$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft File: 1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft (raw, json) Hash identifier: lxURWk+hKNAP7cOgeXREVkViZJbLX/uM80RXPIT299E= Subject key identifier: C2:65:B6:40:81:84:82:AE:23:4D:15:E6:B5:C5:A5:8E:4A:A9:E8:2B Authority key identifier: 1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22 Certificate issuer: /CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822 Certificate serial: 57CA8CDDED9FF86C0B6B4E2C57FAD842C13E1F2F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer Subject info access: rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft Manifest number: 0205 Signing time: Sat 23 Aug 2025 02:06:42 +0000 Manifest this update: Sat 23 Aug 2025 02:01:42 +0000 Manifest next update: Sun 24 Aug 2025 04:59:42 +0000 Files and hashes: 1: 323830343a3936633a383930303a3a2f34302d3430203d3e20323633303835.roa (hash: fAXn6GA+/V91XTLCQkUNO9fS3hjHpQ6K9P+U0GoI5Uw=) 2: 323830343a3936633a383830303a3a2f34302d3430203d3e20323633303835.roa (hash: m3ls13XwMMeaUU0wgwEDdQpbhiGR1d07fgmlhjZjmcs=) 3: 3138362e3233332e3231362e302f32322d3332203d3e20323633303835.roa (hash: PmbAUkUTs5Q/iqhBLo3baohkXrtjqFpyLdaX9yDXwCU=) 4: 323830343a3936633a363430303a3a2f34302d3430203d3e20323633303835.roa (hash: 52huXuVGIt+pjgM9LTH0dEdhFFUOrYBxuDBGKi6kYYk=) 5: 323830343a3936633a3a2f33322d3332203d3e20323633303835.roa (hash: yfYQFGEPfpIaz9q6MsF2wbPrq5WbyG9gA+FrZE8hhOE=) 6: 1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl (hash: FfBjLRPBtbIFnqAsLSGA777rtKOJ8sdjm3C2v3rXZ+4=) 7: 323830343a3936633a363330303a3a2f34302d3430203d3e20323633303835.roa (hash: cy03UHaQfqom7bstU3w2b656/ZgUkji+2LkvIZylFA0=) 8: 3134332e3230322e3138382e302f32322d3332203d3e20323633303835.roa (hash: qVNRJ2a+cClLtMLaZjQAdZ5dHXHXN/VmcqEwBxCBPig=) 9: 3230302e3233332e33362e302f32322d3332203d3e20323633303835.roa (hash: OaBqNKojikmJPtORza2BT6bwUtoaHkvHJGDrJ6TT0Jk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 04:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ca:8c:dd:ed:9f:f8:6c:0b:6b:4e:2c:57:fa:d8:42:c1:3e:1f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822 Validity Not Before: Aug 23 02:01:42 2025 GMT Not After : Aug 24 04:59:42 2025 GMT Subject: CN=C265B640818482AE234D15E6B5C5A58E4AA9E82B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9f:57:84:32:4a:58:e3:8a:5d:56:86:e2:e2: 65:37:8c:5a:d4:43:d2:32:1e:c1:bc:83:0c:ee:da: c4:1c:9d:19:88:59:65:99:1b:fc:30:0e:96:0b:7b: 4d:27:fa:f0:31:41:3d:15:d9:cb:af:dc:01:72:06: e3:af:1c:e4:83:ad:46:4f:23:ec:64:77:d5:88:71: b9:db:c7:57:09:80:c4:a9:0c:b3:d8:de:6a:2c:14: 34:a9:3f:8c:e2:41:df:09:7b:2f:ec:93:99:9e:9a: 86:bf:ab:3a:b0:71:31:a1:1e:69:85:98:68:05:2d: bf:12:1b:05:8b:82:dd:74:e3:a8:a6:53:c4:98:78: bd:92:08:f0:10:ab:25:1e:db:c5:96:6e:02:b2:1a: 3b:4c:ff:30:72:e3:e8:cd:d8:18:a2:90:44:91:1e: ee:c0:cd:24:b2:09:0b:af:18:89:e4:36:6d:61:3b: fb:03:87:fd:2a:8d:70:ee:c6:85:db:1a:9e:2e:31: 1e:f6:bb:cb:26:dc:da:0d:28:52:6a:8f:3d:0c:ac: 4c:61:35:40:0e:82:16:4a:42:ea:60:5a:f0:ad:7f: ab:98:5c:61:fc:0a:dc:6c:d3:1f:18:1f:df:e1:87: 6c:9d:1a:a7:62:86:49:f7:cf:03:dd:97:7e:60:3b: 04:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:65:B6:40:81:84:82:AE:23:4D:15:E6:B5:C5:A5:8E:4A:A9:E8:2B X509v3 Authority Key Identifier: keyid:1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:da:0e:23:9e:1e:25:5e:f3:ac:c8:60:9d:5b:6c:0b:d7:1a: 2e:b9:4d:f8:c2:ea:cc:b5:f5:f9:80:2e:31:5a:40:37:dd:9c: d2:3f:c5:b5:f5:be:6f:60:27:2b:f2:4d:63:bc:bb:5e:11:ff: 0c:ee:23:b3:9e:49:7e:cb:10:f3:26:cf:e1:cc:b0:5c:66:6a: d3:7c:d1:48:d2:85:5f:3c:5a:87:de:b3:60:9d:ad:63:53:e5: 39:72:bc:f0:ed:94:44:33:a7:d0:32:08:6a:ec:3e:ac:69:b9: 36:53:8a:64:93:28:90:8f:e8:d9:04:31:c4:ea:9b:18:11:96: 9e:dd:b1:2d:46:10:19:e8:20:c5:33:d1:ad:c3:15:71:00:97: 5a:28:77:27:66:68:fb:fe:ba:35:fc:63:5f:bf:d4:f6:c8:1e: 6a:d1:86:61:48:a2:86:02:af:ed:87:43:fc:9b:8e:dd:25:e7: f6:27:3c:3e:48:74:1e:b5:5e:f5:11:68:ef:69:f9:41:7e:1e: 58:8e:6e:09:67:c9:63:7b:a5:e4:1a:17:6e:e2:7e:ef:cf:14: 57:73:11:67:a5:75:e5:43:17:6a:e9:a1:43:58:c9:d5:de:3d: 67:6f:41:ff:ee:a9:a5:d6:6c:24:b2:52:3e:37:eb:59:7d:df: 96:fc:08:8c -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUV8qM3e2f+GwLa04sV/rYQsE+Hy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5RkEzN0YzOUFFMUZGNTU0MjJDRDFFQTREREMyMkM3 QkQzQTgyMjAeFw0yNTA4MjMwMjAxNDJaFw0yNTA4MjQwNDU5NDJaMDMxMTAvBgNV BAMTKEMyNjVCNjQwODE4NDgyQUUyMzREMTVFNkI1QzVBNThFNEFBOUU4MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXn1eEMkpY44pdVobi4mU3jFrU Q9IyHsG8gwzu2sQcnRmIWWWZG/wwDpYLe00n+vAxQT0V2cuv3AFyBuOvHOSDrUZP I+xkd9WIcbnbx1cJgMSpDLPY3mosFDSpP4ziQd8Jey/sk5memoa/qzqwcTGhHmmF mGgFLb8SGwWLgt1046imU8SYeL2SCPAQqyUe28WWbgKyGjtM/zBy4+jN2BiikESR Hu7AzSSyCQuvGInkNm1hO/sDh/0qjXDuxoXbGp4uMR72u8sm3NoNKFJqjz0MrExh NUAOghZKQupgWvCtf6uYXGH8Ctxs0x8YH9/hh2ydGqdihkn3zwPdl35gOwSNAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUwmW2QIGEgq4jTRXmtcWljkqp6CswHwYDVR0j BBgwFoAUGp+jfzmuH/VUIs0epN3CLHvTqCIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9mU3VkTTRFTXdLSEV3OXc1aXVwcHlhbmlFNFVFZVRlM3pBaVByR3N4TENZ LzAvMUE5RkEzN0YzOUFFMUZGNTU0MjJDRDFFQTREREMyMkM3QkQzQTgyMi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xQTlGQTM3RjM5QUUxRkY1NTQy MkNEMUVBNEREQzIyQzdCRDNBODIyLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2ZT dWRNNEVNd0tIRXc5dzVpdXBweWFuaUU0VUVlVGUzekFpUHJHc3hMQ1kvMC8xQTlG QTM3RjM5QUUxRkY1NTQyMkNEMUVBNEREQzIyQzdCRDNBODIyLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA RtoOI54eJV7zrMhgnVtsC9caLrlN+MLqzLX1+YAuMVpAN92c0j/FtfW+b2AnK/JN Y7y7XhH/DO4js55JfssQ8ybP4cywXGZq03zRSNKFXzxah96zYJ2tY1PlOXK88O2U RDOn0DIIauw+rGm5NlOKZJMokI/o2QQxxOqbGBGWnt2xLUYQGeggxTPRrcMVcQCX Wih3J2Zo+/66NfxjX7/U9sgeatGGYUiihgKv7YdD/JuO3SXn9ic8Pkh0HrVe9RFo 72n5QX4eWI5uCWfJY3ul5BoXbuJ+788UV3MRZ6V15UMXaumhQ1jJ1d49Z29B/+6p pdZsJLJSPjfrWX3flvwIjA== -----END CERTIFICATE-----Generated at Sat Aug 23 14:24:03 2025 by rpki-client