$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft File: D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft (raw, json) Hash identifier: hWn0LC5wsPB98+vV7Lbqom7E4MQhXKyMNhdr8KIcHz0= Subject key identifier: 4E:ED:F8:9B:D8:30:9E:75:6B:EA:B4:FB:14:D4:46:74:0E:F9:6B:CD Authority key identifier: D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B Certificate issuer: /CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B Certificate serial: 796E401BD3CEF136149B5E9DC76F17F535D3BE98 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft Manifest number: 0144 Signing time: Fri 22 Aug 2025 22:27:49 +0000 Manifest this update: Fri 22 Aug 2025 22:22:49 +0000 Manifest next update: Sat 23 Aug 2025 23:24:49 +0000 Files and hashes: 1: 3137372e37332e36302e302f32322d3234203d3e20323633343638.roa (hash: ojNYwHHCihvNSk2FkbyfGPhui+Fo/NptmXx53NBSpaQ=) 2: D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl (hash: BmoZWh5nPdfBxpRPGbyWNFZ39RKJr/XS98y6mcXZwDE=) 3: 323830343a313234633a3a2f33322d3438203d3e20323633343638.roa (hash: T2k3XHzj+R5PWM1PAn1IiRXkMkZU+kzdLTKOTB9BdPU=) 4: 3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa (hash: mQl+DqMitEfto4sm/J239pDInofAJ055830zO5LsIjU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 23:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:6e:40:1b:d3:ce:f1:36:14:9b:5e:9d:c7:6f:17:f5:35:d3:be:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B Validity Not Before: Aug 22 22:22:49 2025 GMT Not After : Aug 23 23:24:49 2025 GMT Subject: CN=4EEDF89BD8309E756BEAB4FB14D446740EF96BCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:84:dd:85:79:8a:77:00:44:c2:4e:06:fc:e4: 37:46:2b:0a:0a:75:6f:ea:a0:fd:66:da:ee:0b:8f: 84:1a:70:fe:52:52:09:a7:49:03:7d:df:c8:6c:a1: 19:65:cb:98:a2:30:bb:b7:8b:33:5a:f1:38:4a:a5: eb:39:1b:42:14:9c:33:11:ee:47:65:e2:55:72:6a: 3b:b8:ae:fc:d8:76:7d:7c:30:a5:4e:65:60:d3:72: 29:15:f2:22:98:c5:fa:e5:f7:0b:7f:1a:c6:3a:10: da:7d:02:e6:4a:c2:d4:18:e0:b3:e0:d9:1a:3c:05: 4d:b7:aa:00:a8:3e:d3:f9:15:82:47:fb:5b:bf:dd: 41:ba:8a:0a:30:d9:45:18:ec:d1:ac:3e:5e:52:61: b8:d5:6b:b1:e8:bd:e2:0b:b2:ce:5c:06:f2:7e:45: b6:bf:5c:68:6a:53:b1:36:05:97:ad:9e:4b:02:f4: 35:b9:80:04:ec:78:52:14:14:be:21:1a:85:a5:f7: 57:e7:0e:e6:e9:64:44:2b:73:8e:81:df:30:cd:d3: 88:84:08:75:bb:11:74:74:f8:95:ff:7e:22:00:21: 85:fa:42:d5:9e:49:1b:67:e3:b1:71:b7:ba:11:0b: 15:30:ce:21:c3:1e:1e:e4:7d:30:e9:42:26:73:0c: ae:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:ED:F8:9B:D8:30:9E:75:6B:EA:B4:FB:14:D4:46:74:0E:F9:6B:CD X509v3 Authority Key Identifier: keyid:D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:57:30:96:ad:0a:35:a9:6d:da:30:ae:33:90:14:ff:2a:15: 64:90:80:7d:a7:78:8b:bc:b1:c9:35:5e:00:ca:6b:74:e5:a6: db:71:7d:d3:82:05:d1:71:e7:a1:39:17:cd:69:e3:d3:8d:34: e6:34:5e:d0:a1:96:88:a4:7a:6b:01:db:0b:11:4a:38:cb:c6: 34:ff:ae:d6:f4:17:8a:8d:e2:df:1e:a7:09:62:12:a4:8d:d1: 93:01:f8:98:40:5a:8e:40:9f:ff:81:3c:9c:81:e6:a5:d0:81: 9e:53:40:7b:3c:9f:c3:6b:c7:a1:02:08:07:77:e3:fb:0f:2b: 9f:d8:d5:9c:91:a1:f9:4c:f5:ed:26:e6:ea:c1:b1:10:d0:52: a7:2d:56:75:ae:ad:e0:7b:77:bf:60:aa:e0:7b:c6:7b:8d:53: 40:7d:92:12:82:bf:0f:8b:55:8d:e0:f1:bf:0d:53:98:b2:27: 0e:75:39:74:74:44:2f:6f:2c:06:f8:2b:3c:f1:9f:8b:05:b6: 2e:53:81:d1:b8:23:f6:65:e2:6b:63:d3:bc:7c:58:de:8e:38: 43:a8:2e:48:fa:f9:0a:54:f8:e0:fb:89:7b:f4:6d:6b:83:f3: dd:da:f7:a5:f2:e4:78:86:75:99:4c:00:51:96:e5:b4:c3:95: 75:fb:f1:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeW5AG9PO8TYUm16dx28X9TXTvpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM3NEY1NDI4MEZDOUNGN0U5MDY4QzZGRjc0NEZBNUFE MTQ5RDcxQjAeFw0yNTA4MjIyMjIyNDlaFw0yNTA4MjMyMzI0NDlaMDMxMTAvBgNV BAMTKDRFRURGODlCRDgzMDlFNzU2QkVBQjRGQjE0RDQ0Njc0MEVGOTZCQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGhN2FeYp3AETCTgb85DdGKwoK dW/qoP1m2u4Lj4QacP5SUgmnSQN938hsoRlly5iiMLu3izNa8ThKpes5G0IUnDMR 7kdl4lVyaju4rvzYdn18MKVOZWDTcikV8iKYxfrl9wt/GsY6ENp9AuZKwtQY4LPg 2Ro8BU23qgCoPtP5FYJH+1u/3UG6igow2UUY7NGsPl5SYbjVa7HoveILss5cBvJ+ Rba/XGhqU7E2BZetnksC9DW5gATseFIUFL4hGoWl91fnDubpZEQrc46B3zDN04iE CHW7EXR0+JX/fiIAIYX6QtWeSRtn47Fxt7oRCxUwziHDHh7kfTDpQiZzDK47AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTu34m9gwnnVr6rT7FNRGdA75a80wHwYDVR0j BBgwFoAU03T1QoD8nPfpBoxv90T6WtFJ1xswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0Vh blkvMC9EMzc0RjU0MjgwRkM5Q0Y3RTkwNjhDNkZGNzQ0RkE1QUQxNDlENzFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNzRGNTQyODBGQzlDRjdF OTA2OEM2RkY3NDRGQTVBRDE0OUQ3MUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0VhblkvMC9E Mzc0RjU0MjgwRkM5Q0Y3RTkwNjhDNkZGNzQ0RkE1QUQxNDlENzFCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWlcwlq0KNalt2jCuM5AU/yoVZJCAfad4i7yxyTVeAMprdOWm23F904IF0XHn oTkXzWnj04005jRe0KGWiKR6awHbCxFKOMvGNP+u1vQXio3i3x6nCWISpI3RkwH4 mEBajkCf/4E8nIHmpdCBnlNAezyfw2vHoQIIB3fj+w8rn9jVnJGh+Uz17Sbm6sGx ENBSpy1Wda6t4Ht3v2Cq4HvGe41TQH2SEoK/D4tVjeDxvw1TmLInDnU5dHREL28s BvgrPPGfiwW2LlOB0bgj9mXia2PTvHxY3o44Q6guSPr5ClT44PuJe/Rta4Pz3dr3 pfLkeIZ1mUwAUZbltMOVdfvxFQ== -----END CERTIFICATE-----Generated at Sat Aug 23 17:19:49 2025 by rpki-client