$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft File: 5429A630D95311C5AADAF5AC62BF18BF86863194.mft (raw, json) Hash identifier: R81Yi8LslNIJ3z0eyUCmEdC/9a0q0dEB1C2Y3M/hBzE= Subject key identifier: 03:69:2D:EC:F7:D3:90:38:85:28:EB:4E:21:26:0D:36:15:42:74:E2 Authority key identifier: 54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94 Certificate issuer: /CN=5429A630D95311C5AADAF5AC62BF18BF86863194 Certificate serial: 09F2B1FE3633652B1C43359494A9B1C31BAA02C0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer Subject info access: rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft Manifest number: 0152 Signing time: Sat 23 Aug 2025 10:39:09 +0000 Manifest this update: Sat 23 Aug 2025 10:34:09 +0000 Manifest next update: Sun 24 Aug 2025 14:36:09 +0000 Files and hashes: 1: 3137302e38332e3230382e302f32322d3234203d3e203532353933.roa (hash: 8vwwo/SaNUCndqLG1W6S/xt9MVBLLG9Ywm1/OLdTEj8=) 2: 5429A630D95311C5AADAF5AC62BF18BF86863194.crl (hash: ++iPNkKrQLrsPCtM6U0Q333NZllstEYmWw2tDUbAOF4=) 3: 323830343a6431303a3a2f33322d3438203d3e203532353933.roa (hash: nSOaWesuogq30r5VD09Dk6DV/wQidOLKt4u2pW7jz6k=) 4: 3137372e38372e3233322e302f32322d3234203d3e203532353933.roa (hash: d5DI6/HlpfZKGZTJE1cimx+rFHCSUvIx3f28vzYvW6U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.crl rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:f2:b1:fe:36:33:65:2b:1c:43:35:94:94:a9:b1:c3:1b:aa:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5429A630D95311C5AADAF5AC62BF18BF86863194 Validity Not Before: Aug 23 10:34:09 2025 GMT Not After : Aug 24 14:36:09 2025 GMT Subject: CN=03692DECF7D390388528EB4E21260D36154274E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:64:8a:f9:20:f8:dc:af:cf:60:b1:9d:1b:da: f9:b9:ca:c9:c6:29:30:2f:ee:ae:2e:85:18:38:c0: 73:8d:a0:81:a8:d4:98:53:05:ee:c2:12:67:09:6c: d6:6c:dd:66:2f:24:c3:59:14:d9:04:45:43:98:38: a8:c9:b4:c1:ab:63:f9:8f:b8:70:5d:58:79:15:4a: 31:5b:3b:1f:d9:da:79:47:4c:96:a5:4e:f1:ed:39: 78:13:31:33:26:92:ef:2c:e7:90:23:8b:32:84:d3: 15:50:88:8b:d0:99:24:1a:1b:8f:58:82:98:90:b1: 0f:0d:cf:b6:f7:07:24:94:88:c8:c3:2c:32:8d:13: 8a:9b:d3:df:f7:97:15:36:36:55:a7:45:80:18:f2: de:72:63:fb:2f:2a:f1:52:57:b6:5e:1c:f4:cf:52: 58:9f:3e:c7:6d:3e:85:b5:26:58:b7:33:65:25:5e: 22:92:64:15:86:b4:76:e0:ac:2e:71:cf:b2:ea:25: c3:04:1b:aa:9e:ed:25:05:1e:e3:6e:f1:56:30:d5: 71:9e:a2:ab:98:b6:49:d2:c8:62:28:21:f9:2a:93: 28:47:6c:f8:4e:f7:80:bc:ee:f8:38:21:e1:b6:92: ba:71:5b:f6:81:b9:a8:4c:78:f8:dc:e4:17:57:a5: 13:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:69:2D:EC:F7:D3:90:38:85:28:EB:4E:21:26:0D:36:15:42:74:E2 X509v3 Authority Key Identifier: keyid:54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:6c:a2:f9:98:24:54:b9:b3:e2:8d:ce:8a:8a:56:b2:aa:87: 57:39:78:ca:fb:56:92:82:e9:45:d3:30:6d:b1:31:c0:a7:d8: 15:b9:b3:ad:94:08:6d:07:9c:70:12:8b:29:bb:fa:d1:15:03: 00:c8:11:2e:0f:07:11:62:04:fd:06:ce:d1:35:86:33:73:f9: b5:c0:d4:18:37:b1:68:35:22:36:61:cf:53:40:cc:58:95:a6: 7e:a6:83:39:89:25:ec:e3:f0:99:07:17:b7:b0:3d:03:6b:82: 2a:59:57:b0:5f:27:b0:83:e7:32:b6:ca:c0:b2:48:76:1a:7e: 61:b1:63:12:a3:31:db:54:f4:df:a5:e9:c4:02:d4:eb:fb:ea: db:56:1d:41:05:57:10:84:17:e2:86:53:9e:b2:b0:c7:e5:b2: 27:6e:a9:48:9e:91:7c:da:23:08:61:73:c1:92:9f:90:e9:3e: 16:e3:15:ae:65:c3:5a:91:0b:56:29:61:93:16:1f:f3:a1:86: 15:66:92:aa:d4:e2:52:46:26:84:8d:09:8d:8e:5c:1e:a8:df: aa:7a:66:e8:43:43:e5:7b:d2:90:a4:b5:7a:ea:10:63:08:ea: e8:06:f5:84:9e:0c:4f:e6:0d:66:de:38:f1:9a:3a:73:87:cb: 19:5a:cb:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCfKx/jYzZSscQzWUlKmxwxuqAsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQyOUE2MzBEOTUzMTFDNUFBREFGNUFDNjJCRjE4QkY4 Njg2MzE5NDAeFw0yNTA4MjMxMDM0MDlaFw0yNTA4MjQxNDM2MDlaMDMxMTAvBgNV BAMTKDAzNjkyREVDRjdEMzkwMzg4NTI4RUI0RTIxMjYwRDM2MTU0Mjc0RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ZIr5IPjcr89gsZ0b2vm5ysnG KTAv7q4uhRg4wHONoIGo1JhTBe7CEmcJbNZs3WYvJMNZFNkERUOYOKjJtMGrY/mP uHBdWHkVSjFbOx/Z2nlHTJalTvHtOXgTMTMmku8s55AjizKE0xVQiIvQmSQaG49Y gpiQsQ8Nz7b3BySUiMjDLDKNE4qb09/3lxU2NlWnRYAY8t5yY/svKvFSV7ZeHPTP UlifPsdtPoW1Jli3M2UlXiKSZBWGtHbgrC5xz7LqJcMEG6qe7SUFHuNu8VYw1XGe oquYtknSyGIoIfkqkyhHbPhO94C87vg4IeG2krpxW/aBuahMePjc5BdXpRPdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUA2kt7PfTkDiFKOtOISYNNhVCdOIwHwYDVR0j BBgwFoAUVCmmMNlTEcWq2vWsYr8Yv4aGMZQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOE1TVlhxMkFwb1BpWlJxWmFQQzNycTc2bllMVFVLZzdUOUtaUWFaWHdN SDcvMC81NDI5QTYzMEQ5NTMxMUM1QUFEQUY1QUM2MkJGMThCRjg2ODYzMTk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0MjlBNjMwRDk1MzExQzVB QURBRjVBQzYyQkYxOEJGODY4NjMxOTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OE1TVlhxMkFwb1BpWlJxWmFQQzNycTc2bllMVFVLZzdUOUtaUWFaWHdNSDcvMC81 NDI5QTYzMEQ5NTMxMUM1QUFEQUY1QUM2MkJGMThCRjg2ODYzMTk0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArGyi+ZgkVLmz4o3OiopWsqqHVzl4yvtWkoLpRdMwbbExwKfYFbmzrZQIbQec cBKLKbv60RUDAMgRLg8HEWIE/QbO0TWGM3P5tcDUGDexaDUiNmHPU0DMWJWmfqaD OYkl7OPwmQcXt7A9A2uCKllXsF8nsIPnMrbKwLJIdhp+YbFjEqMx21T036XpxALU 6/vq21YdQQVXEIQX4oZTnrKwx+WyJ26pSJ6RfNojCGFzwZKfkOk+FuMVrmXDWpEL VilhkxYf86GGFWaSqtTiUkYmhI0JjY5cHqjfqnpm6END5XvSkKS1euoQYwjq6Ab1 hJ4MT+YNZt448Zo6c4fLGVrLVg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:44:29 2025 by rpki-client