$ rpki-client -vvf rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft File: 4856F1A3B30D5C7881DA87018005E5D420414FCA.mft (raw, json) Hash identifier: a2Vzg/I2oUZ4fDaPsK8v/Sd7VeRuhXe3eDukX51KVoI= Subject key identifier: 9B:84:43:34:A5:C9:F4:15:2F:40:A3:F9:4D:9E:2E:56:17:71:1E:88 Authority key identifier: 48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA Certificate issuer: /CN=4856F1A3B30D5C7881DA87018005E5D420414FCA Certificate serial: 130B3AB8F3D10646F27ACA7EE0411E2CCBBF396D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer Subject info access: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft Manifest number: C7 Signing time: Wed 20 Aug 2025 03:08:30 +0000 Manifest this update: Wed 20 Aug 2025 03:03:30 +0000 Manifest next update: Thu 21 Aug 2025 03:18:30 +0000 Files and hashes: 1: 4856F1A3B30D5C7881DA87018005E5D420414FCA.crl (hash: Izwby1Aul+Ht/OrQPcI068EvtSom5zr58G5toy6/rnk=) 2: 3138372e33332e3230382e302f32302d3332203d3e203533303838.roa (hash: NBzUedd6ZxjbCTpvddwCofjpV/PLJrC91qO5bna3/S4=) 3: 3137372e32312e38302e302f32302d3332203d3e203533303838.roa (hash: wXf/RK8DqR/CjpwFvOAppiNi0Tr5aa7oPUSPTknLvSQ=) 4: 323830343a3336303a3a2f33322d313238203d3e203533303838.roa (hash: VzHvYSqj1UpdHPrHiFGlX041xdryfjksMALlGnDnEN4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 03:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:0b:3a:b8:f3:d1:06:46:f2:7a:ca:7e:e0:41:1e:2c:cb:bf:39:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4856F1A3B30D5C7881DA87018005E5D420414FCA Validity Not Before: Aug 20 03:03:30 2025 GMT Not After : Aug 21 03:18:30 2025 GMT Subject: CN=9B844334A5C9F4152F40A3F94D9E2E5617711E88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:c9:3e:32:f8:95:df:eb:35:9a:f3:28:04: c2:bd:8a:11:5b:29:03:56:00:c7:b7:9d:57:d3:ab: dd:34:a9:a3:07:28:14:0e:d9:d6:15:36:58:03:36: 76:51:30:98:14:af:10:fd:33:f6:79:7e:1c:81:8c: b6:c0:ea:80:9a:58:c3:c1:ff:6f:86:a2:11:a7:c6: 36:d0:f5:49:cb:b5:81:58:50:19:4f:4c:d7:4d:84: 2d:14:14:f2:52:a1:a2:10:41:95:1b:0c:91:70:c4: 83:78:54:e4:2e:1e:e7:61:f3:67:81:ec:17:61:50: d1:86:8f:a4:3e:9d:1a:bd:2c:ea:b0:53:f3:cf:ae: 36:d0:d7:1e:ba:db:a9:64:3a:86:90:c3:64:b8:d2: 3a:be:e8:50:de:ed:38:bd:27:14:45:74:79:f7:b2: 2d:cd:68:20:4d:ce:a3:99:87:e2:d1:0e:cc:9d:0b: 15:4c:f3:2c:c1:64:1d:53:9e:2b:a7:d8:3a:39:92: 4a:9b:05:ee:58:d3:33:36:c9:ff:75:ad:ad:7c:d1: 99:89:aa:69:40:5f:25:6e:af:17:e9:a0:ec:23:a8: 1a:f9:8d:59:cf:5e:d9:95:f2:4d:bf:1a:1d:59:3e: d4:ee:f3:2e:1b:e4:e6:49:d2:58:23:0d:a9:ef:6a: 3d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:84:43:34:A5:C9:F4:15:2F:40:A3:F9:4D:9E:2E:56:17:71:1E:88 X509v3 Authority Key Identifier: keyid:48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:4b:78:3c:ed:a1:4d:35:f7:6a:8d:e0:b6:60:20:01:1f:32: af:20:9d:f0:b5:c6:c5:95:58:86:bc:30:54:ea:fa:e6:fa:85: 63:5b:96:c4:80:75:73:d1:a5:c6:94:7e:4f:d7:a4:66:c4:76: 23:a5:4a:52:10:72:12:45:00:9c:c2:81:df:80:21:78:6a:89: 7f:eb:e7:ae:9a:56:ac:30:b0:07:a0:c2:03:10:d5:25:ee:7d: 52:3d:b6:8f:9e:23:2b:90:06:8a:c6:cd:90:ad:02:44:c0:2b: bc:63:61:ca:a5:f7:13:86:54:38:a9:69:ef:de:85:22:79:5e: 24:09:99:cb:b3:e8:fc:58:bf:fb:52:95:54:bb:a3:6c:53:32: 23:fc:f2:1d:64:c0:23:06:af:2a:ab:ef:e1:0c:c2:de:04:2c: c1:01:d1:64:6b:aa:ee:33:c1:e5:c7:7b:b3:a0:cc:9e:42:3c: c9:89:61:fd:59:c4:aa:30:b1:bd:ab:19:2c:cc:63:66:a7:f8: b3:07:c9:d1:52:26:b1:75:d8:7c:bd:cf:47:50:75:7d:b6:4b: 5d:5e:a0:7f:8a:f8:b4:cd:7c:7c:a9:ff:db:51:04:28:60:e9: e4:a4:2f:d0:f4:51:81:f9:e7:59:7f:c4:d3:88:e0:58:86:64: 08:c3:01:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEws6uPPRBkbyesp+4EEeLMu/OW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1NkYxQTNCMzBENUM3ODgxREE4NzAxODAwNUU1RDQy MDQxNEZDQTAeFw0yNTA4MjAwMzAzMzBaFw0yNTA4MjEwMzE4MzBaMDMxMTAvBgNV BAMTKDlCODQ0MzM0QTVDOUY0MTUyRjQwQTNGOTREOUUyRTU2MTc3MTFFODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvCsk+MviV3+s1mvMoBMK9ihFb KQNWAMe3nVfTq900qaMHKBQO2dYVNlgDNnZRMJgUrxD9M/Z5fhyBjLbA6oCaWMPB /2+GohGnxjbQ9UnLtYFYUBlPTNdNhC0UFPJSoaIQQZUbDJFwxIN4VOQuHudh82eB 7BdhUNGGj6Q+nRq9LOqwU/PPrjbQ1x6626lkOoaQw2S40jq+6FDe7Ti9JxRFdHn3 si3NaCBNzqOZh+LRDsydCxVM8yzBZB1Tniun2Do5kkqbBe5Y0zM2yf91ra180ZmJ qmlAXyVurxfpoOwjqBr5jVnPXtmV8k2/Gh1ZPtTu8y4b5OZJ0lgjDanvaj2fAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUm4RDNKXJ9BUvQKP5TZ4uVhdxHogwHwYDVR0j BBgwFoAUSFbxo7MNXHiB2ocBgAXl1CBBT8owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWNoZXl4VG5HRG52dXd6eE0zOEY0dG9ZQzczVUhaNlU2aXpVeW9Sckdz Z3QvMC80ODU2RjFBM0IzMEQ1Qzc4ODFEQTg3MDE4MDA1RTVENDIwNDE0RkNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4NTZGMUEzQjMwRDVDNzg4 MURBODcwMTgwMDVFNUQ0MjA0MTRGQ0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWNoZXl4VG5HRG52dXd6eE0zOEY0dG9ZQzczVUhaNlU2aXpVeW9SckdzZ3QvMC80 ODU2RjFBM0IzMEQ1Qzc4ODFEQTg3MDE4MDA1RTVENDIwNDE0RkNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUEt4PO2hTTX3ao3gtmAgAR8yryCd8LXGxZVYhrwwVOr65vqFY1uWxIB1c9Gl xpR+T9ekZsR2I6VKUhByEkUAnMKB34AheGqJf+vnrppWrDCwB6DCAxDVJe59Uj22 j54jK5AGisbNkK0CRMArvGNhyqX3E4ZUOKlp796FInleJAmZy7Po/Fi/+1KVVLuj bFMyI/zyHWTAIwavKqvv4QzC3gQswQHRZGuq7jPB5cd7s6DMnkI8yYlh/VnEqjCx vasZLMxjZqf4swfJ0VImsXXYfL3PR1B1fbZLXV6gf4r4tM18fKn/21EEKGDp5KQv 0PRRgfnnWX/E04jgWIZkCMMBjA== -----END CERTIFICATE-----Generated at Wed Aug 20 18:31:50 2025 by rpki-client