$ rpki-client -vvf rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft File: 5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft (raw, json) Hash identifier: lQyFreZQ4ki5jKVjueM8DQ8JeG4DtrBNSUb6DUWaMPo= Subject key identifier: CA:23:15:C4:22:7A:28:52:81:E1:88:6D:D1:7E:4F:94:E0:F4:4D:EB Authority key identifier: 5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9 Certificate issuer: /CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9 Certificate serial: 047B38BE62D3020A67E8AE23DA647C659867FBAE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer Subject info access: rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft Manifest number: 02C8 Signing time: Wed 17 Sep 2025 23:56:48 +0000 Manifest this update: Wed 17 Sep 2025 23:51:48 +0000 Manifest next update: Fri 19 Sep 2025 02:19:48 +0000 Files and hashes: 1: 323830343a313536343a3a2f33322d3336203d3e203532353730.roa (hash: FC1Wd69RrJidzRZVv4UIal/AXyu4NEituILPDllcaNg=) 2: 5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl (hash: FYSPn3PlLIH+3h+LnIY5wYU6O5k8kAYH6Cq6SR8VP2E=) 3: 3137372e38362e3131362e302f32322d3234203d3e203532353730.roa (hash: OGh0oSMiAuqwOXO84p0Xsd8bUAebLrAgyXg0x2c44tg=) 4: 3137392e39362e3230302e302f32312d3234203d3e203532353730.roa (hash: ThFay1lLsaEu2jVa7XfNcUJbNcEHJjS8TO7JyZdIDyo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 02:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:7b:38:be:62:d3:02:0a:67:e8:ae:23:da:64:7c:65:98:67:fb:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9 Validity Not Before: Sep 17 23:51:48 2025 GMT Not After : Sep 19 02:19:48 2025 GMT Subject: CN=CA2315C4227A285281E1886DD17E4F94E0F44DEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:46:b1:5b:c5:6a:ff:fb:f0:da:3d:c9:c3:2b: 2c:f1:94:e4:2d:0b:40:03:82:7c:1f:a1:61:6a:05: 1b:07:98:15:df:8a:a5:94:9c:26:15:fe:60:39:9a: 16:56:ec:4f:e7:2e:71:ca:51:e7:74:ba:f4:1d:95: c3:16:42:14:7b:ea:88:ee:63:0c:88:9f:e9:b4:bb: d6:b6:07:26:3c:e7:08:70:12:18:f8:ab:e5:ef:ac: 49:2b:be:d2:92:4a:08:0c:d2:15:ad:c3:9d:c3:16: 72:9c:9c:a2:45:7e:dd:eb:8f:f7:f2:48:85:13:76: de:44:03:8a:a6:40:d7:a2:32:79:17:7a:ad:1a:11: 06:6c:43:92:d0:ca:17:6f:0e:ef:fb:04:69:d1:06: 9f:b2:7e:a0:a5:84:b7:82:f5:f1:42:c4:f7:45:b5: 81:aa:34:96:40:ba:85:dd:0b:c8:03:2a:9e:b4:e1: a7:63:3c:3a:af:7a:0c:cd:a2:eb:5c:e0:a7:28:26: f3:04:62:96:0b:b7:38:41:5c:42:7f:d5:d0:83:7d: b1:eb:58:6a:af:04:13:7d:84:b7:6b:08:02:dc:30: c9:7a:77:26:8d:7a:a7:23:4a:d7:d4:4b:d5:56:79: 60:41:46:a3:13:0e:fc:ba:8c:f4:b8:fe:bd:95:69: f3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:23:15:C4:22:7A:28:52:81:E1:88:6D:D1:7E:4F:94:E0:F4:4D:EB X509v3 Authority Key Identifier: keyid:5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:eb:bf:ac:34:76:81:30:a8:8d:6d:01:b9:bc:5d:ba:e4:36: 5d:a7:4f:d4:05:24:4a:fb:fc:70:ca:11:4c:58:a0:e3:16:82: 88:67:13:4b:76:c2:94:72:d2:23:04:e5:ab:9c:f5:e5:ca:ee: 04:0f:d0:11:12:9f:ea:d7:11:40:2b:30:32:96:3a:bd:a3:2c: 2e:16:46:13:d2:43:cf:d3:ce:13:81:2f:81:aa:eb:34:b3:77: b2:1c:db:04:28:54:d0:93:ed:12:c8:28:7c:b9:cb:1e:3d:9a: f8:1e:41:09:64:46:33:6f:d0:da:39:b9:36:fd:c1:cf:07:68: fc:95:22:bd:4b:d2:c6:6a:14:21:a3:89:6e:a6:c0:72:78:e9: 7f:23:8b:45:33:db:09:5d:9c:00:7f:3c:ae:ed:b9:e3:df:cf: a4:41:d8:34:5b:f2:e4:c0:34:fc:2c:9d:82:d5:70:1c:ea:32: ae:f1:6f:d7:b3:c5:9c:dd:88:a2:67:fe:6b:61:72:91:81:63: ac:25:73:58:09:58:20:b9:dc:24:b1:a2:7b:c0:62:12:a1:8f: 83:68:e3:6b:7d:8f:83:6a:6c:3f:37:79:c5:78:fe:65:4e:79: a1:3d:41:22:4f:92:a7:63:ac:0d:21:48:8a:ae:cf:05:ae:16: 3d:3b:30:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBHs4vmLTAgpn6K4j2mR8ZZhn+64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNURDMjJDOUYzOEU0QjNBNUZGQUNDNzY4OUM2RUI1 MkE2NURCOTAeFw0yNTA5MTcyMzUxNDhaFw0yNTA5MTkwMjE5NDhaMDMxMTAvBgNV BAMTKENBMjMxNUM0MjI3QTI4NTI4MUUxODg2REQxN0U0Rjk0RTBGNDRERUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTRrFbxWr/+/DaPcnDKyzxlOQt C0ADgnwfoWFqBRsHmBXfiqWUnCYV/mA5mhZW7E/nLnHKUed0uvQdlcMWQhR76oju YwyIn+m0u9a2ByY85whwEhj4q+XvrEkrvtKSSggM0hWtw53DFnKcnKJFft3rj/fy SIUTdt5EA4qmQNeiMnkXeq0aEQZsQ5LQyhdvDu/7BGnRBp+yfqClhLeC9fFCxPdF tYGqNJZAuoXdC8gDKp604adjPDqvegzNoutc4KcoJvMEYpYLtzhBXEJ/1dCDfbHr WGqvBBN9hLdrCALcMMl6dyaNeqcjStfUS9VWeWBBRqMTDvy6jPS4/r2VafOPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyiMVxCJ6KFKB4Yht0X5PlOD0TeswHwYDVR0j BBgwFoAUX/XcIsnzjks6X/rMdonG61KmXbkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1J1UkxMYXVhenpxUWQ3NUdpWkxpdE5hUVp4bWRVcTZMREpaajhmcWV5 ZDIvMS81RkY1REMyMkM5RjM4RTRCM0E1RkZBQ0M3Njg5QzZFQjUyQTY1REI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGRjVEQzIyQzlGMzhFNEIz QTVGRkFDQzc2ODlDNkVCNTJBNjVEQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1J1UkxMYXVhenpxUWQ3NUdpWkxpdE5hUVp4bWRVcTZMREpaajhmcWV5ZDIvMS81 RkY1REMyMkM5RjM4RTRCM0E1RkZBQ0M3Njg5QzZFQjUyQTY1REI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVOu/rDR2gTCojW0BubxduuQ2XadP1AUkSvv8cMoRTFig4xaCiGcTS3bClHLS IwTlq5z15cruBA/QERKf6tcRQCswMpY6vaMsLhZGE9JDz9POE4EvgarrNLN3shzb BChU0JPtEsgofLnLHj2a+B5BCWRGM2/Q2jm5Nv3Bzwdo/JUivUvSxmoUIaOJbqbA cnjpfyOLRTPbCV2cAH88ru2549/PpEHYNFvy5MA0/CydgtVwHOoyrvFv17PFnN2I omf+a2FykYFjrCVzWAlYILncJLGie8BiEqGPg2jja32Pg2psPzd5xXj+ZU55oT1B Ik+Sp2OsDSFIiq7PBa4WPTswhQ== -----END CERTIFICATE-----Generated at Thu Sep 18 14:39:22 2025 by rpki-client