$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft File: 85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft (raw, json) Hash identifier: IyzeVMmTKX5CUo4BxMFqUntq9YJcoYWWaKyOQ4u1lFo= Subject key identifier: 25:71:B8:98:F7:05:B4:51:D3:10:E4:82:78:43:30:8D:5A:D2:12:92 Authority key identifier: 85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95 Certificate issuer: /CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995 Certificate serial: 527368A07B6AA302E76D6035138DDAA741E09102 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer Subject info access: rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft Manifest number: 02A3 Signing time: Sat 23 Aug 2025 12:20:09 +0000 Manifest this update: Sat 23 Aug 2025 12:15:09 +0000 Manifest next update: Sun 24 Aug 2025 16:05:09 +0000 Files and hashes: 1: 323830343a6366303a3a2f33322d3438203d3e203532353736.roa (hash: wiHI9SrflkamLTOfmYBEaJJSlinTuLYPlmXxJbPhtpo=) 2: 3137372e38362e3230302e302f32312d3234203d3e203532353736.roa (hash: TI8fvU+DA9BGVyDJ2qm1cJltZ0I1E38L4u9tbujdTOY=) 3: 85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl (hash: gx5yaqJBIjMBdAkJV2p0JsXOkrYIegw8X7pOuog6ghs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 16:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:73:68:a0:7b:6a:a3:02:e7:6d:60:35:13:8d:da:a7:41:e0:91:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995 Validity Not Before: Aug 23 12:15:09 2025 GMT Not After : Aug 24 16:05:09 2025 GMT Subject: CN=2571B898F705B451D310E4827843308D5AD21292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:49:a7:6e:97:d1:35:51:76:70:34:90:80:d2: e5:00:f4:a7:ce:4e:1f:65:64:1e:45:ae:10:13:27: 36:ac:6b:89:c9:be:cc:d9:c4:f6:c9:1d:e5:e7:9f: 83:b2:64:d3:39:d8:df:04:50:5f:e5:bc:fa:34:60: 48:e7:00:e7:8a:ef:e6:1e:bc:52:95:de:19:08:71: 67:bb:71:8a:93:bc:02:a7:fd:bb:77:11:3f:d2:2a: f2:18:90:fa:94:81:41:9e:bc:64:9d:cf:12:c3:d5: a8:e9:66:92:fa:1e:af:2e:1e:30:62:64:6e:1e:0f: f0:c5:0f:84:67:d6:69:62:5a:ce:89:0e:d9:6e:01: d9:94:a7:a0:e8:ea:15:fb:00:72:d7:b1:d4:95:80: 8a:20:67:3a:be:a0:2a:c4:ca:5b:a2:fd:cd:1a:91: be:8f:91:8f:45:1e:43:89:41:96:55:47:03:25:a0: d8:28:55:25:52:42:ec:96:b1:a5:a1:6b:d8:fd:19: 7a:86:f2:32:c7:b9:23:53:78:ee:6f:ba:98:8c:76: 9a:e8:a6:3a:a6:22:d2:32:f7:b9:b5:ad:45:0f:43: 96:e2:bb:7b:48:15:88:bf:5e:31:0b:a3:68:42:cf: b0:3a:dc:f1:a4:63:bf:8f:61:ff:bf:d2:92:f9:bb: 6d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:71:B8:98:F7:05:B4:51:D3:10:E4:82:78:43:30:8D:5A:D2:12:92 X509v3 Authority Key Identifier: keyid:85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:0e:46:da:41:5e:0e:a2:04:01:e4:f7:78:d2:98:36:6e:32: e5:9e:10:51:2f:e7:05:17:92:99:04:8b:6e:89:47:72:d8:2c: 31:13:de:85:83:d5:d5:36:fd:39:cd:aa:82:e9:a6:26:7d:dc: 43:fd:f3:92:6d:f6:62:21:a0:56:a5:a7:08:b9:d9:b8:25:8d: 49:b0:e7:6c:35:95:03:ba:71:72:6c:1e:33:13:65:31:61:59: 38:24:67:f2:a9:bb:5b:f4:84:53:a7:b7:eb:d5:16:e7:6a:65: 3c:7e:d2:f1:2f:ca:66:46:5f:72:a0:d7:4c:d2:a5:f0:45:cc: cd:ff:73:1d:3a:24:83:85:27:44:5d:b8:d6:49:6d:74:30:22: af:32:7c:19:ad:ed:05:b8:14:dd:be:24:51:e7:e2:ae:9c:7f: 0a:00:78:1f:85:92:16:45:64:09:b4:09:26:5e:c7:fd:51:83: d3:2a:eb:10:32:8b:58:f5:cb:a8:3f:d0:f5:0e:05:43:99:23: 93:c7:00:e3:02:79:b4:04:af:03:50:27:b0:79:6a:b2:e2:72: 98:93:f3:d9:33:8e:09:ed:6c:14:69:20:bd:85:35:a7:f5:fe: b2:31:cf:7f:25:fe:f3:4d:e1:b8:4b:be:c9:c7:24:88:1a:50: 10:19:e2:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUnNooHtqowLnbWA1E43ap0HgkQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVBQzdGRjA3MjI0MDkxMTZDMUUzQzQwRkU0N0VBQTYw M0RERDk5NTAeFw0yNTA4MjMxMjE1MDlaFw0yNTA4MjQxNjA1MDlaMDMxMTAvBgNV BAMTKDI1NzFCODk4RjcwNUI0NTFEMzEwRTQ4Mjc4NDMzMDhENUFEMjEyOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzSadul9E1UXZwNJCA0uUA9KfO Th9lZB5FrhATJzasa4nJvszZxPbJHeXnn4OyZNM52N8EUF/lvPo0YEjnAOeK7+Ye vFKV3hkIcWe7cYqTvAKn/bt3ET/SKvIYkPqUgUGevGSdzxLD1ajpZpL6Hq8uHjBi ZG4eD/DFD4Rn1mliWs6JDtluAdmUp6Do6hX7AHLXsdSVgIogZzq+oCrEylui/c0a kb6PkY9FHkOJQZZVRwMloNgoVSVSQuyWsaWha9j9GXqG8jLHuSNTeO5vupiMdpro pjqmItIy97m1rUUPQ5biu3tIFYi/XjELo2hCz7A63PGkY7+PYf+/0pL5u23xAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJXG4mPcFtFHTEOSCeEMwjVrSEpIwHwYDVR0j BBgwFoAUhax/8HIkCRFsHjxA/kfqpgPd2ZUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWNuYTZlUk05VHNXZ3JjMnZTeGU3QTRMM2piZ0pIam9OWEVVSjZDTUdK WFIvMS84NUFDN0ZGMDcyMjQwOTExNkMxRTNDNDBGRTQ3RUFBNjAzREREOTk1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1QUM3RkYwNzIyNDA5MTE2 QzFFM0M0MEZFNDdFQUE2MDNEREQ5OTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWNuYTZlUk05VHNXZ3JjMnZTeGU3QTRMM2piZ0pIam9OWEVVSjZDTUdKWFIvMS84 NUFDN0ZGMDcyMjQwOTExNkMxRTNDNDBGRTQ3RUFBNjAzREREOTk1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMQ5G2kFeDqIEAeT3eNKYNm4y5Z4QUS/nBReSmQSLbolHctgsMRPehYPV1Tb9 Oc2qgummJn3cQ/3zkm32YiGgVqWnCLnZuCWNSbDnbDWVA7pxcmweMxNlMWFZOCRn 8qm7W/SEU6e369UW52plPH7S8S/KZkZfcqDXTNKl8EXMzf9zHTokg4UnRF241klt dDAirzJ8Ga3tBbgU3b4kUefirpx/CgB4H4WSFkVkCbQJJl7H/VGD0yrrEDKLWPXL qD/Q9Q4FQ5kjk8cA4wJ5tASvA1AnsHlqsuJymJPz2TOOCe1sFGkgvYU1p/X+sjHP fyX+803huEu+ycckiBpQEBni9w== -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:37 2025 by rpki-client