$ rpki-client -vvf rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft File: D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft (raw, json) Hash identifier: MRbcMzq8GYLGoO7TznNx+BSljGazZuG8pv61N0wBgqM= Subject key identifier: C5:9C:19:8E:C8:89:30:3E:39:F0:27:22:4F:AD:88:4F:97:CE:CD:73 Authority key identifier: D5:4D:28:DD:11:35:EB:4E:A6:84:16:B4:2C:FD:19:DF:50:29:29:D2 Certificate issuer: /CN=D54D28DD1135EB4EA68416B42CFD19DF502929D2 Certificate serial: 53E87F01AF24CABC3C19496D1988E87D823E1250 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer Subject info access: rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft Manifest number: 020A Signing time: Sat 23 Aug 2025 09:44:16 +0000 Manifest this update: Sat 23 Aug 2025 09:39:16 +0000 Manifest next update: Sun 24 Aug 2025 12:46:16 +0000 Files and hashes: 1: 34352e3138392e36382e302f32322d3332203d3e20323639353732.roa (hash: ngoWma8TsSEzSWbq6GfRF4ba2k9dPiM3jeI36G1Dcfo=) 2: D54D28DD1135EB4EA68416B42CFD19DF502929D2.crl (hash: mysmdiwEYVGOXl9e68ZGqyjadaVXegv7jU/AHrN8tpE=) 3: 323830343a363661303a3a2f33322d313238203d3e20323639353732.roa (hash: JtRy4cmBKBuI/QiHNBhdDeJlqIh4qsk+0GGS5pqApHw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.crl rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 12:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e8:7f:01:af:24:ca:bc:3c:19:49:6d:19:88:e8:7d:82:3e:12:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D28DD1135EB4EA68416B42CFD19DF502929D2 Validity Not Before: Aug 23 09:39:16 2025 GMT Not After : Aug 24 12:46:16 2025 GMT Subject: CN=C59C198EC889303E39F027224FAD884F97CECD73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:95:cb:f4:bb:46:a0:bb:bf:48:e1:77:22:2a: b2:ff:34:bc:64:4b:2d:4c:37:48:8d:8a:75:53:98: 07:1e:d1:ba:d6:28:bc:9b:3b:4f:51:5f:3b:6d:ac: 99:c4:58:b6:2f:d5:6c:29:37:bd:cd:72:32:12:54: 17:a5:1c:b4:1c:c2:4d:6a:d1:13:7f:c7:3e:98:ab: 5d:31:eb:a2:cc:cb:a4:eb:19:db:44:12:50:66:be: e7:a4:73:59:86:49:88:08:cf:f2:16:79:0e:f7:a0: 70:4b:71:fa:dc:43:87:50:b8:df:3a:09:87:38:8f: 65:2e:4c:f7:23:e7:ea:ef:ae:d2:6a:98:4d:4d:b2: e1:06:79:e5:89:b4:68:af:7a:92:51:45:13:f8:d6: a7:8c:e9:21:58:21:4e:19:67:21:c3:a2:73:8b:95: 5e:4e:20:0f:3f:ae:08:3e:76:de:64:42:9a:08:ac: f8:e4:ec:23:8e:d6:f6:79:b6:fe:29:04:df:68:aa: f7:9c:d5:d5:f1:1f:0a:dd:d7:7d:e4:79:8d:dd:58: 6c:67:e2:76:86:7e:6a:76:d6:5c:9a:bd:4b:95:7b: 2a:bb:da:46:a2:d6:c8:8c:4c:5f:21:cf:0c:d8:dc: d4:5f:b8:c2:34:33:71:50:23:de:01:a1:04:73:3a: 92:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9C:19:8E:C8:89:30:3E:39:F0:27:22:4F:AD:88:4F:97:CE:CD:73 X509v3 Authority Key Identifier: keyid:D5:4D:28:DD:11:35:EB:4E:A6:84:16:B4:2C:FD:19:DF:50:29:29:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d1:fc:72:d8:67:a1:f0:ce:82:d5:25:55:1e:d2:09:42:d3: 35:c7:d7:2d:d7:7d:7b:21:d2:4c:0d:a7:ed:cb:21:4a:df:f5: c4:17:04:89:30:71:65:c6:8c:18:ff:71:3d:ea:ad:dc:ee:a4: cb:c8:3d:e3:06:e9:61:de:58:bc:64:15:8e:63:37:2d:c0:6d: ce:a9:51:d7:d4:19:e2:c4:60:60:e5:3c:52:cf:e0:87:56:d3: 09:87:b0:d1:9d:77:d1:89:48:d1:3f:7d:a1:ee:c7:84:39:e3: 10:4e:90:8a:50:b7:55:81:d0:c3:a0:6b:49:9a:99:2b:74:84: 1e:43:0c:7f:72:2c:af:f1:fd:b6:da:19:93:e9:7a:3f:de:39: 6f:5b:43:ec:f5:7c:46:1e:9a:8e:e8:b5:bd:34:19:55:45:40: c3:cb:24:83:d1:b9:2d:a2:ac:10:39:9b:a5:21:c5:33:a6:80: f1:a0:42:39:de:d2:d3:7a:03:99:dc:a3:26:94:86:67:93:b0: 67:98:84:a9:65:34:2a:2a:87:44:a2:62:f5:2a:d2:57:bc:f8: 6c:a6:ef:8a:36:bf:77:58:33:1c:0e:d3:c5:fa:0f:2f:be:3a: ed:72:4a:c0:74:50:47:7e:7c:f3:95:5b:d0:fb:10:e2:a2:48: d5:9a:00:3a -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUU+h/Aa8kyrw8GUltGYjofYI+ElAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDI4REQxMTM1RUI0RUE2ODQxNkI0MkNGRDE5REY1 MDI5MjlEMjAeFw0yNTA4MjMwOTM5MTZaFw0yNTA4MjQxMjQ2MTZaMDMxMTAvBgNV BAMTKEM1OUMxOThFQzg4OTMwM0UzOUYwMjcyMjRGQUQ4ODRGOTdDRUNENzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKlcv0u0agu79I4XciKrL/NLxk Sy1MN0iNinVTmAce0brWKLybO09RXzttrJnEWLYv1WwpN73NcjISVBelHLQcwk1q 0RN/xz6Yq10x66LMy6TrGdtEElBmvuekc1mGSYgIz/IWeQ73oHBLcfrcQ4dQuN86 CYc4j2UuTPcj5+rvrtJqmE1NsuEGeeWJtGivepJRRRP41qeM6SFYIU4ZZyHDonOL lV5OIA8/rgg+dt5kQpoIrPjk7COO1vZ5tv4pBN9oqvec1dXxHwrd133keY3dWGxn 4naGfmp21lyavUuVeyq72kai1siMTF8hzwzY3NRfuMI0M3FQI94BoQRzOpLtAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUxZwZjsiJMD458CciT62IT5fOzXMwHwYDVR0j BBgwFoAU1U0o3RE1606mhBa0LP0Z31ApKdIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9jYjdoR3hjYzdBalpQQWpFTXdiY1RXMlpWMUdoc3JMYnY2aW5XQ3AySlNu LzAvRDU0RDI4REQxMTM1RUI0RUE2ODQxNkI0MkNGRDE5REY1MDI5MjlEMi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ENTREMjhERDExMzVFQjRFQTY4 NDE2QjQyQ0ZEMTlERjUwMjkyOUQyLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2Ni N2hHeGNjN0FqWlBBakVNd2JjVFcyWlYxR2hzckxidjZpbldDcDJKU24vMC9ENTRE MjhERDExMzVFQjRFQTY4NDE2QjQyQ0ZEMTlERjUwMjkyOUQyLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA G9H8cthnofDOgtUlVR7SCULTNcfXLdd9eyHSTA2n7cshSt/1xBcEiTBxZcaMGP9x Peqt3O6ky8g94wbpYd5YvGQVjmM3LcBtzqlR19QZ4sRgYOU8Us/gh1bTCYew0Z13 0YlI0T99oe7HhDnjEE6QilC3VYHQw6BrSZqZK3SEHkMMf3Isr/H9ttoZk+l6P945 b1tD7PV8Rh6ajui1vTQZVUVAw8skg9G5LaKsEDmbpSHFM6aA8aBCOd7S03oDmdyj JpSGZ5OwZ5iEqWU0KiqHRKJi9SrSV7z4bKbvija/d1gzHA7TxfoPL7467XJKwHRQ R35885Vb0PsQ4qJI1ZoAOg== -----END CERTIFICATE-----Generated at Sat Aug 23 16:43:39 2025 by rpki-client