$ rpki-client -vvf rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft File: DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft (raw, json) Hash identifier: W4OjRMvn9z0ShSBvWYXlXK3kDYB7JeIh2neT/4SmPBA= Subject key identifier: 92:09:B5:2D:61:41:34:BA:54:2A:5C:6A:CF:35:A5:B6:DE:8B:A9:2D Authority key identifier: DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7 Certificate issuer: /CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7 Certificate serial: 4A0B537A5BF4965AFA5DDD7FA0D1607E071D3D61 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer Subject info access: rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft Manifest number: 0292 Signing time: Sat 23 Aug 2025 12:21:09 +0000 Manifest this update: Sat 23 Aug 2025 12:16:09 +0000 Manifest next update: Sun 24 Aug 2025 13:11:09 +0000 Files and hashes: 1: 323830343a313262633a3a2f33322d3438203d3e20323633343935.roa (hash: lJamWfGsgdftwb6MoUAW/t7o12xx87lvoGqpZkx6hgI=) 2: DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl (hash: SClvDZQBlwLB53j8AyiNsdrJ2AQVhcqQlTiCMoRx5Kc=) 3: 3137302e3233332e37362e302f32322d3234203d3e20323633343935.roa (hash: Gwy9zblG706ghCX5/JVGDiaxPqAmIwnXEqUmjq1gI0c=) 4: 3139312e3234332e34382e302f32322d3234203d3e20323633343935.roa (hash: 9SsdRo7F/WQKm+zUuXydKWyuBOs8eQuYsJD3wiY7ifQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:0b:53:7a:5b:f4:96:5a:fa:5d:dd:7f:a0:d1:60:7e:07:1d:3d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7 Validity Not Before: Aug 23 12:16:09 2025 GMT Not After : Aug 24 13:11:09 2025 GMT Subject: CN=9209B52D614134BA542A5C6ACF35A5B6DE8BA92D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:71:19:95:83:1f:7f:fa:7c:58:25:eb:1a:ec: b8:cc:b2:b9:b8:18:56:d4:31:cc:60:10:3f:b1:11: 61:db:5f:2a:47:1f:11:5a:d1:58:db:b5:6d:c6:de: 03:d0:b9:c2:4e:de:ce:8e:5d:db:65:b0:e8:33:03: 30:6d:4f:27:d9:28:18:79:e8:37:a1:7d:10:6d:2e: c4:de:71:5a:7c:90:78:77:e1:56:7f:5a:b1:ed:93: 8e:b1:b8:f3:a9:86:77:6c:4e:da:a7:a1:ef:2c:92: e7:c7:a7:21:c5:b8:6d:9b:49:05:64:7d:95:31:e4: b4:31:4c:52:16:7a:36:10:19:67:64:fb:76:bf:e4: d3:13:60:b2:a7:af:c7:c3:a1:08:de:8b:ad:01:f0: c4:f9:78:de:75:1a:45:7e:d6:75:85:86:8e:c8:62: 91:b9:58:b5:ef:c2:89:a1:43:78:0d:72:54:ed:c1: 41:29:93:c6:9a:e0:c7:82:20:af:52:7d:45:c1:5d: 6d:e6:7c:a6:59:fa:c8:8c:6c:90:4f:ed:94:b1:b1: 9f:52:93:ad:17:71:7e:d3:48:28:b5:dc:06:6d:0f: 35:e9:27:93:2f:92:62:ad:cc:39:57:b7:a7:7a:b6: 80:02:5b:44:1f:5f:fd:d3:2d:d1:75:c5:27:bd:fd: b4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:09:B5:2D:61:41:34:BA:54:2A:5C:6A:CF:35:A5:B6:DE:8B:A9:2D X509v3 Authority Key Identifier: keyid:DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:74:52:3a:06:1a:16:58:86:19:e1:cc:7a:fa:8c:5d:10:b6: b0:4e:14:5e:58:13:90:80:c4:f9:cd:7a:3f:33:5f:51:dc:6e: 98:12:91:bf:4b:39:7b:8e:73:a8:ea:4f:a3:10:bd:0d:11:e5: 6a:24:b7:24:ea:0a:72:ce:7a:83:56:4b:21:79:fe:f8:f2:9e: b3:ba:9c:86:7d:97:20:f6:ef:49:6a:1c:ff:6d:90:98:e0:e1: b3:89:75:5c:4b:8f:92:8f:17:7d:b5:be:71:f1:74:a3:b3:81: 27:4b:c5:46:f2:06:78:c5:dc:8c:67:f8:43:51:d6:6e:95:3c: 35:e9:b6:45:4a:ef:9d:82:4c:32:6d:c3:89:92:2d:87:26:0b: af:b6:7e:44:92:c6:18:c8:c4:bb:ee:b2:37:c8:f6:e1:16:16: 2b:b3:eb:5f:64:b4:39:05:fc:6d:45:29:da:fb:7b:99:e1:f3: 24:73:a6:8d:1b:f2:9b:55:40:a5:57:5a:72:36:1b:f9:72:33: b8:48:4c:84:cc:51:e8:4d:a2:12:b7:a6:41:36:23:c4:28:ae: 0c:ea:36:f5:18:d7:94:be:8a:ae:9f:c6:bf:12:14:61:e1:07: 47:33:20:17:6d:f2:a3:e5:70:a6:0e:fa:8f:d0:c8:25:87:1d: 5c:71:dc:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSgtTelv0llr6Xd1/oNFgfgcdPWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RkM1NjgwNUM3NjY3RTE4MDE4NTRCM0M3N0FEQ0I2 NEE2M0RENzAeFw0yNTA4MjMxMjE2MDlaFw0yNTA4MjQxMzExMDlaMDMxMTAvBgNV BAMTKDkyMDlCNTJENjE0MTM0QkE1NDJBNUM2QUNGMzVBNUI2REU4QkE5MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1cRmVgx9/+nxYJesa7LjMsrm4 GFbUMcxgED+xEWHbXypHHxFa0VjbtW3G3gPQucJO3s6OXdtlsOgzAzBtTyfZKBh5 6DehfRBtLsTecVp8kHh34VZ/WrHtk46xuPOphndsTtqnoe8skufHpyHFuG2bSQVk fZUx5LQxTFIWejYQGWdk+3a/5NMTYLKnr8fDoQjei60B8MT5eN51GkV+1nWFho7I YpG5WLXvwomhQ3gNclTtwUEpk8aa4MeCIK9SfUXBXW3mfKZZ+siMbJBP7ZSxsZ9S k60XcX7TSCi13AZtDzXpJ5MvkmKtzDlXt6d6toACW0QfX/3TLdF1xSe9/bRLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkgm1LWFBNLpUKlxqzzWltt6LqS0wHwYDVR0j BBgwFoAU3k/FaAXHZn4YAYVLPHety2SmPdcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3VpeUJYV3BQVUhKenpQWjFCRWJTazZZQzJ1dEhOQWlTNXJFb1Vtb2Zp U1kvMC9ERTRGQzU2ODA1Qzc2NjdFMTgwMTg1NEIzQzc3QURDQjY0QTYzREQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFNEZDNTY4MDVDNzY2N0Ux ODAxODU0QjNDNzdBRENCNjRBNjNERDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3VpeUJYV3BQVUhKenpQWjFCRWJTazZZQzJ1dEhOQWlTNXJFb1Vtb2ZpU1kvMC9E RTRGQzU2ODA1Qzc2NjdFMTgwMTg1NEIzQzc3QURDQjY0QTYzREQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADHRSOgYaFliGGeHMevqMXRC2sE4UXlgTkIDE+c16PzNfUdxumBKRv0s5e45z qOpPoxC9DRHlaiS3JOoKcs56g1ZLIXn++PKes7qchn2XIPbvSWoc/22QmODhs4l1 XEuPko8XfbW+cfF0o7OBJ0vFRvIGeMXcjGf4Q1HWbpU8Nem2RUrvnYJMMm3DiZIt hyYLr7Z+RJLGGMjEu+6yN8j24RYWK7PrX2S0OQX8bUUp2vt7meHzJHOmjRvym1VA pVdacjYb+XIzuEhMhMxR6E2iEremQTYjxCiuDOo29RjXlL6Krp/GvxIUYeEHRzMg F23yo+Vwpg76j9DIJYcdXHHc2w== -----END CERTIFICATE-----Generated at Sat Aug 23 17:20:22 2025 by rpki-client