$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft File: 695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft (raw, json) Hash identifier: E1NfSBGanhJe8Sm1pzxcWe83CqP2tT6UPCfmeRyhi3Y= Subject key identifier: 41:18:67:16:44:DF:C9:97:AC:2C:68:C7:88:17:E0:9E:35:02:9B:E8 Authority key identifier: 69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2 Certificate issuer: /CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2 Certificate serial: 5C35EE306171B74DA9DA7B18432854A1F9CAC965 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft Manifest number: D9 Signing time: Sat 23 Aug 2025 14:02:29 +0000 Manifest this update: Sat 23 Aug 2025 13:57:29 +0000 Manifest next update: Sun 24 Aug 2025 15:05:29 +0000 Files and hashes: 1: 3133312e3130382e382e302f32322d3332203d3e20323633343234.roa (hash: 5x0qHXKy052VE9+a2c/CKxVgKs0GgOqzJVo2yGxQ3ro=) 2: 3137372e39312e33322e302f32322d3332203d3e20323633343234.roa (hash: 05bv3rwHFKdXP0ka5nwmC7aUxyM/kFqlL8VfT5VE/hg=) 3: 695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl (hash: HbwWNZW04W9k0tfHiXvCzmK/T5LH1GKLemrI4YqGOKs=) 4: 3137302e38322e3131362e302f32322d3332203d3e20323633343234.roa (hash: Bq7jYvlTzFbRiuY4gjDAmQq+hoFOYx9hFEexWG876XM=) 5: 3137302e3233312e3135322e302f32322d3332203d3e20323633343234.roa (hash: QNYexqxi8ZgpvO1oIsW72rOjkHsbCORODUg23wwI2QE=) 6: 323830343a313139343a3a2f33322d313238203d3e20323633343234.roa (hash: qRpe3HMunOlDvbnsvh59LbRtj4Tl6ZLH4gik3VMaTCc=) 7: 3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa (hash: XqR77qLnVQPjvW+NdcPMVLhS20GCaBS3cER2/qIQpkE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 15:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:35:ee:30:61:71:b7:4d:a9:da:7b:18:43:28:54:a1:f9:ca:c9:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2 Validity Not Before: Aug 23 13:57:29 2025 GMT Not After : Aug 24 15:05:29 2025 GMT Subject: CN=4118671644DFC997AC2C68C78817E09E35029BE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:89:9e:f5:13:64:58:a0:28:56:33:52:5b:6d: 9d:64:7f:da:bf:49:c6:c8:31:53:59:6f:3d:b1:a7: 26:80:5f:e6:5a:5c:7b:45:c4:72:25:5e:b9:0a:27: 9d:15:9f:0c:35:e9:a4:37:52:a6:1a:8e:39:de:7d: b2:92:ee:f0:ef:9b:ac:34:da:c8:7e:93:ba:e4:ff: 0c:16:bf:2b:51:a9:98:6c:b5:b5:48:3a:90:f7:c1: 09:6e:bb:b8:d1:7e:60:92:0b:ab:1b:38:de:5f:86: cb:89:ac:87:a5:82:ab:ae:00:72:3f:b0:ef:4f:b2: 6f:c9:90:d8:49:e0:67:82:d0:44:90:d3:f0:22:7d: 21:15:23:ba:a3:df:12:20:9f:6a:28:61:2f:59:ca: b2:9b:04:88:00:13:b5:03:e9:3a:84:cd:19:1d:41: 45:d1:90:3e:f2:2c:2f:64:89:0f:ff:24:49:b9:5d: fd:9d:3e:c9:ba:49:c6:af:eb:1b:a2:bf:7d:48:76: 3d:49:5a:bb:91:49:ee:91:6f:27:2f:7c:70:3e:1a: 1a:ae:ce:c9:ac:94:32:21:95:1c:72:f6:33:21:23: 33:2b:77:d0:d9:aa:bd:95:45:56:13:a5:1b:89:71: 84:4b:16:c9:01:00:c2:cf:0e:49:d8:b3:ec:2a:30: fd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:18:67:16:44:DF:C9:97:AC:2C:68:C7:88:17:E0:9E:35:02:9B:E8 X509v3 Authority Key Identifier: keyid:69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0f:19:78:f5:88:94:8d:d6:db:83:dd:25:d3:61:48:51:4d: 2e:71:f0:58:87:b8:dc:91:41:7e:97:bd:ca:d8:ea:95:b2:fe: c0:60:8d:9d:97:74:15:11:cf:ce:e7:81:3d:9f:95:03:3d:58: d6:fb:32:34:3e:7a:79:f1:f8:f5:1c:55:ba:e4:d0:db:4e:02: 43:54:aa:a1:8d:8b:ca:25:f4:6c:e1:d0:19:43:42:e4:63:9a: 4c:0f:bf:34:ea:6d:7f:7b:e1:08:b0:76:cb:95:fe:d9:57:3f: f9:46:e7:cb:d5:19:3e:6e:d1:7c:7e:00:ba:a9:c8:ae:4b:20: ef:0c:89:bd:5e:79:de:3b:03:a5:ac:c0:6c:6f:11:ef:17:74: 89:e9:14:be:77:9a:06:e6:9d:5f:b3:2b:35:5a:f9:d7:f1:80: 5c:05:ea:ef:4a:29:b1:d9:be:94:f4:f5:4c:57:fa:e5:d5:45: 52:52:6e:01:7d:6d:46:dd:78:e8:d5:f2:9a:87:60:15:17:29: be:5c:02:80:8b:30:b9:83:be:30:5c:f8:c2:97:8c:2e:74:25: 26:d1:a5:c3:5c:2c:69:51:e0:92:64:b6:e7:c0:1c:4c:87:af: 45:8b:50:0a:8a:06:95:16:98:06:ca:a8:f3:e2:9c:6d:19:72: 73:66:5a:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXDXuMGFxt02p2nsYQyhUofnKyWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk1QTI4RkMxMzNFQjU0MDhCOUJBMTI2RDlGRkUyMDg4 NEVERUNEMjAeFw0yNTA4MjMxMzU3MjlaFw0yNTA4MjQxNTA1MjlaMDMxMTAvBgNV BAMTKDQxMTg2NzE2NDRERkM5OTdBQzJDNjhDNzg4MTdFMDlFMzUwMjlCRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLiZ71E2RYoChWM1JbbZ1kf9q/ ScbIMVNZbz2xpyaAX+ZaXHtFxHIlXrkKJ50Vnww16aQ3UqYajjnefbKS7vDvm6w0 2sh+k7rk/wwWvytRqZhstbVIOpD3wQluu7jRfmCSC6sbON5fhsuJrIelgquuAHI/ sO9Psm/JkNhJ4GeC0ESQ0/AifSEVI7qj3xIgn2ooYS9ZyrKbBIgAE7UD6TqEzRkd QUXRkD7yLC9kiQ//JEm5Xf2dPsm6Scav6xuiv31Idj1JWruRSe6RbycvfHA+Ghqu zsmslDIhlRxy9jMhIzMrd9DZqr2VRVYTpRuJcYRLFskBAMLPDknYs+wqMP2pAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQRhnFkTfyZesLGjHiBfgnjUCm+gwHwYDVR0j BBgwFoAUaVoo/BM+tUCLm6Em2f/iCITt7NIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUhFWVJMOHlrV3hBNWFNMnZqbjdqWTI1WHYzYnF2bXk5dGlnRkJOcVJr TjgvMi82OTVBMjhGQzEzM0VCNTQwOEI5QkExMjZEOUZGRTIwODg0RURFQ0QyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NUEyOEZDMTMzRUI1NDA4 QjlCQTEyNkQ5RkZFMjA4ODRFREVDRDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUhFWVJMOHlrV3hBNWFNMnZqbjdqWTI1WHYzYnF2bXk5dGlnRkJOcVJrTjgvMi82 OTVBMjhGQzEzM0VCNTQwOEI5QkExMjZEOUZGRTIwODg0RURFQ0QyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADw8ZePWIlI3W24PdJdNhSFFNLnHwWIe43JFBfpe9ytjqlbL+wGCNnZd0FRHP zueBPZ+VAz1Y1vsyND56efH49RxVuuTQ204CQ1SqoY2LyiX0bOHQGUNC5GOaTA+/ NOptf3vhCLB2y5X+2Vc/+Ubny9UZPm7RfH4AuqnIrksg7wyJvV553jsDpazAbG8R 7xd0iekUvneaBuadX7MrNVr51/GAXAXq70opsdm+lPT1TFf65dVFUlJuAX1tRt14 6NXymodgFRcpvlwCgIswuYO+MFz4wpeMLnQlJtGlw1wsaVHgkmS258AcTIevRYtQ CooGlRaYBsqo8+KcbRlyc2Zawg== -----END CERTIFICATE-----Generated at Sun Aug 24 00:06:43 2025 by rpki-client