$ rpki-client -vvf rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/E52DC6D79EBB8997F0D46E5D907493E17D8242B2.mft File: E52DC6D79EBB8997F0D46E5D907493E17D8242B2.mft (raw, json) Hash identifier: Ef6IIPej7546AEa1BVGWH8VskF89gGRawijMQUfQPFE= Subject key identifier: 0D:50:C9:E1:0F:92:17:9F:56:1E:D2:7D:EF:6C:68:85:07:A8:9D:EB Authority key identifier: E5:2D:C6:D7:9E:BB:89:97:F0:D4:6E:5D:90:74:93:E1:7D:82:42:B2 Certificate issuer: /CN=E52DC6D79EBB8997F0D46E5D907493E17D8242B2 Certificate serial: 1E807390DE71A34C86D2A0D3A514651D41C95842 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52DC6D79EBB8997F0D46E5D907493E17D8242B2.cer Subject info access: rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/E52DC6D79EBB8997F0D46E5D907493E17D8242B2.mft Manifest number: 3E Signing time: Wed 20 Aug 2025 03:27:11 +0000 Manifest this update: Wed 20 Aug 2025 03:22:11 +0000 Manifest next update: Thu 21 Aug 2025 05:55:11 +0000 Files and hashes: 1: 34352e3136312e3235322e302f32322d3234203d3e20323632323835.roa (hash: 8+HuMCGexDlGm7COhOr1pGlkInLd3g+uJ1f5bHw93nY=) 2: 34352e3137302e36342e302f32322d3234203d3e20323632323835.roa (hash: IbQ7thdGMG1mC+WPLsY3Y+NVK6Xmx6HjAUfkWHTvCwE=) 3: 3137372e35322e3234342e302f32322d3234203d3e20323632323835.roa (hash: gklOE3JWl8azo4FesqCs7OySh+TWwAKgtB1yetuysKs=) 4: 323830343a6137343a3a2f33322d313238203d3e20323632323835.roa (hash: OMc/gm5hY/nt0Ku4ivBnqDHYXoOlpVJGgEUl4+tbh7M=) 5: 34352e3138302e3136302e302f32322d3234203d3e20323632323835.roa (hash: hI2lUzJhGfFKpzkDEF0hrz8EhV4snCWydLWxiQr4mXg=) 6: 3230312e3135392e32342e302f32312d3234203d3e20323632323835.roa (hash: ZKyuxi0yJhk5E5h5dFXQCci+lTu+bZP+vRPnVO0Qhuk=) 7: E52DC6D79EBB8997F0D46E5D907493E17D8242B2.crl (hash: HMD6f5ehhzKXVQHQWNSkXffY6hSLJtQJXGdpu3P5jyc=) 8: 3137372e3132342e382e302f32312d3234203d3e20323632323835.roa (hash: AeHMng/rLlk3/r+Yhamri7A/9ZDRPiOitGixR8f55Ts=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/E52DC6D79EBB8997F0D46E5D907493E17D8242B2.crl rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/E52DC6D79EBB8997F0D46E5D907493E17D8242B2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52DC6D79EBB8997F0D46E5D907493E17D8242B2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 05:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:80:73:90:de:71:a3:4c:86:d2:a0:d3:a5:14:65:1d:41:c9:58:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E52DC6D79EBB8997F0D46E5D907493E17D8242B2 Validity Not Before: Aug 20 03:22:11 2025 GMT Not After : Aug 21 05:55:11 2025 GMT Subject: CN=0D50C9E10F92179F561ED27DEF6C688507A89DEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d9:c7:d8:72:b0:d3:16:03:9c:fd:9e:15:f9: 47:47:31:89:37:72:4d:3d:52:e1:ab:04:f2:35:b1: b5:85:a4:7f:19:62:0f:c1:c7:74:64:ae:fd:82:12: 41:cc:8d:c7:77:dd:c4:2c:5f:22:46:47:49:53:39: 9f:06:74:7d:52:d0:9f:66:75:af:0d:e9:41:aa:24: 8f:55:6d:0a:8b:08:17:16:8f:bc:9b:b5:62:ee:a4: cd:81:8f:65:1f:a3:58:92:25:3c:6a:ca:c2:8d:4c: 0a:e1:27:f6:d7:8d:43:90:74:2b:ce:e4:20:d9:ea: f1:4b:d1:75:db:52:c6:48:a7:78:9a:ef:0e:7d:9b: 81:78:e3:3e:1b:d5:a2:a5:45:56:be:15:2b:98:3f: 10:d0:eb:fb:82:02:3c:d3:2d:5e:9d:28:c4:b0:10: d6:d1:a6:49:0d:51:cb:b7:fb:b8:5a:e6:d0:10:8b: f3:2a:3d:d9:4f:86:e0:e7:45:0c:d4:95:e3:b5:fa: 67:ea:28:e5:44:d3:41:9b:fe:1c:5b:1c:d7:78:9b: 76:38:41:c8:d8:64:66:7a:7b:03:97:c9:02:87:36: aa:36:dd:1b:c5:83:d6:59:f0:1e:30:d8:9d:89:4c: fc:7a:a7:62:6c:42:db:aa:11:27:27:66:32:1a:87: b8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:50:C9:E1:0F:92:17:9F:56:1E:D2:7D:EF:6C:68:85:07:A8:9D:EB X509v3 Authority Key Identifier: keyid:E5:2D:C6:D7:9E:BB:89:97:F0:D4:6E:5D:90:74:93:E1:7D:82:42:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/E52DC6D79EBB8997F0D46E5D907493E17D8242B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52DC6D79EBB8997F0D46E5D907493E17D8242B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/E52DC6D79EBB8997F0D46E5D907493E17D8242B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f5:59:83:42:2b:76:15:05:b8:8a:fe:9a:23:c5:ef:22:e7: f1:69:31:42:d8:ab:90:03:ff:12:ed:c6:b4:33:f7:5e:6d:c2: 48:ae:44:b3:d1:a5:c8:4b:b9:49:5a:d3:cd:c8:f3:8e:4e:09: 63:e7:f8:d7:e5:d1:cd:3b:4e:50:84:9f:34:82:5e:f5:1b:35: 19:b8:02:3d:9d:4e:bd:70:50:9f:33:db:87:9f:94:1c:62:27: e9:8a:a1:22:36:3c:c8:28:ac:7a:e6:18:d0:a5:70:dc:78:94: 0e:d8:8c:9c:e1:08:6c:ce:b4:84:9d:28:f9:aa:df:fa:a3:a8: 27:cb:64:a8:05:10:77:72:f1:0e:53:a2:7d:a6:9c:a6:bb:72: 33:f3:e1:55:45:67:85:1b:35:02:5c:03:9e:f8:05:97:cb:2f: f7:45:75:ee:37:9e:18:28:6f:90:96:49:c3:7f:8b:78:43:cd: d8:7b:14:39:4d:f0:52:c9:80:46:65:01:13:a5:c2:79:ef:3c: c0:a4:cd:41:ac:8c:08:24:62:9a:8e:ab:74:8e:36:46:6b:4e: 05:cd:71:72:c6:38:46:ab:96:53:62:98:d1:91:9d:ae:e0:44: 83:33:05:3f:5d:f4:47:6c:dd:01:2a:16:f1:1b:98:f5:7f:c1: a0:2a:d9:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHoBzkN5xo0yG0qDTpRRlHUHJWEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUyREM2RDc5RUJCODk5N0YwRDQ2RTVEOTA3NDkzRTE3 RDgyNDJCMjAeFw0yNTA4MjAwMzIyMTFaFw0yNTA4MjEwNTU1MTFaMDMxMTAvBgNV BAMTKDBENTBDOUUxMEY5MjE3OUY1NjFFRDI3REVGNkM2ODg1MDdBODlERUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq2cfYcrDTFgOc/Z4V+UdHMYk3 ck09UuGrBPI1sbWFpH8ZYg/Bx3Rkrv2CEkHMjcd33cQsXyJGR0lTOZ8GdH1S0J9m da8N6UGqJI9VbQqLCBcWj7ybtWLupM2Bj2Ufo1iSJTxqysKNTArhJ/bXjUOQdCvO 5CDZ6vFL0XXbUsZIp3ia7w59m4F44z4b1aKlRVa+FSuYPxDQ6/uCAjzTLV6dKMSw ENbRpkkNUcu3+7ha5tAQi/MqPdlPhuDnRQzUleO1+mfqKOVE00Gb/hxbHNd4m3Y4 QcjYZGZ6ewOXyQKHNqo23RvFg9ZZ8B4w2J2JTPx6p2JsQtuqEScnZjIah7hVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDVDJ4Q+SF59WHtJ972xohQeoneswHwYDVR0j BBgwFoAU5S3G1567iZfw1G5dkHST4X2CQrIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNENSa29aZEdvNzlUOEpLZ1ZORWh1OU42NEJEWnlxeWdDWG44QzZvUkV3 NTUvMC9FNTJEQzZENzlFQkI4OTk3RjBENDZFNUQ5MDc0OTNFMTdEODI0MkIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1MkRDNkQ3OUVCQjg5OTdG MEQ0NkU1RDkwNzQ5M0UxN0Q4MjQyQjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NENSa29aZEdvNzlUOEpLZ1ZORWh1OU42NEJEWnlxeWdDWG44QzZvUkV3NTUvMC9F NTJEQzZENzlFQkI4OTk3RjBENDZFNUQ5MDc0OTNFMTdEODI0MkIyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASfVZg0IrdhUFuIr+miPF7yLn8WkxQtirkAP/Eu3GtDP3Xm3CSK5Es9GlyEu5 SVrTzcjzjk4JY+f41+XRzTtOUISfNIJe9Rs1GbgCPZ1OvXBQnzPbh5+UHGIn6Yqh IjY8yCiseuYY0KVw3HiUDtiMnOEIbM60hJ0o+arf+qOoJ8tkqAUQd3LxDlOifaac prtyM/PhVUVnhRs1AlwDnvgFl8sv90V17jeeGChvkJZJw3+LeEPN2HsUOU3wUsmA RmUBE6XCee88wKTNQayMCCRimo6rdI42RmtOBc1xcsY4RquWU2KY0ZGdruBEgzMF P130R2zdASoW8RuY9X/BoCrZ8w== -----END CERTIFICATE-----Generated at Wed Aug 20 16:29:20 2025 by rpki-client