$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.mft File: 5668EE81C8705A595C00BF220C5BB48B38682B81.mft (raw, json) Hash identifier: mv+VcKgv1O9XyrRTkBzPUhUmqU4cAjUfWn2zX6J5VrM= Subject key identifier: AD:48:6C:36:FD:D3:59:C9:3E:BB:9F:DE:74:35:C4:FA:6B:4A:BD:F9 Authority key identifier: 56:68:EE:81:C8:70:5A:59:5C:00:BF:22:0C:5B:B4:8B:38:68:2B:81 Certificate issuer: /CN=5668EE81C8705A595C00BF220C5BB48B38682B81 Certificate serial: 6BD3DC564AED136157C972C69189A9CA90C1238C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5668EE81C8705A595C00BF220C5BB48B38682B81.cer Subject info access: rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.mft Manifest number: D0 Signing time: Sat 23 Aug 2025 13:31:23 +0000 Manifest this update: Sat 23 Aug 2025 13:26:23 +0000 Manifest next update: Sun 24 Aug 2025 15:41:23 +0000 Files and hashes: 1: 3134332e3235352e3139362e302f32322d3332203d3e20323633353538.roa (hash: 4n22Tbe2fEYdOUmIisT+wAqG3uK1QIzJ8uF9ujZ4V4Q=) 2: 323830343a6566303a3a2f33322d313238203d3e20323633353538.roa (hash: vnGyHnP1vADvHkg5AnUniHI5nPpVnePRmquRFZ1T/Rw=) 3: 5668EE81C8705A595C00BF220C5BB48B38682B81.crl (hash: YjVd4f6x8UX4xAFyszj8q1xM053Ya7R56vn4m8H0+wE=) 4: 3138362e3233372e3231362e302f32312d3332203d3e20323633353538.roa (hash: devNyf5uV7e2XYzIjGzsi+jDNLJbab/FwbfxIAbLzaY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.crl rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5668EE81C8705A595C00BF220C5BB48B38682B81.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 15:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d3:dc:56:4a:ed:13:61:57:c9:72:c6:91:89:a9:ca:90:c1:23:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5668EE81C8705A595C00BF220C5BB48B38682B81 Validity Not Before: Aug 23 13:26:23 2025 GMT Not After : Aug 24 15:41:23 2025 GMT Subject: CN=AD486C36FDD359C93EBB9FDE7435C4FA6B4ABDF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8f:93:82:9c:7b:d3:a0:d9:aa:fe:89:4c:2c: 77:f4:7a:3e:1d:20:c2:15:9f:21:7c:fa:ec:99:6d: be:ad:88:67:27:16:28:5c:ed:0b:4b:c6:fd:39:70: b5:24:05:73:3e:d0:a8:92:96:36:a0:c3:7a:aa:b2: c2:0c:36:f6:35:68:5d:be:96:ce:6b:1b:a2:71:2b: 23:c0:04:a6:59:01:73:87:a5:06:41:53:7b:22:5a: a9:8b:f5:e9:26:ce:c4:24:a9:bd:69:d2:87:99:20: 53:c4:e8:78:84:e4:61:19:12:17:15:b4:73:b3:f0: 84:2e:c8:1a:de:a7:fd:f2:e0:b9:dc:a7:cf:a3:02: 2e:bf:1e:d1:17:bd:6b:9e:e6:01:80:41:ae:1b:ea: 65:b1:c7:2f:88:09:c4:17:83:6d:bd:0e:8d:28:a7: 65:77:35:cc:0b:49:ed:c1:8a:11:78:57:1b:c3:95: fc:b6:a7:83:fb:ff:14:73:06:68:40:b5:5f:25:5b: 81:72:d4:a7:c0:f4:e5:f7:36:8b:13:91:47:0f:ca: 20:f8:72:d6:93:10:2d:89:f5:ac:7d:a2:5e:fa:7f: ef:48:c8:27:ea:a7:e6:39:07:44:c6:02:7b:9f:b9: d7:b7:37:4b:68:e4:d6:12:ee:65:b7:d1:80:42:04: 0e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:48:6C:36:FD:D3:59:C9:3E:BB:9F:DE:74:35:C4:FA:6B:4A:BD:F9 X509v3 Authority Key Identifier: keyid:56:68:EE:81:C8:70:5A:59:5C:00:BF:22:0C:5B:B4:8B:38:68:2B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5668EE81C8705A595C00BF220C5BB48B38682B81.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a1:d8:25:33:38:8f:80:42:b2:5d:32:fc:66:12:8a:87:56: 82:ab:ca:89:ef:05:8a:be:f8:ec:27:02:6f:fb:83:13:44:5e: 5c:d5:42:95:02:86:d4:27:d6:11:a9:45:6c:0a:99:a7:25:05: 1d:ea:b5:58:bf:df:3b:84:33:de:e2:08:c3:0f:bd:77:b7:2e: 3a:2a:50:58:0e:66:73:e1:08:3b:a4:2a:93:16:06:6c:d7:05: 82:08:bb:4b:c8:aa:da:17:4b:b0:8a:7d:7c:fd:ca:05:86:56: 63:dc:8f:85:4b:4a:f3:03:ae:cf:fb:c8:5e:e7:bf:a6:96:ad: f9:18:27:de:23:06:5a:ab:e7:bf:22:56:f1:ce:08:08:b3:ff: 04:69:fd:46:4e:cc:85:0b:a4:ef:e3:23:a9:c6:e0:b8:f7:13: 80:a2:dd:be:64:f4:e8:6f:2a:48:42:28:fb:8e:33:0b:80:88: 69:f3:40:55:af:ba:60:cd:fa:6c:2e:42:9d:b4:0f:92:29:6b: 24:61:37:cf:62:b0:7b:ea:fb:b9:81:b0:78:ec:72:43:9f:81: 58:ea:ba:c5:15:f7:e0:5d:23:1e:aa:87:8a:b0:79:ac:65:1f: 99:88:32:d2:b6:6f:25:c8:ac:37:08:3f:1e:9b:a8:f0:ca:c0: 8b:63:58:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUa9PcVkrtE2FXyXLGkYmpypDBI4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2OEVFODFDODcwNUE1OTVDMDBCRjIyMEM1QkI0OEIz ODY4MkI4MTAeFw0yNTA4MjMxMzI2MjNaFw0yNTA4MjQxNTQxMjNaMDMxMTAvBgNV BAMTKEFENDg2QzM2RkREMzU5QzkzRUJCOUZERTc0MzVDNEZBNkI0QUJERjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFj5OCnHvToNmq/olMLHf0ej4d IMIVnyF8+uyZbb6tiGcnFihc7QtLxv05cLUkBXM+0KiSljagw3qqssIMNvY1aF2+ ls5rG6JxKyPABKZZAXOHpQZBU3siWqmL9ekmzsQkqb1p0oeZIFPE6HiE5GEZEhcV tHOz8IQuyBrep/3y4Lncp8+jAi6/HtEXvWue5gGAQa4b6mWxxy+ICcQXg229Do0o p2V3NcwLSe3BihF4VxvDlfy2p4P7/xRzBmhAtV8lW4Fy1KfA9OX3NosTkUcPyiD4 ctaTEC2J9ax9ol76f+9IyCfqp+Y5B0TGAnufude3N0to5NYS7mW30YBCBA6xAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrUhsNv3TWck+u5/edDXE+mtKvfkwHwYDVR0j BBgwFoAUVmjugchwWllcAL8iDFu0izhoK4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREFEWHFRbXB4RXNoQ2ZTNTZoWUNYNVR1R2ZGWmhjN1J6VzhDNlk5enVt YWcvMC81NjY4RUU4MUM4NzA1QTU5NUMwMEJGMjIwQzVCQjQ4QjM4NjgyQjgxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2NjhFRTgxQzg3MDVBNTk1 QzAwQkYyMjBDNUJCNDhCMzg2ODJCODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REFEWHFRbXB4RXNoQ2ZTNTZoWUNYNVR1R2ZGWmhjN1J6VzhDNlk5enVtYWcvMC81 NjY4RUU4MUM4NzA1QTU5NUMwMEJGMjIwQzVCQjQ4QjM4NjgyQjgxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPKHYJTM4j4BCsl0y/GYSiodWgqvKie8Fir747CcCb/uDE0ReXNVClQKG1CfW EalFbAqZpyUFHeq1WL/fO4Qz3uIIww+9d7cuOipQWA5mc+EIO6QqkxYGbNcFggi7 S8iq2hdLsIp9fP3KBYZWY9yPhUtK8wOuz/vIXue/ppat+Rgn3iMGWqvnvyJW8c4I CLP/BGn9Rk7MhQuk7+MjqcbguPcTgKLdvmT06G8qSEIo+44zC4CIafNAVa+6YM36 bC5CnbQPkilrJGE3z2Kwe+r7uYGweOxyQ5+BWOq6xRX34F0jHqqHirB5rGUfmYgy 0rZvJcisNwg/Hpuo8MrAi2NYIg== -----END CERTIFICATE-----Generated at Sat Aug 23 22:15:49 2025 by rpki-client