$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.mft File: 5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.mft (raw, json) Hash identifier: Vl+qgNCLt/cs+UmmqKw67i750AZVdLManSwYBuKsTfI= Subject key identifier: D3:1C:F3:0B:6E:39:2E:15:ED:54:F7:38:DF:E1:FB:4B:D6:EA:89:45 Authority key identifier: 5A:97:D9:AB:7E:B0:B4:A3:7A:68:7D:F4:82:43:A8:6F:6F:ED:59:6D Certificate issuer: /CN=5A97D9AB7EB0B4A37A687DF48243A86F6FED596D Certificate serial: 2D1641013C8090A9528FE1873F98DE47425E0197 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer Subject info access: rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.mft Manifest number: E2 Signing time: Wed 17 Sep 2025 15:48:53 +0000 Manifest this update: Wed 17 Sep 2025 15:43:53 +0000 Manifest next update: Thu 18 Sep 2025 19:11:53 +0000 Files and hashes: 1: 5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.crl (hash: K+T7AZDq1LVjNa6N+2N88RD/FgBYk02PJHfM+LHlQIU=) 2: 3230312e32302e3134342e302f32302d3234203d3e203238363035.roa (hash: mgiFm+AQ1BARPvCimt0jOUhKbYnFekRlOF5rW1eyGgI=) 3: 3137392e3132372e3131322e302f32322d3234203d3e203238363035.roa (hash: UQP0wJ5wqmSobZc8N7a17BgDSkdk/rrpPPH5BS6bj+w=) 4: 323830343a3363303a3a2f33322d3438203d3e203238363035.roa (hash: +MUz/wBhqbn7O6CpHNLXpJA1y8rso/jWmFlEx31j/JY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.crl rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 18 Sep 2025 19:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:16:41:01:3c:80:90:a9:52:8f:e1:87:3f:98:de:47:42:5e:01:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A97D9AB7EB0B4A37A687DF48243A86F6FED596D Validity Not Before: Sep 17 15:43:53 2025 GMT Not After : Sep 18 19:11:53 2025 GMT Subject: CN=D31CF30B6E392E15ED54F738DFE1FB4BD6EA8945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2b:a8:37:29:13:48:67:99:c5:d2:10:8f:ca: 6e:d0:e8:0f:03:55:f7:29:71:16:05:14:ba:85:4d: 1c:e6:98:ec:e1:f4:89:13:f4:45:70:ba:ff:ab:b3: 8d:d1:65:23:aa:a4:9b:83:38:02:57:d0:4d:c0:96: d6:2f:9e:1e:b0:b2:36:cf:28:30:e5:01:a9:af:8e: d4:69:6e:0f:60:9a:12:5a:0f:27:37:d7:83:ab:90: 86:c0:a2:e2:af:a9:9a:63:4b:69:d8:f8:48:0f:38: 35:cb:62:db:78:60:44:8d:c9:58:e3:b2:28:92:15: d1:17:33:97:ff:fa:5e:20:76:30:17:ea:19:00:d7: cf:fb:de:a2:53:4c:e2:47:26:76:dc:3a:2f:7d:9d: b7:bc:2c:fa:f3:65:37:f3:9b:7d:9b:3c:19:69:6f: f3:9f:f8:7e:df:e5:b6:35:a9:0b:09:27:5c:62:8c: 51:17:99:74:16:8c:e2:bc:ab:5a:32:7a:79:1b:a8: bc:7e:14:9a:64:fc:95:13:c0:4d:2d:0e:53:aa:0e: 1a:37:5d:75:a5:cb:32:c6:71:7b:8d:af:5e:49:43: 01:a0:cf:57:c1:f3:81:04:ec:2e:e9:55:e3:ce:41: 78:66:bf:1f:a0:54:46:00:a7:3b:09:40:c3:34:ec: 7b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1C:F3:0B:6E:39:2E:15:ED:54:F7:38:DF:E1:FB:4B:D6:EA:89:45 X509v3 Authority Key Identifier: keyid:5A:97:D9:AB:7E:B0:B4:A3:7A:68:7D:F4:82:43:A8:6F:6F:ED:59:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f1:0e:06:61:bb:70:94:a5:62:44:b3:80:f8:b5:63:23:f3: 97:57:0a:17:33:71:9b:f7:0d:f3:91:a9:bc:0c:e2:81:6a:99: 91:4a:ce:dc:f1:5e:e4:42:96:b1:54:8a:a5:8e:a7:11:ff:f1: c1:36:eb:36:31:b8:bf:3b:08:3c:29:05:eb:47:ac:a4:b3:a0: 92:c8:23:b7:e4:da:54:09:36:1f:e9:8f:3c:5a:df:f9:23:a2: 8b:70:52:09:50:03:b8:14:ee:05:31:32:68:41:00:88:e2:0e: dd:71:4c:42:70:c1:cf:f2:36:22:db:bd:96:ce:e1:ef:61:03: 67:bf:e6:62:37:90:74:d2:33:77:c2:24:d0:50:49:62:f7:c9: 48:eb:99:de:9a:35:b2:75:ff:6b:82:6a:a3:c2:7c:b6:c2:d7: 9d:e5:0a:be:c3:c4:d2:76:6b:e9:ef:be:f4:c5:1c:c2:aa:85: 14:bc:07:bd:3e:f2:7c:ea:eb:07:94:61:ed:cc:2a:c3:ba:11: 03:af:d8:c8:8d:d8:fb:00:3e:37:74:d7:bf:ea:f1:da:aa:79: 60:aa:ba:33:28:8f:ad:2d:5d:b2:f6:65:79:13:7d:34:52:4b: 3d:01:e0:c2:91:df:19:94:96:e6:e0:be:0f:58:20:99:e5:4d: 90:5d:ee:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULRZBATyAkKlSj+GHP5jeR0JeAZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE5N0Q5QUI3RUIwQjRBMzdBNjg3REY0ODI0M0E4NkY2 RkVENTk2RDAeFw0yNTA5MTcxNTQzNTNaFw0yNTA5MTgxOTExNTNaMDMxMTAvBgNV BAMTKEQzMUNGMzBCNkUzOTJFMTVFRDU0RjczOERGRTFGQjRCRDZFQTg5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYK6g3KRNIZ5nF0hCPym7Q6A8D VfcpcRYFFLqFTRzmmOzh9IkT9EVwuv+rs43RZSOqpJuDOAJX0E3AltYvnh6wsjbP KDDlAamvjtRpbg9gmhJaDyc314OrkIbAouKvqZpjS2nY+EgPODXLYtt4YESNyVjj siiSFdEXM5f/+l4gdjAX6hkA18/73qJTTOJHJnbcOi99nbe8LPrzZTfzm32bPBlp b/Of+H7f5bY1qQsJJ1xijFEXmXQWjOK8q1oyenkbqLx+FJpk/JUTwE0tDlOqDho3 XXWlyzLGcXuNr15JQwGgz1fB84EE7C7pVePOQXhmvx+gVEYApzsJQMM07HtVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0xzzC245LhXtVPc43+H7S9bqiUUwHwYDVR0j BBgwFoAUWpfZq36wtKN6aH30gkOob2/tWW0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFo5OHdVNWk1Y005N0hoaTZVb2JQbWNiZE1IZVhlM0VXeUF2NFAxbVpI eVMvMC81QTk3RDlBQjdFQjBCNEEzN0E2ODdERjQ4MjQzQTg2RjZGRUQ1OTZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBOTdEOUFCN0VCMEI0QTM3 QTY4N0RGNDgyNDNBODZGNkZFRDU5NkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFo5OHdVNWk1Y005N0hoaTZVb2JQbWNiZE1IZVhlM0VXeUF2NFAxbVpIeVMvMC81 QTk3RDlBQjdFQjBCNEEzN0E2ODdERjQ4MjQzQTg2RjZGRUQ1OTZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGfEOBmG7cJSlYkSzgPi1YyPzl1cKFzNxm/cN85GpvAzigWqZkUrO3PFe5EKW sVSKpY6nEf/xwTbrNjG4vzsIPCkF60espLOgksgjt+TaVAk2H+mPPFrf+SOii3BS CVADuBTuBTEyaEEAiOIO3XFMQnDBz/I2Itu9ls7h72EDZ7/mYjeQdNIzd8Ik0FBJ YvfJSOuZ3po1snX/a4Jqo8J8tsLXneUKvsPE0nZr6e++9MUcwqqFFLwHvT7yfOrr B5Rh7cwqw7oRA6/YyI3Y+wA+N3TXv+rx2qp5YKq6MyiPrS1dsvZleRN9NFJLPQHg wpHfGZSW5uC+D1ggmeVNkF3uXg== -----END CERTIFICATE-----Generated at Thu Sep 18 10:09:26 2025 by rpki-client