$ rpki-client -vvf rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.mft File: 57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.mft (raw, json) Hash identifier: +n9KKORW0wZqhlUMbMAFpTyxXZMpz8VNqoNLXA8D2Bc= Subject key identifier: D8:AD:23:A9:C1:F7:68:A4:32:52:E1:4C:25:7C:2C:1C:8B:21:DD:0E Authority key identifier: 57:29:3D:96:DA:FC:56:E0:45:0C:22:FB:EE:7A:67:3D:F7:BB:26:B8 Certificate issuer: /CN=57293D96DAFC56E0450C22FBEE7A673DF7BB26B8 Certificate serial: 7C63ED37987703B82962DB682AFC9C7BB3D96FE7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.cer Subject info access: rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.mft Manifest number: 0280 Signing time: Sat 26 Jul 2025 13:25:49 +0000 Manifest this update: Sat 26 Jul 2025 13:20:49 +0000 Manifest next update: Sun 27 Jul 2025 14:14:49 +0000 Files and hashes: 1: 3137392e3138392e3230382e302f32322d3234203d3e203238313333.roa (hash: v7A59cNihVuoQ8xCnbIa1ITZ+P+AUUV0pKC0LhjQEnQ=) 2: 3138372e34352e33322e302f32302d3234203d3e203238313333.roa (hash: H6FQM6oLIlnRm9VE1YWYabzhQWldfb9niywpmJyB5y4=) 3: 323830343a3334383a3a2f33322d3438203d3e203238313333.roa (hash: GLgJrOP1uIGgDwT+S1DeZCFHwRhmGbqjknuYkNxeykk=) 4: 57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.crl (hash: xeeJelRbSvRkRsL3/gggG0N6ZwOMT+YKyd2SpTFHSDo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.crl rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 14:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:63:ed:37:98:77:03:b8:29:62:db:68:2a:fc:9c:7b:b3:d9:6f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57293D96DAFC56E0450C22FBEE7A673DF7BB26B8 Validity Not Before: Jul 26 13:20:49 2025 GMT Not After : Jul 27 14:14:49 2025 GMT Subject: CN=D8AD23A9C1F768A43252E14C257C2C1C8B21DD0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:93:c6:ec:bd:b6:eb:a5:34:10:4e:e9:de:74: f6:d7:f7:d7:c1:f4:a2:77:00:a4:6e:f6:f7:d0:6f: 19:c0:0f:2a:36:7e:21:e9:1a:1b:b5:30:f4:2f:d4: c6:ca:e3:5b:2c:8a:64:f0:60:c8:4f:22:71:a3:1a: 69:51:8b:1d:9a:d7:55:8f:b1:e2:d6:cc:77:64:97: 3c:1d:1c:f8:10:11:c8:81:a2:52:25:ad:50:bd:69: 73:80:9d:41:7e:60:a5:3e:f0:a1:54:92:86:00:ef: 21:18:6f:47:55:e1:73:80:ff:9f:81:60:9a:1a:37: f1:d3:ba:5d:86:cf:e7:41:0e:13:09:b5:be:3a:4f: c4:2f:2f:b8:c7:75:5b:ac:dd:4d:ed:93:35:c5:cf: 04:9b:dd:4e:bd:84:88:1e:e1:1d:cc:99:ce:16:90: 6e:dd:fb:0b:2c:1c:f6:2a:f7:e2:a8:65:6b:23:15: dd:7d:3e:17:72:5f:99:b9:45:e5:8c:76:ed:c9:e6: 9b:3f:c1:57:77:8a:5c:ea:9e:aa:e8:da:25:ca:ab: 4f:34:e6:82:4e:76:22:cc:d3:20:b2:0a:4a:17:d1: 66:04:0e:75:d5:6d:3e:17:87:cd:dd:47:97:3d:0b: 15:8b:04:42:66:df:b5:1b:c5:3a:5d:fd:1c:8c:38: 14:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AD:23:A9:C1:F7:68:A4:32:52:E1:4C:25:7C:2C:1C:8B:21:DD:0E X509v3 Authority Key Identifier: keyid:57:29:3D:96:DA:FC:56:E0:45:0C:22:FB:EE:7A:67:3D:F7:BB:26:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a7:28:c9:e4:fb:68:b8:9c:21:d7:be:89:57:16:7e:91:66: f0:80:a4:5b:50:96:5a:be:d7:6d:ae:0c:db:e5:f9:44:8f:a9: 4a:67:a3:5b:60:50:84:fb:57:62:b8:58:d0:25:b0:18:02:4c: 83:1c:60:33:26:12:8d:5b:f8:f2:f2:64:b5:e6:94:c7:1e:3e: fb:f3:2b:ef:d7:bd:57:0a:ef:16:d3:e3:06:e4:7b:83:a9:b4: a4:30:ac:6e:bf:24:41:11:a2:15:35:44:6d:db:f8:a5:09:a2: 6e:df:b0:e3:17:ad:5b:42:54:05:28:1b:c2:5e:f5:e1:c6:3f: 4c:71:ca:7a:eb:f2:a0:a4:bc:0e:a6:96:77:0e:ec:41:3b:85: ce:33:26:b9:60:ad:f8:42:df:3e:b5:af:26:2d:ff:8d:95:78: d3:cd:0a:14:3b:67:63:88:94:df:c7:5d:9f:e5:b0:ef:3b:7e: c2:6c:a3:ab:86:62:8e:15:a1:71:9f:36:77:ce:c0:7d:64:ae: 06:fe:02:3f:41:72:fb:7b:38:60:26:e0:c7:9e:47:0f:48:58: c4:01:a3:ab:99:32:a7:16:0c:5f:80:64:cd:b8:8c:5b:78:3a: 3c:08:a9:07:d0:d9:a6:a9:b3:6d:c5:c8:49:75:af:72:00:b7: 5d:fb:20:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfGPtN5h3A7gpYttoKvyce7PZb+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcyOTNEOTZEQUZDNTZFMDQ1MEMyMkZCRUU3QTY3M0RG N0JCMjZCODAeFw0yNTA3MjYxMzIwNDlaFw0yNTA3MjcxNDE0NDlaMDMxMTAvBgNV BAMTKEQ4QUQyM0E5QzFGNzY4QTQzMjUyRTE0QzI1N0MyQzFDOEIyMUREMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXk8bsvbbrpTQQTunedPbX99fB 9KJ3AKRu9vfQbxnADyo2fiHpGhu1MPQv1MbK41ssimTwYMhPInGjGmlRix2a11WP seLWzHdklzwdHPgQEciBolIlrVC9aXOAnUF+YKU+8KFUkoYA7yEYb0dV4XOA/5+B YJoaN/HTul2Gz+dBDhMJtb46T8QvL7jHdVus3U3tkzXFzwSb3U69hIge4R3Mmc4W kG7d+wssHPYq9+KoZWsjFd19PhdyX5m5ReWMdu3J5ps/wVd3ilzqnqro2iXKq080 5oJOdiLM0yCyCkoX0WYEDnXVbT4Xh83dR5c9CxWLBEJm37UbxTpd/RyMOBR7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2K0jqcH3aKQyUuFMJXwsHIsh3Q4wHwYDVR0j BBgwFoAUVyk9ltr8VuBFDCL77npnPfe7JrgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0VLODlISzlVZ3NjU3BFRDZQRndvU1dzZkZodjJtcFp5NEZEN3MzVjRC QUcvMS81NzI5M0Q5NkRBRkM1NkUwNDUwQzIyRkJFRTdBNjczREY3QkIyNkI4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3MjkzRDk2REFGQzU2RTA0 NTBDMjJGQkVFN0E2NzNERjdCQjI2QjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0VLODlISzlVZ3NjU3BFRDZQRndvU1dzZkZodjJtcFp5NEZEN3MzVjRCQUcvMS81 NzI5M0Q5NkRBRkM1NkUwNDUwQzIyRkJFRTdBNjczREY3QkIyNkI4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbacoyeT7aLicIde+iVcWfpFm8ICkW1CWWr7Xba4M2+X5RI+pSmejW2BQhPtX YrhY0CWwGAJMgxxgMyYSjVv48vJkteaUxx4++/Mr79e9VwrvFtPjBuR7g6m0pDCs br8kQRGiFTVEbdv4pQmibt+w4xetW0JUBSgbwl714cY/THHKeuvyoKS8DqaWdw7s QTuFzjMmuWCt+ELfPrWvJi3/jZV4080KFDtnY4iU38ddn+Ww7zt+wmyjq4ZijhWh cZ82d87AfWSuBv4CP0Fy+3s4YCbgx55HD0hYxAGjq5kypxYMX4BkzbiMW3g6PAip B9DZpqmzbcXISXWvcgC3Xfsg2g== -----END CERTIFICATE-----Generated at Sun Jul 27 00:17:40 2025 by rpki-client