$ rpki-client -vvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/5A8812394683FF664E1D37D3FF52295E5DB57FBF.mft File: 5A8812394683FF664E1D37D3FF52295E5DB57FBF.mft (raw, json) Hash identifier: 4A4IiZkE+Yn92BDGywQXKVQWniTO3ze0xPzNUK0wWCs= Subject key identifier: 60:4D:3F:D6:6E:FC:9C:5F:D7:E5:3D:5C:AF:C5:E1:37:33:CD:D9:04 Authority key identifier: 5A:88:12:39:46:83:FF:66:4E:1D:37:D3:FF:52:29:5E:5D:B5:7F:BF Certificate issuer: /CN=5A8812394683FF664E1D37D3FF52295E5DB57FBF Certificate serial: 31D1B1D3BE78B5FE5F580296F9AFC46A82E638A6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A8812394683FF664E1D37D3FF52295E5DB57FBF.cer Subject info access: rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/5A8812394683FF664E1D37D3FF52295E5DB57FBF.mft Manifest number: 0F Signing time: Thu 03 Jul 2025 04:06:45 +0000 Manifest this update: Thu 03 Jul 2025 04:01:45 +0000 Manifest next update: Fri 04 Jul 2025 07:07:45 +0000 Files and hashes: 1: 5A8812394683FF664E1D37D3FF52295E5DB57FBF.crl (hash: TpQQZWqLjnAvI8ZF6ePxIzhC32kjspYc0ADXG3KrDBg=) 2: 3139302e3131312e3135392e302f32342d3234203d3e20323638363035.roa (hash: xqyWoQ/9M2OUuBxNFN7E/5Y7WE1OFizvLFSuLEWj9aY=) 3: 3139302e3131312e3135392e302f32342d3234203d3e20323730343330.roa (hash: jkP0CtvlpAwj+IMe/K6O0WzTdKtTCmY5PsoWOxHQLSc=) 4: 323830343a366264633a3a2f33322d3332203d3e20323638363035.roa (hash: o4J2HOm5SjCwE8kOs41kyYQGja4cfKGTA1LdaLsrHwU=) 5: 3139302e3131312e3135362e302f32332d3233203d3e20323730343330.roa (hash: VLTGX+DBMoHo4TqxrlcWda72gQ3NcyO4cm0jSTtLFtM=) 6: 3139302e3131312e3135362e302f32332d3233203d3e20323638363035.roa (hash: jVhSryByaLCGVsAp3DTtUvVSG/b/xGkxk+YzQCZUI9Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/5A8812394683FF664E1D37D3FF52295E5DB57FBF.crl rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/5A8812394683FF664E1D37D3FF52295E5DB57FBF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A8812394683FF664E1D37D3FF52295E5DB57FBF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Jul 2025 07:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d1:b1:d3:be:78:b5:fe:5f:58:02:96:f9:af:c4:6a:82:e6:38:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A8812394683FF664E1D37D3FF52295E5DB57FBF Validity Not Before: Jul 3 04:01:45 2025 GMT Not After : Jul 4 07:07:45 2025 GMT Subject: CN=604D3FD66EFC9C5FD7E53D5CAFC5E13733CDD904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:29:84:d3:01:18:e2:4e:df:7f:b2:cd:be:96: eb:59:ba:a2:bb:9d:16:b4:44:6e:bb:92:af:4f:62: db:ae:93:e8:0e:5a:03:cb:5c:98:46:b7:6e:9c:74: 96:a9:af:5f:3b:03:fd:c7:e1:f5:e2:28:5f:a6:8c: b9:aa:b8:13:14:7f:27:0b:0c:17:b4:53:9f:cf:cc: c3:3f:b4:08:72:5b:59:89:f0:10:fa:48:5d:2b:ab: dc:87:65:da:55:3e:71:0a:f5:2d:2b:9a:b7:9e:fd: 6b:ff:47:9c:d9:59:9a:ba:3b:de:4d:fe:10:b3:9e: 58:59:66:cc:1a:5b:42:f4:e2:96:0f:4f:98:b8:56: 63:6a:99:63:b5:57:04:0c:87:81:ab:5e:cf:5a:e9: 40:79:9c:6b:b0:b9:8a:65:0f:a4:0d:a0:5f:de:22: 4b:33:1c:d2:70:17:0a:57:12:68:6d:a2:86:53:94: 1c:aa:89:6f:3a:be:3a:41:fb:76:bd:75:69:12:bf: 5f:02:0b:cb:f9:b2:b8:f4:f2:91:d3:1b:a8:3a:b4: 43:24:a5:a5:a7:c0:c0:b0:82:54:fe:49:20:a7:52: 8b:19:f2:e3:07:1e:99:ee:36:ce:8a:dd:76:c1:d6: 06:33:39:9c:32:3c:ed:f6:62:36:e0:f6:54:56:99: 25:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4D:3F:D6:6E:FC:9C:5F:D7:E5:3D:5C:AF:C5:E1:37:33:CD:D9:04 X509v3 Authority Key Identifier: keyid:5A:88:12:39:46:83:FF:66:4E:1D:37:D3:FF:52:29:5E:5D:B5:7F:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/5A8812394683FF664E1D37D3FF52295E5DB57FBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A8812394683FF664E1D37D3FF52295E5DB57FBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/5A8812394683FF664E1D37D3FF52295E5DB57FBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b6:2e:b8:a7:2a:6b:00:fc:3f:fd:a2:05:0b:23:da:3e:fa: fc:0b:49:55:6d:d8:29:82:5a:b7:ea:5c:57:4b:97:d8:de:e7: 32:5c:fc:81:cd:04:0b:06:c0:5d:ea:d2:73:13:7d:f4:a0:9d: 77:b1:88:8b:06:b9:08:ef:52:e3:59:2b:fe:a9:e7:18:35:90: af:86:d1:38:1c:4e:5f:f6:c5:2f:b2:9f:63:6e:67:24:36:ff: f6:a8:ae:39:28:f7:2f:b2:45:e1:0e:76:77:98:7b:e5:64:49: e0:76:53:a5:e3:76:74:76:10:44:d1:46:55:2e:c2:9d:6d:48: 75:c0:e0:00:6c:24:92:25:c5:29:a8:b1:33:30:9d:6b:98:fd: af:6f:2b:26:40:fd:a9:20:1c:e9:42:f5:68:d3:11:57:6b:77: 67:34:be:c1:03:43:ee:f2:8f:a3:47:05:d4:aa:95:c4:e8:dd: 2f:a2:53:32:d3:7a:cb:24:97:1f:1d:df:af:5a:d7:e3:e0:e6: f7:98:22:0b:ed:6c:18:1f:b6:66:b7:92:7c:95:b5:64:de:27: 1e:e5:51:10:29:e7:ab:1a:93:8d:1e:c0:e9:3a:2d:f6:29:7a: 2f:4b:85:1c:ea:13:30:ad:22:48:60:7d:23:06:9e:8b:02:e7: 6f:fc:cd:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMdGx0754tf5fWAKW+a/EaoLmOKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE4ODEyMzk0NjgzRkY2NjRFMUQzN0QzRkY1MjI5NUU1 REI1N0ZCRjAeFw0yNTA3MDMwNDAxNDVaFw0yNTA3MDQwNzA3NDVaMDMxMTAvBgNV BAMTKDYwNEQzRkQ2NkVGQzlDNUZEN0U1M0Q1Q0FGQzVFMTM3MzNDREQ5MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKYTTARjiTt9/ss2+lutZuqK7 nRa0RG67kq9PYtuuk+gOWgPLXJhGt26cdJapr187A/3H4fXiKF+mjLmquBMUfycL DBe0U5/PzMM/tAhyW1mJ8BD6SF0rq9yHZdpVPnEK9S0rmree/Wv/R5zZWZq6O95N /hCznlhZZswaW0L04pYPT5i4VmNqmWO1VwQMh4GrXs9a6UB5nGuwuYplD6QNoF/e IkszHNJwFwpXEmhtooZTlByqiW86vjpB+3a9dWkSv18CC8v5srj08pHTG6g6tEMk paWnwMCwglT+SSCnUosZ8uMHHpnuNs6K3XbB1gYzOZwyPO32Yjbg9lRWmSUXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYE0/1m78nF/X5T1cr8XhNzPN2QQwHwYDVR0j BBgwFoAUWogSOUaD/2ZOHTfT/1IpXl21f78wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWRaekF0UFBaQkR3UHFoVUVoR2J3MmVlRkJyNVpoaW5zeUZ3OEp4eHFr VEwvMC81QTg4MTIzOTQ2ODNGRjY2NEUxRDM3RDNGRjUyMjk1RTVEQjU3RkJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBODgxMjM5NDY4M0ZGNjY0 RTFEMzdEM0ZGNTIyOTVFNURCNTdGQkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWRaekF0UFBaQkR3UHFoVUVoR2J3MmVlRkJyNVpoaW5zeUZ3OEp4eHFrVEwvMC81 QTg4MTIzOTQ2ODNGRjY2NEUxRDM3RDNGRjUyMjk1RTVEQjU3RkJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgbYuuKcqawD8P/2iBQsj2j76/AtJVW3YKYJat+pcV0uX2N7nMlz8gc0ECwbA XerScxN99KCdd7GIiwa5CO9S41kr/qnnGDWQr4bROBxOX/bFL7KfY25nJDb/9qiu OSj3L7JF4Q52d5h75WRJ4HZTpeN2dHYQRNFGVS7CnW1IdcDgAGwkkiXFKaixMzCd a5j9r28rJkD9qSAc6UL1aNMRV2t3ZzS+wQND7vKPo0cF1KqVxOjdL6JTMtN6yySX Hx3fr1rX4+Dm95giC+1sGB+2ZreSfJW1ZN4nHuVRECnnqxqTjR7A6Tot9il6L0uF HOoTMK0iSGB9IwaeiwLnb/zN/A== -----END CERTIFICATE-----Generated at Fri Jul 4 00:19:18 2025 by rpki-client