$ rpki-client -vvf rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.mft File: 5002EE56B40431CA262F59717A16E5A8812286A5.mft (raw, json) Hash identifier: UGolJ4XgsyYu/OV/CpjNZh7JcMivLd5eeUTuwquxMRI= Subject key identifier: B0:43:A7:B1:F8:44:63:48:AD:D3:87:24:60:01:9A:8A:B8:DC:03:DE Authority key identifier: 50:02:EE:56:B4:04:31:CA:26:2F:59:71:7A:16:E5:A8:81:22:86:A5 Certificate issuer: /CN=5002EE56B40431CA262F59717A16E5A8812286A5 Certificate serial: 741E2BD5289FACE14D047D8188FD0DB7BA95A454 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5002EE56B40431CA262F59717A16E5A8812286A5.cer Subject info access: rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.mft Manifest number: 15 Signing time: Wed 20 Aug 2025 02:52:44 +0000 Manifest this update: Wed 20 Aug 2025 02:47:44 +0000 Manifest next update: Thu 21 Aug 2025 06:24:44 +0000 Files and hashes: 1: 3138362e3235312e3139322e302f32312d3332203d3e20323632383334.roa (hash: hnKgVk2wpWgB/8wNQx/o1GayrTWmQ+FySDKckNiQ2YY=) 2: 3138392e39302e32382e302f32322d3332203d3e20323632383334.roa (hash: L+tfe9pQxZQd/Y6KVA7n1IB/T5/Jk+cT3in4esS2zwo=) 3: 323830343a3263303a3a2f33322d313238203d3e20323632383334.roa (hash: fKQIDHkLGSf57vkAV8EJp/qAuCCDKYsk2hRo+3WO9PQ=) 4: 5002EE56B40431CA262F59717A16E5A8812286A5.crl (hash: pgVvYfAvuipWl1yDSjyPi+c2/KdqQudPkEqDYyQ7Rs0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.crl rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5002EE56B40431CA262F59717A16E5A8812286A5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 06:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:1e:2b:d5:28:9f:ac:e1:4d:04:7d:81:88:fd:0d:b7:ba:95:a4:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5002EE56B40431CA262F59717A16E5A8812286A5 Validity Not Before: Aug 20 02:47:44 2025 GMT Not After : Aug 21 06:24:44 2025 GMT Subject: CN=B043A7B1F8446348ADD3872460019A8AB8DC03DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:4d:5e:2b:e6:61:b7:b4:8c:1a:db:84:3c: 50:ea:0b:32:08:d2:da:39:c7:98:26:0e:17:25:80: b7:03:35:58:71:1c:a1:50:92:95:8a:bd:88:e4:f5: 4c:29:e1:9b:99:00:f2:d6:af:b9:bb:51:62:d2:51: 53:bf:d2:da:17:1c:35:ac:b4:56:a4:03:9f:ae:a3: 94:48:90:98:83:bb:91:dc:32:b7:37:d9:6a:39:8a: 5d:ea:58:b3:5c:82:6e:65:2a:c2:e0:9c:73:c3:ef: 68:9a:ee:cf:ad:06:9b:8b:7a:32:e4:c0:ae:41:57: 9a:b6:71:30:fc:d3:aa:b5:af:0c:28:15:b3:4b:4c: 40:92:39:e5:b4:67:8c:f1:d2:b6:fc:bb:35:87:1d: b8:5d:70:60:71:e5:d1:45:f6:54:43:d2:f9:3d:f3: f3:46:3c:1d:04:97:95:e5:c4:53:db:5e:6f:d9:cf: 46:c2:db:11:40:27:2a:e4:c5:ac:fb:f1:c8:2c:74: 08:bf:86:bd:85:9f:3f:f5:ef:62:bd:35:b2:7f:2a: c7:4e:45:ec:be:bf:8c:96:c8:7b:ae:4d:9f:82:ea: 40:9f:7e:e9:78:b7:9b:25:11:f8:89:4e:57:7d:d0: 34:7c:68:eb:0e:b1:8e:23:da:3b:4d:79:a2:68:6c: d4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:43:A7:B1:F8:44:63:48:AD:D3:87:24:60:01:9A:8A:B8:DC:03:DE X509v3 Authority Key Identifier: keyid:50:02:EE:56:B4:04:31:CA:26:2F:59:71:7A:16:E5:A8:81:22:86:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5002EE56B40431CA262F59717A16E5A8812286A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/5002EE56B40431CA262F59717A16E5A8812286A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:04:0d:76:a9:de:2a:d1:f5:08:7c:cb:3d:9a:79:c6:d9:3f: c3:e6:b2:14:1c:11:1c:71:fc:96:d3:c1:31:cf:0b:86:34:78: a5:06:2a:eb:a2:0e:fe:34:c9:b7:7c:31:cf:83:06:40:85:7e: 3b:b7:56:0f:91:07:fe:fa:b4:44:54:97:bc:05:f8:5b:9c:0a: 12:60:5d:47:df:db:e4:11:e0:f5:fb:b8:b4:3a:70:da:fd:b9: 8b:bf:3c:07:51:3d:b8:a8:fe:45:13:5e:5e:ae:c1:c7:df:06: ce:c6:de:9d:00:1d:9a:29:35:3f:ac:b5:3e:e1:09:76:7c:f3: f3:66:7a:fb:13:78:fb:7d:ae:af:28:ae:a5:7f:e3:7b:fa:9d: 00:2e:e2:b7:b0:df:14:e2:37:f2:8a:b1:de:57:cc:eb:c7:27: 86:bd:6e:60:b0:1e:29:c6:2d:17:b4:24:20:0c:16:2f:a0:a0: cb:49:b8:8b:ed:a7:51:58:f2:fc:9d:e1:61:e8:30:70:8c:5f: 43:c9:70:83:95:f9:4a:52:19:8a:17:a3:f4:23:dc:03:e6:f7: bf:31:3c:8e:85:64:67:b0:c1:d9:3b:d5:c5:f6:25:d2:ab:80: bd:c6:5c:19:c0:25:96:58:dd:51:91:3e:82:7d:ce:f7:8f:4a: 0d:72:14:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdB4r1SifrOFNBH2BiP0Nt7qVpFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTAwMkVFNTZCNDA0MzFDQTI2MkY1OTcxN0ExNkU1QTg4 MTIyODZBNTAeFw0yNTA4MjAwMjQ3NDRaFw0yNTA4MjEwNjI0NDRaMDMxMTAvBgNV BAMTKEIwNDNBN0IxRjg0NDYzNDhBREQzODcyNDYwMDE5QThBQjhEQzAzREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNXk1eK+Zht7SMGtuEPFDqCzII 0to5x5gmDhclgLcDNVhxHKFQkpWKvYjk9Uwp4ZuZAPLWr7m7UWLSUVO/0toXHDWs tFakA5+uo5RIkJiDu5HcMrc32Wo5il3qWLNcgm5lKsLgnHPD72ia7s+tBpuLejLk wK5BV5q2cTD806q1rwwoFbNLTECSOeW0Z4zx0rb8uzWHHbhdcGBx5dFF9lRD0vk9 8/NGPB0El5XlxFPbXm/Zz0bC2xFAJyrkxaz78cgsdAi/hr2Fnz/172K9NbJ/KsdO Rey+v4yWyHuuTZ+C6kCfful4t5slEfiJTld90DR8aOsOsY4j2jtNeaJobNSBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsEOnsfhEY0it04ckYAGairjcA94wHwYDVR0j BBgwFoAUUALuVrQEMcomL1lxehblqIEihqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEFIelpZNTNLUXJkcVdFV244ZFl1MWJvUW5LaDl2ZjlCZVI0bW5iTkU4 TlMvMC81MDAyRUU1NkI0MDQzMUNBMjYyRjU5NzE3QTE2RTVBODgxMjI4NkE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwMDJFRTU2QjQwNDMxQ0Ey NjJGNTk3MTdBMTZFNUE4ODEyMjg2QTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OEFIelpZNTNLUXJkcVdFV244ZFl1MWJvUW5LaDl2ZjlCZVI0bW5iTkU4TlMvMC81 MDAyRUU1NkI0MDQzMUNBMjYyRjU5NzE3QTE2RTVBODgxMjI4NkE1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApQQNdqneKtH1CHzLPZp5xtk/w+ayFBwRHHH8ltPBMc8LhjR4pQYq66IO/jTJ t3wxz4MGQIV+O7dWD5EH/vq0RFSXvAX4W5wKEmBdR9/b5BHg9fu4tDpw2v25i788 B1E9uKj+RRNeXq7Bx98GzsbenQAdmik1P6y1PuEJdnzz82Z6+xN4+32uryiupX/j e/qdAC7it7DfFOI38oqx3lfM68cnhr1uYLAeKcYtF7QkIAwWL6Cgy0m4i+2nUVjy /J3hYegwcIxfQ8lwg5X5SlIZihej9CPcA+b3vzE8joVkZ7DB2TvVxfYl0quAvcZc GcAllljdUZE+gn3O949KDXIU8A== -----END CERTIFICATE-----Generated at Wed Aug 20 16:17:41 2025 by rpki-client