$ rpki-client -vvf rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft File: 5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft (raw, json) Hash identifier: dC1ZlCC/2NvN1gAtO6881e0I42wkYr6+pHSJv+SsbuA= Subject key identifier: 68:0A:8C:4C:7F:4C:F2:38:D2:2C:FE:6B:09:6B:9A:94:84:0C:8A:B0 Authority key identifier: 5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31 Certificate issuer: /CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31 Certificate serial: 6ADB479989DFC81B249A7BE730BB51988D7BDD66 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer Subject info access: rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft Manifest number: 0238 Signing time: Sat 23 Aug 2025 05:58:15 +0000 Manifest this update: Sat 23 Aug 2025 05:53:15 +0000 Manifest next update: Sun 24 Aug 2025 07:44:15 +0000 Files and hashes: 1: 3136382e3139362e3130342e302f32322d3234203d3e20323635343531.roa (hash: bm12g2NtqddE/K8ln3akRM5TUAz6D/tgPeBexY7J5sY=) 2: 5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl (hash: QQeee/II1+pup3r19YJlG/QKqlmlpRirWnaCWMDESic=) 3: 323830343a333435343a323030303a3a2f33352d3335203d3e20323635343531.roa (hash: lWPWAMy2NkMXHq4ex2mIrGhd7zdCsxdT6sdhk5ThXO0=) 4: 323830343a333435343a3a2f33322d3334203d3e20323635343531.roa (hash: r3bCeQ3Va1xBObYctOhmI8el+yMJ561eA1zNaJrdc6A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 07:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:db:47:99:89:df:c8:1b:24:9a:7b:e7:30:bb:51:98:8d:7b:dd:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31 Validity Not Before: Aug 23 05:53:15 2025 GMT Not After : Aug 24 07:44:15 2025 GMT Subject: CN=680A8C4C7F4CF238D22CFE6B096B9A94840C8AB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2c:68:7e:08:a1:8f:7c:56:89:f6:1d:3a:b7: db:dc:78:88:33:a4:8b:dd:9c:66:c2:0a:88:b1:86: 1f:f9:da:e6:60:47:e0:76:9d:6b:f0:de:f9:1d:f6: 8a:0d:f5:43:16:09:79:81:80:35:40:21:0d:8e:25: d8:e9:af:af:7e:4e:dd:ba:eb:42:e7:c6:7d:fe:c6: c3:2c:54:1c:bb:b0:5a:4e:59:0d:d9:e9:75:b3:60: e6:22:3e:56:04:c4:e0:2f:6f:85:a5:30:5b:17:f3: a3:bd:f4:0b:9c:0f:75:c4:c2:87:9d:83:5a:d9:fe: b4:ca:ea:eb:d5:fd:61:a4:fe:6d:4a:47:a1:8f:d9: b0:e9:99:66:8e:0a:5c:b3:6e:b5:3e:d3:f2:d0:be: 2e:b8:85:7c:f9:c4:80:77:5a:14:93:16:51:ae:11: 44:06:49:14:fc:21:83:f3:37:be:77:6f:68:51:c6: 7c:d0:38:a9:de:45:e8:e2:67:c3:e4:02:50:79:0d: c3:6b:79:a4:00:e1:c7:a2:d6:4b:c4:82:c9:f2:1c: c8:f2:5a:0d:42:03:75:22:98:88:e1:37:a2:f2:bd: 4c:2e:d6:e2:55:4e:17:24:63:b6:cf:1a:c0:1a:b8: 2f:bd:c7:dc:6f:b3:67:96:d6:91:6a:5b:93:6a:a9: 80:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0A:8C:4C:7F:4C:F2:38:D2:2C:FE:6B:09:6B:9A:94:84:0C:8A:B0 X509v3 Authority Key Identifier: keyid:5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:7d:37:a1:12:d0:c5:6b:e9:e5:d1:f4:97:34:08:c8:2e:81: 5a:92:8b:e2:c0:d1:29:40:51:ba:b8:87:10:1d:2e:1d:43:01: 90:68:cc:4c:2a:c1:67:94:f4:7e:fb:45:bb:28:74:83:7f:c6: a7:cf:95:df:06:92:94:a9:8b:40:02:14:87:98:ae:9f:04:39: d5:16:44:b0:b0:b2:e6:61:7d:86:91:4a:fc:bb:71:98:a3:a9: 9a:6e:3c:6b:2b:fe:24:9f:d6:7a:75:44:d4:d1:5d:ca:40:51: 65:19:01:1f:84:f3:4e:c0:b2:2d:65:6a:9e:ae:ea:a6:74:3c: c8:99:26:94:4d:9b:28:8e:da:7d:2e:10:b3:6a:ee:2f:65:9b: 47:da:50:a9:55:df:bc:ee:cf:d1:f3:c3:8b:03:a8:6e:38:2e: a6:36:77:a5:d8:be:7a:19:09:ae:17:fe:ce:2a:b2:02:24:3b: 18:91:a2:2b:4e:21:a0:43:9b:1a:ca:de:36:1c:74:07:4c:77: 5f:97:6e:55:1d:3f:a4:00:0c:6b:aa:6c:c6:9b:73:68:45:d6: 27:f9:52:db:3c:9d:15:4e:09:13:75:51:d7:24:94:4d:8f:70: e6:64:86:ab:de:73:8b:f4:e3:0b:5d:6d:5d:37:83:fb:69:b8: 01:b1:4c:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUattHmYnfyBskmnvnMLtRmI173WYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURCRjM4OURFODRBODA2OEQ3MkJBN0E1RTAzMEY5MEQ4 RjY3MEQzMTAeFw0yNTA4MjMwNTUzMTVaFw0yNTA4MjQwNzQ0MTVaMDMxMTAvBgNV BAMTKDY4MEE4QzRDN0Y0Q0YyMzhEMjJDRkU2QjA5NkI5QTk0ODQwQzhBQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQLGh+CKGPfFaJ9h06t9vceIgz pIvdnGbCCoixhh/52uZgR+B2nWvw3vkd9ooN9UMWCXmBgDVAIQ2OJdjpr69+Tt26 60Lnxn3+xsMsVBy7sFpOWQ3Z6XWzYOYiPlYExOAvb4WlMFsX86O99AucD3XEwoed g1rZ/rTK6uvV/WGk/m1KR6GP2bDpmWaOClyzbrU+0/LQvi64hXz5xIB3WhSTFlGu EUQGSRT8IYPzN753b2hRxnzQOKneRejiZ8PkAlB5DcNreaQA4cei1kvEgsnyHMjy Wg1CA3UimIjhN6LyvUwu1uJVThckY7bPGsAauC+9x9xvs2eW1pFqW5NqqYBNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaAqMTH9M8jjSLP5rCWualIQMirAwHwYDVR0j BBgwFoAUXb84nehKgGjXK6el4DD5DY9nDTEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGs0VWlncXN2Q3BWZUY2b29SYk5tdHY2OW1YVkFWQXhNRlRCclVodEEz R3YvMC81REJGMzg5REU4NEE4MDY4RDcyQkE3QTVFMDMwRjkwRDhGNjcwRDMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEQkYzODlERTg0QTgwNjhE NzJCQTdBNUUwMzBGOTBEOEY2NzBEMzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGs0VWlncXN2Q3BWZUY2b29SYk5tdHY2OW1YVkFWQXhNRlRCclVodEEzR3YvMC81 REJGMzg5REU4NEE4MDY4RDcyQkE3QTVFMDMwRjkwRDhGNjcwRDMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWX03oRLQxWvp5dH0lzQIyC6BWpKL4sDRKUBRuriHEB0uHUMBkGjMTCrBZ5T0 fvtFuyh0g3/Gp8+V3waSlKmLQAIUh5iunwQ51RZEsLCy5mF9hpFK/LtxmKOpmm48 ayv+JJ/WenVE1NFdykBRZRkBH4TzTsCyLWVqnq7qpnQ8yJkmlE2bKI7afS4Qs2ru L2WbR9pQqVXfvO7P0fPDiwOobjgupjZ3pdi+ehkJrhf+ziqyAiQ7GJGiK04hoEOb GsreNhx0B0x3X5duVR0/pAAMa6psxptzaEXWJ/lS2zydFU4JE3VR1ySUTY9w5mSG q95zi/TjC11tXTeD+2m4AbFMrw== -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:21 2025 by rpki-client