$ rpki-client -vvf rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft File: A653D5055FC338B089E2C732382682788F082F11.mft (raw, json) Hash identifier: 6DvpZyqPxlkDeooeqqztZHviVBCUJFprCm8ZvBBK0PM= Subject key identifier: 05:2E:F6:A3:32:BA:23:EA:9A:76:8F:F5:1D:36:7F:54:BA:05:38:32 Authority key identifier: A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11 Certificate issuer: /CN=A653D5055FC338B089E2C732382682788F082F11 Certificate serial: 2ECB526BD7E5F84BE5CF9B77035D3AE2E3D6EA7C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer Subject info access: rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft Manifest number: 02B4 Signing time: Fri 05 Sep 2025 19:45:51 +0000 Manifest this update: Fri 05 Sep 2025 19:40:51 +0000 Manifest next update: Sat 06 Sep 2025 22:34:51 +0000 Files and hashes: 1: 323830343a333734343a3a2f33322d313238203d3e20323636343030.roa (hash: 40WaVP8Svoxs+qZKP+igdLA9rTsAwD+SLbjFEI4LGxs=) 2: 3137302e38312e34302e302f32322d3234203d3e20323636343030.roa (hash: fnk6G+39Qn8k6OBmu2nwg3cM52nnrkQXQ11Kyh5Qn1o=) 3: A653D5055FC338B089E2C732382682788F082F11.crl (hash: mlLwiDqoK4n3UC5VCeNp5hEq5RhLQ3hWGDPUfcMIjQw=) 4: 34352e3232342e3132382e302f32322d3234203d3e20323636343030.roa (hash: uvd4+Ma33hGXSlt80NtGV3afPFZnfl9FFnr+LvjlmzM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Sep 2025 22:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:cb:52:6b:d7:e5:f8:4b:e5:cf:9b:77:03:5d:3a:e2:e3:d6:ea:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A653D5055FC338B089E2C732382682788F082F11 Validity Not Before: Sep 5 19:40:51 2025 GMT Not After : Sep 6 22:34:51 2025 GMT Subject: CN=052EF6A332BA23EA9A768FF51D367F54BA053832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:22:28:33:79:d0:70:43:47:48:75:54:7b:39: 4e:89:14:ec:49:17:b6:62:02:5d:65:34:8d:b0:16: a1:02:be:32:d0:b0:70:2a:b8:2e:32:8e:ff:fd:34: aa:57:1a:67:8c:46:26:0b:20:0c:09:23:b1:04:6d: 70:cc:4b:f5:02:c0:ca:1b:3f:a8:33:6e:8b:ef:0c: 3c:49:b5:73:b5:2b:84:9e:ca:69:96:7e:a2:74:39: 77:9f:35:aa:67:a8:59:44:fc:9e:3b:d2:7b:7d:f5: df:90:ff:5f:35:af:b2:0f:fe:ab:1c:b3:20:7c:2d: 3e:d2:cc:da:a2:93:16:43:b5:50:d1:91:85:e4:99: b1:b7:31:34:72:ff:cd:7f:eb:8f:22:7e:e5:8a:61: 69:93:5d:9a:e8:e6:9d:a9:be:21:ec:5e:d7:b7:94: 16:55:69:d1:a7:17:1f:69:4e:e5:e9:e8:df:d5:6c: 9f:91:2a:1e:15:1f:b3:a1:a3:e2:dc:cb:50:4a:e6: 57:2c:17:c5:32:48:6e:58:39:c1:21:37:90:ec:0f: 90:78:ad:57:1f:96:52:ad:16:2d:b4:25:4e:41:0d: 34:0b:bb:8c:6c:6e:47:9b:4c:49:ad:d1:77:b1:86: 08:1b:bf:1d:79:3b:ce:a4:3b:da:ef:68:3a:6d:28: 21:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2E:F6:A3:32:BA:23:EA:9A:76:8F:F5:1D:36:7F:54:BA:05:38:32 X509v3 Authority Key Identifier: keyid:A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b5:7f:92:5d:78:43:c3:8b:aa:2f:9b:f2:30:d7:c8:43:e4: 94:47:60:bf:04:98:0b:99:b9:1a:9c:0a:dd:d8:0e:92:b0:33: 4f:93:c2:f9:14:3b:2b:b2:f9:50:a2:58:85:f7:70:49:c6:25: 53:d5:14:07:47:ed:e1:c1:9c:f4:6f:3a:6e:55:90:ba:49:72: be:ef:c9:c5:21:1d:eb:8b:cb:b7:98:44:d3:bf:15:e7:00:5f: 19:c5:6a:b8:35:f9:10:1b:6c:18:ca:39:ae:9e:29:66:34:21: 16:fc:9a:ef:8f:52:8c:05:1b:46:bb:84:22:ad:eb:a1:b8:5b: d4:e9:e4:e3:54:bc:0d:65:20:1d:14:2b:49:1a:73:13:9e:5d: 5b:51:fa:29:48:2b:ea:79:f6:19:f9:d0:49:00:76:a4:a4:a9: 8a:e9:37:46:78:c8:1a:95:3f:c5:8b:d6:7e:ab:cc:ec:1a:b7: 1f:f1:86:f8:9d:45:80:a4:51:16:b0:cf:0b:d6:0a:f9:87:c2: 8b:79:a6:be:69:b0:42:a6:9c:0f:dd:44:5c:de:ab:b9:a0:5d: b0:08:a5:c8:bb:8b:9f:27:6f:35:02:a8:d8:a8:ba:89:17:53: 93:53:03:e9:db:48:20:7d:f3:cd:e6:02:d4:8d:c2:92:c7:c5: 96:78:b8:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULstSa9fl+Evlz5t3A1064uPW6nwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1M0Q1MDU1RkMzMzhCMDg5RTJDNzMyMzgyNjgyNzg4 RjA4MkYxMTAeFw0yNTA5MDUxOTQwNTFaFw0yNTA5MDYyMjM0NTFaMDMxMTAvBgNV BAMTKDA1MkVGNkEzMzJCQTIzRUE5QTc2OEZGNTFEMzY3RjU0QkEwNTM4MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiIigzedBwQ0dIdVR7OU6JFOxJ F7ZiAl1lNI2wFqECvjLQsHAquC4yjv/9NKpXGmeMRiYLIAwJI7EEbXDMS/UCwMob P6gzbovvDDxJtXO1K4SeymmWfqJ0OXefNapnqFlE/J470nt99d+Q/181r7IP/qsc syB8LT7SzNqikxZDtVDRkYXkmbG3MTRy/81/648ifuWKYWmTXZro5p2pviHsXte3 lBZVadGnFx9pTuXp6N/VbJ+RKh4VH7Oho+Lcy1BK5lcsF8UySG5YOcEhN5DsD5B4 rVcfllKtFi20JU5BDTQLu4xsbkebTEmt0Xexhggbvx15O86kO9rvaDptKCG7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBS72ozK6I+qado/1HTZ/VLoFODIwHwYDVR0j BBgwFoAUplPVBV/DOLCJ4scyOCaCeI8ILxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0J2QmNLODNqZkttdGVVWmhKS3FnN1B0a2R4N1h0TnFGZ0RqNGI0cmdv aXgvMS9BNjUzRDUwNTVGQzMzOEIwODlFMkM3MzIzODI2ODI3ODhGMDgyRjExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2NTNENTA1NUZDMzM4QjA4 OUUyQzczMjM4MjY4Mjc4OEYwODJGMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0J2QmNLODNqZkttdGVVWmhKS3FnN1B0a2R4N1h0TnFGZ0RqNGI0cmdvaXgvMS9B NjUzRDUwNTVGQzMzOEIwODlFMkM3MzIzODI2ODI3ODhGMDgyRjExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXrV/kl14Q8OLqi+b8jDXyEPklEdgvwSYC5m5GpwK3dgOkrAzT5PC+RQ7K7L5 UKJYhfdwScYlU9UUB0ft4cGc9G86blWQuklyvu/JxSEd64vLt5hE078V5wBfGcVq uDX5EBtsGMo5rp4pZjQhFvya749SjAUbRruEIq3robhb1Onk41S8DWUgHRQrSRpz E55dW1H6KUgr6nn2GfnQSQB2pKSpiuk3RnjIGpU/xYvWfqvM7Bq3H/GG+J1FgKRR FrDPC9YK+YfCi3mmvmmwQqacD91EXN6ruaBdsAilyLuLnydvNQKo2Ki6iRdTk1MD 6dtIIH3zzeYC1I3CksfFlni4eA== -----END CERTIFICATE-----Generated at Sat Sep 6 13:47:07 2025 by rpki-client