$ rpki-client -vvf rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft File: 5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft (raw, json) Hash identifier: lzpLwFmBLCY2jEdlZQ56RKjLUB3d32JO5iRu3eL43tg= Subject key identifier: 84:E2:94:12:19:1F:99:24:B9:95:29:33:6F:E2:AD:1E:5C:4F:7D:3F Authority key identifier: 5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F Certificate issuer: /CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F Certificate serial: 6F48B7527CF50A5B3092E5632A9971A233F9E69C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer Subject info access: rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft Manifest number: 020A Signing time: Wed 20 Aug 2025 10:08:13 +0000 Manifest this update: Wed 20 Aug 2025 10:03:13 +0000 Manifest next update: Thu 21 Aug 2025 10:11:13 +0000 Files and hashes: 1: 34352e37302e32382e302f32322d3332203d3e20323637353734.roa (hash: 0nfaEfHwdQI5BdLajmRxzlZpzr/zR2hc07bBmvu/aWc=) 2: 323830343a343338303a3a2f33322d313238203d3e20323637353734.roa (hash: RUhPVJbcOr4gT219vmEfw5IpzZ4PVK7OTvfZxHJfvHY=) 3: 5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl (hash: y+l+uDrHeo+a1ZXe02k1Efuy8NxtyglT9y1Npq64hY0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 10:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:48:b7:52:7c:f5:0a:5b:30:92:e5:63:2a:99:71:a2:33:f9:e6:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F Validity Not Before: Aug 20 10:03:13 2025 GMT Not After : Aug 21 10:11:13 2025 GMT Subject: CN=84E29412191F9924B99529336FE2AD1E5C4F7D3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:be:cf:9e:be:f5:b0:0d:66:a0:3b:80:42:02: 29:35:f3:29:90:6d:52:5c:09:87:e3:10:5f:ba:c6: af:b0:25:df:a8:2a:cc:25:a2:4d:0d:5a:05:4e:f6: 36:8d:a2:34:08:fe:cd:67:d9:12:c1:2e:d9:5a:da: a4:9c:1a:ea:36:a6:22:e7:a4:73:33:1c:4d:6d:c6: 18:b4:a7:4f:fb:76:2e:58:9d:cd:7f:19:ad:26:08: 75:57:cd:45:27:1d:9a:e5:39:00:38:2f:f6:d4:07: 4d:01:b3:7a:32:44:d4:b9:95:03:02:6a:27:ea:a9: 41:91:95:15:15:9b:ad:d1:90:3c:bf:33:51:7f:0b: f4:b9:79:d6:04:68:fe:ef:25:26:31:54:24:69:20: 27:3f:28:93:28:f5:ed:6d:b2:4e:8a:c7:6f:f5:21: 1b:a8:8d:2c:d2:e4:3d:41:a0:7f:e9:33:02:78:84: 01:56:c1:ea:6f:f4:46:de:f5:de:fa:fe:25:41:7b: ca:6e:81:46:37:7b:9b:11:52:2e:5a:a7:bc:c7:fc: 6f:10:ec:fe:2d:04:d0:58:40:13:39:66:f2:5e:f8: f1:08:ea:8c:c9:d4:a4:ea:bb:3c:80:d1:fa:5c:81: 9b:2f:56:64:11:d3:77:6e:28:1d:69:4c:29:f5:53: 13:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E2:94:12:19:1F:99:24:B9:95:29:33:6F:E2:AD:1E:5C:4F:7D:3F X509v3 Authority Key Identifier: keyid:5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:34:3d:5c:00:6c:1b:ac:38:95:91:8e:f5:5c:48:9f:f3:44: 04:0c:8f:01:07:1b:e6:2d:96:f4:cf:83:b5:ce:9c:2c:d9:1e: d8:09:77:dd:c5:06:c9:ac:d2:aa:1b:cf:01:38:90:e5:a8:bb: cc:0d:7a:cb:68:a4:93:c7:9d:f4:f6:4a:8d:2e:8f:ff:3d:13: 49:80:5c:da:30:f0:6a:d2:aa:72:94:4a:a6:0d:64:75:8c:9a: b2:d8:20:ef:6b:31:60:ee:86:c4:0d:1f:df:fb:c1:70:34:85: 22:3e:3e:99:ac:83:63:5f:08:c4:e8:d9:d2:90:63:98:c2:bb: f2:82:22:0e:79:8a:38:c0:f2:90:8f:80:52:2f:b0:38:a8:93: 02:33:05:18:32:1c:10:04:1a:cf:e2:eb:5c:fd:63:cf:53:d2: 34:4e:61:cf:93:84:d3:2e:9b:78:e5:7d:a1:0b:41:1d:e4:fa: b3:1b:88:57:ff:b0:77:92:fa:6c:a4:10:06:17:f1:d3:47:37: 3c:09:9b:e2:5e:d7:55:40:67:b9:15:4f:9e:e4:86:2c:b7:f8: eb:07:09:70:84:52:3c:5c:6b:93:ac:e0:05:1d:bd:43:94:92: c6:d2:ff:21:22:a6:58:9b:6e:cc:37:c3:2b:03:bd:83:cd:30: e6:fa:7e:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUb0i3Unz1ClswkuVjKplxojP55pwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEwNTJEMzFGRTQwQjVGMzcwNjM3RTJDMEU0RjFBMThG RjA4Mjk1RjAeFw0yNTA4MjAxMDAzMTNaFw0yNTA4MjExMDExMTNaMDMxMTAvBgNV BAMTKDg0RTI5NDEyMTkxRjk5MjRCOTk1MjkzMzZGRTJBRDFFNUM0RjdEM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChvs+evvWwDWagO4BCAik18ymQ bVJcCYfjEF+6xq+wJd+oKswlok0NWgVO9jaNojQI/s1n2RLBLtla2qScGuo2piLn pHMzHE1txhi0p0/7di5Ync1/Ga0mCHVXzUUnHZrlOQA4L/bUB00Bs3oyRNS5lQMC aifqqUGRlRUVm63RkDy/M1F/C/S5edYEaP7vJSYxVCRpICc/KJMo9e1tsk6Kx2/1 IRuojSzS5D1BoH/pMwJ4hAFWwepv9Ebe9d76/iVBe8pugUY3e5sRUi5ap7zH/G8Q 7P4tBNBYQBM5ZvJe+PEI6ozJ1KTquzyA0fpcgZsvVmQR03duKB1pTCn1UxPDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhOKUEhkfmSS5lSkzb+KtHlxPfT8wHwYDVR0j BBgwFoAUWgUtMf5AtfNwY34sDk8aGP8IKV8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN01IZlhrdW5DaVFCclJTRlA1OW9qMVVyOExYc0JHeEJncTFzR1lUNE1m TnAvMS81QTA1MkQzMUZFNDBCNUYzNzA2MzdFMkMwRTRGMUExOEZGMDgyOTVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBMDUyRDMxRkU0MEI1RjM3 MDYzN0UyQzBFNEYxQTE4RkYwODI5NUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N01IZlhrdW5DaVFCclJTRlA1OW9qMVVyOExYc0JHeEJncTFzR1lUNE1mTnAvMS81 QTA1MkQzMUZFNDBCNUYzNzA2MzdFMkMwRTRGMUExOEZGMDgyOTVGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqDQ9XABsG6w4lZGO9VxIn/NEBAyPAQcb5i2W9M+Dtc6cLNke2Al33cUGyazS qhvPATiQ5ai7zA16y2ikk8ed9PZKjS6P/z0TSYBc2jDwatKqcpRKpg1kdYyastgg 72sxYO6GxA0f3/vBcDSFIj4+mayDY18IxOjZ0pBjmMK78oIiDnmKOMDykI+AUi+w OKiTAjMFGDIcEAQaz+LrXP1jz1PSNE5hz5OE0y6beOV9oQtBHeT6sxuIV/+wd5L6 bKQQBhfx00c3PAmb4l7XVUBnuRVPnuSGLLf46wcJcIRSPFxrk6zgBR29Q5SSxtL/ ISKmWJtuzDfDKwO9g80w5vp+oA== -----END CERTIFICATE-----Generated at Wed Aug 20 16:14:20 2025 by rpki-client