$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft File: DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft (raw, json) Hash identifier: fMvVEPANkB5eqWBv7yNiriLE2mPNt5k9v1370X4vsmU= Subject key identifier: 4D:32:76:9C:26:E9:97:3F:AD:3A:E9:27:D8:16:D3:09:47:D8:B8:3E Authority key identifier: DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3 Certificate issuer: /CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3 Certificate serial: 431F1A0759FD9DC230018A82B0435BD8FF4C615A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer Subject info access: rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft Manifest number: 029E Signing time: Wed 20 Aug 2025 14:23:31 +0000 Manifest this update: Wed 20 Aug 2025 14:18:31 +0000 Manifest next update: Thu 21 Aug 2025 17:45:31 +0000 Files and hashes: 1: 323830343a363065303a3a2f33322d3336203d3e20323639313937.roa (hash: D5Kh1u0vUQX58zC8K3kTptsTZXCjTHtVrMtIC/ORziw=) 2: DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl (hash: 8nA84xZiiZvLN2n7UmvWoj9HgGO2Fffnop7A2SKPr+s=) 3: 34352e3138312e3139362e302f32322d3234203d3e20323639313937.roa (hash: Col+LRGc/1lk9nvkTe3TytJA4agsIFfCWd9IIiNQBxI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 17:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:1f:1a:07:59:fd:9d:c2:30:01:8a:82:b0:43:5b:d8:ff:4c:61:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3 Validity Not Before: Aug 20 14:18:31 2025 GMT Not After : Aug 21 17:45:31 2025 GMT Subject: CN=4D32769C26E9973FAD3AE927D816D30947D8B83E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b6:99:a1:5a:9c:91:85:b6:86:52:b1:b0:33: a5:ea:04:fc:20:4c:f1:9a:a8:3f:7c:e7:e5:14:a5: 8b:a5:5e:ef:06:27:f1:b7:97:76:b3:3d:c9:47:cf: 2f:cd:9b:12:ad:43:48:a0:43:68:18:3b:23:ba:ca: b0:32:f8:ad:88:5b:2d:1f:d8:bf:b5:5e:45:23:35: bd:42:61:8d:b3:28:24:c2:ec:74:4e:b3:bd:cf:1c: 7e:32:3d:ed:14:a2:60:fe:66:83:4a:b1:17:fe:07: 0f:72:d4:b3:c9:f9:88:dc:f1:ff:6a:2a:55:eb:ed: f5:45:aa:53:25:7c:17:2e:ca:b2:d3:35:dd:95:ad: e6:95:14:82:7e:57:03:2e:ae:6c:80:19:37:8c:e0: 44:58:be:2b:4b:1d:f0:eb:95:f7:c9:f1:f7:83:bd: f9:71:aa:d6:13:1b:27:05:62:f7:77:b7:5e:00:82: 26:23:60:9c:93:74:cf:ee:90:e7:4b:aa:64:e1:81: 2b:8c:a6:29:42:80:0e:70:3b:a5:2a:06:65:e6:55: 26:9b:9c:7c:37:f9:e5:0d:1e:a8:ca:39:58:dd:9a: 74:a1:2a:fa:53:64:e7:9c:5f:69:1a:1f:f6:5a:28: 3e:07:ae:f6:47:ef:00:9d:39:ee:25:f5:00:04:80: 91:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:32:76:9C:26:E9:97:3F:AD:3A:E9:27:D8:16:D3:09:47:D8:B8:3E X509v3 Authority Key Identifier: keyid:DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d1:86:62:1f:b5:1c:16:e6:e8:2c:b9:d1:03:36:2c:7c:73: ee:11:72:23:4f:00:09:5e:45:77:2c:ed:cb:2a:06:61:e1:bc: 02:25:fc:5f:35:27:aa:d7:72:16:ca:37:78:b1:ce:bb:ce:28: d3:58:fb:93:a9:7d:be:60:0c:26:57:b5:b2:ec:58:4f:93:7b: 43:f0:95:cf:59:27:7f:84:23:e4:82:84:e4:05:fc:8e:2d:25: b5:17:c4:57:04:de:1b:5c:e7:84:ee:12:89:75:0f:e4:dc:f2: ff:57:d4:93:65:91:90:29:75:60:ab:1f:67:4a:b8:f9:c8:b4: d5:23:28:56:ea:8b:31:4e:64:bf:93:a4:5d:41:ba:4d:6f:ae: 19:b3:f9:41:9c:34:12:d8:7c:59:ab:f7:88:72:4a:17:95:60: be:fc:f4:4a:88:5c:a0:90:18:74:d6:3d:53:3c:43:90:76:53: be:24:7a:b5:7a:db:11:d1:0f:71:7e:d5:1b:c6:02:6a:79:56: a8:26:04:bd:74:f9:fb:82:7b:09:d3:3c:73:d4:db:63:29:7c: a0:a2:25:38:16:ac:65:7c:68:b2:f6:68:35:5a:ba:72:b0:bb: a5:d2:54:9c:9e:c1:0a:af:12:ff:1f:7a:1f:8f:e6:79:88:89: b4:68:55:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQx8aB1n9ncIwAYqCsENb2P9MYVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY1MkNDOTBGQ0QyQzM4MzI4NDA2NDNBOUU1NTdERTg1 QjBGNTlEMzAeFw0yNTA4MjAxNDE4MzFaFw0yNTA4MjExNzQ1MzFaMDMxMTAvBgNV BAMTKDREMzI3NjlDMjZFOTk3M0ZBRDNBRTkyN0Q4MTZEMzA5NDdEOEI4M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjtpmhWpyRhbaGUrGwM6XqBPwg TPGaqD985+UUpYulXu8GJ/G3l3azPclHzy/NmxKtQ0igQ2gYOyO6yrAy+K2IWy0f 2L+1XkUjNb1CYY2zKCTC7HROs73PHH4yPe0UomD+ZoNKsRf+Bw9y1LPJ+Yjc8f9q KlXr7fVFqlMlfBcuyrLTNd2VreaVFIJ+VwMurmyAGTeM4ERYvitLHfDrlffJ8feD vflxqtYTGycFYvd3t14AgiYjYJyTdM/ukOdLqmThgSuMpilCgA5wO6UqBmXmVSab nHw3+eUNHqjKOVjdmnShKvpTZOecX2kaH/ZaKD4HrvZH7wCdOe4l9QAEgJFxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTTJ2nCbplz+tOukn2BbTCUfYuD4wHwYDVR0j BBgwFoAU31LMkPzSw4MoQGQ6nlV96FsPWdMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlZLa1RaZktpTEZvclVNaFlSSnlHYm5ZcEV4RjRrRDVBUVpoaTh1N1Na dUQvMS9ERjUyQ0M5MEZDRDJDMzgzMjg0MDY0M0E5RTU1N0RFODVCMEY1OUQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGNTJDQzkwRkNEMkMzODMy ODQwNjQzQTlFNTU3REU4NUIwRjU5RDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QlZLa1RaZktpTEZvclVNaFlSSnlHYm5ZcEV4RjRrRDVBUVpoaTh1N1NadUQvMS9E RjUyQ0M5MEZDRDJDMzgzMjg0MDY0M0E5RTU1N0RFODVCMEY1OUQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC9GGYh+1HBbm6Cy50QM2LHxz7hFyI08ACV5FdyztyyoGYeG8AiX8XzUnqtdy Fso3eLHOu84o01j7k6l9vmAMJle1suxYT5N7Q/CVz1knf4Qj5IKE5AX8ji0ltRfE VwTeG1znhO4SiXUP5Nzy/1fUk2WRkCl1YKsfZ0q4+ci01SMoVuqLMU5kv5OkXUG6 TW+uGbP5QZw0Eth8Wav3iHJKF5Vgvvz0SohcoJAYdNY9UzxDkHZTviR6tXrbEdEP cX7VG8YCanlWqCYEvXT5+4J7CdM8c9TbYyl8oKIlOBasZXxosvZoNVq6crC7pdJU nJ7BCq8S/x96H4/meYiJtGhVrQ== -----END CERTIFICATE-----Generated at Wed Aug 20 18:40:29 2025 by rpki-client