$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft File: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft (raw, json) Hash identifier: HGJaqN98Jj6zCUXy1gj5ofXdSO6vDlvQAtkzr3YYkKk= Subject key identifier: 8B:7A:9A:41:F2:E3:2B:37:A1:FD:F4:DD:36:C5:B1:79:FF:75:E4:6F Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 Certificate issuer: /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Certificate serial: 4E6C038E275238775B1F805BFC0AF922DCF9E3AF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft Manifest number: 028F Signing time: Thu 18 Sep 2025 05:51:23 +0000 Manifest this update: Thu 18 Sep 2025 05:46:23 +0000 Manifest next update: Fri 19 Sep 2025 09:44:23 +0000 Files and hashes: 1: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl (hash: PTXLcuJFUvNwZ+mYBr55jKSrAMWnQ3Cgnf1aaAEBFQ8=) 2: 323830343a326432383a3a2f33322d313238203d3e20323635323634.roa (hash: 0xs1tTdh2Qke0fip6d1TEfj28igzF6NdDvyXj3IPtmI=) 3: 3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa (hash: WqEYa1LHKO/TdU02rXFXLwns464zC4VFuzHF7wOxsfA=) 4: 3136382e39302e34382e302f32322d3332203d3e20323635323634.roa (hash: Bv6Lyj5+VhdPqvZ/TGH9M1sdk0ISaNwfb7BbI7c/FPE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 09:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:6c:03:8e:27:52:38:77:5b:1f:80:5b:fc:0a:f9:22:dc:f9:e3:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Validity Not Before: Sep 18 05:46:23 2025 GMT Not After : Sep 19 09:44:23 2025 GMT Subject: CN=8B7A9A41F2E32B37A1FDF4DD36C5B179FF75E46F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ea:98:19:5c:b1:f4:da:83:66:00:fe:9d:71: 64:e4:86:8d:36:5a:91:a0:97:3b:14:b5:50:d1:10: bd:fc:1d:f0:47:c5:74:c0:5e:1f:51:d3:d6:6b:4b: f6:b8:44:82:27:af:84:20:20:05:f4:2e:cb:7f:10: ec:fa:54:d1:a8:88:c8:b5:b1:db:cf:83:22:63:37: 3b:89:b6:4f:b1:23:12:29:84:31:09:68:a1:8d:74: 43:a1:dc:a9:41:1c:91:d1:0d:c2:67:ac:77:7c:52: 8d:fa:31:f1:6c:3c:90:8a:d5:33:9c:89:25:04:f7: c4:7a:d6:1a:6c:23:31:d0:00:2c:bc:23:7b:0e:f5: e9:3a:c3:94:fb:4e:ae:eb:13:11:0d:4d:7f:bf:23: f9:15:83:52:5a:49:bc:c6:40:72:79:b3:0c:a6:e4: fa:c0:b2:7c:6f:ff:28:76:a1:0f:38:91:3b:7a:ed: 54:40:1e:bc:0e:9f:73:b1:7c:13:64:51:72:b6:ac: 23:a5:42:90:f5:52:28:f5:06:d8:e0:55:0f:80:00: 0f:b1:c8:ec:6c:c4:a8:c5:40:d1:51:10:a3:ab:5b: 8d:b6:02:d5:5d:dd:01:8a:fe:34:07:55:f6:29:c7: 0d:5d:a8:c5:d2:6f:44:74:31:86:39:67:43:14:47: 8d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7A:9A:41:F2:E3:2B:37:A1:FD:F4:DD:36:C5:B1:79:FF:75:E4:6F X509v3 Authority Key Identifier: keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ff:99:ff:5f:30:b2:ea:cd:f8:98:ac:6a:43:d5:e0:7f:c1: 10:e6:ef:ad:ff:cc:ff:91:c4:41:94:fe:50:38:66:76:fa:33: 36:2b:d9:01:96:54:9a:b3:1e:6d:86:70:ed:82:77:37:6e:35: 63:69:64:0f:1c:05:d7:eb:8e:4c:a8:ce:63:2f:4e:e8:b2:d1: 15:99:3c:aa:0f:50:19:67:ae:fa:08:0a:33:6c:0b:ee:c8:93: a6:36:4d:8d:97:53:26:6a:f4:0c:bd:12:27:f6:cf:f2:5b:a6: dd:4b:ab:9d:5b:0d:ae:15:65:d5:92:48:74:0b:d5:45:fe:44: 8d:45:24:cc:fd:96:7e:c7:66:e1:4b:c8:25:b6:2b:87:d8:6f: ec:51:18:22:e1:c3:d3:f7:b8:67:c6:0f:98:ad:78:77:54:7c: ea:fa:0a:57:18:3a:48:a0:54:80:a8:c6:9e:f3:57:38:6f:25: bc:65:63:4b:c9:66:f2:a1:bb:ef:2a:0f:5e:ae:63:dd:5c:e6: 5b:da:d4:6a:82:3a:5c:c3:e4:87:8d:2e:dd:ec:5f:98:12:12: 7b:4c:33:8b:85:f1:61:f7:e3:cb:88:04:a3:71:fa:7f:1e:cf: 23:31:e3:69:ff:db:ab:a2:02:55:22:c7:18:03:71:e5:e1:fd: 32:26:4a:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTmwDjidSOHdbH4Bb/Ar5Itz5468wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzODM3RDdFQ0ExRkUxMTQ1RDBDRTE1RTBCRjg5NUVF MDZBMjdFMjAeFw0yNTA5MTgwNTQ2MjNaFw0yNTA5MTkwOTQ0MjNaMDMxMTAvBgNV BAMTKDhCN0E5QTQxRjJFMzJCMzdBMUZERjRERDM2QzVCMTc5RkY3NUU0NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU6pgZXLH02oNmAP6dcWTkho02 WpGglzsUtVDREL38HfBHxXTAXh9R09ZrS/a4RIInr4QgIAX0Lst/EOz6VNGoiMi1 sdvPgyJjNzuJtk+xIxIphDEJaKGNdEOh3KlBHJHRDcJnrHd8Uo36MfFsPJCK1TOc iSUE98R61hpsIzHQACy8I3sO9ek6w5T7Tq7rExENTX+/I/kVg1JaSbzGQHJ5swym 5PrAsnxv/yh2oQ84kTt67VRAHrwOn3OxfBNkUXK2rCOlQpD1Uij1BtjgVQ+AAA+x yOxsxKjFQNFREKOrW422AtVd3QGK/jQHVfYpxw1dqMXSb0R0MYY5Z0MUR43bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUi3qaQfLjKzeh/fTdNsWxef915G8wHwYDVR0j BBgwFoAUZTg31+yh/hFF0M4V4L+JXuBqJ+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZl UFMvMC82NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MzgzN0Q3RUNBMUZFMTE0 NUQwQ0UxNUUwQkY4OTVFRTA2QTI3RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZlUFMvMC82 NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAff+Z/18wsurN+JisakPV4H/BEObvrf/M/5HEQZT+UDhmdvozNivZAZZUmrMe bYZw7YJ3N241Y2lkDxwF1+uOTKjOYy9O6LLRFZk8qg9QGWeu+ggKM2wL7siTpjZN jZdTJmr0DL0SJ/bP8lum3UurnVsNrhVl1ZJIdAvVRf5EjUUkzP2Wfsdm4UvIJbYr h9hv7FEYIuHD0/e4Z8YPmK14d1R86voKVxg6SKBUgKjGnvNXOG8lvGVjS8lm8qG7 7yoPXq5j3VzmW9rUaoI6XMPkh40u3exfmBISe0wzi4XxYffjy4gEo3H6fx7PIzHj af/bq6ICVSLHGANx5eH9MiZKLQ== -----END CERTIFICATE-----Generated at Thu Sep 18 13:40:02 2025 by rpki-client