$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft File: 294426E31AEAEBF273647549DD459DE98A112431.mft (raw, json) Hash identifier: kbzVjCmHtMXDgXxakVTbWIozeO4xri0BSUFj0tv08Vw= Subject key identifier: 19:D6:12:C1:CA:32:D6:35:5B:83:7A:C0:56:38:A0:18:67:63:8E:7E Authority key identifier: 29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31 Certificate issuer: /CN=294426E31AEAEBF273647549DD459DE98A112431 Certificate serial: 5EEDC4F40CC256A18840BABC5258F337E3225ABA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer Subject info access: rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft Manifest number: 02AC Signing time: Fri 22 Aug 2025 20:42:09 +0000 Manifest this update: Fri 22 Aug 2025 20:37:09 +0000 Manifest next update: Sun 24 Aug 2025 00:37:09 +0000 Files and hashes: 1: 323830343a313539303a3a2f33322d313238203d3e20323633333935.roa (hash: 27TRK43DvGzctvUwTwZoruKts8GvTaqt7quiQch6ar4=) 2: 294426E31AEAEBF273647549DD459DE98A112431.crl (hash: GdOX+fwsveOJUFbUpghdrRE4FGdERHka9W7q4HOkhlk=) 3: 3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa (hash: tM+Sjx/wcU41RTwQQmeZaLCi88tO8sgzPpP4YPgZE8s=) 4: 3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa (hash: kP3yuOziQGvTs7gAqbrCAHPzpnd0+PYYuQOkH5wNORA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 00:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ed:c4:f4:0c:c2:56:a1:88:40:ba:bc:52:58:f3:37:e3:22:5a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294426E31AEAEBF273647549DD459DE98A112431 Validity Not Before: Aug 22 20:37:09 2025 GMT Not After : Aug 24 00:37:09 2025 GMT Subject: CN=19D612C1CA32D6355B837AC05638A01867638E7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:50:2b:90:fd:9b:1b:56:de:42:30:ed:b4:56: 35:f8:93:e1:27:f4:aa:49:c3:e4:87:28:cd:2f:81: 24:9f:c0:c7:4b:f1:32:0c:e5:2a:64:84:52:e0:2f: 8b:93:cd:3f:1a:98:9b:3b:99:87:86:a0:15:0e:0c: 11:55:c0:5d:56:29:4c:a0:94:22:95:bd:5a:32:f2: 10:31:2c:03:e6:66:b7:75:2d:7f:a9:03:65:26:36: 6a:20:de:da:8e:e7:b8:f0:c9:02:ae:4f:a8:8b:6b: 1d:48:fd:0f:a3:d2:91:c5:26:92:d3:51:96:d9:64: a7:f1:8e:da:b3:f1:1d:19:a7:b0:e4:09:1a:4a:4c: 7a:19:3c:99:ee:41:69:53:b4:33:71:57:e2:a0:64: b3:1b:cb:29:48:52:89:3f:46:fb:fa:32:f3:20:fc: ff:ec:ab:a5:c4:51:6a:7c:ad:c1:35:c9:54:6e:11: 4c:a3:82:70:a9:c3:25:18:21:16:1f:3a:54:db:b0: a8:16:95:db:fc:2f:32:1a:d6:87:59:85:45:d4:25: 48:34:b3:13:3a:4d:b6:93:27:ed:cc:05:ac:0d:90: ea:85:a9:49:2e:e8:72:89:38:d0:26:79:10:7e:9b: a4:82:28:48:fc:fb:7e:c3:7d:0c:fb:37:ba:d4:2d: 08:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D6:12:C1:CA:32:D6:35:5B:83:7A:C0:56:38:A0:18:67:63:8E:7E X509v3 Authority Key Identifier: keyid:29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b8:b2:59:46:2b:1f:6e:ad:bf:7a:af:7f:6d:68:66:2d:ac: c6:69:7b:17:df:ad:25:af:23:3e:56:d3:3a:94:49:61:5a:4e: 52:74:c4:12:0e:08:a3:46:f1:a7:36:fe:81:c5:a9:dd:38:3f: 43:04:c9:ad:ab:ba:04:4a:cf:35:ec:8e:aa:17:54:ff:31:60: ca:13:d1:91:21:ce:a2:b1:fc:a9:25:e1:d2:ca:18:1b:de:91: 8e:f1:59:e6:1b:35:e2:29:21:c2:e6:5e:ed:c5:f4:58:ed:92: fa:b7:64:3d:ef:a6:e1:c7:83:8b:a2:14:ed:0a:9b:48:cb:07: e7:1a:b7:7a:71:94:95:e7:e4:f1:4b:e3:64:03:f2:54:38:45: 4d:65:65:09:3a:e6:c8:d4:dc:2e:0f:8a:2a:0a:45:4f:8d:66: ec:b3:ab:cb:e4:25:d8:1e:12:f0:61:c8:0b:55:b2:80:a0:a3: c4:37:83:ad:1c:d3:a8:46:0e:93:15:0e:57:a3:8d:ea:db:f2: 97:3f:dc:b9:bd:28:c4:1c:11:f8:55:35:d9:1f:7f:aa:a0:c9: d4:06:ec:89:72:8f:c0:f5:69:d7:89:ad:7b:1f:1b:49:15:a9: 3b:55:57:a9:58:93:13:55:9e:c9:ff:2e:de:dd:12:17:96:95: 73:8a:fa:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXu3E9AzCVqGIQLq8UljzN+MiWrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0NDI2RTMxQUVBRUJGMjczNjQ3NTQ5REQ0NTlERTk4 QTExMjQzMTAeFw0yNTA4MjIyMDM3MDlaFw0yNTA4MjQwMDM3MDlaMDMxMTAvBgNV BAMTKDE5RDYxMkMxQ0EzMkQ2MzU1QjgzN0FDMDU2MzhBMDE4Njc2MzhFN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoUCuQ/ZsbVt5CMO20VjX4k+En 9KpJw+SHKM0vgSSfwMdL8TIM5SpkhFLgL4uTzT8amJs7mYeGoBUODBFVwF1WKUyg lCKVvVoy8hAxLAPmZrd1LX+pA2UmNmog3tqO57jwyQKuT6iLax1I/Q+j0pHFJpLT UZbZZKfxjtqz8R0Zp7DkCRpKTHoZPJnuQWlTtDNxV+KgZLMbyylIUok/Rvv6MvMg /P/sq6XEUWp8rcE1yVRuEUyjgnCpwyUYIRYfOlTbsKgWldv8LzIa1odZhUXUJUg0 sxM6TbaTJ+3MBawNkOqFqUku6HKJONAmeRB+m6SCKEj8+37DfQz7N7rULQgHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGdYSwcoy1jVbg3rAVjigGGdjjn4wHwYDVR0j BBgwFoAUKUQm4xrq6/JzZHVJ3UWd6YoRJDEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkZvRnFCeDd4U3ZTcmozMlpGMnpKdEJxQ0xpdEVFR0QyeDQ5VnFkUTVT bjQvMS8yOTQ0MjZFMzFBRUFFQkYyNzM2NDc1NDlERDQ1OURFOThBMTEyNDMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NDQyNkUzMUFFQUVCRjI3 MzY0NzU0OURENDU5REU5OEExMTI0MzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkZvRnFCeDd4U3ZTcmozMlpGMnpKdEJxQ0xpdEVFR0QyeDQ5VnFkUTVTbjQvMS8y OTQ0MjZFMzFBRUFFQkYyNzM2NDc1NDlERDQ1OURFOThBMTEyNDMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe7iyWUYrH26tv3qvf21oZi2sxml7F9+tJa8jPlbTOpRJYVpOUnTEEg4Io0bx pzb+gcWp3Tg/QwTJrau6BErPNeyOqhdU/zFgyhPRkSHOorH8qSXh0soYG96RjvFZ 5hs14ikhwuZe7cX0WO2S+rdkPe+m4ceDi6IU7QqbSMsH5xq3enGUlefk8UvjZAPy VDhFTWVlCTrmyNTcLg+KKgpFT41m7LOry+Ql2B4S8GHIC1WygKCjxDeDrRzTqEYO kxUOV6ON6tvylz/cub0oxBwR+FU12R9/qqDJ1AbsiXKPwPVp14mtex8bSRWpO1VX qViTE1Weyf8u3t0SF5aVc4r6pA== -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:19 2025 by rpki-client