$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft File: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft (raw, json) Hash identifier: ghdv+Svb0qHwxVn0R1BV6a1PEMoWHcz5xYsP+OfUN4w= Subject key identifier: 87:5C:81:C3:2A:A1:72:16:7F:72:29:CF:5C:01:95:2E:D4:1C:B2:58 Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 Certificate issuer: /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Certificate serial: 17B84C8ED6EA643CF86DEBD1725209DEF9E21C6E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft Manifest number: 026D Signing time: Sat 23 Aug 2025 08:29:10 +0000 Manifest this update: Sat 23 Aug 2025 08:24:10 +0000 Manifest next update: Sun 24 Aug 2025 09:05:10 +0000 Files and hashes: 1: 323830343a326432383a3a2f33322d313238203d3e20323635323634.roa (hash: 0xs1tTdh2Qke0fip6d1TEfj28igzF6NdDvyXj3IPtmI=) 2: 3136382e39302e34382e302f32322d3332203d3e20323635323634.roa (hash: Bv6Lyj5+VhdPqvZ/TGH9M1sdk0ISaNwfb7BbI7c/FPE=) 3: 3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa (hash: WqEYa1LHKO/TdU02rXFXLwns464zC4VFuzHF7wOxsfA=) 4: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl (hash: j9J2dPdxYC86f7SSHn8e6tUu1RhRTIjMEZrN/0014Ys=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 09:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:b8:4c:8e:d6:ea:64:3c:f8:6d:eb:d1:72:52:09:de:f9:e2:1c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Validity Not Before: Aug 23 08:24:10 2025 GMT Not After : Aug 24 09:05:10 2025 GMT Subject: CN=875C81C32AA172167F7229CF5C01952ED41CB258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3d:cf:17:69:99:5f:71:93:e0:8c:3b:1c:62: b8:73:55:35:25:d5:14:03:13:b0:03:95:30:81:42: 49:f3:2f:69:42:af:6f:ae:69:df:cc:3e:6a:24:c8: 35:77:a0:75:9e:a4:c4:a1:9a:ae:05:1d:4a:79:3e: e8:91:f9:e8:e4:c0:c3:5b:17:a5:30:57:92:15:30: 15:fb:54:94:d2:be:56:c3:62:52:7c:1a:fc:dc:52: dd:b7:fb:24:98:48:62:75:d4:21:c1:3a:63:99:cc: 1b:bf:88:61:47:e2:24:7d:76:a6:87:47:db:22:1f: a9:f6:cb:82:42:10:3f:4a:f7:19:13:72:f8:14:f9: 02:ba:5f:f8:b0:df:a5:ef:a6:da:2f:f3:ce:84:cb: a1:c7:27:a6:88:9f:10:41:90:10:8f:d8:28:46:ea: 45:7f:d5:18:35:d6:9a:97:ef:30:c0:d3:56:b6:84: ba:dd:19:e0:8c:c0:88:93:17:a8:45:44:a6:ea:cd: 52:82:ac:f3:e4:da:aa:a5:f8:6a:41:3b:4c:ee:ce: 90:69:93:da:4a:de:37:ba:44:b1:2e:00:3f:3c:4d: 20:a0:e5:a9:63:62:80:06:98:b0:ff:fa:b7:7c:f6: b2:ed:0d:9d:e4:6f:2f:c8:51:70:b0:81:a1:18:e0: 25:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5C:81:C3:2A:A1:72:16:7F:72:29:CF:5C:01:95:2E:D4:1C:B2:58 X509v3 Authority Key Identifier: keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:39:80:27:9c:35:69:e4:1a:f8:d4:95:13:16:92:a8:81:46: 8f:19:fd:ad:02:d2:35:7a:72:3f:db:d7:eb:aa:1d:56:17:d7: 2f:c0:01:62:c6:06:bc:79:b9:98:89:9e:cf:c8:ba:a2:9a:64: af:98:49:65:11:af:b2:ba:69:49:c3:6c:ae:88:c7:0e:ce:f3: 92:e8:23:b1:1d:83:52:66:44:1b:9f:8b:da:23:8d:1a:fb:9d: dd:5a:f2:93:96:f7:0c:8c:ae:ff:ce:01:78:34:5b:0b:c2:85: 29:d7:c0:b5:18:31:2f:d4:e5:bd:1c:98:7a:b9:01:ca:ae:3a: 3f:bd:5c:b4:0c:34:2a:f7:82:fc:ed:25:5b:dd:b5:12:16:fc: 49:eb:28:79:5d:a4:2d:94:31:ef:2c:6e:a3:0f:03:1f:f4:b9: 87:d7:a8:d8:d0:9c:13:ea:07:74:e4:f5:e2:c7:39:fa:e3:61: d7:b2:ba:86:5d:02:3e:e9:b5:a5:26:d0:a2:61:66:29:8a:ae: de:8a:af:d3:a0:92:ca:70:97:e2:aa:ea:3b:1e:c9:bd:59:e6: 98:9f:c1:4c:ba:f8:90:2f:4f:e3:e8:69:70:c1:b3:eb:5b:b4: 99:eb:68:ae:55:10:50:cd:8f:0e:d6:f7:56:af:04:3f:aa:46: 30:4a:45:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUF7hMjtbqZDz4bevRclIJ3vniHG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzODM3RDdFQ0ExRkUxMTQ1RDBDRTE1RTBCRjg5NUVF MDZBMjdFMjAeFw0yNTA4MjMwODI0MTBaFw0yNTA4MjQwOTA1MTBaMDMxMTAvBgNV BAMTKDg3NUM4MUMzMkFBMTcyMTY3RjcyMjlDRjVDMDE5NTJFRDQxQ0IyNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuPc8XaZlfcZPgjDscYrhzVTUl 1RQDE7ADlTCBQknzL2lCr2+uad/MPmokyDV3oHWepMShmq4FHUp5PuiR+ejkwMNb F6UwV5IVMBX7VJTSvlbDYlJ8GvzcUt23+ySYSGJ11CHBOmOZzBu/iGFH4iR9dqaH R9siH6n2y4JCED9K9xkTcvgU+QK6X/iw36Xvptov886Ey6HHJ6aInxBBkBCP2ChG 6kV/1Rg11pqX7zDA01a2hLrdGeCMwIiTF6hFRKbqzVKCrPPk2qql+GpBO0zuzpBp k9pK3je6RLEuAD88TSCg5aljYoAGmLD/+rd89rLtDZ3kby/IUXCwgaEY4CVlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUh1yBwyqhchZ/cinPXAGVLtQcslgwHwYDVR0j BBgwFoAUZTg31+yh/hFF0M4V4L+JXuBqJ+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZl UFMvMC82NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MzgzN0Q3RUNBMUZFMTE0 NUQwQ0UxNUUwQkY4OTVFRTA2QTI3RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZlUFMvMC82 NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABjmAJ5w1aeQa+NSVExaSqIFGjxn9rQLSNXpyP9vX66odVhfXL8ABYsYGvHm5 mImez8i6oppkr5hJZRGvsrppScNsrojHDs7zkugjsR2DUmZEG5+L2iONGvud3Vry k5b3DIyu/84BeDRbC8KFKdfAtRgxL9TlvRyYerkByq46P71ctAw0KveC/O0lW921 Ehb8SesoeV2kLZQx7yxuow8DH/S5h9eo2NCcE+oHdOT14sc5+uNh17K6hl0CPum1 pSbQomFmKYqu3oqv06CSynCX4qrqOx7JvVnmmJ/BTLr4kC9P4+hpcMGz61u0meto rlUQUM2PDtb3Vq8EP6pGMEpFag== -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:16 2025 by rpki-client