$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft File: 694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft (raw, json) Hash identifier: Dup3JQPv0dBgreET82NI2EJBebhsFBXZ/GsmAR4NNJM= Subject key identifier: 04:10:9C:50:73:57:7F:B6:C5:50:C6:AA:97:B3:4E:61:7C:A5:FD:72 Authority key identifier: 69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53 Certificate issuer: /CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053 Certificate serial: 7395EFEC62079B9F6DD6A86C6559E9D96688DD8E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer Subject info access: rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft Manifest number: 02B1 Signing time: Wed 20 Aug 2025 09:40:29 +0000 Manifest this update: Wed 20 Aug 2025 09:35:29 +0000 Manifest next update: Thu 21 Aug 2025 13:06:29 +0000 Files and hashes: 1: 694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl (hash: GrXLWrkSm08VFMqzK7VlUxoB7cDz7c8X9+913x0mUlk=) 2: 3136382e302e3130382e302f32322d3234203d3e20323632373931.roa (hash: Zp9x2unx+lTPAPJ1Lhv/7ePGfk5aZfLlvD+Z3BQpqoM=) 3: 323830343a3232303a3a2f33322d313238203d3e20323632373931.roa (hash: /tPSWICRQPSUfZn8DNklPz80ApasR9GTjDelvSXwHCc=) 4: 3138362e3233332e3139322e302f32312d3332203d3e20323632373931.roa (hash: 2UpSecyAisRwwZmh8G4q0Q1cQ+fFBv72ScD9WoDX2YI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 13:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:95:ef:ec:62:07:9b:9f:6d:d6:a8:6c:65:59:e9:d9:66:88:dd:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053 Validity Not Before: Aug 20 09:35:29 2025 GMT Not After : Aug 21 13:06:29 2025 GMT Subject: CN=04109C5073577FB6C550C6AA97B34E617CA5FD72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:77:57:4b:b1:a9:6a:c6:30:07:66:2c:e2:02: e0:fb:8d:23:35:9e:9c:be:2a:32:30:88:2a:73:f1: 25:d7:d7:5e:d1:23:fe:e6:b7:06:f6:d2:aa:63:1a: d4:ec:3b:30:74:16:ab:96:12:20:27:6d:bb:a4:80: b3:18:b0:45:ed:c5:0a:c8:86:b1:fb:a4:69:20:b9: 86:a9:fe:5a:79:25:a1:13:10:c0:c3:c7:56:71:50: bc:ba:04:d5:62:c0:05:ee:6c:1f:6d:0b:8e:cb:3b: 5b:45:69:6d:03:b3:a7:eb:40:17:e3:71:a0:3a:35: 95:36:cb:8a:68:dc:dc:41:0a:5d:60:30:d2:d9:b3: c7:b3:9c:96:dd:20:12:83:d7:6f:2b:d2:db:75:79: 12:09:58:8f:9b:6e:51:12:61:0b:a7:29:07:77:17: 8a:87:11:88:44:b1:e4:d7:a5:9e:0c:61:d9:07:93: 5e:1c:eb:88:fd:b3:68:05:e9:f8:df:98:3a:b1:f8: 17:b0:60:82:a7:c8:37:bf:10:64:8b:34:ea:a9:de: 48:49:8b:dd:21:b4:9d:b1:8b:08:b4:ed:42:09:fd: 9b:3f:a0:e5:a1:3f:65:aa:36:12:20:45:f5:94:f5: ed:06:f5:8e:63:49:e3:31:54:88:66:1a:4e:2f:98: 81:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:10:9C:50:73:57:7F:B6:C5:50:C6:AA:97:B3:4E:61:7C:A5:FD:72 X509v3 Authority Key Identifier: keyid:69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:af:dd:a3:71:b6:2d:7c:33:39:73:a2:a7:00:a2:92:b1:c9: 4b:f6:fe:35:1b:61:af:45:2c:6a:c7:55:0e:a4:f5:d4:25:ba: f5:f4:5e:75:c5:ca:6d:88:84:e7:34:41:c9:ea:f9:18:f1:02: c8:0e:a6:40:03:56:c0:cd:fa:a9:50:26:32:54:d1:f2:b1:52: 00:b9:bd:f5:47:1e:6b:28:8e:30:64:5e:ca:64:da:7c:30:e8: 48:29:27:7e:d7:fd:35:fb:1c:0b:ec:0f:57:b2:12:22:54:bc: 50:6e:19:cf:b6:b4:de:34:ef:c0:b2:bb:4c:37:fd:3b:b6:d9: 46:44:a1:81:85:8e:8a:64:93:5f:55:4c:1e:a6:4a:80:2a:fa: 2a:be:7e:ba:02:46:83:11:4f:d9:e9:0e:a3:c5:a2:81:d6:2e: f1:b0:41:16:09:13:38:23:cc:dc:26:ba:4a:07:77:83:dc:e3: a1:6b:66:c0:8b:36:b5:ec:e2:92:22:7e:20:80:27:18:8b:59: dc:ea:d8:a7:13:e9:79:ad:21:01:e7:a4:b8:20:3d:61:8f:81: 7a:c3:f0:f3:54:bb:9b:7c:e5:5f:fe:41:ff:13:ad:cf:0b:27: 17:1d:b7:98:76:8f:2f:79:c9:bf:44:f7:3c:bf:24:1a:59:eb: 16:06:70:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUc5Xv7GIHm59t1qhsZVnp2WaI3Y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk0QkU0NTQ3OUIxMEJGQ0E3QkI0MEE0NEMwNkI1MUQx NUYyRDA1MzAeFw0yNTA4MjAwOTM1MjlaFw0yNTA4MjExMzA2MjlaMDMxMTAvBgNV BAMTKDA0MTA5QzUwNzM1NzdGQjZDNTUwQzZBQTk3QjM0RTYxN0NBNUZENzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOd1dLsalqxjAHZiziAuD7jSM1 npy+KjIwiCpz8SXX117RI/7mtwb20qpjGtTsOzB0FquWEiAnbbukgLMYsEXtxQrI hrH7pGkguYap/lp5JaETEMDDx1ZxULy6BNViwAXubB9tC47LO1tFaW0Ds6frQBfj caA6NZU2y4po3NxBCl1gMNLZs8eznJbdIBKD128r0tt1eRIJWI+bblESYQunKQd3 F4qHEYhEseTXpZ4MYdkHk14c64j9s2gF6fjfmDqx+BewYIKnyDe/EGSLNOqp3khJ i90htJ2xiwi07UIJ/Zs/oOWhP2WqNhIgRfWU9e0G9Y5jSeMxVIhmGk4vmIF/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBBCcUHNXf7bFUMaql7NOYXyl/XIwHwYDVR0j BBgwFoAUaUvkVHmxC/ynu0CkTAa1HRXy0FMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM29tREIzenhKVzFlN25NWnRKWlZvZWVrMkpUTUwzNHgxeDJxMXRLbm1n WFEvMC82OTRCRTQ1NDc5QjEwQkZDQTdCQjQwQTQ0QzA2QjUxRDE1RjJEMDUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NEJFNDU0NzlCMTBCRkNB N0JCNDBBNDRDMDZCNTFEMTVGMkQwNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M29tREIzenhKVzFlN25NWnRKWlZvZWVrMkpUTUwzNHgxeDJxMXRLbm1nWFEvMC82 OTRCRTQ1NDc5QjEwQkZDQTdCQjQwQTQ0QzA2QjUxRDE1RjJEMDUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXa/do3G2LXwzOXOipwCikrHJS/b+NRthr0UsasdVDqT11CW69fRedcXKbYiE 5zRByer5GPECyA6mQANWwM36qVAmMlTR8rFSALm99UceayiOMGReymTafDDoSCkn ftf9NfscC+wPV7ISIlS8UG4Zz7a03jTvwLK7TDf9O7bZRkShgYWOimSTX1VMHqZK gCr6Kr5+ugJGgxFP2ekOo8WigdYu8bBBFgkTOCPM3Ca6Sgd3g9zjoWtmwIs2tezi kiJ+IIAnGItZ3OrYpxPpea0hAeekuCA9YY+BesPw81S7m3zlX/5B/xOtzwsnFx23 mHaPL3nJv0T3PL8kGlnrFgZwJQ== -----END CERTIFICATE-----Generated at Wed Aug 20 16:14:14 2025 by rpki-client