$ rpki-client -vvf rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.mft File: D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.mft (raw, json) Hash identifier: FK1i8HOo0bTQOI1ky/wFgI+zjFEGuc2Elxj4wCkQ5HE= Subject key identifier: 56:D2:5A:ED:3A:7D:45:16:4C:5D:6B:04:CA:ED:C0:C1:20:18:40:EF Authority key identifier: D9:3E:5A:3D:61:92:A3:29:B1:CC:3A:94:3D:36:A0:A9:C5:CA:1E:EA Certificate issuer: /CN=D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA Certificate serial: 5F20C524A9C3BF48C22F2F7DCA21467F76AB55B8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.cer Subject info access: rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.mft Manifest number: 02A3 Signing time: Sat 23 Aug 2025 07:47:11 +0000 Manifest this update: Sat 23 Aug 2025 07:42:11 +0000 Manifest next update: Sun 24 Aug 2025 10:22:11 +0000 Files and hashes: 1: 34352e3136342e34302e302f32342d3234203d3e20323731373531.roa (hash: PDs75Gn6YsxcIYD9QbxaMZUz+KucYOAVwaJ4s9vMak0=) 2: 323830343a383037343a3a2f33352d3335203d3e20323731373531.roa (hash: CdP3tshGoaMZ4evVosfiACDB4FzsOfn8Ouq+2WqxyBQ=) 3: D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.crl (hash: HhZSGq5NiC60LzUg/BbMG2ZNqrgqWCzQ2WrJhUHuC0w=) 4: 323830343a383037343a323030303a3a2f33352d3335203d3e20323731373531.roa (hash: ss7KlZH9UvSYKBLzJ0EnRaWIxBi0abU5jLonpqzL87s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.crl rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 10:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:20:c5:24:a9:c3:bf:48:c2:2f:2f:7d:ca:21:46:7f:76:ab:55:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA Validity Not Before: Aug 23 07:42:11 2025 GMT Not After : Aug 24 10:22:11 2025 GMT Subject: CN=56D25AED3A7D45164C5D6B04CAEDC0C1201840EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:05:96:0d:40:57:14:9d:4f:df:5c:3c:1c:14: ef:8a:d1:21:36:d4:53:43:af:6d:f1:2b:48:8d:7d: 79:cc:cf:cd:2c:9d:9c:c8:35:57:9c:7f:69:cd:fd: 63:b1:8d:c2:fd:1e:5f:6d:f1:7a:ea:3d:05:ca:37: 23:09:9e:38:4a:98:f7:fa:b2:81:05:f4:f1:78:b4: a6:7a:c6:11:cc:53:14:03:b2:93:99:66:01:6f:a5: 5d:8b:cc:c8:13:8d:f0:46:29:39:68:31:f5:71:2c: 3a:fb:ed:e6:ea:43:c0:f7:eb:9b:76:f2:aa:24:64: 27:a2:d0:c7:ec:7c:ee:ab:aa:b9:00:42:35:06:cf: 87:2a:07:db:43:71:1b:84:99:04:c6:56:98:ae:fc: 04:4d:ed:0c:0a:39:59:69:b5:eb:53:48:a7:62:dd: 2e:19:33:35:27:fa:ee:d1:51:07:67:25:11:cd:34: 77:a0:8c:11:5c:91:9b:9f:e5:f8:1d:0d:7b:1c:63: f7:20:71:04:95:38:e2:5b:5e:c7:a4:8b:da:97:14: 6d:21:78:21:58:f7:f5:0c:46:9d:88:02:55:1a:32: 3e:ad:66:4d:6c:1c:8c:27:2f:73:9b:6e:62:81:36: a7:0a:a1:d2:9a:b8:91:32:78:f6:7c:7b:f7:5f:e6: 63:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D2:5A:ED:3A:7D:45:16:4C:5D:6B:04:CA:ED:C0:C1:20:18:40:EF X509v3 Authority Key Identifier: keyid:D9:3E:5A:3D:61:92:A3:29:B1:CC:3A:94:3D:36:A0:A9:C5:CA:1E:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:dd:9c:56:8c:f4:c0:d0:2f:4b:4f:ac:88:66:a8:38:00:d9: 6a:4c:4b:74:c7:1f:6f:c3:7d:a9:35:84:ed:4c:db:b9:9f:91: 7f:0e:ca:80:24:82:6f:f4:5e:8c:1a:9a:22:6b:9a:a0:f9:c0: e8:c2:5d:47:b1:a7:ae:e6:30:20:b0:e1:b3:c8:49:49:d8:61: 42:60:4c:a1:e2:f7:ae:67:ca:c4:57:5a:44:76:17:cd:b2:41: 3c:22:65:8a:89:f0:81:d6:90:97:b1:2a:f9:4d:4d:29:03:13: 11:e1:4f:0d:6d:77:67:44:f6:29:41:1e:c7:1b:89:87:e1:c0: 3b:17:f1:1f:0c:54:5f:95:82:fc:34:e4:c8:8d:fb:c9:58:b1: 5b:34:40:93:57:9c:2a:1b:63:e9:a7:ca:74:5c:7b:58:86:e5: 02:bc:0d:e8:d1:9a:70:88:1e:47:51:28:92:bf:5c:31:5d:0a: 1d:5a:34:f4:8d:4a:f0:52:33:e7:73:37:22:f2:27:7e:a9:62: bc:cc:fd:56:c1:b5:5b:79:32:ef:c0:07:71:e6:97:dc:ae:32: ec:f3:b5:9e:6b:6c:ff:8e:3f:d3:df:35:8d:53:0e:44:31:b8: 37:a8:de:72:e2:a2:15:7e:91:ac:a5:c6:7a:89:55:84:0c:77: 53:3f:1e:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXyDFJKnDv0jCLy99yiFGf3arVbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkzRTVBM0Q2MTkyQTMyOUIxQ0MzQTk0M0QzNkEwQTlD NUNBMUVFQTAeFw0yNTA4MjMwNzQyMTFaFw0yNTA4MjQxMDIyMTFaMDMxMTAvBgNV BAMTKDU2RDI1QUVEM0E3RDQ1MTY0QzVENkIwNENBRURDMEMxMjAxODQwRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3BZYNQFcUnU/fXDwcFO+K0SE2 1FNDr23xK0iNfXnMz80snZzINVecf2nN/WOxjcL9Hl9t8XrqPQXKNyMJnjhKmPf6 soEF9PF4tKZ6xhHMUxQDspOZZgFvpV2LzMgTjfBGKTloMfVxLDr77ebqQ8D365t2 8qokZCei0MfsfO6rqrkAQjUGz4cqB9tDcRuEmQTGVpiu/ARN7QwKOVlptetTSKdi 3S4ZMzUn+u7RUQdnJRHNNHegjBFckZuf5fgdDXscY/cgcQSVOOJbXseki9qXFG0h eCFY9/UMRp2IAlUaMj6tZk1sHIwnL3ObbmKBNqcKodKauJEyePZ8e/df5mMPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVtJa7Tp9RRZMXWsEyu3AwSAYQO8wHwYDVR0j BBgwFoAU2T5aPWGSoymxzDqUPTagqcXKHuowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFozV2ZqUHVHOFpNQmQ5clZFeWV4emg1bXQyVmdVa0dTQVpoOEM1Q3E0 Z3YvMS9EOTNFNUEzRDYxOTJBMzI5QjFDQzNBOTQzRDM2QTBBOUM1Q0ExRUVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5M0U1QTNENjE5MkEzMjlC MUNDM0E5NDNEMzZBMEE5QzVDQTFFRUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFozV2ZqUHVHOFpNQmQ5clZFeWV4emg1bXQyVmdVa0dTQVpoOEM1Q3E0Z3YvMS9E OTNFNUEzRDYxOTJBMzI5QjFDQzNBOTQzRDM2QTBBOUM1Q0ExRUVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnd2cVoz0wNAvS0+siGaoOADZakxLdMcfb8N9qTWE7UzbuZ+Rfw7KgCSCb/Re jBqaImuaoPnA6MJdR7GnruYwILDhs8hJSdhhQmBMoeL3rmfKxFdaRHYXzbJBPCJl ionwgdaQl7Eq+U1NKQMTEeFPDW13Z0T2KUEexxuJh+HAOxfxHwxUX5WC/DTkyI37 yVixWzRAk1ecKhtj6afKdFx7WIblArwN6NGacIgeR1Eokr9cMV0KHVo09I1K8FIz 53M3IvInfqlivMz9VsG1W3ky78AHceaX3K4y7PO1nmts/44/0981jVMORDG4N6je cuKiFX6RrKXGeolVhAx3Uz8enQ== -----END CERTIFICATE-----Generated at Sat Aug 23 19:37:28 2025 by rpki-client