$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft File: B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft (raw, json) Hash identifier: jPGo+0Agc0jyso4V3Zdg4YaOMfD4Ga6zxcY9VvtXsCg= Subject key identifier: BE:D8:97:5C:56:6F:B2:95:38:B4:17:22:32:05:D9:C0:51:DA:7C:29 Authority key identifier: B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81 Certificate issuer: /CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81 Certificate serial: 0100448509CCA889C7A8F619C68E96AFC4722946 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer Subject info access: rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft Manifest number: 029D Signing time: Wed 20 Aug 2025 12:06:04 +0000 Manifest this update: Wed 20 Aug 2025 12:01:04 +0000 Manifest next update: Thu 21 Aug 2025 14:21:04 +0000 Files and hashes: 1: 323830343a373463303a383030303a3a2f33332d3333203d3e20323731303031.roa (hash: qgFxFxtxDJNyrMOE8s6UdEvMBq+6La07xmVkbifGxYo=) 2: 3137372e3232332e3133322e302f32322d3232203d3e20323731303031.roa (hash: 1XgLCn8snOhVhGzdvEorMRjHnY23cBd+JEmoP0dsLTY=) 3: 323830343a373463303a3a2f33332d3333203d3e20323731303031.roa (hash: 5v+nTMwCioWhJD/VGCThgGl+n+v8/kmfzVRrtFEM0GU=) 4: 323830343a373463303a3a2f33322d3332203d3e20323731303031.roa (hash: BCC51P7ZxSQ0m7S8/6KLs4GlFQ1WTUXIjCsSOHZYl+g=) 5: 323830343a373463303a363a3a2f34382d3438203d3e20323731303031.roa (hash: Hsrvj/TB2roXOEb6pFYXm2pkCmxMpu5m6ezauYUI/2E=) 6: 3137372e3232332e3133322e302f32332d3233203d3e20323731303031.roa (hash: IJwhCRZ/eia9wbArW/hVlZ/3CzBgX2zAxbknxwjozN0=) 7: 3137372e3232332e3133342e302f32332d3233203d3e20323731303031.roa (hash: tWmADO3AyjJB+3iXcF2jswe5Q+UsBpZmVTKP6t3ruP8=) 8: B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl (hash: NvlaM82gQquPEH7Qjvuqmgze9hUmDGK+YzZQ9VI57pY=) 9: 323830343a373463303a333a3a2f34382d3438203d3e20323731303031.roa (hash: xIOiY5AbK/u+wde+uFpEZOCisWtyE49NnGfSjfUWESA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 14:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:00:44:85:09:cc:a8:89:c7:a8:f6:19:c6:8e:96:af:c4:72:29:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81 Validity Not Before: Aug 20 12:01:04 2025 GMT Not After : Aug 21 14:21:04 2025 GMT Subject: CN=BED8975C566FB29538B417223205D9C051DA7C29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:05:bd:1f:13:c4:e4:5b:99:27:19:b0:32:1f: 6b:bf:1e:6f:35:1c:53:64:35:90:af:c3:70:84:64: 8a:dc:aa:4a:f6:91:48:f9:73:ed:03:62:7f:93:56: c9:30:ff:b3:a4:60:50:0b:40:53:c1:64:50:ca:88: f7:36:88:85:17:e8:d1:0a:e3:9d:1d:8d:d2:fc:e6: 7b:0d:30:70:69:5e:03:00:d0:9f:1c:cb:d8:54:8a: 35:1d:63:6d:64:72:18:58:1d:24:c8:3d:13:19:6b: 0f:e6:a8:65:73:a7:dc:53:10:b6:48:02:b5:91:8a: c8:01:44:6e:b8:09:ec:d3:d8:2f:02:6d:a8:77:4b: eb:dd:65:99:81:65:c9:61:6b:05:21:a4:57:71:03: 47:64:43:b4:a9:96:d4:78:8d:02:4e:d1:fc:da:2d: 3e:65:0f:cd:8b:85:b8:2b:fb:5a:c5:67:2e:e4:e7: 5b:22:62:5b:e5:3d:08:17:cb:ac:17:3b:d0:5a:cf: ec:0a:f2:25:5c:0f:8f:61:53:57:e0:d7:9f:6b:fe: 66:3f:33:0a:e3:c0:bc:6c:7d:cb:59:80:24:ca:76: 73:19:12:e2:4b:e6:4f:b4:b1:cf:8e:c5:87:5c:ed: fa:3e:c0:50:f3:9c:11:6f:7f:52:40:f6:60:5c:a1: 03:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D8:97:5C:56:6F:B2:95:38:B4:17:22:32:05:D9:C0:51:DA:7C:29 X509v3 Authority Key Identifier: keyid:B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:ec:a4:98:28:8d:12:ab:ea:af:12:53:e5:b2:58:18:ab:aa: f3:30:65:d5:ec:d0:f8:39:c9:29:c1:df:d8:0d:94:36:56:0a: de:36:88:09:8e:8d:e3:f0:b7:e7:0b:c4:f8:16:23:33:f3:be: 19:a2:72:e4:73:35:48:75:92:07:ac:5e:e8:e3:d1:79:79:d2: 36:bd:cd:3f:fc:5a:0d:72:c8:35:18:80:1f:25:02:d6:c4:73: 33:c6:f1:c7:aa:d2:49:35:1f:ce:b3:99:e3:bb:fd:b2:57:7b: 72:d4:21:c4:74:2f:54:e5:4e:b9:b0:79:d7:dc:99:e1:73:30: 58:9a:60:85:09:3e:03:9e:c0:51:8e:a6:70:27:07:1a:3e:50: e9:db:89:2e:83:33:37:fd:0c:3e:51:e5:a3:ec:d8:53:bd:c2: 03:aa:ea:cb:cd:63:7e:49:92:2b:8b:01:05:8c:51:7c:46:7b: 70:02:2d:a0:26:a1:9f:2d:8e:fd:ab:97:b9:91:41:10:81:f5: b0:82:36:15:14:0e:5e:09:35:81:78:9e:06:ee:96:40:a0:01: 7a:55:15:86:0e:f4:f5:db:16:95:fe:bd:30:6f:d0:8b:dc:c6: 50:eb:5d:58:22:91:f7:bf:56:21:d1:6b:77:11:6c:8d:d6:8e: c6:f3:0c:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAQBEhQnMqInHqPYZxo6Wr8RyKUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZDNUZCODU3RTY5QTkwNDQ5NzNGQTMwNjJBQTFENkZC RjVDNEE4MTAeFw0yNTA4MjAxMjAxMDRaFw0yNTA4MjExNDIxMDRaMDMxMTAvBgNV BAMTKEJFRDg5NzVDNTY2RkIyOTUzOEI0MTcyMjMyMDVEOUMwNTFEQTdDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVBb0fE8TkW5knGbAyH2u/Hm81 HFNkNZCvw3CEZIrcqkr2kUj5c+0DYn+TVskw/7OkYFALQFPBZFDKiPc2iIUX6NEK 450djdL85nsNMHBpXgMA0J8cy9hUijUdY21kchhYHSTIPRMZaw/mqGVzp9xTELZI ArWRisgBRG64CezT2C8Cbah3S+vdZZmBZclhawUhpFdxA0dkQ7SpltR4jQJO0fza LT5lD82Lhbgr+1rFZy7k51siYlvlPQgXy6wXO9Baz+wK8iVcD49hU1fg159r/mY/ MwrjwLxsfctZgCTKdnMZEuJL5k+0sc+OxYdc7fo+wFDznBFvf1JA9mBcoQMdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvtiXXFZvspU4tBciMgXZwFHafCkwHwYDVR0j BBgwFoAUtsX7hX5pqQRJc/owYqodb79cSoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1o1dWN2NzIxZDRmRGJxQXVFMVVtOFpuUWo4cGFwYUo1MUhTUnBIeGlX RFUvMS9CNkM1RkI4NTdFNjlBOTA0NDk3M0ZBMzA2MkFBMUQ2RkJGNUM0QTgxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2QzVGQjg1N0U2OUE5MDQ0 OTczRkEzMDYyQUExRDZGQkY1QzRBODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1o1dWN2NzIxZDRmRGJxQXVFMVVtOFpuUWo4cGFwYUo1MUhTUnBIeGlXRFUvMS9C NkM1RkI4NTdFNjlBOTA0NDk3M0ZBMzA2MkFBMUQ2RkJGNUM0QTgxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtOykmCiNEqvqrxJT5bJYGKuq8zBl1ezQ+DnJKcHf2A2UNlYK3jaICY6N4/C3 5wvE+BYjM/O+GaJy5HM1SHWSB6xe6OPReXnSNr3NP/xaDXLINRiAHyUC1sRzM8bx x6rSSTUfzrOZ47v9sld7ctQhxHQvVOVOubB519yZ4XMwWJpghQk+A57AUY6mcCcH Gj5Q6duJLoMzN/0MPlHlo+zYU73CA6rqy81jfkmSK4sBBYxRfEZ7cAItoCahny2O /auXuZFBEIH1sII2FRQOXgk1gXieBu6WQKABelUVhg709dsWlf69MG/Qi9zGUOtd WCKR979WIdFrdxFsjdaOxvMMrg== -----END CERTIFICATE-----Generated at Wed Aug 20 16:17:04 2025 by rpki-client