$ rpki-client -vvf rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft File: 4856F1A3B30D5C7881DA87018005E5D420414FCA.mft (raw, json) Hash identifier: yNkbS1NbGrv3/z0ep3XBxS0kBJ2qE3Z8ceDjmQNd0RM= Subject key identifier: C0:A7:D4:0C:A0:9C:98:63:B4:EB:50:13:F5:30:E1:AA:79:7A:A8:02 Authority key identifier: 48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA Certificate issuer: /CN=4856F1A3B30D5C7881DA87018005E5D420414FCA Certificate serial: 0F251F7FB1484513C8B4CD6E4CE472D10D09F6D0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer Subject info access: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft Manifest number: CB Signing time: Fri 22 Aug 2025 23:38:31 +0000 Manifest this update: Fri 22 Aug 2025 23:33:31 +0000 Manifest next update: Sun 24 Aug 2025 01:20:31 +0000 Files and hashes: 1: 3137372e32312e38302e302f32302d3332203d3e203533303838.roa (hash: wXf/RK8DqR/CjpwFvOAppiNi0Tr5aa7oPUSPTknLvSQ=) 2: 4856F1A3B30D5C7881DA87018005E5D420414FCA.crl (hash: J+jvhcarJnMuD9h3Ny3oUidgWFkvZUYVhCUOwmcz3UY=) 3: 323830343a3336303a3a2f33322d313238203d3e203533303838.roa (hash: VzHvYSqj1UpdHPrHiFGlX041xdryfjksMALlGnDnEN4=) 4: 3138372e33332e3230382e302f32302d3332203d3e203533303838.roa (hash: NBzUedd6ZxjbCTpvddwCofjpV/PLJrC91qO5bna3/S4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 01:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:25:1f:7f:b1:48:45:13:c8:b4:cd:6e:4c:e4:72:d1:0d:09:f6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4856F1A3B30D5C7881DA87018005E5D420414FCA Validity Not Before: Aug 22 23:33:31 2025 GMT Not After : Aug 24 01:20:31 2025 GMT Subject: CN=C0A7D40CA09C9863B4EB5013F530E1AA797AA802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:1b:5b:f7:dc:ca:5b:57:24:0a:91:71:7b: 3e:b5:61:b3:5d:8d:18:97:1e:4c:33:89:f6:26:57: 7f:73:ae:06:99:3a:1b:96:8e:bc:e4:7c:38:1d:43: 70:8d:be:ff:70:be:00:96:e7:55:82:cd:a1:d9:76: 28:b4:71:2d:da:4e:b2:6f:09:36:4b:a1:3f:3b:08: 39:9b:32:2b:03:e5:94:c9:8c:fc:80:95:b3:e9:1f: 6f:c5:82:40:a8:34:0b:26:8d:1c:5f:5c:9c:f5:07: 49:ba:e2:f6:cb:47:6d:d3:b9:0a:07:72:34:4b:51: 52:5e:99:4a:c8:eb:a0:42:bb:af:f2:90:91:f5:e9: e1:f5:99:25:e9:0f:86:20:ec:21:33:23:91:e2:28: aa:34:67:2b:39:33:f2:4e:8f:1a:85:8a:d2:b2:2a: 33:a7:d0:2d:97:5b:95:e5:41:d3:ee:83:61:7a:b2: 88:c4:9f:8b:1a:7b:da:b9:1b:fa:f6:70:39:d5:7f: c7:4b:ee:14:f0:5b:62:d4:09:42:75:00:67:82:7e: a1:dd:96:bf:88:8f:9e:d7:24:6b:f8:56:7d:b0:fd: 8f:5c:a9:66:e6:f2:65:f2:f9:4f:32:3e:18:13:09: 78:9a:4d:70:ee:c4:0b:3a:82:99:8d:e9:de:1c:55: b0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A7:D4:0C:A0:9C:98:63:B4:EB:50:13:F5:30:E1:AA:79:7A:A8:02 X509v3 Authority Key Identifier: keyid:48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:35:99:fb:3e:a5:b2:db:72:e9:04:c6:68:7d:05:a8:8d:ae: 08:cd:3d:09:95:16:70:f8:b1:cd:20:9a:1c:d5:0f:de:c4:20: cc:8a:42:d8:69:ba:d4:05:30:80:fd:ed:cc:f1:bc:be:20:a5: d4:ff:30:1b:1a:31:a7:f2:8b:48:82:a4:78:41:73:61:89:e4: 7d:87:14:fc:9a:a8:f6:3f:7a:7a:b7:3a:0c:79:1f:77:a0:9d: a5:18:d6:d2:08:59:f8:7b:3b:fd:4b:42:96:24:ee:f1:55:85: 25:0c:c6:b2:9d:c8:13:ed:ac:de:e8:78:30:5a:2a:f4:0f:ca: 93:68:ab:59:71:03:d7:b7:6c:88:f2:90:75:d2:4a:d1:ad:c7: 5a:42:07:66:42:49:3d:41:16:0d:b7:03:85:19:90:33:5c:ea: ee:df:ba:35:8f:b1:78:51:38:83:0b:85:55:95:ba:d8:27:39: 9b:54:d0:09:a2:a6:3d:d0:83:a1:21:91:07:1d:61:33:64:5d: f7:ad:f7:3e:00:e4:8b:c9:f5:4e:9c:75:d2:dd:1d:eb:04:60: 96:96:5d:65:85:30:60:88:62:a9:77:29:da:85:40:36:32:48: 69:62:56:3e:e5:2f:44:2e:4a:a8:5f:21:33:90:4e:81:8f:cb: 8c:96:be:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDyUff7FIRRPItM1uTORy0Q0J9tAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1NkYxQTNCMzBENUM3ODgxREE4NzAxODAwNUU1RDQy MDQxNEZDQTAeFw0yNTA4MjIyMzMzMzFaFw0yNTA4MjQwMTIwMzFaMDMxMTAvBgNV BAMTKEMwQTdENDBDQTA5Qzk4NjNCNEVCNTAxM0Y1MzBFMUFBNzk3QUE4MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Mxtb99zKW1ckCpFxez61YbNd jRiXHkwzifYmV39zrgaZOhuWjrzkfDgdQ3CNvv9wvgCW51WCzaHZdii0cS3aTrJv CTZLoT87CDmbMisD5ZTJjPyAlbPpH2/FgkCoNAsmjRxfXJz1B0m64vbLR23TuQoH cjRLUVJemUrI66BCu6/ykJH16eH1mSXpD4Yg7CEzI5HiKKo0Zys5M/JOjxqFitKy KjOn0C2XW5XlQdPug2F6sojEn4sae9q5G/r2cDnVf8dL7hTwW2LUCUJ1AGeCfqHd lr+Ij57XJGv4Vn2w/Y9cqWbm8mXy+U8yPhgTCXiaTXDuxAs6gpmN6d4cVbBvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwKfUDKCcmGO061AT9TDhqnl6qAIwHwYDVR0j BBgwFoAUSFbxo7MNXHiB2ocBgAXl1CBBT8owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWNoZXl4VG5HRG52dXd6eE0zOEY0dG9ZQzczVUhaNlU2aXpVeW9Sckdz Z3QvMC80ODU2RjFBM0IzMEQ1Qzc4ODFEQTg3MDE4MDA1RTVENDIwNDE0RkNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4NTZGMUEzQjMwRDVDNzg4 MURBODcwMTgwMDVFNUQ0MjA0MTRGQ0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWNoZXl4VG5HRG52dXd6eE0zOEY0dG9ZQzczVUhaNlU2aXpVeW9SckdzZ3QvMC80 ODU2RjFBM0IzMEQ1Qzc4ODFEQTg3MDE4MDA1RTVENDIwNDE0RkNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmjWZ+z6lstty6QTGaH0FqI2uCM09CZUWcPixzSCaHNUP3sQgzIpC2Gm61AUw gP3tzPG8viCl1P8wGxoxp/KLSIKkeEFzYYnkfYcU/Jqo9j96erc6DHkfd6CdpRjW 0ghZ+Hs7/UtCliTu8VWFJQzGsp3IE+2s3uh4MFoq9A/Kk2irWXED17dsiPKQddJK 0a3HWkIHZkJJPUEWDbcDhRmQM1zq7t+6NY+xeFE4gwuFVZW62Cc5m1TQCaKmPdCD oSGRBx1hM2Rd9633PgDki8n1Tpx10t0d6wRglpZdZYUwYIhiqXcp2oVANjJIaWJW PuUvRC5KqF8hM5BOgY/LjJa+Zw== -----END CERTIFICATE-----Generated at Sat Aug 23 10:43:45 2025 by rpki-client