$ rpki-client -vvf rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.mft File: 9828F8A8915A72753136825A1F46FECBBF95B7E4.mft (raw, json) Hash identifier: E/E+XMVnRaHex8IjGA+4zCSrpW21HoVVFar09Kqc+IE= Subject key identifier: 9B:5A:DD:5C:6F:67:4D:B1:6C:C4:7E:3F:3F:C9:C4:A9:EC:D1:6A:B6 Authority key identifier: 98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4 Certificate issuer: /CN=9828F8A8915A72753136825A1F46FECBBF95B7E4 Certificate serial: 617BBE915CCC14EDAF6C9D02BFC22026B8DDFA5D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer Subject info access: rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.mft Manifest number: 61 Signing time: Sat 23 Aug 2025 04:12:42 +0000 Manifest this update: Sat 23 Aug 2025 04:07:42 +0000 Manifest next update: Sun 24 Aug 2025 06:08:42 +0000 Files and hashes: 1: 34352e3136372e3132382e302f32322d3332203d3e20323634333938.roa (hash: 4+kBmRtb711bY1z+6PcNnsjifUyZQsgIMoZRlmQzz+s=) 2: 9828F8A8915A72753136825A1F46FECBBF95B7E4.crl (hash: 6baCGKYkXwVSHDekbexOsk8xcpE575Jl6rUXOipq9NA=) 3: 34352e3233392e3137362e302f32332d3234203d3e20323733353933.roa (hash: 31AKccvhMIkEMZZOyo5YSeCalvrmVRsRvcaXr8uHW5A=) 4: 3133312e3136312e3232342e302f32322d3332203d3e20323634333938.roa (hash: D2ZAno+HBcrJh17T7/nKT+m6mCbG85NeI/Nr2gI7Ydc=) 5: 323830343a316464383a3a2f33322d313238203d3e20323634333938.roa (hash: kX9Bzb586Bj/r/ntaaAh2QFdMp1ikLDxNQg0TlD57L0=) 6: 34352e3233392e3137382e302f32332d3234203d3e20323634333938.roa (hash: U3xdKCFtiqrzOZoxh2/bfWUTyXum6di0Qjz+YLIRXCg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.crl rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 06:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:7b:be:91:5c:cc:14:ed:af:6c:9d:02:bf:c2:20:26:b8:dd:fa:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9828F8A8915A72753136825A1F46FECBBF95B7E4 Validity Not Before: Aug 23 04:07:42 2025 GMT Not After : Aug 24 06:08:42 2025 GMT Subject: CN=9B5ADD5C6F674DB16CC47E3F3FC9C4A9ECD16AB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:db:ba:ec:34:0c:ac:dd:df:a9:cc:bb:6c:d7: 1f:74:f7:05:89:28:2c:42:fd:b4:bf:c8:62:11:e8: 11:6a:d4:c5:f5:cb:7b:b2:8d:fc:ff:ed:17:dc:ab: 56:2a:8c:72:47:d6:4f:48:b7:dd:cc:3a:72:17:13: 33:d9:47:17:d0:5b:55:09:84:16:0e:28:f3:40:cc: 24:52:45:57:31:3d:a3:33:97:59:31:16:7a:d2:d8: 2e:7a:b1:34:2a:d9:1c:18:b4:ee:29:7e:5d:d8:47: 62:a6:1b:15:a5:19:c5:21:35:47:39:57:8c:cb:dd: f1:95:22:e9:15:09:c2:2b:a9:fb:e4:05:51:22:54: 37:5d:04:5f:81:56:e4:fe:9f:20:77:a6:42:35:b1: 68:44:e8:37:72:c2:f3:bf:4d:42:7e:cd:a9:e1:8b: b5:91:25:9b:ac:b9:69:53:78:c6:17:6c:b6:09:d7: 3d:fa:0b:6e:32:4d:91:70:d6:9d:9d:b9:40:7d:5a: 1a:2b:d0:00:d1:08:48:02:6c:cc:60:d9:75:a6:4c: 74:d3:d7:c4:55:4c:42:59:8b:a8:3f:60:47:e0:32: eb:3b:0e:f3:4d:d9:ec:7c:a9:34:01:6f:71:2f:97: 39:53:12:c0:b2:41:31:9c:fe:47:2f:68:b4:f7:10: 87:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5A:DD:5C:6F:67:4D:B1:6C:C4:7E:3F:3F:C9:C4:A9:EC:D1:6A:B6 X509v3 Authority Key Identifier: keyid:98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:fa:2d:1b:03:1d:e0:44:b8:fd:41:d4:65:69:30:b7:8f:a7: 00:0b:75:a1:52:4a:90:21:16:9e:db:58:de:2a:8d:34:3b:4d: 21:b4:f7:77:cb:37:94:34:ed:c8:6c:c5:e3:93:a8:0a:e3:40: 99:d0:05:06:96:87:68:25:49:fa:fa:09:64:e6:e0:92:fd:a3: 4f:60:90:03:6f:0d:cc:b8:10:31:8e:29:4d:fa:0c:26:76:72: 6b:77:32:56:33:43:3b:c7:c5:5c:80:36:79:e2:a4:39:ba:92: 0a:76:fc:84:a9:62:d6:be:59:99:a2:84:b3:e4:c8:64:5c:1d: 47:d1:84:32:3c:a1:fb:34:bd:8e:c4:ac:39:43:78:86:01:9d: 02:98:fa:62:cf:6f:5c:24:2e:18:fc:fd:46:d0:9b:c8:db:a4: 70:d3:fc:92:72:26:56:9d:cb:08:15:9d:95:2b:53:13:19:3a: 60:3a:f4:1d:ef:d3:81:fc:41:f2:f2:9e:57:56:cd:b5:44:9d: 24:73:70:cc:0d:ab:30:21:b8:1b:4d:32:0f:32:95:17:a7:95: 11:90:a1:18:d9:fa:18:3d:b6:7d:df:ce:42:c7:2d:de:84:b5: d7:bd:2b:52:95:d5:dd:87:8a:d1:2a:95:1e:54:aa:fd:74:c7: b0:93:85:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYXu+kVzMFO2vbJ0Cv8IgJrjd+l0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgyOEY4QTg5MTVBNzI3NTMxMzY4MjVBMUY0NkZFQ0JC Rjk1QjdFNDAeFw0yNTA4MjMwNDA3NDJaFw0yNTA4MjQwNjA4NDJaMDMxMTAvBgNV BAMTKDlCNUFERDVDNkY2NzREQjE2Q0M0N0UzRjNGQzlDNEE5RUNEMTZBQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb27rsNAys3d+pzLts1x909wWJ KCxC/bS/yGIR6BFq1MX1y3uyjfz/7Rfcq1YqjHJH1k9It93MOnIXEzPZRxfQW1UJ hBYOKPNAzCRSRVcxPaMzl1kxFnrS2C56sTQq2RwYtO4pfl3YR2KmGxWlGcUhNUc5 V4zL3fGVIukVCcIrqfvkBVEiVDddBF+BVuT+nyB3pkI1sWhE6DdywvO/TUJ+zanh i7WRJZusuWlTeMYXbLYJ1z36C24yTZFw1p2duUB9Whor0ADRCEgCbMxg2XWmTHTT 18RVTEJZi6g/YEfgMus7DvNN2ex8qTQBb3EvlzlTEsCyQTGc/kcvaLT3EIflAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUm1rdXG9nTbFsxH4/P8nEqezRarYwHwYDVR0j BBgwFoAUmCj4qJFacnUxNoJaH0b+y7+Vt+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNU1Hdnd1NGRibmljR0xzdEQyS0p6ZEtmdzlrbUhOVVR6ZHdTWUdIa3dZ b2ovMC85ODI4RjhBODkxNUE3Mjc1MzEzNjgyNUExRjQ2RkVDQkJGOTVCN0U0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4MjhGOEE4OTE1QTcyNzUz MTM2ODI1QTFGNDZGRUNCQkY5NUI3RTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NU1Hdnd1NGRibmljR0xzdEQyS0p6ZEtmdzlrbUhOVVR6ZHdTWUdIa3dZb2ovMC85 ODI4RjhBODkxNUE3Mjc1MzEzNjgyNUExRjQ2RkVDQkJGOTVCN0U0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjPotGwMd4ES4/UHUZWkwt4+nAAt1oVJKkCEWnttY3iqNNDtNIbT3d8s3lDTt yGzF45OoCuNAmdAFBpaHaCVJ+voJZObgkv2jT2CQA28NzLgQMY4pTfoMJnZya3cy VjNDO8fFXIA2eeKkObqSCnb8hKli1r5ZmaKEs+TIZFwdR9GEMjyh+zS9jsSsOUN4 hgGdApj6Ys9vXCQuGPz9RtCbyNukcNP8knImVp3LCBWdlStTExk6YDr0He/TgfxB 8vKeV1bNtUSdJHNwzA2rMCG4G00yDzKVF6eVEZChGNn6GD22fd/OQsct3oS1170r UpXV3YeK0SqVHlSq/XTHsJOFRA== -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:26 2025 by rpki-client