$ rpki-client -vvf rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft File: CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft (raw, json) Hash identifier: 4HnM3a5sPd+gvLwWqgqzwa7B5mDAejsOy9SM3dwM61w= Subject key identifier: 64:8E:16:B7:9C:AD:CA:BF:B9:2A:E3:AB:3C:62:44:6A:9C:CB:34:8E Authority key identifier: CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42 Certificate issuer: /CN=CDEF1FD6690DCCED5205338EE0BC7D0E188DE842 Certificate serial: 1430B90902FF9248F50E6B652097301A92F5DBEB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer Subject info access: rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft Manifest number: 0125 Signing time: Sat 23 Aug 2025 10:46:16 +0000 Manifest this update: Sat 23 Aug 2025 10:41:16 +0000 Manifest next update: Sun 24 Aug 2025 13:24:16 +0000 Files and hashes: 1: 323830343a366262343a663030303a3a2f34312d3431203d3e20323730343138.roa (hash: N2nTtvb8JXqHz8HSxYE4bRZRkUdpeFoYlVaINLv7iHM=) 2: 3139302e3131312e3136382e302f32322d3234203d3e20323730343138.roa (hash: mJq4dFqiva5H7E/DVQTNnmaU+jNCkwWuNtHA92VtrOU=) 3: CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl (hash: HMyEGwwkELShWoip7jC8LavfqJOkzNPhQ2iNAMba/+w=) 4: 323830343a366262343a3a2f33322d3336203d3e20323730343138.roa (hash: iXw8eyww30FtkaY4pIbyQVccKqIHDDzs1Oowd0Qxomg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:30:b9:09:02:ff:92:48:f5:0e:6b:65:20:97:30:1a:92:f5:db:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDEF1FD6690DCCED5205338EE0BC7D0E188DE842 Validity Not Before: Aug 23 10:41:16 2025 GMT Not After : Aug 24 13:24:16 2025 GMT Subject: CN=648E16B79CADCABFB92AE3AB3C62446A9CCB348E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a9:9c:09:63:83:3f:4c:2b:43:89:01:d7:16: ea:8b:d7:1e:e0:7a:65:e4:bd:22:8d:42:a4:aa:c5: 29:9f:6d:ec:8d:9f:13:81:be:b6:78:27:43:2f:f0: 67:3a:3d:8e:e7:56:0c:b5:e8:f4:93:cd:aa:a2:b4: 19:54:ac:17:95:46:e8:b7:cb:c6:3b:cd:67:ee:11: 65:21:85:16:f8:60:89:89:12:eb:45:ac:5d:57:0e: b3:68:ca:22:4f:f3:0a:c9:d9:68:38:5c:12:58:bc: 11:77:a5:44:01:38:f9:7e:5e:03:82:2d:8b:ff:de: 95:0d:0f:e6:39:78:f2:e4:4e:35:2e:46:b7:67:a5: f7:63:f3:bb:bb:32:7a:95:ec:12:f4:51:c7:ba:18: d5:67:e1:99:8f:e3:e9:e4:a8:28:26:f4:49:2c:4b: 86:89:47:11:95:52:c1:3f:5e:41:88:5b:f9:64:3a: 50:3d:41:46:cc:20:53:41:3a:61:65:e4:e1:06:34: eb:45:7e:dc:ce:96:87:cc:8f:b5:be:2e:6f:92:8f: ed:0a:de:8c:62:bb:f3:67:b3:a9:06:8f:f7:de:80: 79:e8:83:ef:f1:7f:b5:2e:5b:0e:7d:77:a0:77:7b: 1b:36:8c:5b:09:cc:53:08:3a:e8:84:c1:d7:f4:2d: 09:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8E:16:B7:9C:AD:CA:BF:B9:2A:E3:AB:3C:62:44:6A:9C:CB:34:8E X509v3 Authority Key Identifier: keyid:CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:52:2e:49:92:ae:0e:e6:73:8c:90:80:e0:55:32:42:8f:4c: f2:f2:79:c1:82:b8:8e:1d:69:04:86:a2:c4:f7:6a:2f:51:4c: 0e:09:51:24:7f:f1:17:69:d6:de:27:6b:bb:9b:61:d1:8a:c1: d4:c9:d3:53:9b:54:70:07:5b:a9:84:11:eb:cc:26:d8:d3:68: 74:07:d1:1b:cf:70:52:3e:cc:47:3c:18:dd:b5:b9:02:c4:b9: 66:f8:5b:67:0b:05:60:19:d7:e7:6e:2d:da:a2:94:4b:c7:7d: 07:01:83:78:46:4a:c5:d1:53:33:02:b0:71:da:2e:70:0b:6f: 2d:47:24:33:7b:bd:03:ce:37:de:3c:fa:74:bd:29:68:6c:6a: 0b:09:0d:db:20:17:c9:64:33:b7:b9:59:e5:7e:df:b9:d8:72: a6:5e:47:6d:d8:c0:65:52:a8:07:1d:e1:57:dd:7a:08:49:66: ac:29:55:e2:6c:0b:e0:a6:96:6d:a1:f4:cf:be:06:6d:da:e3: 00:10:cf:b7:b1:04:06:31:cb:a1:f7:0a:ea:e2:d5:90:9e:79: bb:97:3a:77:b6:ee:87:74:53:08:50:31:aa:4b:f7:72:3b:af: 2b:30:95:75:b5:52:f0:bf:d6:e3:ce:25:74:80:bf:7c:dd:dc: 2d:2c:0d:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFDC5CQL/kkj1DmtlIJcwGpL12+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFRjFGRDY2OTBEQ0NFRDUyMDUzMzhFRTBCQzdEMEUx ODhERTg0MjAeFw0yNTA4MjMxMDQxMTZaFw0yNTA4MjQxMzI0MTZaMDMxMTAvBgNV BAMTKDY0OEUxNkI3OUNBRENBQkZCOTJBRTNBQjNDNjI0NDZBOUNDQjM0OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQqZwJY4M/TCtDiQHXFuqL1x7g emXkvSKNQqSqxSmfbeyNnxOBvrZ4J0Mv8Gc6PY7nVgy16PSTzaqitBlUrBeVRui3 y8Y7zWfuEWUhhRb4YImJEutFrF1XDrNoyiJP8wrJ2Wg4XBJYvBF3pUQBOPl+XgOC LYv/3pUND+Y5ePLkTjUuRrdnpfdj87u7MnqV7BL0Uce6GNVn4ZmP4+nkqCgm9Eks S4aJRxGVUsE/XkGIW/lkOlA9QUbMIFNBOmFl5OEGNOtFftzOlofMj7W+Lm+Sj+0K 3oxiu/Nns6kGj/fegHnog+/xf7UuWw59d6B3exs2jFsJzFMIOuiEwdf0LQmRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZI4Wt5ytyr+5KuOrPGJEapzLNI4wHwYDVR0j BBgwFoAUze8f1mkNzO1SBTOO4Lx9DhiN6EIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUsxQjVEaU1zaHBDdHh3empXVTlXeGN5UkRaRzJ4SjhESkdyeXFCTDZ5 YUcvMC9DREVGMUZENjY5MERDQ0VENTIwNTMzOEVFMEJDN0QwRTE4OERFODQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NERUYxRkQ2NjkwRENDRUQ1 MjA1MzM4RUUwQkM3RDBFMTg4REU4NDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUsxQjVEaU1zaHBDdHh3empXVTlXeGN5UkRaRzJ4SjhESkdyeXFCTDZ5YUcvMC9D REVGMUZENjY5MERDQ0VENTIwNTMzOEVFMEJDN0QwRTE4OERFODQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP1IuSZKuDuZzjJCA4FUyQo9M8vJ5wYK4jh1pBIaixPdqL1FMDglRJH/xF2nW 3idru5th0YrB1MnTU5tUcAdbqYQR68wm2NNodAfRG89wUj7MRzwY3bW5AsS5Zvhb ZwsFYBnX524t2qKUS8d9BwGDeEZKxdFTMwKwcdoucAtvLUckM3u9A8433jz6dL0p aGxqCwkN2yAXyWQzt7lZ5X7fudhypl5HbdjAZVKoBx3hV916CElmrClV4mwL4KaW baH0z74GbdrjABDPt7EEBjHLofcK6uLVkJ55u5c6d7buh3RTCFAxqkv3cjuvKzCV dbVS8L/W484ldIC/fN3cLSwN6A== -----END CERTIFICATE-----Generated at Sat Aug 23 21:34:19 2025 by rpki-client