$ rpki-client -vvf rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft File: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft (raw, json) Hash identifier: L52w+f9UEiYAsxixp+w0TfCSO/WkSgfw3MCrEwjmHrU= Subject key identifier: A4:5C:DE:06:58:E2:0B:7C:C5:7E:6C:0E:5D:FD:62:AE:52:06:31:C4 Authority key identifier: D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC Certificate issuer: /CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC Certificate serial: 62CA0738AF6EC911B36F22E1958F2F752B2BC688 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer Subject info access: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft Manifest number: D0 Signing time: Sat 12 Jul 2025 03:51:49 +0000 Manifest this update: Sat 12 Jul 2025 03:46:49 +0000 Manifest next update: Sun 13 Jul 2025 06:03:49 +0000 Files and hashes: 1: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl (hash: PRmv37x8iyilfgUVHOChnw/ZURjLnXCIxwiZlsm/p0s=) 2: 323830343a346565343a3a2f33322d3438203d3e20323638323839.roa (hash: 8QVrrPvDESPyLlcybwCmEcTLp6Hw5J3De08ADxJOVDg=) 3: 34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa (hash: dGr5cTxS6sHO6LIXh/H72qtLHlSDxdG5hFZ+7Zrlor0=) 4: 3137302e3233332e32302e302f32322d3234203d3e20323638323839.roa (hash: 5XwCvfaoU64ymtIslXprTesI7aefy6dxcTH7KYUOQ3U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Jul 2025 06:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ca:07:38:af:6e:c9:11:b3:6f:22:e1:95:8f:2f:75:2b:2b:c6:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC Validity Not Before: Jul 12 03:46:49 2025 GMT Not After : Jul 13 06:03:49 2025 GMT Subject: CN=A45CDE0658E20B7CC57E6C0E5DFD62AE520631C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:22:4a:1a:10:af:27:83:72:58:05:53:3e:b5: 9b:03:8b:3a:94:2c:a4:46:a4:d5:9d:b2:3d:8b:65: 54:98:b6:6a:46:7c:b9:00:3b:48:8d:31:c5:8f:4e: 3b:1f:1b:61:65:93:9a:70:ff:aa:06:77:b8:96:8d: 6c:70:8b:87:a5:66:b4:ec:c5:78:36:b1:41:88:e1: dc:78:3e:d6:d1:f1:22:2e:de:09:29:29:9a:1a:e9: 1e:50:b7:72:e7:f3:d3:d8:28:d6:57:42:db:16:44: 86:31:75:28:e3:28:ec:71:46:28:98:3d:ac:e6:9b: 8b:87:ee:f0:17:47:af:1f:89:03:73:58:ab:81:f6: 20:bc:68:3b:61:e8:d1:33:12:e4:8f:10:d0:b2:c8: 9a:75:df:d7:30:cc:29:7a:b4:e7:4c:7f:a1:c4:ad: 44:8e:79:fa:5e:d0:f4:65:5c:2e:ee:01:63:6d:06: 21:1f:e5:de:51:7d:c1:66:d7:55:10:42:d2:c5:c7: 17:c7:07:57:4c:92:59:0c:88:ae:5c:87:f1:a5:46: 1a:1f:c1:b5:98:e2:a9:7f:55:c6:95:1c:9a:32:f4: 7f:ab:02:32:69:6a:26:55:09:8f:83:ad:bc:69:7e: 74:06:e4:38:0d:b2:1f:48:f8:2e:1a:c4:52:d0:25: 3a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5C:DE:06:58:E2:0B:7C:C5:7E:6C:0E:5D:FD:62:AE:52:06:31:C4 X509v3 Authority Key Identifier: keyid:D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:7b:71:b9:df:d4:e5:ab:56:80:00:aa:db:4d:5b:0d:8e:b8: 3c:f6:3d:8f:3d:13:2a:c8:ef:2b:27:05:2b:c1:0f:39:28:71: 73:ac:18:19:64:bf:30:4f:5b:86:9f:6e:d0:f0:9e:63:80:2d: 9f:bd:82:c8:b9:65:3e:22:dd:74:05:28:55:41:fe:ef:c4:88: a2:3c:44:31:6f:6c:5b:a2:d5:9c:50:08:74:09:68:af:f5:7b: 0c:73:11:fb:09:61:bb:85:fa:26:e9:0e:d0:ed:14:2f:0c:b6: 54:36:4a:58:98:ff:42:16:27:c8:ef:e6:0f:f6:10:bc:41:d9: 8b:e1:7a:05:e2:ef:a0:8c:e2:4a:b6:fe:52:e6:37:26:51:49: 67:19:6a:75:82:d8:8b:d0:ea:0a:f0:92:5f:70:62:88:84:2a: 2d:07:ad:af:1a:5b:ba:f0:a0:16:66:8f:be:db:c5:11:48:ce: 17:44:ff:93:b0:49:d1:d2:6d:89:9f:82:bb:e9:af:4e:35:1b: 4c:22:8b:43:e2:20:0f:34:d6:b5:e6:ef:f4:53:b2:25:fe:37: 0d:29:c6:27:79:47:f3:b7:db:0d:16:47:cf:96:6b:80:36:37: 4f:54:4c:3b:aa:f5:35:20:81:6e:cc:a5:fa:20:3a:9a:f7:9e: e9:99:06:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYsoHOK9uyRGzbyLhlY8vdSsrxogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCQTdDMzVBNUMyNDIwNTg5QjMwQzMzRDlDRjEzNzQ1 MDVGM0RCQzAeFw0yNTA3MTIwMzQ2NDlaFw0yNTA3MTMwNjAzNDlaMDMxMTAvBgNV BAMTKEE0NUNERTA2NThFMjBCN0NDNTdFNkMwRTVERkQ2MkFFNTIwNjMxQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJIkoaEK8ng3JYBVM+tZsDizqU LKRGpNWdsj2LZVSYtmpGfLkAO0iNMcWPTjsfG2Flk5pw/6oGd7iWjWxwi4elZrTs xXg2sUGI4dx4PtbR8SIu3gkpKZoa6R5Qt3Ln89PYKNZXQtsWRIYxdSjjKOxxRiiY Pazmm4uH7vAXR68fiQNzWKuB9iC8aDth6NEzEuSPENCyyJp139cwzCl6tOdMf6HE rUSOefpe0PRlXC7uAWNtBiEf5d5RfcFm11UQQtLFxxfHB1dMklkMiK5ch/GlRhof wbWY4ql/VcaVHJoy9H+rAjJpaiZVCY+DrbxpfnQG5DgNsh9I+C4axFLQJTo/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpFzeBljiC3zFfmwOXf1irlIGMcQwHwYDVR0j BBgwFoAU2Lp8NaXCQgWJswwz2c8TdFBfPbwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6 VnQvMC9EOEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4QkE3QzM1QTVDMjQyMDU4 OUIzMEMzM0Q5Q0YxMzc0NTA1RjNEQkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6VnQvMC9E OEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACntxud/U5atWgACq201bDY64PPY9jz0TKsjvKycFK8EPOShxc6wYGWS/ME9b hp9u0PCeY4Atn72CyLllPiLddAUoVUH+78SIojxEMW9sW6LVnFAIdAlor/V7DHMR +wlhu4X6JukO0O0ULwy2VDZKWJj/QhYnyO/mD/YQvEHZi+F6BeLvoIziSrb+UuY3 JlFJZxlqdYLYi9DqCvCSX3BiiIQqLQetrxpbuvCgFmaPvtvFEUjOF0T/k7BJ0dJt iZ+Cu+mvTjUbTCKLQ+IgDzTWtebv9FOyJf43DSnGJ3lH87fbDRZHz5ZrgDY3T1RM O6r1NSCBbsyl+iA6mvee6ZkG+A== -----END CERTIFICATE-----Generated at Sat Jul 12 15:18:31 2025 by rpki-client