$ rpki-client -vvf rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft File: D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft (raw, json) Hash identifier: IV3MOB/1W2jM1k2wUFvsvetC809H2qcewC4io8Z9COc= Subject key identifier: B1:DD:C2:66:5D:83:8C:4D:35:6F:D0:D5:B7:F3:DD:0D:3A:37:3B:70 Authority key identifier: D5:C4:31:D1:7B:83:07:35:FE:B2:64:09:C6:9E:3E:F4:FE:61:DB:C2 Certificate issuer: /CN=D5C431D17B830735FEB26409C69E3EF4FE61DBC2 Certificate serial: 3B77ACF7F6E698545BC826CD0569300EDE7EB918 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer Subject info access: rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft Manifest number: 45 Signing time: Sat 23 Aug 2025 10:54:48 +0000 Manifest this update: Sat 23 Aug 2025 10:49:48 +0000 Manifest next update: Sun 24 Aug 2025 13:21:48 +0000 Files and hashes: 1: D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl (hash: K7j5b+DVeTMbNCQBvdQ+KWFB060UEAayaPLY6gMPfVU=) 2: 323830343a386663343a3a2f33322d3438203d3e20323733353130.roa (hash: DETwoG/6qi/ZI8aHY1Z5rVUEPEzo75t1n/OyDZwKtCg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:77:ac:f7:f6:e6:98:54:5b:c8:26:cd:05:69:30:0e:de:7e:b9:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C431D17B830735FEB26409C69E3EF4FE61DBC2 Validity Not Before: Aug 23 10:49:48 2025 GMT Not After : Aug 24 13:21:48 2025 GMT Subject: CN=B1DDC2665D838C4D356FD0D5B7F3DD0D3A373B70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7b:f3:60:e2:8b:e1:aa:50:d6:78:87:c5:b9: da:a6:67:c4:cd:eb:a4:25:ff:18:3c:17:18:da:6c: 47:a3:7f:ff:89:c4:e8:17:34:d3:1e:f2:c4:f1:2b: 0b:e1:09:82:e3:b0:3d:34:24:d0:71:4e:e3:4a:21: 40:77:2f:8f:09:f0:1f:5d:13:7b:42:09:b9:6d:82: 72:3a:86:9a:a0:a1:b4:e6:4a:0c:8d:02:24:61:ad: 19:c8:8a:50:43:48:d4:bf:01:7e:e1:9a:03:7a:f8: 71:d6:40:11:a5:1f:97:10:14:59:d3:7c:f9:06:d5: 88:9f:a9:44:87:8c:9e:e9:c7:b1:41:6a:e4:85:46: 91:fb:5a:54:39:9d:a2:c9:1d:fe:3e:cb:84:45:43: 90:1c:f8:f6:59:3a:ee:72:5b:c9:0a:5c:a9:91:8e: 31:66:76:97:aa:35:40:53:ae:8f:5e:af:00:f7:85: 10:24:03:ab:bc:54:24:77:d4:36:b3:2b:3e:e9:1b: ed:16:2b:e4:a5:9a:39:a4:02:19:ba:5f:04:d3:20: c8:3b:63:f0:12:29:d2:9b:4b:b8:cf:3f:df:da:0d: 3a:93:b3:d0:63:d6:82:fb:a9:16:9f:8b:79:65:78: 43:70:aa:e6:79:3e:0d:8c:9f:d6:a9:ea:a7:43:6f: de:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DD:C2:66:5D:83:8C:4D:35:6F:D0:D5:B7:F3:DD:0D:3A:37:3B:70 X509v3 Authority Key Identifier: keyid:D5:C4:31:D1:7B:83:07:35:FE:B2:64:09:C6:9E:3E:F4:FE:61:DB:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:30:54:03:61:7c:d6:23:88:d2:66:09:22:b5:9a:a1:85:65: 71:92:bf:32:7d:a4:f8:df:8d:3b:2b:9d:51:31:b6:56:a1:f8: 25:63:b3:41:70:9d:2b:62:9b:2b:00:ed:c4:49:81:a0:0e:5e: 3d:30:7f:6a:08:c1:12:71:5f:75:d2:26:ff:97:cf:7c:fa:0e: 42:f3:03:f8:50:36:2d:a3:13:0c:40:ad:7b:30:a1:bc:ff:e1: 05:29:22:98:2a:68:8a:23:f1:58:7b:b8:b1:38:a8:20:d0:09: 51:fb:7f:fe:ef:17:41:c7:42:bd:91:bb:e1:26:6f:45:bb:23: 44:68:20:11:d7:29:40:50:15:32:af:05:3f:da:17:f2:5b:5a: 76:7d:81:e1:27:8b:72:c1:46:d9:a1:ba:f1:f9:65:e4:78:a5: da:e2:b7:13:d1:1c:e3:9d:ac:89:d8:f5:11:7d:36:9d:03:57: d9:ec:54:59:75:2e:ed:2d:dc:40:8f:6f:2e:45:ce:62:5f:e2: a3:15:50:f3:d9:97:bb:bf:d8:13:7b:3d:aa:6c:62:dc:84:42: b1:a0:ac:42:e1:2c:6d:43:be:72:16:da:e8:7f:9b:3e:b7:ed: 71:5a:12:f2:1b:51:eb:0c:96:e9:44:65:5f:68:e9:76:06:3b: ed:d3:82:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO3es9/bmmFRbyCbNBWkwDt5+uRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDNDMxRDE3QjgzMDczNUZFQjI2NDA5QzY5RTNFRjRG RTYxREJDMjAeFw0yNTA4MjMxMDQ5NDhaFw0yNTA4MjQxMzIxNDhaMDMxMTAvBgNV BAMTKEIxRERDMjY2NUQ4MzhDNEQzNTZGRDBENUI3RjNERDBEM0EzNzNCNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7e/Ng4ovhqlDWeIfFudqmZ8TN 66Ql/xg8FxjabEejf/+JxOgXNNMe8sTxKwvhCYLjsD00JNBxTuNKIUB3L48J8B9d E3tCCbltgnI6hpqgobTmSgyNAiRhrRnIilBDSNS/AX7hmgN6+HHWQBGlH5cQFFnT fPkG1YifqUSHjJ7px7FBauSFRpH7WlQ5naLJHf4+y4RFQ5Ac+PZZOu5yW8kKXKmR jjFmdpeqNUBTro9erwD3hRAkA6u8VCR31DazKz7pG+0WK+SlmjmkAhm6XwTTIMg7 Y/ASKdKbS7jPP9/aDTqTs9Bj1oL7qRafi3lleENwquZ5Pg2Mn9ap6qdDb96FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsd3CZl2DjE01b9DVt/PdDTo3O3AwHwYDVR0j BBgwFoAU1cQx0XuDBzX+smQJxp4+9P5h28IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVNxeEY5b1ZHeHNjVWJzQ0haSm9ZOFRQeEc0M1N2OFBwa1VRbmJyMzVw TUQvMC9ENUM0MzFEMTdCODMwNzM1RkVCMjY0MDlDNjlFM0VGNEZFNjFEQkMyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1QzQzMUQxN0I4MzA3MzVG RUIyNjQwOUM2OUUzRUY0RkU2MURCQzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVNxeEY5b1ZHeHNjVWJzQ0haSm9ZOFRQeEc0M1N2OFBwa1VRbmJyMzVwTUQvMC9E NUM0MzFEMTdCODMwNzM1RkVCMjY0MDlDNjlFM0VGNEZFNjFEQkMyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVTBUA2F81iOI0mYJIrWaoYVlcZK/Mn2k+N+NOyudUTG2VqH4JWOzQXCdK2Kb KwDtxEmBoA5ePTB/agjBEnFfddIm/5fPfPoOQvMD+FA2LaMTDECtezChvP/hBSki mCpoiiPxWHu4sTioINAJUft//u8XQcdCvZG74SZvRbsjRGggEdcpQFAVMq8FP9oX 8ltadn2B4SeLcsFG2aG68fll5Hil2uK3E9Ec452sidj1EX02nQNX2exUWXUu7S3c QI9vLkXOYl/ioxVQ89mXu7/YE3s9qmxi3IRCsaCsQuEsbUO+chba6H+bPrftcVoS 8htR6wyW6URlX2jpdgY77dOCrw== -----END CERTIFICATE-----Generated at Sat Aug 23 16:23:34 2025 by rpki-client