$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.mft File: 5E82705FF857324984E1087AAFCCE6BD46657C71.mft (raw, json) Hash identifier: cXM12RdGlt1/frt+D0OD1N5hyCU0beVy7XiAMN+4gjg= Subject key identifier: C0:14:40:F2:1F:5B:CB:33:FC:FC:D2:55:4E:C0:01:B4:AD:11:C7:2E Authority key identifier: 5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71 Certificate issuer: /CN=5E82705FF857324984E1087AAFCCE6BD46657C71 Certificate serial: 6B95937FD5B527DE2C3370114EF3E97DCEC7CD4A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer Subject info access: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.mft Manifest number: 02A6 Signing time: Wed 20 Aug 2025 12:55:29 +0000 Manifest this update: Wed 20 Aug 2025 12:50:29 +0000 Manifest next update: Thu 21 Aug 2025 14:36:29 +0000 Files and hashes: 1: 3137372e39312e3233322e302f32322d3332203d3e20323633343530.roa (hash: 5OntlO5he05wjQ31exQDXaGboW3/a7/8ne58YQn/E28=) 2: 3136382e3233322e3135362e302f32322d3332203d3e20323633343530.roa (hash: aCft+s267yKm4sGll1Q7ESkI4zexJnEjysrqJshCd5g=) 3: 5E82705FF857324984E1087AAFCCE6BD46657C71.crl (hash: dkh2Gnuyf8DR8JVf30VJGogwOy5LiWIj3Szkyxr1w44=) 4: 323830343a313230303a3a2f33322d313238203d3e20323633343530.roa (hash: xf5V30GrFuexySATg7rUcR1aWqQpdI2Wh0yrR3PUOME=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 14:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:95:93:7f:d5:b5:27:de:2c:33:70:11:4e:f3:e9:7d:ce:c7:cd:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E82705FF857324984E1087AAFCCE6BD46657C71 Validity Not Before: Aug 20 12:50:29 2025 GMT Not After : Aug 21 14:36:29 2025 GMT Subject: CN=C01440F21F5BCB33FCFCD2554EC001B4AD11C72E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d4:69:00:2a:87:39:41:d3:74:9d:7e:46:02: 38:d8:d6:84:c9:9c:3f:cd:11:aa:91:c6:8d:a1:c4: 16:40:42:9e:c0:bd:63:b8:d3:be:29:04:29:26:cb: ea:5b:40:f6:38:a3:a7:1c:bf:fe:29:ac:ad:66:3c: d1:47:a2:86:29:9d:59:0d:50:70:09:be:2d:28:63: 7a:68:b5:55:67:91:be:91:3e:ce:4d:3a:11:6a:f6: 8a:03:6a:76:c5:6d:41:25:5a:36:d2:3e:d8:29:a4: c9:e0:0a:27:6b:ae:46:5a:b2:d1:d9:56:e2:ee:13: 75:62:b2:9a:f2:8a:c1:a8:8d:74:54:e5:f1:a9:56: cc:74:1a:3a:1d:a7:e7:16:9a:ba:ab:ba:58:e1:1d: 1e:44:00:97:61:8a:9c:99:4c:a5:81:7a:1f:ca:34: 14:3a:39:69:05:ba:3a:01:66:b4:10:f5:a3:24:35: 4e:07:c1:8a:21:5a:58:12:46:39:91:3a:a3:48:1b: 40:2c:32:2b:d2:fe:dc:c8:f6:bf:fb:d3:d4:c9:3f: a3:b9:b3:96:99:c8:ab:5f:e1:dc:3e:fc:d3:89:fc: d5:5f:3d:87:1b:d4:38:51:7d:2d:f7:7c:53:8f:32: 25:54:fd:ae:87:1a:2c:b0:78:0a:2e:2b:06:04:f7: cc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:14:40:F2:1F:5B:CB:33:FC:FC:D2:55:4E:C0:01:B4:AD:11:C7:2E X509v3 Authority Key Identifier: keyid:5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:0e:84:11:39:45:59:aa:a5:58:51:34:d9:31:a1:0f:67:a8: c3:02:ff:fa:8b:bf:70:d9:fb:d7:d7:c0:d7:6a:fc:f4:74:c4: 9d:ae:d6:53:64:47:f1:54:44:8c:5b:c8:b7:ad:34:90:6f:7f: 50:72:3d:64:7e:e3:94:e3:78:53:ec:28:97:c4:f3:90:93:47: 59:e9:fa:c6:d5:aa:2f:b9:fe:c2:47:47:08:55:5c:c7:c9:41: fb:13:fc:d7:6d:2d:64:db:6b:48:25:c6:ec:87:e1:90:c0:33: ec:04:7e:3d:32:c1:6c:d0:d1:a2:1d:77:31:1f:4d:46:7e:5f: 74:3b:9b:3b:87:dc:5d:82:ba:75:04:8d:16:b9:7e:11:a6:5d: 5b:5c:47:2d:ba:0f:9a:f0:7a:aa:f8:93:79:62:4f:1e:70:e6: 7d:fe:97:33:d3:32:eb:0a:df:22:11:d6:45:2e:a0:6e:0d:82: d6:48:57:df:8b:ff:3d:94:e1:c9:99:e6:1b:b2:65:62:de:2e: 68:e2:5e:89:38:23:f2:a5:c7:0e:80:e7:2f:5b:3d:34:2d:07: eb:fd:3f:2c:b2:58:e3:86:d4:cb:84:87:f6:dd:ae:ed:ea:06: e6:69:2b:1e:6d:19:08:22:99:f9:7a:48:92:1c:f3:c9:7b:b9: be:7a:f8:f6 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUa5WTf9W1J94sM3ARTvPpfc7HzUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU4MjcwNUZGODU3MzI0OTg0RTEwODdBQUZDQ0U2QkQ0 NjY1N0M3MTAeFw0yNTA4MjAxMjUwMjlaFw0yNTA4MjExNDM2MjlaMDMxMTAvBgNV BAMTKEMwMTQ0MEYyMUY1QkNCMzNGQ0ZDRDI1NTRFQzAwMUI0QUQxMUM3MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD21GkAKoc5QdN0nX5GAjjY1oTJ nD/NEaqRxo2hxBZAQp7AvWO4074pBCkmy+pbQPY4o6ccv/4prK1mPNFHooYpnVkN UHAJvi0oY3potVVnkb6RPs5NOhFq9ooDanbFbUElWjbSPtgppMngCidrrkZastHZ VuLuE3VispryisGojXRU5fGpVsx0Gjodp+cWmrqruljhHR5EAJdhipyZTKWBeh/K NBQ6OWkFujoBZrQQ9aMkNU4HwYohWlgSRjmROqNIG0AsMivS/tzI9r/709TJP6O5 s5aZyKtf4dw+/NOJ/NVfPYcb1DhRfS33fFOPMiVU/a6HGiyweAouKwYE98y5AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUwBRA8h9byzP8/NJVTsABtK0Rxy4wHwYDVR0j BBgwFoAUXoJwX/hXMkmE4Qh6r8zmvUZlfHEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9aUmk5SjdjSk1VQm1zeUJzYUJMYVJ0UlJTZ0ZQWlE0ZkR3a2tHZWt4cVVD LzAvNUU4MjcwNUZGODU3MzI0OTg0RTEwODdBQUZDQ0U2QkQ0NjY1N0M3MS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81RTgyNzA1RkY4NTczMjQ5ODRF MTA4N0FBRkNDRTZCRDQ2NjU3QzcxLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1pS aTlKN2NKTVVCbXN5QnNhQkxhUnRSUlNnRlBaUTRmRHdra0dla3hxVUMvMC81RTgy NzA1RkY4NTczMjQ5ODRFMTA4N0FBRkNDRTZCRDQ2NjU3QzcxLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA SA6EETlFWaqlWFE02TGhD2eowwL/+ou/cNn719fA12r89HTEna7WU2RH8VREjFvI t600kG9/UHI9ZH7jlON4U+wol8TzkJNHWen6xtWqL7n+wkdHCFVcx8lB+xP8120t ZNtrSCXG7IfhkMAz7AR+PTLBbNDRoh13MR9NRn5fdDubO4fcXYK6dQSNFrl+EaZd W1xHLboPmvB6qviTeWJPHnDmff6XM9My6wrfIhHWRS6gbg2C1khX34v/PZThyZnm G7JlYt4uaOJeiTgj8qXHDoDnL1s9NC0H6/0/LLJY44bUy4SH9t2u7eoG5mkrHm0Z CCKZ+XpIkhzzyXu5vnr49g== -----END CERTIFICATE-----Generated at Wed Aug 20 19:53:12 2025 by rpki-client