$ rpki-client -vvf rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/1/5279BD28B8A9B31948C48EBF854A92DF4766E490.mft File: 5279BD28B8A9B31948C48EBF854A92DF4766E490.mft (raw, json) Hash identifier: AXmpOhGglPC4wOFy+Z9Gs3nXREdJzN3Hn08nb8vD9vw= Subject key identifier: BA:22:83:FA:6B:52:35:0E:B2:33:BB:AB:DF:DD:19:39:C6:7E:CE:95 Authority key identifier: 52:79:BD:28:B8:A9:B3:19:48:C4:8E:BF:85:4A:92:DF:47:66:E4:90 Certificate issuer: /CN=5279BD28B8A9B31948C48EBF854A92DF4766E490 Certificate serial: 258A1EF975D7E53CDC4C820755DE20F093606165 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5279BD28B8A9B31948C48EBF854A92DF4766E490.cer Subject info access: rsync://rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/1/5279BD28B8A9B31948C48EBF854A92DF4766E490.mft Manifest number: 02C6 Signing time: Thu 18 Sep 2025 15:40:46 +0000 Manifest this update: Thu 18 Sep 2025 15:35:46 +0000 Manifest next update: Fri 19 Sep 2025 18:09:46 +0000 Files and hashes: 1: 323830343a353262343a3a2f33322d3438203d3e20323638353335.roa (hash: U/MEk9ATFkHclFZmRCTHnxQpnNAbasJGuD9skCj64Ws=) 2: 5279BD28B8A9B31948C48EBF854A92DF4766E490.crl (hash: x4ZYZYO/kUlc8QOy7eYF6WlmmEQffKhM0ENh6XycQrk=) 3: 34352e3136322e3232302e302f32322d3234203d3e20323638353335.roa (hash: uZPEQjSXtQB6nMxlC5n5WLK4AQD3mI3al/I/Gxk3HrY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/1/5279BD28B8A9B31948C48EBF854A92DF4766E490.crl rsync://rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/1/5279BD28B8A9B31948C48EBF854A92DF4766E490.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5279BD28B8A9B31948C48EBF854A92DF4766E490.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 18:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:8a:1e:f9:75:d7:e5:3c:dc:4c:82:07:55:de:20:f0:93:60:61:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5279BD28B8A9B31948C48EBF854A92DF4766E490 Validity Not Before: Sep 18 15:35:46 2025 GMT Not After : Sep 19 18:09:46 2025 GMT Subject: CN=BA2283FA6B52350EB233BBABDFDD1939C67ECE95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7c:d3:5d:41:02:d4:8d:ee:91:18:75:58:a8: cb:79:89:d6:63:4d:f9:47:c7:28:be:e8:62:f2:6b: 9b:70:54:15:6a:d3:3d:59:d8:70:39:57:83:9e:0f: db:e8:76:f2:d0:14:ad:03:28:c4:38:1c:1c:d8:6f: 80:c9:f0:0f:a9:e5:30:ad:98:f7:f6:d1:4f:90:c9: 0a:f7:64:c8:98:fe:d7:2e:39:3e:99:9d:28:1f:94: b6:ee:b2:5b:75:a9:be:04:8a:84:84:ae:4d:d1:d0: b6:d2:ad:b4:8a:30:0a:26:c0:f0:56:ae:1c:11:91: cf:9a:32:67:95:bc:ec:74:7c:03:cf:a5:ab:94:75: eb:d1:29:44:ab:df:6b:08:c9:80:2a:b1:6b:f7:55: 75:21:e2:cb:66:30:be:06:9c:9c:8d:b4:16:a3:54: 6f:e3:f7:e0:68:87:8c:21:4d:c6:cf:a3:dc:54:7b: 7a:14:48:64:fe:8e:1f:1e:9b:a4:6b:41:7f:f7:01: e0:f2:6e:d8:3f:44:81:f1:a4:28:2f:9f:1b:64:85: fd:fd:05:bb:b6:8e:63:ef:99:7a:0c:96:84:c7:08: 55:eb:20:d4:99:56:60:59:bd:bf:4d:10:08:9c:1d: 82:a8:f8:39:81:7a:6e:ee:ee:be:32:97:12:13:d2: 76:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:22:83:FA:6B:52:35:0E:B2:33:BB:AB:DF:DD:19:39:C6:7E:CE:95 X509v3 Authority Key Identifier: keyid:52:79:BD:28:B8:A9:B3:19:48:C4:8E:BF:85:4A:92:DF:47:66:E4:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/1/5279BD28B8A9B31948C48EBF854A92DF4766E490.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5279BD28B8A9B31948C48EBF854A92DF4766E490.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGVX5rmpLw9zHR8hC2KkbhDo6gSr9H5KYxwUS7WkjScy/1/5279BD28B8A9B31948C48EBF854A92DF4766E490.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:21:b9:f8:75:e1:df:74:4c:ab:49:4d:4f:56:80:7c:1b:64: 04:dd:7c:b7:46:fa:c7:8c:e8:21:ae:06:06:bb:bc:3b:a0:62: 81:04:3d:00:ca:1c:af:db:1d:05:b6:d9:a9:ae:7e:d0:7e:3f: c1:5e:70:a6:1a:09:e0:8a:36:6c:4b:6e:1e:03:59:c4:17:de: 8a:4c:6c:5d:14:14:03:50:2e:39:96:07:c3:75:59:0e:d3:62: 40:a8:c4:1c:90:8a:40:b5:4b:8d:c0:24:4c:2b:f5:e1:d5:45: ab:ce:13:2f:c1:c8:27:e3:4a:a2:8f:f6:a0:b4:09:e0:74:32: c2:34:22:31:0c:c7:0b:5e:51:df:e0:9c:22:d5:d4:79:ea:7e: 5b:1a:54:42:8d:35:86:4d:5d:8c:04:6d:ba:41:48:2e:62:07: 87:fa:e6:19:84:07:95:50:1e:2a:71:55:3a:e5:22:3b:49:f2: bb:2f:b9:95:d5:db:0e:07:60:6f:4d:f4:2f:ad:64:83:1a:43: 3b:59:42:b4:fa:ce:5b:76:dc:cc:cd:d3:b7:b3:f7:49:28:c8: 0a:54:49:25:0f:29:69:22:f1:72:40:67:2e:7d:89:d9:80:3f: a9:73:30:3d:11:6f:86:58:14:8f:76:1f:2c:f5:0d:79:ea:88: 71:cc:06:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJYoe+XXX5TzcTIIHVd4g8JNgYWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI3OUJEMjhCOEE5QjMxOTQ4QzQ4RUJGODU0QTkyREY0 NzY2RTQ5MDAeFw0yNTA5MTgxNTM1NDZaFw0yNTA5MTkxODA5NDZaMDMxMTAvBgNV BAMTKEJBMjI4M0ZBNkI1MjM1MEVCMjMzQkJBQkRGREQxOTM5QzY3RUNFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7fNNdQQLUje6RGHVYqMt5idZj TflHxyi+6GLya5twVBVq0z1Z2HA5V4OeD9vodvLQFK0DKMQ4HBzYb4DJ8A+p5TCt mPf20U+QyQr3ZMiY/tcuOT6ZnSgflLbuslt1qb4EioSErk3R0LbSrbSKMAomwPBW rhwRkc+aMmeVvOx0fAPPpauUdevRKUSr32sIyYAqsWv3VXUh4stmML4GnJyNtBaj VG/j9+Boh4whTcbPo9xUe3oUSGT+jh8em6RrQX/3AeDybtg/RIHxpCgvnxtkhf39 Bbu2jmPvmXoMloTHCFXrINSZVmBZvb9NEAicHYKo+DmBem7u7r4ylxIT0nZ3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuiKD+mtSNQ6yM7ur390ZOcZ+zpUwHwYDVR0j BBgwFoAUUnm9KLipsxlIxI6/hUqS30dm5JAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREdWWDVybXBMdzl6SFI4aEMyS2tiaERvNmdTcjlINUtZeHdVUzdXa2pT Y3kvMS81Mjc5QkQyOEI4QTlCMzE5NDhDNDhFQkY4NTRBOTJERjQ3NjZFNDkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyNzlCRDI4QjhBOUIzMTk0 OEM0OEVCRjg1NEE5MkRGNDc2NkU0OTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REdWWDVybXBMdzl6SFI4aEMyS2tiaERvNmdTcjlINUtZeHdVUzdXa2pTY3kvMS81 Mjc5QkQyOEI4QTlCMzE5NDhDNDhFQkY4NTRBOTJERjQ3NjZFNDkwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjCG5+HXh33RMq0lNT1aAfBtkBN18t0b6x4zoIa4GBru8O6BigQQ9AMocr9sd BbbZqa5+0H4/wV5wphoJ4Io2bEtuHgNZxBfeikxsXRQUA1AuOZYHw3VZDtNiQKjE HJCKQLVLjcAkTCv14dVFq84TL8HIJ+NKoo/2oLQJ4HQywjQiMQzHC15R3+CcItXU eep+WxpUQo01hk1djARtukFILmIHh/rmGYQHlVAeKnFVOuUiO0nyuy+5ldXbDgdg b030L61kgxpDO1lCtPrOW3bczM3Tt7P3SSjIClRJJQ8paSLxckBnLn2J2YA/qXMw PRFvhlgUj3YfLPUNeeqIccwGFA== -----END CERTIFICATE-----Generated at Thu Sep 18 19:39:51 2025 by rpki-client