$ rpki-client -vvf rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft File: D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft (raw, json) Hash identifier: 55YTeGCrf7vbt7tAxUWmO4stANHtwcUSNTGsE5aw4Go= Subject key identifier: D9:12:17:63:74:4C:A5:BF:FD:99:AF:68:BC:C3:53:2C:31:FF:FE:97 Authority key identifier: D5:C4:31:D1:7B:83:07:35:FE:B2:64:09:C6:9E:3E:F4:FE:61:DB:C2 Certificate issuer: /CN=D5C431D17B830735FEB26409C69E3EF4FE61DBC2 Certificate serial: 57B5829A8BE6A24D8F08E1A8DA2A875C8DC17C6B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer Subject info access: rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft Manifest number: 41 Signing time: Wed 20 Aug 2025 08:45:52 +0000 Manifest this update: Wed 20 Aug 2025 08:40:52 +0000 Manifest next update: Thu 21 Aug 2025 11:40:52 +0000 Files and hashes: 1: D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl (hash: FGTaSl4QyOJ4jnR2a0woWw4Kuc+9H3ymH6RJnZofzJ8=) 2: 323830343a386663343a3a2f33322d3438203d3e20323733353130.roa (hash: DETwoG/6qi/ZI8aHY1Z5rVUEPEzo75t1n/OyDZwKtCg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 11:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b5:82:9a:8b:e6:a2:4d:8f:08:e1:a8:da:2a:87:5c:8d:c1:7c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C431D17B830735FEB26409C69E3EF4FE61DBC2 Validity Not Before: Aug 20 08:40:52 2025 GMT Not After : Aug 21 11:40:52 2025 GMT Subject: CN=D9121763744CA5BFFD99AF68BCC3532C31FFFE97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:7a:e8:a1:c6:42:ab:44:ae:40:ee:dd:7e: ad:2a:1d:de:3c:8d:23:dc:ed:ea:14:0b:83:0b:ce: a3:2e:83:50:9c:47:63:19:05:a6:e5:9f:c2:e9:27: a2:a7:5d:39:7e:88:2d:c2:e2:c1:cb:86:32:b3:87: 48:a8:fa:34:91:b2:4d:2f:69:68:73:28:d3:c7:e4: 3e:ef:68:4f:8d:8f:c9:e8:ae:00:b0:6b:ed:3b:6f: 7b:b0:0f:de:88:72:1c:4c:b6:14:b1:cd:af:98:b2: a2:90:da:99:45:f9:9e:0e:b3:49:3f:25:7d:14:60: 57:2d:3d:3f:5e:0e:2f:5b:dd:59:7e:ee:d4:0b:f9: fe:a8:ef:24:35:c5:0d:29:c9:98:be:23:00:90:46: e1:32:5a:29:3d:ca:3b:7f:0b:06:9a:35:92:61:e3: df:b3:85:9d:8c:d3:61:78:6d:e8:28:09:5c:4e:02: f6:39:da:5c:37:b1:51:a7:b6:d5:4e:30:58:e4:b3: 93:d7:ab:d8:04:17:54:77:d4:6b:1f:50:68:db:bb: 15:15:6e:97:98:91:10:02:8c:33:cb:9a:2f:e9:2c: f5:3f:c3:1f:e1:7e:97:fe:73:24:f0:94:c5:82:e6: 79:bb:09:d6:f9:a7:d3:dc:56:3f:b4:f5:ca:29:c5: a1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:12:17:63:74:4C:A5:BF:FD:99:AF:68:BC:C3:53:2C:31:FF:FE:97 X509v3 Authority Key Identifier: keyid:D5:C4:31:D1:7B:83:07:35:FE:B2:64:09:C6:9E:3E:F4:FE:61:DB:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ee:b9:ec:7a:4f:53:f3:aa:f9:63:a6:a2:f8:09:66:01:05: ee:85:51:d8:0b:d9:dd:23:e4:c5:86:34:ba:4a:d8:41:d3:e2: 89:c8:17:7e:aa:8a:03:1c:d3:7b:0f:b7:8d:d2:ba:c8:c1:95: b8:8d:ba:d4:52:94:3b:e8:9d:d3:60:06:69:69:31:b8:ef:55: 92:2f:20:1e:73:2f:d1:a6:da:5d:f7:da:50:de:47:d5:42:f7: 89:ff:47:9c:60:6d:27:a1:9c:17:b1:43:e5:96:e9:0e:4a:d1: 08:c8:27:8a:93:95:e6:15:c3:40:98:80:65:89:b8:57:04:e8: 27:81:78:ac:44:96:c4:5c:d2:bd:be:f5:a3:9d:b5:fa:59:5e: 8b:7b:e3:b5:56:bc:6a:a8:16:26:98:5a:8b:86:1e:1b:02:e8: 59:64:93:b1:e0:a0:2a:e6:10:ac:b8:05:db:20:17:4f:b4:6e: b3:df:09:5f:c3:21:6d:de:55:75:61:87:fe:49:47:e5:5d:2f: 42:9c:67:b4:4e:5d:a0:a9:53:ae:60:01:d4:07:37:17:46:a8: 24:39:c7:5b:f7:aa:bc:58:21:c4:51:a5:79:20:54:9b:47:35: c7:d2:c3:97:f0:0a:f9:bd:86:a9:27:5f:64:f2:69:b7:09:a5: db:90:1f:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUV7WCmovmok2PCOGo2iqHXI3BfGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDNDMxRDE3QjgzMDczNUZFQjI2NDA5QzY5RTNFRjRG RTYxREJDMjAeFw0yNTA4MjAwODQwNTJaFw0yNTA4MjExMTQwNTJaMDMxMTAvBgNV BAMTKEQ5MTIxNzYzNzQ0Q0E1QkZGRDk5QUY2OEJDQzM1MzJDMzFGRkZFOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBWHroocZCq0SuQO7dfq0qHd48 jSPc7eoUC4MLzqMug1CcR2MZBabln8LpJ6KnXTl+iC3C4sHLhjKzh0io+jSRsk0v aWhzKNPH5D7vaE+Nj8norgCwa+07b3uwD96IchxMthSxza+YsqKQ2plF+Z4Os0k/ JX0UYFctPT9eDi9b3Vl+7tQL+f6o7yQ1xQ0pyZi+IwCQRuEyWik9yjt/CwaaNZJh 49+zhZ2M02F4begoCVxOAvY52lw3sVGnttVOMFjks5PXq9gEF1R31GsfUGjbuxUV bpeYkRACjDPLmi/pLPU/wx/hfpf+cyTwlMWC5nm7Cdb5p9PcVj+09copxaEnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2RIXY3RMpb/9ma9ovMNTLDH//pcwHwYDVR0j BBgwFoAU1cQx0XuDBzX+smQJxp4+9P5h28IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVNxeEY5b1ZHeHNjVWJzQ0haSm9ZOFRQeEc0M1N2OFBwa1VRbmJyMzVw TUQvMC9ENUM0MzFEMTdCODMwNzM1RkVCMjY0MDlDNjlFM0VGNEZFNjFEQkMyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1QzQzMUQxN0I4MzA3MzVG RUIyNjQwOUM2OUUzRUY0RkU2MURCQzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVNxeEY5b1ZHeHNjVWJzQ0haSm9ZOFRQeEc0M1N2OFBwa1VRbmJyMzVwTUQvMC9E NUM0MzFEMTdCODMwNzM1RkVCMjY0MDlDNjlFM0VGNEZFNjFEQkMyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFO657HpPU/Oq+WOmovgJZgEF7oVR2AvZ3SPkxYY0ukrYQdPiicgXfqqKAxzT ew+3jdK6yMGVuI261FKUO+id02AGaWkxuO9Vki8gHnMv0abaXffaUN5H1UL3if9H nGBtJ6GcF7FD5ZbpDkrRCMgnipOV5hXDQJiAZYm4VwToJ4F4rESWxFzSvb71o521 +llei3vjtVa8aqgWJphai4YeGwLoWWSTseCgKuYQrLgF2yAXT7Rus98JX8Mhbd5V dWGH/klH5V0vQpxntE5doKlTrmAB1Ac3F0aoJDnHW/eqvFghxFGleSBUm0c1x9LD l/AK+b2GqSdfZPJptwml25Afxg== -----END CERTIFICATE-----Generated at Wed Aug 20 18:21:37 2025 by rpki-client