$ rpki-client -vvf rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.mft File: D4DA9F477593CD447FEE14D83B87CF3109732518.mft (raw, json) Hash identifier: sAu3w1fLtTwR0DtO6KOYRD96udKCDM4eCHDxNhz/H4s= Subject key identifier: 65:EC:99:95:96:1B:5B:20:36:BA:20:A4:7B:F4:66:42:40:16:57:80 Authority key identifier: D4:DA:9F:47:75:93:CD:44:7F:EE:14:D8:3B:87:CF:31:09:73:25:18 Certificate issuer: /CN=D4DA9F477593CD447FEE14D83B87CF3109732518 Certificate serial: 0D424402D717A57EB2AA5C905B2F822869CDC91B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4DA9F477593CD447FEE14D83B87CF3109732518.cer Subject info access: rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.mft Manifest number: BF Signing time: Thu 24 Jul 2025 20:13:11 +0000 Manifest this update: Thu 24 Jul 2025 20:08:11 +0000 Manifest next update: Fri 25 Jul 2025 22:40:11 +0000 Files and hashes: 1: 3136382e3139342e3230302e302f32322d3234203d3e20323635343430.roa (hash: 0miu0D5Gp1Chkjl4hhkBDcSw8B8Ad0dKsBzzjNy10No=) 2: D4DA9F477593CD447FEE14D83B87CF3109732518.crl (hash: QZOoVHgjESuhSzkD4dyiraRNFpBeH2dLtyjU4yDMQk0=) 3: 323830343a333432633a3a2f33322d3438203d3e20323635343430.roa (hash: EH9NyyBoMTp1Gi63vgui2VwKI6RlvddRYrs90u0BAAk=) 4: 3137392e3139312e382e302f32312d3234203d3e20323635343430.roa (hash: pdPmIty1pH7V4Osp9Kq9lIakHDY9LRoCHbkEjChw8QQ=) 5: 34352e3232352e3138302e302f32332d3234203d3e20323635343430.roa (hash: UG1bIEqSWcVFogpAN8dpdluBA2B6FznRqi8LUSLWdB0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.crl rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4DA9F477593CD447FEE14D83B87CF3109732518.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 22:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:42:44:02:d7:17:a5:7e:b2:aa:5c:90:5b:2f:82:28:69:cd:c9:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4DA9F477593CD447FEE14D83B87CF3109732518 Validity Not Before: Jul 24 20:08:11 2025 GMT Not After : Jul 25 22:40:11 2025 GMT Subject: CN=65EC9995961B5B2036BA20A47BF4664240165780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0e:aa:03:4f:32:81:c1:bd:0b:e1:f8:e9:96: f5:c5:d4:09:2f:7f:f1:ac:1f:c1:fa:18:99:8a:b4: 3b:a9:0b:60:8d:b5:c6:46:eb:fc:06:d4:4e:8a:ed: ea:d3:43:58:b5:a3:e9:06:c9:1b:85:d0:e5:a4:d9: 21:14:6e:bb:f7:9a:73:3b:0f:28:10:f6:dc:f1:50: 2a:71:9c:a8:f1:7c:88:ca:be:96:bc:71:b7:c9:ef: 57:d3:dd:60:bb:68:ee:e7:ab:6f:a3:66:64:41:7b: 3e:8b:f5:e3:d3:43:eb:e6:a5:71:72:f4:84:03:7a: d2:04:9c:a7:1f:f3:5c:bf:1c:e7:1a:86:e3:42:45: 61:ed:41:49:c7:23:5a:37:d0:ec:62:01:ab:50:58: c9:86:74:27:fd:61:55:4d:db:bb:55:79:5e:a7:93: 01:b3:d1:70:41:3b:af:b8:a0:fd:b9:91:40:bc:e5: cb:ca:a8:e2:66:3a:74:89:91:9c:f6:da:08:05:01: 13:c1:e6:7f:51:80:55:8c:39:b1:8e:bd:f4:ce:bc: 9a:bd:1b:17:f6:55:d4:f3:9c:7e:39:51:9b:37:f8: 0f:7b:3e:ad:ef:13:8e:90:a0:68:8f:f8:7e:e0:54: 4e:46:e6:2f:db:83:da:32:74:70:fd:14:11:3b:e1: ea:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EC:99:95:96:1B:5B:20:36:BA:20:A4:7B:F4:66:42:40:16:57:80 X509v3 Authority Key Identifier: keyid:D4:DA:9F:47:75:93:CD:44:7F:EE:14:D8:3B:87:CF:31:09:73:25:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4DA9F477593CD447FEE14D83B87CF3109732518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bf:cf:14:41:2d:25:b8:a4:84:cf:92:c4:6e:74:3f:a6:6d: 1d:b8:35:fd:3b:5b:42:02:32:8c:fe:16:67:bc:8f:a0:e8:03: 87:eb:f9:c6:84:68:d7:db:32:4c:c9:8d:80:00:1d:f8:77:53: 2d:11:da:12:ff:be:3b:1f:cb:ed:a6:ff:26:06:b4:56:1b:18: 91:9e:fe:c0:10:d7:3b:b4:b5:41:f2:4a:f3:72:b0:7f:cd:90: 41:06:d2:1b:3c:1f:0e:8e:48:d9:86:75:29:55:b5:4d:5c:26: b7:78:a8:c5:12:b4:13:3b:8c:1d:09:bc:4e:f0:80:bc:4c:78: 38:60:f8:95:ed:ea:50:52:0b:fc:6c:15:cb:18:ba:82:4f:78: 69:bc:51:e1:f4:ee:df:72:32:e0:c5:37:b1:d4:85:6d:23:aa: 97:15:a4:0d:41:e4:f3:27:12:54:7e:01:b7:b4:03:79:22:29: b4:02:00:1c:24:04:79:0a:94:67:00:58:67:74:c8:2d:e2:c1: b5:5e:2a:77:99:cb:f9:3e:6a:2c:4c:34:ef:63:67:0c:3c:78: 15:55:08:73:5a:81:9f:54:ea:0a:99:a6:81:33:df:03:ac:16: 10:6d:8c:11:c2:1b:20:fe:0b:45:f0:04:f5:71:98:40:bd:0e: 9e:e4:1a:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDUJEAtcXpX6yqlyQWy+CKGnNyRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDREQTlGNDc3NTkzQ0Q0NDdGRUUxNEQ4M0I4N0NGMzEw OTczMjUxODAeFw0yNTA3MjQyMDA4MTFaFw0yNTA3MjUyMjQwMTFaMDMxMTAvBgNV BAMTKDY1RUM5OTk1OTYxQjVCMjAzNkJBMjBBNDdCRjQ2NjQyNDAxNjU3ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCODqoDTzKBwb0L4fjplvXF1Akv f/GsH8H6GJmKtDupC2CNtcZG6/wG1E6K7erTQ1i1o+kGyRuF0OWk2SEUbrv3mnM7 DygQ9tzxUCpxnKjxfIjKvpa8cbfJ71fT3WC7aO7nq2+jZmRBez6L9ePTQ+vmpXFy 9IQDetIEnKcf81y/HOcahuNCRWHtQUnHI1o30OxiAatQWMmGdCf9YVVN27tVeV6n kwGz0XBBO6+4oP25kUC85cvKqOJmOnSJkZz22ggFARPB5n9RgFWMObGOvfTOvJq9 Gxf2VdTznH45UZs3+A97Pq3vE46QoGiP+H7gVE5G5i/bg9oydHD9FBE74er9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZeyZlZYbWyA2uiCke/RmQkAWV4AwHwYDVR0j BBgwFoAU1NqfR3WTzUR/7hTYO4fPMQlzJRgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRlc2MjFaYzNTdTVVdXV4YlN5TU05QUFwOXZxNnI0c3lpbnV1cTFBZXlO elYvMC9ENERBOUY0Nzc1OTNDRDQ0N0ZFRTE0RDgzQjg3Q0YzMTA5NzMyNTE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0REE5RjQ3NzU5M0NENDQ3 RkVFMTREODNCODdDRjMxMDk3MzI1MTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rlc2MjFaYzNTdTVVdXV4YlN5TU05QUFwOXZxNnI0c3lpbnV1cTFBZXlOelYvMC9E NERBOUY0Nzc1OTNDRDQ0N0ZFRTE0RDgzQjg3Q0YzMTA5NzMyNTE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADL/PFEEtJbikhM+SxG50P6ZtHbg1/TtbQgIyjP4WZ7yPoOgDh+v5xoRo19sy TMmNgAAd+HdTLRHaEv++Ox/L7ab/Jga0VhsYkZ7+wBDXO7S1QfJK83Kwf82QQQbS GzwfDo5I2YZ1KVW1TVwmt3ioxRK0EzuMHQm8TvCAvEx4OGD4le3qUFIL/GwVyxi6 gk94abxR4fTu33Iy4MU3sdSFbSOqlxWkDUHk8ycSVH4Bt7QDeSIptAIAHCQEeQqU ZwBYZ3TILeLBtV4qd5nL+T5qLEw072NnDDx4FVUIc1qBn1TqCpmmgTPfA6wWEG2M EcIbIP4LRfAE9XGYQL0OnuQaqA== -----END CERTIFICATE-----Generated at Fri Jul 25 12:48:14 2025 by rpki-client