$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft File: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft (raw, json) Hash identifier: m4N5z86WxfIYn+pbT6UJCTZC/6xsu1UR1Hd8xsWdynk= Subject key identifier: 87:FE:07:02:97:6E:F3:59:DA:3F:8F:E1:00:A3:2C:8B:67:C9:4E:E5 Authority key identifier: D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA Certificate issuer: /CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Certificate serial: 5BFD1008A56A3D48C376D6EACF4AA7F6E2EFB230 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft Manifest number: 0294 Signing time: Sat 23 Aug 2025 06:26:17 +0000 Manifest this update: Sat 23 Aug 2025 06:21:17 +0000 Manifest next update: Sun 24 Aug 2025 09:46:17 +0000 Files and hashes: 1: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl (hash: VMhnVNw/xwDFXOI3NNwKhdhGrjowhnIS5/04foHdGGA=) 2: 3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa (hash: sPenw571n896sllNaEQg92EoBX7mLS0ivDvfDaPaky8=) 3: 323830343a333164343a3a2f33322d3438203d3e203533313339.roa (hash: Tny32eTDORgq/MtVMRE6pvmeZrpwE0nT6BNCMfyIuNM=) 4: 3138372e3130392e38302e302f32302d3234203d3e203533313339.roa (hash: IQvjHctOgbHfUkTO0U34ErrEutSrCbjo/UK2hA9NLGA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 09:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:fd:10:08:a5:6a:3d:48:c3:76:d6:ea:cf:4a:a7:f6:e2:ef:b2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Validity Not Before: Aug 23 06:21:17 2025 GMT Not After : Aug 24 09:46:17 2025 GMT Subject: CN=87FE0702976EF359DA3F8FE100A32C8B67C94EE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:28:db:6b:a2:fa:55:bb:3d:1f:db:7a:86:81: 26:ca:2f:92:7f:ee:46:0b:a0:40:1f:b2:d8:c0:2c: 4b:cf:e1:cb:cb:49:a5:12:d9:b3:4c:b6:88:d3:11: ca:79:d1:5a:a3:51:5e:37:57:c5:40:05:49:fc:6d: 44:49:71:cd:26:64:71:28:26:ad:bd:f8:3c:bf:06: 5e:ca:8a:9e:36:71:05:e2:ef:54:11:fc:ce:10:86: 8b:42:72:ec:75:39:a0:a8:7b:ad:ed:fe:39:51:9b: 71:6d:ea:69:6f:cf:8e:68:fe:b5:9b:8b:fa:6f:f4: dc:5f:8d:1d:7d:cd:9b:ab:8e:2a:9f:31:fb:d8:d7: 43:7f:4b:fe:3c:14:56:d5:f3:ad:a4:42:6a:fb:dd: 12:18:8d:be:89:42:0e:26:b2:ca:b7:91:e1:f1:d4: 5c:73:d0:1b:77:15:7d:2b:57:ab:9d:2e:c7:b7:29: 3b:10:36:b6:4e:5a:77:6c:48:dc:fa:15:35:47:54: f5:5e:e0:0c:c2:3a:48:12:c2:08:0e:4b:26:93:94: 44:22:75:f1:1e:51:43:a9:79:34:11:de:66:9d:6f: 44:44:4e:18:d4:1d:fa:12:93:65:bd:63:35:3e:36: dc:2f:71:f2:fc:1c:8d:6f:97:d7:a2:f9:4b:85:a2: ff:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FE:07:02:97:6E:F3:59:DA:3F:8F:E1:00:A3:2C:8B:67:C9:4E:E5 X509v3 Authority Key Identifier: keyid:D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ff:7c:7d:d4:bb:a8:50:d4:a5:ac:30:09:0b:58:6e:c4:80: 33:22:ed:b1:33:03:f1:03:d2:c8:c1:ec:ec:05:d6:d2:c0:4f: b2:a9:a0:f7:0e:62:7a:18:bb:03:ac:d7:da:3a:c6:71:13:9c: 25:97:f3:1d:97:6d:13:c1:c0:16:40:79:1e:d7:9f:32:f4:d9: 26:8d:c4:c1:c4:6c:60:f1:14:7d:c3:27:19:69:17:dc:92:00: 6b:89:40:df:18:a1:4e:24:53:ee:30:85:84:b3:e8:fc:c1:9a: dc:cb:76:e6:dc:fd:e6:bf:3d:19:4b:a2:a9:04:b0:84:9a:d7: d0:5b:19:8a:7b:b3:36:58:f5:b8:4e:d4:ae:58:3f:8e:b0:6b: 8a:2d:ff:47:ac:d2:58:8f:73:ec:f5:6a:20:06:15:ea:85:9d: 4f:23:5e:6f:f6:da:75:e9:d3:19:75:01:a0:3e:29:69:41:9a: 8a:ec:ab:b3:9d:ef:01:e7:c1:7d:37:a9:92:17:53:0d:31:10: 49:eb:a4:88:df:40:6c:59:a5:5a:79:67:e8:c7:d1:45:8d:eb: 6c:c0:6c:fb:13:f3:92:9c:86:b5:4b:5b:1b:ef:42:be:6c:da: ed:e1:8e:e7:e6:69:13:69:80:d0:10:d2:e7:58:63:5d:bf:37: 8d:4e:e0:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUW/0QCKVqPUjDdtbqz0qn9uLvsjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNERGRjE5ODIyQzVCMjdDN0JDQzE2QkZEOEJFMkEz ODRGODlBQTAeFw0yNTA4MjMwNjIxMTdaFw0yNTA4MjQwOTQ2MTdaMDMxMTAvBgNV BAMTKDg3RkUwNzAyOTc2RUYzNTlEQTNGOEZFMTAwQTMyQzhCNjdDOTRFRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvKNtrovpVuz0f23qGgSbKL5J/ 7kYLoEAfstjALEvP4cvLSaUS2bNMtojTEcp50VqjUV43V8VABUn8bURJcc0mZHEo Jq29+Dy/Bl7Kip42cQXi71QR/M4QhotCcux1OaCoe63t/jlRm3Ft6mlvz45o/rWb i/pv9NxfjR19zZurjiqfMfvY10N/S/48FFbV862kQmr73RIYjb6JQg4mssq3keHx 1Fxz0Bt3FX0rV6udLse3KTsQNrZOWndsSNz6FTVHVPVe4AzCOkgSwggOSyaTlEQi dfEeUUOpeTQR3madb0REThjUHfoSk2W9YzU+NtwvcfL8HI1vl9ei+UuFov9FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUh/4HApdu81naP4/hAKMsi2fJTuUwHwYDVR0j BBgwFoAU0iTf8ZgixbJ8e8wWv9i+KjhPiaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlW QXYvMS9EMjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyMjRERkYxOTgyMkM1QjI3 QzdCQ0MxNkJGRDhCRTJBMzg0Rjg5QUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlWQXYvMS9E MjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAev98fdS7qFDUpawwCQtYbsSAMyLtsTMD8QPSyMHs7AXW0sBPsqmg9w5iehi7 A6zX2jrGcROcJZfzHZdtE8HAFkB5HtefMvTZJo3EwcRsYPEUfcMnGWkX3JIAa4lA 3xihTiRT7jCFhLPo/MGa3Mt25tz95r89GUuiqQSwhJrX0FsZinuzNlj1uE7Urlg/ jrBrii3/R6zSWI9z7PVqIAYV6oWdTyNeb/badenTGXUBoD4paUGaiuyrs53vAefB fTepkhdTDTEQSeukiN9AbFmlWnln6MfRRY3rbMBs+xPzkpyGtUtbG+9Cvmza7eGO 5+ZpE2mA0BDS51hjXb83jU7gnw== -----END CERTIFICATE-----Generated at Sun Aug 24 00:20:59 2025 by rpki-client