$ rpki-client -vvf rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.mft File: 883F9EED8D520E746FE5A46BDE2594C335F2E812.mft (raw, json) Hash identifier: Hz7TpVuMdghBJE9JIkEU3UZJBwAG8lCu0O2rZfVjrBQ= Subject key identifier: D5:B6:D7:A1:03:09:E2:12:E0:7C:CE:83:D5:30:8B:28:83:DB:DA:78 Authority key identifier: 88:3F:9E:ED:8D:52:0E:74:6F:E5:A4:6B:DE:25:94:C3:35:F2:E8:12 Certificate issuer: /CN=883F9EED8D520E746FE5A46BDE2594C335F2E812 Certificate serial: 1C208114E0D1EEE67F861275DB49EC5333AF3927 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/883F9EED8D520E746FE5A46BDE2594C335F2E812.cer Subject info access: rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.mft Manifest number: E6 Signing time: Thu 18 Sep 2025 10:50:02 +0000 Manifest this update: Thu 18 Sep 2025 10:45:02 +0000 Manifest next update: Fri 19 Sep 2025 14:08:02 +0000 Files and hashes: 1: 323830343a3936343a3a2f33322d3634203d3e20323633303830.roa (hash: B0HrhdJpYTo2VYADD+2Ul9NZVStdBga+S+kuIKD5omA=) 2: 3138372e33332e34382e302f32312d3234203d3e20323633303830.roa (hash: mYE0cTsJ4b+O16hTXdYIKlsMEZPCXMwpI8c/O4aS7gI=) 3: 883F9EED8D520E746FE5A46BDE2594C335F2E812.crl (hash: 0lms5y/BfppLj2zcOr3NplQYFgVD97WxP0IeIPB7cOU=) 4: 3138392e3230312e3230382e302f32302d3234203d3e20323633303830.roa (hash: Nls0y4Zm2DiLu/Zj4q9kms0N+iZxmgUscd9aftaApbU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.crl rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/883F9EED8D520E746FE5A46BDE2594C335F2E812.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 14:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:20:81:14:e0:d1:ee:e6:7f:86:12:75:db:49:ec:53:33:af:39:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883F9EED8D520E746FE5A46BDE2594C335F2E812 Validity Not Before: Sep 18 10:45:02 2025 GMT Not After : Sep 19 14:08:02 2025 GMT Subject: CN=D5B6D7A10309E212E07CCE83D5308B2883DBDA78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:27:03:0e:86:aa:fc:af:a1:08:d3:c2:91:50: df:2c:e2:e1:00:e7:8b:fe:4b:b2:39:4f:9e:26:c0: c3:e9:ba:93:4e:51:cc:71:e3:f3:75:36:ad:ff:ac: b1:d5:d2:fe:4c:94:6a:8c:4a:c8:3d:9e:3b:64:d9: 03:d3:6d:fc:2d:10:b7:76:77:d2:85:85:09:eb:f5: 09:25:a8:f4:39:f9:67:af:94:4e:90:c7:be:ce:57: 78:bd:3f:05:3b:92:12:53:c2:fc:2b:f9:79:52:dc: fd:5e:41:6b:ae:0f:2f:d8:e3:71:2c:46:d4:58:f3: f1:80:49:90:da:53:8e:b5:7c:b5:94:1a:a5:75:5e: 3d:91:3d:53:5a:11:85:48:aa:40:4e:da:c0:f4:e3: 05:77:79:73:c9:43:e8:aa:30:25:9b:9b:57:0a:82: 4b:9a:17:ff:3a:ac:87:8f:e9:9d:15:47:51:23:98: 40:73:8c:00:95:a6:c2:0d:d0:7e:72:5c:c7:4d:02: 4a:8f:27:60:ee:b1:cc:84:9d:fc:ff:68:3f:ed:43: a7:19:8f:fc:91:9d:09:dd:49:79:fd:15:cd:3f:a5: d7:fc:21:c9:ce:67:fd:73:88:a8:ee:ad:da:14:c5: a7:c1:d4:9a:f5:c1:09:21:c9:d0:71:09:ac:bc:04: 98:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B6:D7:A1:03:09:E2:12:E0:7C:CE:83:D5:30:8B:28:83:DB:DA:78 X509v3 Authority Key Identifier: keyid:88:3F:9E:ED:8D:52:0E:74:6F:E5:A4:6B:DE:25:94:C3:35:F2:E8:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/883F9EED8D520E746FE5A46BDE2594C335F2E812.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:f0:51:f3:e3:7f:9a:25:01:ae:fb:95:2e:7e:05:89:0f:1b: 34:af:27:ac:fb:55:bc:65:a0:02:d5:5e:19:0b:24:fd:6d:64: a8:7f:29:4d:06:77:4a:19:e7:28:38:34:da:98:a3:5b:ba:42: fc:db:5b:46:7f:b1:36:f3:1c:b0:b7:85:63:3b:89:41:4d:c6: 6a:6b:18:ac:57:25:8b:f3:f1:15:58:f2:11:fb:72:1e:db:10: ad:47:c7:a2:e0:2d:82:41:0c:ed:4b:bb:44:d8:9c:6f:5b:f2: 61:a1:1c:a8:7e:97:bc:b2:97:c8:77:df:bd:39:b3:4f:80:80: c1:b4:65:d3:9f:62:45:7b:78:f8:4d:80:73:cf:e7:fd:c2:7b: 29:57:36:2d:a5:fd:6b:a4:fd:7c:79:c0:09:12:a4:50:dd:9c: a8:5b:3f:19:c2:f3:a9:41:d1:32:db:92:be:33:0d:cb:17:7c: 39:76:fe:df:3a:c9:e8:87:b5:07:c8:11:ed:c0:05:6a:5a:47: 06:c3:17:98:2a:fa:63:6e:db:22:00:dd:7f:d3:e6:33:9e:ba: 61:16:f4:6b:92:39:33:b3:d9:01:6d:10:d2:0e:73:e1:eb:3a: 61:e0:e2:3d:ef:87:3b:a5:36:cb:ef:c1:54:95:9b:d2:f4:25: 71:eb:f5:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHCCBFODR7uZ/hhJ120nsUzOvOScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgzRjlFRUQ4RDUyMEU3NDZGRTVBNDZCREUyNTk0QzMz NUYyRTgxMjAeFw0yNTA5MTgxMDQ1MDJaFw0yNTA5MTkxNDA4MDJaMDMxMTAvBgNV BAMTKEQ1QjZEN0ExMDMwOUUyMTJFMDdDQ0U4M0Q1MzA4QjI4ODNEQkRBNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLJwMOhqr8r6EI08KRUN8s4uEA 54v+S7I5T54mwMPpupNOUcxx4/N1Nq3/rLHV0v5MlGqMSsg9njtk2QPTbfwtELd2 d9KFhQnr9QklqPQ5+WevlE6Qx77OV3i9PwU7khJTwvwr+XlS3P1eQWuuDy/Y43Es RtRY8/GASZDaU461fLWUGqV1Xj2RPVNaEYVIqkBO2sD04wV3eXPJQ+iqMCWbm1cK gkuaF/86rIeP6Z0VR1EjmEBzjACVpsIN0H5yXMdNAkqPJ2DuscyEnfz/aD/tQ6cZ j/yRnQndSXn9Fc0/pdf8IcnOZ/1ziKjurdoUxafB1Jr1wQkhydBxCay8BJh5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1bbXoQMJ4hLgfM6D1TCLKIPb2ngwHwYDVR0j BBgwFoAUiD+e7Y1SDnRv5aRr3iWUwzXy6BIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkFCN1kzVGdTQk5EMVlmTUdDSmFMbUc1UmR3NnV6RWh3bW9Ca05LdnJR VFIvMC84ODNGOUVFRDhENTIwRTc0NkZFNUE0NkJERTI1OTRDMzM1RjJFODEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4M0Y5RUVEOEQ1MjBFNzQ2 RkU1QTQ2QkRFMjU5NEMzMzVGMkU4MTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkFCN1kzVGdTQk5EMVlmTUdDSmFMbUc1UmR3NnV6RWh3bW9Ca05LdnJRVFIvMC84 ODNGOUVFRDhENTIwRTc0NkZFNUE0NkJERTI1OTRDMzM1RjJFODEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKPBR8+N/miUBrvuVLn4FiQ8bNK8nrPtVvGWgAtVeGQsk/W1kqH8pTQZ3Shnn KDg02pijW7pC/NtbRn+xNvMcsLeFYzuJQU3GamsYrFcli/PxFVjyEftyHtsQrUfH ouAtgkEM7Uu7RNicb1vyYaEcqH6XvLKXyHffvTmzT4CAwbRl059iRXt4+E2Ac8/n /cJ7KVc2LaX9a6T9fHnACRKkUN2cqFs/GcLzqUHRMtuSvjMNyxd8OXb+3zrJ6Ie1 B8gR7cAFalpHBsMXmCr6Y27bIgDdf9PmM566YRb0a5I5M7PZAW0Q0g5z4es6YeDi Pe+HO6U2y+/BVJWb0vQlcev1Zg== -----END CERTIFICATE-----Generated at Thu Sep 18 13:42:53 2025 by rpki-client