$ rpki-client -vvf rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft File: A1E6749C09E9E32D11C15678D45C1B936D525291.mft (raw, json) Hash identifier: 2bxGMk4kIeKrbRMlV8ZlN/mIaLnMH//Bi2+ytZ7wsk8= Subject key identifier: 25:77:8D:5B:38:AA:A0:AA:08:48:F6:12:A4:2D:C3:8D:53:38:D5:57 Authority key identifier: A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91 Certificate issuer: /CN=A1E6749C09E9E32D11C15678D45C1B936D525291 Certificate serial: 40110A2449A33ED3815B4AC0DE8AEEE9856E059B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft Manifest number: 0257 Signing time: Fri 25 Jul 2025 07:12:53 +0000 Manifest this update: Fri 25 Jul 2025 07:07:53 +0000 Manifest next update: Sat 26 Jul 2025 09:56:53 +0000 Files and hashes: 1: 34352e3138302e3235322e302f32322d3234203d3e20323633323530.roa (hash: ORMMmfGrpHZXNdiWY4NkF0L84UkSb+i4s3EBcHiCyW8=) 2: A1E6749C09E9E32D11C15678D45C1B936D525291.crl (hash: M/4EG26vkbqY4FzqvMn7xj63Xvd5XGkSgAAmwmqWv7o=) 3: 323830343a313763343a3a2f33322d3438203d3e20323633323530.roa (hash: CYHN9rK1skgLKugPUzgZGszwHwGA3WFLBGl49tYzvoY=) 4: 3137372e3233342e3136302e302f31392d3234203d3e20323633323530.roa (hash: wlPnqD7qa81i/u0GABiCUaJGTeP2DvD2cJaBWTo4WcI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Jul 2025 09:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:11:0a:24:49:a3:3e:d3:81:5b:4a:c0:de:8a:ee:e9:85:6e:05:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1E6749C09E9E32D11C15678D45C1B936D525291 Validity Not Before: Jul 25 07:07:53 2025 GMT Not After : Jul 26 09:56:53 2025 GMT Subject: CN=25778D5B38AAA0AA0848F612A42DC38D5338D557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f8:77:96:f3:3a:b7:ea:fc:c2:aa:7b:32:72: b1:53:2c:b5:2b:75:6c:ae:08:b0:b8:a1:16:d8:f2: 05:28:d9:ec:01:53:c1:90:e4:8a:3f:ff:6a:f3:ca: 91:0b:91:7e:dc:c4:e1:fd:4b:86:f1:ea:84:36:f2: a8:7c:b5:03:9e:7c:31:5f:43:3e:bb:f3:aa:de:a3: 5d:a2:07:b3:59:a0:2d:a7:bd:5a:22:d4:9f:8e:62: 9f:44:63:5d:bf:8d:77:71:35:d5:cc:f4:47:63:4b: 90:e3:01:19:fc:1c:76:5c:73:71:e6:e7:a1:52:57: 81:0e:8b:d6:9e:77:40:9f:a2:fd:f4:8a:32:b6:5d: f7:b0:a7:b4:44:d2:62:68:c6:6f:7b:c8:e5:72:b0: 6f:19:a1:d2:61:fe:61:99:7c:22:8c:5e:b5:5c:a3: bd:24:a8:47:c8:07:a8:a3:f5:07:d3:27:04:3d:5f: ed:77:92:f1:65:98:6e:52:61:6d:ec:dd:ca:bb:65: 51:fc:3c:3c:29:b3:0f:77:70:e8:45:36:39:67:ad: 88:62:4a:d5:47:25:83:c7:38:4d:b4:7d:0a:85:31: 39:3e:93:15:8b:af:63:91:03:2b:d3:ba:8a:e4:ee: 29:60:31:c8:d9:32:19:a8:b7:e0:42:67:80:84:85: a1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:77:8D:5B:38:AA:A0:AA:08:48:F6:12:A4:2D:C3:8D:53:38:D5:57 X509v3 Authority Key Identifier: keyid:A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:78:66:5d:e1:0c:2d:ee:3b:fa:82:07:0d:49:8d:c3:8e:46: 44:9f:7b:14:be:03:69:e5:52:02:c3:1e:a3:61:14:ce:28:d4: 33:50:ec:f3:e7:62:97:de:b1:e7:ce:a2:f4:8d:a3:c3:8c:b5: 94:53:73:47:59:93:94:4a:89:49:99:a2:6b:14:75:50:a7:89: 6c:0c:a9:7f:c8:2d:78:9f:6b:c6:12:71:6f:10:ff:4b:33:a1: 96:3b:35:c3:12:a8:4f:6e:89:d0:25:f2:ec:d0:f7:e4:4d:31: 75:2c:65:33:af:4c:e0:29:6f:d4:9b:5e:85:11:a4:6b:67:2b: 9f:ec:74:6d:65:8e:5a:54:25:68:55:f8:1e:dd:5a:c1:23:0d: 87:e0:4d:dd:75:e7:e5:dd:1c:7a:b3:a0:bd:8b:9f:ad:c3:db: 9d:94:62:f2:ce:4a:14:23:73:d7:ca:3a:ff:c8:f2:bd:0a:b0: 31:84:2a:78:5f:51:35:29:7e:66:67:dc:cb:35:3e:83:55:92: 86:a8:a0:6c:91:26:fa:a0:1d:8f:fa:64:a8:06:b8:e7:60:60: d6:c4:8c:4c:03:74:d5:a6:2d:d0:c9:c4:32:bd:c1:b2:b7:59: 66:c4:67:c8:53:86:03:bf:27:a6:6f:12:37:ad:9d:d6:23:90: 80:c8:b9:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQBEKJEmjPtOBW0rA3oru6YVuBZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFNjc0OUMwOUU5RTMyRDExQzE1Njc4RDQ1QzFCOTM2 RDUyNTI5MTAeFw0yNTA3MjUwNzA3NTNaFw0yNTA3MjYwOTU2NTNaMDMxMTAvBgNV BAMTKDI1Nzc4RDVCMzhBQUEwQUEwODQ4RjYxMkE0MkRDMzhENTMzOEQ1NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd+HeW8zq36vzCqnsycrFTLLUr dWyuCLC4oRbY8gUo2ewBU8GQ5Io//2rzypELkX7cxOH9S4bx6oQ28qh8tQOefDFf Qz6786reo12iB7NZoC2nvVoi1J+OYp9EY12/jXdxNdXM9EdjS5DjARn8HHZcc3Hm 56FSV4EOi9aed0Cfov30ijK2Xfewp7RE0mJoxm97yOVysG8ZodJh/mGZfCKMXrVc o70kqEfIB6ij9QfTJwQ9X+13kvFlmG5SYW3s3cq7ZVH8PDwpsw93cOhFNjlnrYhi StVHJYPHOE20fQqFMTk+kxWLr2ORAyvTuork7ilgMcjZMhmot+BCZ4CEhaG1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJXeNWziqoKoISPYSpC3DjVM41VcwHwYDVR0j BBgwFoAUoeZ0nAnp4y0RwVZ41Fwbk21SUpEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFlkMmlKOW5VMnRoU1ZRb2dwQ1o2ZkphZGFnRGpHOUFjczlZdFc4Y05B UFgvMC9BMUU2NzQ5QzA5RTlFMzJEMTFDMTU2NzhENDVDMUI5MzZENTI1MjkxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExRTY3NDlDMDlFOUUzMkQx MUMxNTY3OEQ0NUMxQjkzNkQ1MjUyOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFlkMmlKOW5VMnRoU1ZRb2dwQ1o2ZkphZGFnRGpHOUFjczlZdFc4Y05BUFgvMC9B MUU2NzQ5QzA5RTlFMzJEMTFDMTU2NzhENDVDMUI5MzZENTI1MjkxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQnhmXeEMLe47+oIHDUmNw45GRJ97FL4DaeVSAsMeo2EUzijUM1Ds8+dil96x 586i9I2jw4y1lFNzR1mTlEqJSZmiaxR1UKeJbAypf8gteJ9rxhJxbxD/SzOhljs1 wxKoT26J0CXy7ND35E0xdSxlM69M4Clv1JtehRGka2crn+x0bWWOWlQlaFX4Ht1a wSMNh+BN3XXn5d0cerOgvYufrcPbnZRi8s5KFCNz18o6/8jyvQqwMYQqeF9RNSl+ ZmfcyzU+g1WShqigbJEm+qAdj/pkqAa452Bg1sSMTAN01aYt0MnEMr3BsrdZZsRn yFOGA78npm8SN62d1iOQgMi5Xw== -----END CERTIFICATE-----Generated at Fri Jul 25 13:09:48 2025 by rpki-client