$ rpki-client -vvf rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft File: DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft (raw, json) Hash identifier: CRceXlKt7Vb1mMfQ61+QmPi9e5WUI18CHSMMtZb4X0A= Subject key identifier: 4E:64:72:8E:F4:63:F0:B7:EC:92:D9:D5:A4:71:21:90:D7:69:BE:DC Authority key identifier: DA:A9:0F:AC:A0:DF:71:D2:7E:A4:00:93:7B:94:23:A3:BD:8F:05:BF Certificate issuer: /CN=DAA90FACA0DF71D27EA400937B9423A3BD8F05BF Certificate serial: 590EE926025C92AC28AF26D6D7400FA3BE34AD08 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer Subject info access: rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft Manifest number: 0195 Signing time: Fri 22 Aug 2025 21:24:50 +0000 Manifest this update: Fri 22 Aug 2025 21:19:50 +0000 Manifest next update: Sat 23 Aug 2025 23:13:50 +0000 Files and hashes: 1: DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl (hash: F/J9cJvNiIX5wdZyRlP+6RgsGO/CHtfGMEo3yNnON00=) 2: 3136302e3233382e3137322e302f32322d3234203d3e20323636353534.roa (hash: 3amzwyg3JtmpHjLsGYT1Ylihai+j4QHw4Iv2HmnWt0k=) 3: 323830343a336463633a3a2f33322d3438203d3e20323636353534.roa (hash: Us/qMtaBQT31jKRuL2J9Elh5GZUUnTD2YjkN5CM1wrA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 23:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:0e:e9:26:02:5c:92:ac:28:af:26:d6:d7:40:0f:a3:be:34:ad:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DAA90FACA0DF71D27EA400937B9423A3BD8F05BF Validity Not Before: Aug 22 21:19:50 2025 GMT Not After : Aug 23 23:13:50 2025 GMT Subject: CN=4E64728EF463F0B7EC92D9D5A4712190D769BEDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c4:65:bd:5a:dc:7c:c0:ac:24:44:da:fb:a4: 1f:4e:a0:21:6f:f6:ae:d0:c9:22:df:7d:b8:eb:25: a8:e3:e0:e0:33:ea:dc:ab:eb:73:69:01:ad:fc:50: 1d:2f:2f:8d:fc:8f:05:81:aa:98:35:cf:9b:8b:3a: 07:86:f8:66:4b:62:c0:7d:96:c4:15:e6:45:d0:3e: 01:57:01:75:11:0a:b2:1a:74:54:01:1f:28:04:a0: 61:17:4c:6d:3f:40:c1:53:bc:dc:9c:37:46:92:63: e6:f1:b9:b9:d2:64:44:44:b6:b3:16:3b:9f:5d:e3: b2:76:77:8f:40:47:1a:a6:95:a5:09:c2:ef:d2:c6: 57:bf:33:f6:68:17:ac:e0:0d:1c:99:c5:dd:48:a3: be:3a:b2:76:27:70:f4:82:1b:e8:18:3a:a2:a3:e6: 1b:c7:53:b3:a7:d8:63:18:31:67:1a:04:96:41:9a: 7b:84:10:da:83:9e:4d:e2:de:0b:6b:87:da:6c:92: d2:76:78:fb:e5:12:4b:a5:5c:74:75:bf:ab:c4:a9: 8b:7e:80:d4:ca:ce:92:fc:c5:61:ad:e0:df:de:09: 4f:d3:29:93:f8:81:74:a8:fe:72:40:35:ec:cc:2b: e7:6b:ba:75:a3:10:d6:f5:e2:28:ff:83:9a:3d:9c: 4d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:64:72:8E:F4:63:F0:B7:EC:92:D9:D5:A4:71:21:90:D7:69:BE:DC X509v3 Authority Key Identifier: keyid:DA:A9:0F:AC:A0:DF:71:D2:7E:A4:00:93:7B:94:23:A3:BD:8F:05:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:b0:f7:de:61:c3:dc:27:70:b8:1e:c0:26:b4:65:1c:14:01: 6e:90:42:a7:76:75:3e:7f:1d:71:ec:f2:74:89:b7:d6:90:aa: 82:e0:68:e7:21:3b:5e:e3:9e:17:84:8b:92:c4:30:b5:c0:f0: 12:ef:fd:76:bd:84:b5:84:3f:18:1a:02:23:3a:8d:30:6f:72: 59:38:5a:3a:a9:ac:a8:f2:4d:24:3e:b4:9b:97:56:34:b7:bc: 55:84:7d:91:d8:60:26:91:f5:f3:77:70:93:e6:94:ce:22:8c: b0:df:c1:d7:cd:88:88:36:7c:0b:86:66:84:b2:16:de:c0:fa: a9:88:17:6e:26:76:c4:f1:fb:60:d5:1d:a3:9f:96:46:9c:ed: e9:be:e5:58:7b:df:4a:4f:e2:c0:ea:f7:68:d5:77:ee:d9:0c: 99:c4:08:9f:f0:35:d8:fc:7a:29:cd:65:94:b6:d8:57:c1:0c: 3e:4c:70:53:72:c2:2e:cf:6b:4e:cd:23:46:e6:ba:28:99:78: 73:81:08:dc:d6:24:84:6e:23:6a:56:55:c9:8a:ec:5c:25:0a: d8:36:e6:b9:b5:aa:d5:9c:d0:31:65:6e:c6:30:2f:b3:19:f7: 71:33:23:2f:a6:7d:24:76:1c:62:26:5a:ad:54:09:6b:f1:36: a0:50:33:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWQ7pJgJckqworybW10APo740rQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREFBOTBGQUNBMERGNzFEMjdFQTQwMDkzN0I5NDIzQTNC RDhGMDVCRjAeFw0yNTA4MjIyMTE5NTBaFw0yNTA4MjMyMzEzNTBaMDMxMTAvBgNV BAMTKDRFNjQ3MjhFRjQ2M0YwQjdFQzkyRDlENUE0NzEyMTkwRDc2OUJFREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbxGW9Wtx8wKwkRNr7pB9OoCFv 9q7QySLffbjrJajj4OAz6tyr63NpAa38UB0vL438jwWBqpg1z5uLOgeG+GZLYsB9 lsQV5kXQPgFXAXURCrIadFQBHygEoGEXTG0/QMFTvNycN0aSY+bxubnSZEREtrMW O59d47J2d49ARxqmlaUJwu/Sxle/M/ZoF6zgDRyZxd1Io746snYncPSCG+gYOqKj 5hvHU7On2GMYMWcaBJZBmnuEENqDnk3i3gtrh9psktJ2ePvlEkulXHR1v6vEqYt+ gNTKzpL8xWGt4N/eCU/TKZP4gXSo/nJANezMK+drunWjENb14ij/g5o9nE0ZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTmRyjvRj8LfsktnVpHEhkNdpvtwwHwYDVR0j BBgwFoAU2qkPrKDfcdJ+pACTe5Qjo72PBb8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk5kdUQxdWlYd29Nd2lzc2tBblBIRWpYOFJaMVFaZEJjQjVQM2JyaUF5 cWUvMC9EQUE5MEZBQ0EwREY3MUQyN0VBNDAwOTM3Qjk0MjNBM0JEOEYwNUJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBQTkwRkFDQTBERjcxRDI3 RUE0MDA5MzdCOTQyM0EzQkQ4RjA1QkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mk5kdUQxdWlYd29Nd2lzc2tBblBIRWpYOFJaMVFaZEJjQjVQM2JyaUF5cWUvMC9E QUE5MEZBQ0EwREY3MUQyN0VBNDAwOTM3Qjk0MjNBM0JEOEYwNUJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ7D33mHD3CdwuB7AJrRlHBQBbpBCp3Z1Pn8dcezydIm31pCqguBo5yE7XuOe F4SLksQwtcDwEu/9dr2EtYQ/GBoCIzqNMG9yWThaOqmsqPJNJD60m5dWNLe8VYR9 kdhgJpH183dwk+aUziKMsN/B182IiDZ8C4ZmhLIW3sD6qYgXbiZ2xPH7YNUdo5+W Rpzt6b7lWHvfSk/iwOr3aNV37tkMmcQIn/A12Px6Kc1llLbYV8EMPkxwU3LCLs9r Ts0jRua6KJl4c4EI3NYkhG4jalZVyYrsXCUK2DbmubWq1ZzQMWVuxjAvsxn3cTMj L6Z9JHYcYiZarVQJa/E2oFAzQw== -----END CERTIFICATE-----Generated at Sat Aug 23 16:33:23 2025 by rpki-client