$ rpki-client -vvf rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft File: A653D5055FC338B089E2C732382682788F082F11.mft (raw, json) Hash identifier: 7VdB6fFtfWYkFkeusr376hrsVAqntmNFPUqawe1N6OY= Subject key identifier: 19:94:16:41:F3:AE:64:48:25:D1:24:DE:B7:98:2E:14:5E:23:E9:9D Authority key identifier: A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11 Certificate issuer: /CN=A653D5055FC338B089E2C732382682788F082F11 Certificate serial: 51DF8CB4428ECA1EECE512AF267757776A5E5AA9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer Subject info access: rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft Manifest number: 02A2 Signing time: Sat 23 Aug 2025 03:28:22 +0000 Manifest this update: Sat 23 Aug 2025 03:23:22 +0000 Manifest next update: Sun 24 Aug 2025 05:44:22 +0000 Files and hashes: 1: 34352e3232342e3132382e302f32322d3234203d3e20323636343030.roa (hash: uvd4+Ma33hGXSlt80NtGV3afPFZnfl9FFnr+LvjlmzM=) 2: 323830343a333734343a3a2f33322d313238203d3e20323636343030.roa (hash: 40WaVP8Svoxs+qZKP+igdLA9rTsAwD+SLbjFEI4LGxs=) 3: A653D5055FC338B089E2C732382682788F082F11.crl (hash: TPWlL2nabUhnRaWXJATrWlZLNVUmaKf1PtfqFchxf44=) 4: 3137302e38312e34302e302f32322d3234203d3e20323636343030.roa (hash: fnk6G+39Qn8k6OBmu2nwg3cM52nnrkQXQ11Kyh5Qn1o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 05:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:df:8c:b4:42:8e:ca:1e:ec:e5:12:af:26:77:57:77:6a:5e:5a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A653D5055FC338B089E2C732382682788F082F11 Validity Not Before: Aug 23 03:23:22 2025 GMT Not After : Aug 24 05:44:22 2025 GMT Subject: CN=19941641F3AE644825D124DEB7982E145E23E99D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1d:9a:0d:f6:c2:17:c2:7e:1e:e9:72:31:6f: 00:b0:84:da:02:2d:e6:82:57:bd:5a:5f:53:5b:5a: 68:8d:83:50:18:3e:57:a1:fc:b3:d4:3b:e2:f4:8f: 63:ad:8c:8d:90:74:2b:34:6e:7e:6e:cb:f3:3d:19: 4a:dd:50:09:e8:93:46:25:60:6f:9f:8a:b7:71:c4: df:02:a3:55:37:36:75:74:70:2b:cf:c2:c3:1a:0a: 67:f7:e2:d3:d4:7c:d3:b4:66:19:90:3a:14:ff:ce: 25:be:eb:59:9a:68:f4:69:52:42:b9:ea:7f:f1:8c: b8:9a:9a:66:04:42:1d:2d:57:c4:5f:43:b9:c8:c4: 48:6c:50:dc:71:d7:e0:b8:b5:92:2a:b0:ac:be:73: 7e:0c:a6:40:eb:3b:f6:25:9f:9c:88:80:03:86:89: f0:1a:19:09:d7:44:fa:8c:fe:c4:52:2b:39:2e:d0: 03:08:ef:33:40:97:00:b1:88:e1:49:b2:54:bc:d4: a7:c0:eb:6f:e9:4f:93:c9:79:ec:ea:40:77:6a:b0: 97:c1:e3:54:49:eb:8b:cc:51:d5:52:92:56:ed:5d: 85:e1:58:f8:b9:3d:de:30:09:a3:6c:59:6e:46:59: ce:ba:29:32:a5:4e:c2:8a:b1:d7:cd:b5:96:07:56: 26:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:94:16:41:F3:AE:64:48:25:D1:24:DE:B7:98:2E:14:5E:23:E9:9D X509v3 Authority Key Identifier: keyid:A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:4a:c0:2e:7d:d4:35:0f:20:39:66:55:5a:94:1a:5d:fa:85: f2:65:6a:1b:3c:a9:9f:b0:81:63:e9:21:1b:12:b9:23:99:38: 77:05:11:37:94:b4:d2:bd:fe:51:5c:41:06:64:42:50:d0:d1: be:e9:ba:26:f7:be:5e:be:0d:75:45:e0:dd:fa:26:b7:15:e6: d8:97:8f:10:c6:c8:36:53:32:ff:6d:8f:b5:3b:f4:26:c5:c9: db:46:5e:c9:a3:f8:8c:36:d2:f2:79:50:bb:69:41:53:4a:52: 49:46:f6:46:a4:44:e5:0b:95:a0:6e:7b:25:24:c1:1c:78:fd: dd:45:0f:c3:4b:bc:98:b3:a6:4a:05:4f:c3:24:2a:0f:e5:fe: b0:1b:11:5c:0c:77:a7:ea:e2:59:b6:2a:14:da:9f:df:79:3a: 46:d4:90:49:5d:aa:03:e7:b6:c3:98:ad:6a:49:5b:d3:01:bb: 85:29:7a:35:6d:4c:01:3c:04:db:72:07:b9:56:42:0a:f4:54: 30:ba:f1:35:88:b6:28:5a:9f:38:f2:fd:a1:40:be:4d:7a:a2: a7:71:27:be:6e:12:14:b0:da:e2:e7:7e:4f:3a:c4:65:a9:54: 2e:4b:48:65:7c:51:44:1f:c8:42:e4:52:2a:3f:8c:98:18:ad: 80:ed:fd:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUd+MtEKOyh7s5RKvJndXd2peWqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1M0Q1MDU1RkMzMzhCMDg5RTJDNzMyMzgyNjgyNzg4 RjA4MkYxMTAeFw0yNTA4MjMwMzIzMjJaFw0yNTA4MjQwNTQ0MjJaMDMxMTAvBgNV BAMTKDE5OTQxNjQxRjNBRTY0NDgyNUQxMjRERUI3OTgyRTE0NUUyM0U5OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPHZoN9sIXwn4e6XIxbwCwhNoC LeaCV71aX1NbWmiNg1AYPleh/LPUO+L0j2OtjI2QdCs0bn5uy/M9GUrdUAnok0Yl YG+firdxxN8Co1U3NnV0cCvPwsMaCmf34tPUfNO0ZhmQOhT/ziW+61maaPRpUkK5 6n/xjLiammYEQh0tV8RfQ7nIxEhsUNxx1+C4tZIqsKy+c34MpkDrO/Yln5yIgAOG ifAaGQnXRPqM/sRSKzku0AMI7zNAlwCxiOFJslS81KfA62/pT5PJeezqQHdqsJfB 41RJ64vMUdVSklbtXYXhWPi5Pd4wCaNsWW5GWc66KTKlTsKKsdfNtZYHViY1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGZQWQfOuZEgl0STet5guFF4j6Z0wHwYDVR0j BBgwFoAUplPVBV/DOLCJ4scyOCaCeI8ILxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0J2QmNLODNqZkttdGVVWmhKS3FnN1B0a2R4N1h0TnFGZ0RqNGI0cmdv aXgvMS9BNjUzRDUwNTVGQzMzOEIwODlFMkM3MzIzODI2ODI3ODhGMDgyRjExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2NTNENTA1NUZDMzM4QjA4 OUUyQzczMjM4MjY4Mjc4OEYwODJGMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0J2QmNLODNqZkttdGVVWmhKS3FnN1B0a2R4N1h0TnFGZ0RqNGI0cmdvaXgvMS9B NjUzRDUwNTVGQzMzOEIwODlFMkM3MzIzODI2ODI3ODhGMDgyRjExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApUrALn3UNQ8gOWZVWpQaXfqF8mVqGzypn7CBY+khGxK5I5k4dwURN5S00r3+ UVxBBmRCUNDRvum6Jve+Xr4NdUXg3fomtxXm2JePEMbINlMy/22PtTv0JsXJ20Ze yaP4jDbS8nlQu2lBU0pSSUb2RqRE5QuVoG57JSTBHHj93UUPw0u8mLOmSgVPwyQq D+X+sBsRXAx3p+riWbYqFNqf33k6RtSQSV2qA+e2w5itaklb0wG7hSl6NW1MATwE 23IHuVZCCvRUMLrxNYi2KFqfOPL9oUC+TXqip3Envm4SFLDa4ud+TzrEZalULktI ZXxRRB/IQuRSKj+MmBitgO39dg== -----END CERTIFICATE-----Generated at Sat Aug 23 17:11:53 2025 by rpki-client