$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft File: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft (raw, json) Hash identifier: i1YurK6470ntphxNDFFaV9QDxLmfthws9juNHA9wigk= Subject key identifier: 7F:3A:19:FA:A9:6D:F8:07:26:5F:53:C8:B5:05:E0:44:8D:B0:C4:D1 Authority key identifier: D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA Certificate issuer: /CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Certificate serial: 5B18AFF502EA423B042657BCD93B504926C1AE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft Manifest number: 0290 Signing time: Wed 20 Aug 2025 04:19:55 +0000 Manifest this update: Wed 20 Aug 2025 04:14:55 +0000 Manifest next update: Thu 21 Aug 2025 06:25:55 +0000 Files and hashes: 1: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl (hash: fuQVif7+SB+o0MelMcF/R/tXD//hRjR94yUQgk5jI5w=) 2: 3138372e3130392e38302e302f32302d3234203d3e203533313339.roa (hash: IQvjHctOgbHfUkTO0U34ErrEutSrCbjo/UK2hA9NLGA=) 3: 3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa (hash: sPenw571n896sllNaEQg92EoBX7mLS0ivDvfDaPaky8=) 4: 323830343a333164343a3a2f33322d3438203d3e203533313339.roa (hash: Tny32eTDORgq/MtVMRE6pvmeZrpwE0nT6BNCMfyIuNM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 06:25:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:18:af:f5:02:ea:42:3b:04:26:57:bc:d9:3b:50:49:26:c1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Validity Not Before: Aug 20 04:14:55 2025 GMT Not After : Aug 21 06:25:55 2025 GMT Subject: CN=7F3A19FAA96DF807265F53C8B505E0448DB0C4D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:36:88:0d:dc:fe:c4:bc:27:1d:42:ae:1f:0e: b3:7b:92:72:7a:ed:34:45:23:3a:95:aa:0b:02:58: d7:63:61:96:c7:8c:86:0d:b1:ae:de:9d:c9:6e:c7: a4:d5:eb:ba:75:d9:fb:24:e7:f5:1f:66:a1:a7:cd: 8a:14:ef:3d:7a:62:43:70:53:fc:97:e5:aa:e0:47: 52:37:f1:72:c1:db:ad:2d:53:4d:2e:4e:97:b8:18: 71:53:99:a0:f5:7c:86:87:3a:d9:42:d9:c5:0d:5f: 94:4d:96:1e:72:5f:4d:12:06:be:8a:15:14:81:45: 87:e0:ac:42:f3:70:d5:2d:b6:3d:67:6b:89:4e:f8: 1a:43:d6:d4:01:54:54:de:d1:34:cb:eb:78:7a:62: fb:96:94:4e:02:5d:77:3b:6d:35:0b:f6:c8:f0:72: 63:30:4c:7a:d0:6f:72:77:b5:14:80:be:88:3f:13: b9:29:c1:6b:fd:b4:a6:ba:a3:51:8b:85:cd:e2:64: 77:cf:f8:c8:77:a2:ce:a1:40:39:78:c6:00:50:fa: 12:9e:4b:8c:1b:18:11:e0:62:06:00:d9:98:6a:24: a2:84:6a:56:7e:9b:b3:93:64:e1:a5:c7:b2:63:d2: 1e:28:39:85:b3:7a:44:7a:30:22:64:61:22:ab:bb: 12:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3A:19:FA:A9:6D:F8:07:26:5F:53:C8:B5:05:E0:44:8D:B0:C4:D1 X509v3 Authority Key Identifier: keyid:D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:0d:75:ec:65:da:90:a7:85:f7:a3:97:95:6a:fb:d9:95:c4: 4c:2e:6f:0c:3f:d2:20:1f:77:8c:f0:1f:1c:ad:42:94:4f:6a: fc:a0:93:92:9a:b9:7a:34:d1:c9:d1:b5:51:c9:5f:40:d8:b4: 56:1c:5b:26:6d:93:8b:23:1d:5f:e6:72:3e:22:ad:dc:c1:6a: 14:1f:0f:04:2f:6e:fd:33:7a:5d:b9:ae:00:95:03:e8:16:fc: 77:b8:3d:c4:07:96:f8:ed:4f:50:3b:43:17:14:77:58:6e:77: 17:5d:35:28:46:e1:38:93:1e:d6:71:32:03:a4:8e:59:0b:4e: 3b:06:98:57:24:dd:55:56:f4:9b:97:35:f5:d3:42:a3:3e:1a: 5a:ff:ca:77:17:48:f2:05:19:91:b9:70:29:a1:53:09:c4:2d: b3:46:d2:1c:68:24:ec:da:fe:c8:9c:02:ac:27:7f:83:a3:0b: e6:70:bf:bb:9a:fe:a2:5d:f2:f9:e6:89:93:a4:19:53:da:f6: 7e:c6:ef:9d:5e:e6:7c:f3:4a:10:67:de:76:25:af:de:71:93: 94:e5:4f:f8:00:0b:7e:ee:b1:8f:13:24:99:cb:3d:2f:39:f5: e5:92:56:03:41:ea:97:10:fb:bf:9d:a8:3c:55:aa:3f:87:7f: 7c:0d:23:54 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgITWxiv9QLqQjsEJle82TtQSSbBrjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhEMjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4 NEY4OUFBMB4XDTI1MDgyMDA0MTQ1NVoXDTI1MDgyMTA2MjU1NVowMzExMC8GA1UE AxMoN0YzQTE5RkFBOTZERjgwNzI2NUY1M0M4QjUwNUUwNDQ4REIwQzREMTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALM2iA3c/sS8Jx1Crh8Os3uScnrt NEUjOpWqCwJY12NhlseMhg2xrt6dyW7HpNXrunXZ+yTn9R9moafNihTvPXpiQ3BT /JflquBHUjfxcsHbrS1TTS5Ol7gYcVOZoPV8hoc62ULZxQ1flE2WHnJfTRIGvooV FIFFh+CsQvNw1S22PWdriU74GkPW1AFUVN7RNMvreHpi+5aUTgJddzttNQv2yPBy YzBMetBvcne1FIC+iD8TuSnBa/20prqjUYuFzeJkd8/4yHeizqFAOXjGAFD6Ep5L jBsYEeBiBgDZmGokooRqVn6bs5Nk4aXHsmPSHig5hbN6RHowImRhIqu7EukCAwEA AaOCAlkwggJVMB0GA1UdDgQWBBR/Ohn6qW34ByZfU8i1BeBEjbDE0TAfBgNVHSME GDAWgBTSJN/xmCLFsnx7zBa/2L4qOE+JqjAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9EaWVkVTlCN002TnhYcjV4UWhKZGZ0MTdITnNqUVMzZGc2aVVIckpaaVZB di8xL0QyMjRERkYxOTgyMkM1QjI3QzdCQ0MxNkJGRDhCRTJBMzg0Rjg5QUEuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvRDIyNERGRjE5ODIyQzVCMjdD N0JDQzE2QkZEOEJFMkEzODRGODlBQS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGK BggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9E aWVkVTlCN002TnhYcjV4UWhKZGZ0MTdITnNqUVMzZGc2aVVIckpaaVZBdi8xL0Qy MjRERkYxOTgyMkM1QjI3QzdCQ0MxNkJGRDhCRTJBMzg0Rjg5QUEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCODXXsZdqQp4X3o5eVavvZlcRMLm8MP9IgH3eM8B8crUKUT2r8oJOSmrl6NNHJ 0bVRyV9A2LRWHFsmbZOLIx1f5nI+Iq3cwWoUHw8EL279M3pdua4AlQPoFvx3uD3E B5b47U9QO0MXFHdYbncXXTUoRuE4kx7WcTIDpI5ZC047BphXJN1VVvSblzX100Kj Phpa/8p3F0jyBRmRuXApoVMJxC2zRtIcaCTs2v7InAKsJ3+DowvmcL+7mv6iXfL5 5omTpBlT2vZ+xu+dXuZ880oQZ952Ja/ecZOU5U/4AAt+7rGPEySZyz0vOfXlklYD QeqXEPu/nag8Vao/h398DSNU -----END CERTIFICATE-----Generated at Wed Aug 20 16:14:16 2025 by rpki-client