$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft File: B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft (raw, json) Hash identifier: 2yjsea/VRZsVrzGVnsvPywe6cq0qlM6KY6i5SyAh5OA= Subject key identifier: EB:EA:33:32:E7:A0:1E:71:BE:BB:8F:68:D8:4A:BD:40:0F:F9:31:56 Authority key identifier: B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81 Certificate issuer: /CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81 Certificate serial: 7906F9DEB3D10BE76C92A70677F4C5E51EB7A9A6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer Subject info access: rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft Manifest number: 02A1 Signing time: Sat 23 Aug 2025 11:01:51 +0000 Manifest this update: Sat 23 Aug 2025 10:56:51 +0000 Manifest next update: Sun 24 Aug 2025 14:27:51 +0000 Files and hashes: 1: 3137372e3232332e3133342e302f32332d3233203d3e20323731303031.roa (hash: tWmADO3AyjJB+3iXcF2jswe5Q+UsBpZmVTKP6t3ruP8=) 2: 323830343a373463303a3a2f33322d3332203d3e20323731303031.roa (hash: BCC51P7ZxSQ0m7S8/6KLs4GlFQ1WTUXIjCsSOHZYl+g=) 3: 3137372e3232332e3133322e302f32332d3233203d3e20323731303031.roa (hash: IJwhCRZ/eia9wbArW/hVlZ/3CzBgX2zAxbknxwjozN0=) 4: 323830343a373463303a383030303a3a2f33332d3333203d3e20323731303031.roa (hash: qgFxFxtxDJNyrMOE8s6UdEvMBq+6La07xmVkbifGxYo=) 5: 323830343a373463303a363a3a2f34382d3438203d3e20323731303031.roa (hash: Hsrvj/TB2roXOEb6pFYXm2pkCmxMpu5m6ezauYUI/2E=) 6: 323830343a373463303a3a2f33332d3333203d3e20323731303031.roa (hash: 5v+nTMwCioWhJD/VGCThgGl+n+v8/kmfzVRrtFEM0GU=) 7: 3137372e3232332e3133322e302f32322d3232203d3e20323731303031.roa (hash: 1XgLCn8snOhVhGzdvEorMRjHnY23cBd+JEmoP0dsLTY=) 8: 323830343a373463303a333a3a2f34382d3438203d3e20323731303031.roa (hash: xIOiY5AbK/u+wde+uFpEZOCisWtyE49NnGfSjfUWESA=) 9: B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl (hash: Thz4db3vbgTIfhdlskhMHf6+KTZafLLnrunxb3o/lI4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 14:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:06:f9:de:b3:d1:0b:e7:6c:92:a7:06:77:f4:c5:e5:1e:b7:a9:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81 Validity Not Before: Aug 23 10:56:51 2025 GMT Not After : Aug 24 14:27:51 2025 GMT Subject: CN=EBEA3332E7A01E71BEBB8F68D84ABD400FF93156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:20:59:2f:99:c6:5f:80:0f:52:81:bc:ef:ab: 5d:76:22:91:46:c6:2d:25:8b:8b:1c:62:89:f8:5a: d5:9c:bb:b8:36:d1:ba:81:c1:db:dd:bd:ca:95:87: df:82:1f:ad:5f:f2:7b:ad:c5:e7:c2:f6:9e:e7:46: 26:2f:75:fe:7c:56:26:b0:8e:c8:64:71:84:37:af: 3f:f1:32:ab:1c:53:5b:08:a5:ed:ad:fc:c1:f3:ea: db:d0:d9:55:99:e0:ca:09:17:8f:ad:ad:eb:b9:0f: a2:ec:d0:59:d1:96:f2:69:dd:31:b7:f8:74:0c:73: 72:ad:c6:f7:ca:53:6d:9d:31:5b:53:97:92:fc:5c: 9c:ba:09:3b:e7:e7:28:db:7b:7a:a3:0a:90:41:16: 0a:73:cd:ac:c5:34:44:f5:ef:5c:b3:58:1f:4d:0c: 57:bf:da:b7:9a:63:aa:d1:cc:6b:ef:56:20:0b:1f: 33:af:e4:c2:80:f7:46:65:0c:4a:a8:cf:76:6d:54: 9d:a4:8d:a1:2b:76:6c:fc:58:33:4b:d7:39:82:fc: 9b:68:8f:06:31:b2:b6:78:62:eb:9e:db:80:61:46: 94:fa:b0:b5:18:9b:fa:9b:6b:53:a3:31:25:ad:b0: 3e:2c:bf:e4:54:77:ef:34:9e:92:f4:9d:08:f3:fa: 3e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EA:33:32:E7:A0:1E:71:BE:BB:8F:68:D8:4A:BD:40:0F:F9:31:56 X509v3 Authority Key Identifier: keyid:B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:50:10:20:7c:f7:f0:18:fc:80:74:d4:a0:54:99:38:d2:6d: 41:a3:12:3c:1a:3f:d4:4c:23:3b:95:a1:2e:67:55:66:b1:26: 7c:8e:59:ea:7b:2d:a0:a7:d0:29:8d:16:ac:00:cb:e7:4a:79: 18:4e:94:51:aa:f9:cb:2e:40:93:c1:d3:e5:43:ae:09:47:6f: fa:8a:5c:71:5a:3e:96:36:4f:8c:cd:74:5d:39:97:1b:1e:59: 48:62:20:f0:45:a0:05:f6:6a:65:26:a7:82:3c:4b:49:68:0a: 5d:7d:a9:d5:34:ab:4b:7b:27:fc:62:e9:a4:ad:d8:1d:90:f4: 55:08:0c:fd:cd:ba:c2:82:01:ec:52:e1:88:61:65:fc:5b:fd: eb:81:7f:cf:95:db:15:89:48:43:9e:0a:f3:7e:99:66:11:84: a1:65:28:a2:4e:b4:0f:7e:3a:a8:80:78:62:a8:db:c3:d3:bd: 41:5c:75:83:4a:5f:eb:c7:29:17:3d:f4:24:95:43:de:1f:88: 60:ef:1e:19:4a:c5:9f:19:44:8a:42:ef:73:39:77:49:9a:36: 33:02:34:e1:d5:a4:55:60:26:0b:88:a7:4a:f1:5d:a1:06:7b: c5:e0:0e:c2:26:46:19:50:cf:1a:82:2d:87:7a:af:1b:3d:44: 56:96:db:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeQb53rPRC+dskqcGd/TF5R63qaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZDNUZCODU3RTY5QTkwNDQ5NzNGQTMwNjJBQTFENkZC RjVDNEE4MTAeFw0yNTA4MjMxMDU2NTFaFw0yNTA4MjQxNDI3NTFaMDMxMTAvBgNV BAMTKEVCRUEzMzMyRTdBMDFFNzFCRUJCOEY2OEQ4NEFCRDQwMEZGOTMxNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwIFkvmcZfgA9Sgbzvq112IpFG xi0li4scYon4WtWcu7g20bqBwdvdvcqVh9+CH61f8nutxefC9p7nRiYvdf58Viaw jshkcYQ3rz/xMqscU1sIpe2t/MHz6tvQ2VWZ4MoJF4+treu5D6Ls0FnRlvJp3TG3 +HQMc3KtxvfKU22dMVtTl5L8XJy6CTvn5yjbe3qjCpBBFgpzzazFNET171yzWB9N DFe/2reaY6rRzGvvViALHzOv5MKA90ZlDEqoz3ZtVJ2kjaErdmz8WDNL1zmC/Jto jwYxsrZ4Yuue24BhRpT6sLUYm/qba1OjMSWtsD4sv+RUd+80npL0nQjz+j6BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6+ozMuegHnG+u49o2Eq9QA/5MVYwHwYDVR0j BBgwFoAUtsX7hX5pqQRJc/owYqodb79cSoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1o1dWN2NzIxZDRmRGJxQXVFMVVtOFpuUWo4cGFwYUo1MUhTUnBIeGlX RFUvMS9CNkM1RkI4NTdFNjlBOTA0NDk3M0ZBMzA2MkFBMUQ2RkJGNUM0QTgxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2QzVGQjg1N0U2OUE5MDQ0 OTczRkEzMDYyQUExRDZGQkY1QzRBODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1o1dWN2NzIxZDRmRGJxQXVFMVVtOFpuUWo4cGFwYUo1MUhTUnBIeGlXRFUvMS9C NkM1RkI4NTdFNjlBOTA0NDk3M0ZBMzA2MkFBMUQ2RkJGNUM0QTgxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd1AQIHz38Bj8gHTUoFSZONJtQaMSPBo/1EwjO5WhLmdVZrEmfI5Z6nstoKfQ KY0WrADL50p5GE6UUar5yy5Ak8HT5UOuCUdv+opccVo+ljZPjM10XTmXGx5ZSGIg 8EWgBfZqZSangjxLSWgKXX2p1TSrS3sn/GLppK3YHZD0VQgM/c26woIB7FLhiGFl /Fv964F/z5XbFYlIQ54K836ZZhGEoWUook60D346qIB4Yqjbw9O9QVx1g0pf68cp Fz30JJVD3h+IYO8eGUrFnxlEikLvczl3SZo2MwI04dWkVWAmC4inSvFdoQZ7xeAO wiZGGVDPGoIth3qvGz1EVpbb6g== -----END CERTIFICATE-----Generated at Sat Aug 23 22:19:53 2025 by rpki-client