$ rpki-client -vvf rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft File: 1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft (raw, json) Hash identifier: whaE0Wac9Utd5aZReDC3jvMf0ww/xK7qxuiVoIsxhnw= Subject key identifier: 5D:8B:C9:23:2D:D2:10:E6:53:B3:33:DF:AD:CD:C1:F2:66:28:E1:82 Authority key identifier: 1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD Certificate issuer: /CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD Certificate serial: 36FC5ECEFE2BF389D584A0BE2575C919B69A4248 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer Subject info access: rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft Manifest number: 0201 Signing time: Wed 20 Aug 2025 06:13:53 +0000 Manifest this update: Wed 20 Aug 2025 06:08:53 +0000 Manifest next update: Thu 21 Aug 2025 06:39:53 +0000 Files and hashes: 1: 323830343a373538383a3a2f33322d3334203d3e20323731303533.roa (hash: nnZxddMxtPYXvLGrokRo727KDyxmpu+gR99v39ppU0Y=) 2: 1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl (hash: qgDqRCWQiSPGQU0TdvAjYf2zw041lhxwRJ2M1lyrctM=) 3: 3137372e37342e3136342e302f32322d3234203d3e20323731303533.roa (hash: PMpXdMUlCp4Q+HwwLd4ysJ8VQ/NQRUOFxlCc29bb4nI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 06:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:fc:5e:ce:fe:2b:f3:89:d5:84:a0:be:25:75:c9:19:b6:9a:42:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD Validity Not Before: Aug 20 06:08:53 2025 GMT Not After : Aug 21 06:39:53 2025 GMT Subject: CN=5D8BC9232DD210E653B333DFADCDC1F26628E182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:6c:07:bf:51:1f:19:70:dc:72:13:33:48: a9:87:b5:27:65:00:0f:d5:73:67:99:f3:dc:b2:1b: 9d:8b:96:45:af:78:7f:b3:30:49:dc:11:30:6e:34: f4:39:1f:ec:a6:80:6f:a5:9b:84:40:2b:3b:d9:cc: 28:00:a3:97:fe:76:b9:ac:c7:6c:64:5e:63:07:11: 5e:96:d4:a3:95:e1:1b:18:ff:e4:40:12:ee:8e:b3: de:92:e0:11:f3:44:f3:e2:50:ff:3d:7e:8f:f0:d9: 80:6a:33:94:34:94:db:83:9e:25:c4:f0:a4:35:43: 60:09:41:61:61:1c:49:01:ea:9c:26:09:51:33:2b: b2:c0:7c:14:89:3c:02:ed:a3:f4:12:08:2c:fc:77: b6:e3:e8:2f:b7:03:b2:36:4f:9b:54:89:c1:7b:e5: 11:78:83:be:5c:e7:a9:eb:0c:dc:29:06:31:9f:3b: 57:3f:ea:2d:ba:33:ef:82:71:c3:d9:6a:43:1f:8c: 1f:03:f5:3a:dd:49:40:c5:9a:d8:e6:99:09:f5:24: f8:d5:51:c9:b7:94:88:d5:bf:1e:09:07:31:35:26: c6:05:4b:4c:e6:e0:37:91:f7:aa:15:c6:dd:a6:de: fb:d8:16:05:95:72:24:e9:35:1b:76:6d:c6:02:49: e1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8B:C9:23:2D:D2:10:E6:53:B3:33:DF:AD:CD:C1:F2:66:28:E1:82 X509v3 Authority Key Identifier: keyid:1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f1:cd:0e:50:51:fc:ef:e4:f1:ab:b4:86:e2:39:43:3c:8f: 1c:ea:80:af:7a:50:56:65:de:4f:eb:bf:4b:d1:77:81:3c:ca: 3b:8c:f9:0b:dd:f0:15:fc:6c:7d:9e:a0:36:03:93:35:ca:7b: eb:da:95:b1:de:97:b7:b8:3c:77:9a:ba:40:49:60:c6:cf:f3: fa:c2:53:f9:09:1a:73:16:17:9c:b9:dd:67:ab:7d:7e:cd:72: b0:99:2d:dd:e8:23:b4:65:74:5b:69:60:ce:c3:fa:e7:90:fe: 35:a9:6c:d9:27:91:7c:ae:07:f3:0a:60:d3:b6:97:8d:41:de: 00:77:a9:d2:b7:0a:c7:f2:8e:25:21:1d:b6:6d:97:57:59:4e: 51:c0:d1:c1:4a:c3:df:46:87:69:50:d2:b9:4b:43:47:e1:85: ea:99:96:4a:86:5f:be:14:0c:5c:9b:5e:f2:cf:5d:20:a7:ce: 85:88:32:c7:3f:03:58:f2:24:8c:31:c4:ae:fe:f7:22:2b:73: 9f:f2:43:99:a6:08:80:6c:03:d3:7e:b1:d2:7f:ba:48:7b:aa: aa:58:00:6a:87:bb:86:0a:bf:71:13:98:8b:10:1d:2e:d0:d3: 0d:31:84:92:46:cf:7c:2c:cd:4f:27:82:8b:a1:fc:2c:06:66: 12:76:8a:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNvxezv4r84nVhKC+JXXJGbaaQkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGQTUzRkQ3OTI4QzE3NUM3NDMyRTczREQxNDcyOTU1 RTVBMzVGRDAeFw0yNTA4MjAwNjA4NTNaFw0yNTA4MjEwNjM5NTNaMDMxMTAvBgNV BAMTKDVEOEJDOTIzMkREMjEwRTY1M0IzMzNERkFEQ0RDMUYyNjYyOEUxODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8oGwHv1EfGXDcchMzSKmHtSdl AA/Vc2eZ89yyG52LlkWveH+zMEncETBuNPQ5H+ymgG+lm4RAKzvZzCgAo5f+drms x2xkXmMHEV6W1KOV4RsY/+RAEu6Os96S4BHzRPPiUP89fo/w2YBqM5Q0lNuDniXE 8KQ1Q2AJQWFhHEkB6pwmCVEzK7LAfBSJPALto/QSCCz8d7bj6C+3A7I2T5tUicF7 5RF4g75c56nrDNwpBjGfO1c/6i26M++CccPZakMfjB8D9TrdSUDFmtjmmQn1JPjV Ucm3lIjVvx4JBzE1JsYFS0zm4DeR96oVxt2m3vvYFgWVciTpNRt2bcYCSeF5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXYvJIy3SEOZTszPfrc3B8mYo4YIwHwYDVR0j BBgwFoAUHPpT/XkowXXHQy5z3RRylV5aNf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmhnU2pLelRQUDN6eW16WWpEZzc0QXR0M2sxUzZpTUpia25zZHdDTnAx bVEvMC8xQ0ZBNTNGRDc5MjhDMTc1Qzc0MzJFNzNERDE0NzI5NTVFNUEzNUZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDRkE1M0ZENzkyOEMxNzVD NzQzMkU3M0REMTQ3Mjk1NUU1QTM1RkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RmhnU2pLelRQUDN6eW16WWpEZzc0QXR0M2sxUzZpTUpia25zZHdDTnAxbVEvMC8x Q0ZBNTNGRDc5MjhDMTc1Qzc0MzJFNzNERDE0NzI5NTVFNUEzNUZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe/HNDlBR/O/k8au0huI5QzyPHOqAr3pQVmXeT+u/S9F3gTzKO4z5C93wFfxs fZ6gNgOTNcp769qVsd6Xt7g8d5q6QElgxs/z+sJT+QkacxYXnLndZ6t9fs1ysJkt 3egjtGV0W2lgzsP655D+Nals2SeRfK4H8wpg07aXjUHeAHep0rcKx/KOJSEdtm2X V1lOUcDRwUrD30aHaVDSuUtDR+GF6pmWSoZfvhQMXJte8s9dIKfOhYgyxz8DWPIk jDHErv73Iitzn/JDmaYIgGwD036x0n+6SHuqqlgAaoe7hgq/cROYixAdLtDTDTGE kkbPfCzNTyeCi6H8LAZmEnaKGg== -----END CERTIFICATE-----Generated at Wed Aug 20 21:31:49 2025 by rpki-client