a:f6:11:f8:d9: f3:97:49:0c:0a:25:c2:81:aa:8f:e8:4c:22:6d:db:71:57:c5: 3c:b5:21:76:a8:e2:69:6c:1b:69:0a:4e:60:b5:80:93:35:8c: c5:1a:e1:7a:f7:30:a1:01:93:05:47:8b:78:e0:6f:88:8a:9e: 63:57:40:f5:bb:62:9a:b7:20:dd:f7:a0:47:cf:c2:f4:68:4a: aa:46:0e:40:1b:72:cf:78:a9:d6:8d:23:f5:20:0e:de:11:66: 32:c3:69:8d:48:ab:a7:59:c0:cb:54:f6:03:4e:03:b9:3f:71: 5e:2b:c8:92:22:2b:48:f2:b1:29:bd:03:b7:e5:3c:11:08:37: 81:83:8a:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULi/J6zU7hXRkkD92Gh6MSrvvKSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRFQTNFMTRDMzJGMjlBQzgyRURBMTVCMkQ0RUQxQUQy NTA0RkZBNDAeFw0yNTA3MjUwODQ4MTdaFw0yNTA3MjYxMjMxMTdaMDMxMTAvBgNV BAMTKDg4NUIzNjA4OUI5NTNCQzVEQUE2OEQyN0I3NEE2NkY1QURBQjA1RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mKHqiALTSjvW5ZhEb53GAn+R YK1BN2yRDp1vl8hqefRGoAip4xwwwLJXqAd2BFcqdAgiLQjIFRQObCwbPzDdLvAh 6+WCECCY2Cryvnqsn0vgv2UHAWt6g/2vxl87j6PHC4AwX5eMphz2mkUAMMS2DJu0 2GAY06JrXzbkouwoQTrCavbj5yuDbkaBjrZJaeGscXn2K+88YHaiUljSbRCybC7o nF+cyMNYVvwrqDLRqS4vie3Z+xS7mENqL8ICC5QEwOLXVCjHfLSo2fcTh7lICTkb qzHGLeU38U+O+SfstlDTjsRXXA5IJAtdkmxC12CCxcq596j3M449mjkno7rJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiFs2CJuVO8Xapo0nt0pm9a2rBewwHwYDVR0j BBgwFoAUveo+FMMvKayC7aFbLU7RrSUE/6QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWF4ejVoM2lDcXRDc04yRXU4c2pMR0RLRHdYOWhSaFEyc3RNMk1OMkV1 UUEvMC9CREVBM0UxNEMzMkYyOUFDODJFREExNUIyRDRFRDFBRDI1MDRGRkE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERUEzRTE0QzMyRjI5QUM4 MkVEQTE1QjJENEVEMUFEMjUwNEZGQTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWF4ejVoM2lDcXRDc04yRXU4c2pMR0RLRHdYOWhSaFEyc3RNMk1OMkV1UUEvMC9C REVBM0UxNEMzMkYyOUFDODJFREExNUIyRDRFRDFBRDI1MDRGRkE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwwWuyjy7je9XtPgolM7B3EdUg4zMGhXLtl4vNV5lU+EBlgaTr15eLsqkwc0T uV4O3ex69hsS7EssQZxfqd+b7EUeRCbluTwiLYcTQREmpZI5N2wjqrVe4CNcf2po B4QCK1xL3bgwocUiJ8G0Z38zqV/I4g2q1hSthFr2EfjZ85dJDAolwoGqj+hMIm3b cVfFPLUhdqjiaWwbaQpOYLWAkzWMxRrhevcwoQGTBUeLeOBviIqeY1dA9btimrcg 3fegR8/C9GhKqkYOQBtyz3ip1o0j9SAO3hFmMsNpjUirp1nAy1T2A04DuT9xXivI kiIrSPKxKb0Dt+U8EQg3gYOKHw== -----END CERTIFICATE-----Generated at Fri Jul 25 12:46:24 2025 by rpki-client