$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft File: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft (raw, json) Hash identifier: c99Ac3Jo99ppb90VWOWkfeynBbH6Q+N4fAKGEX2TbLU= Subject key identifier: 9F:F1:C2:D5:E2:7D:D8:CF:A2:08:9D:3E:70:F5:00:DD:1A:24:F9:54 Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 Certificate issuer: /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Certificate serial: 44105FF80F5DD8C615DFE8E0DDB749D27F482C70 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft Manifest number: 02A0 Signing time: Wed 20 Aug 2025 17:00:29 +0000 Manifest this update: Wed 20 Aug 2025 16:55:29 +0000 Manifest next update: Thu 21 Aug 2025 17:29:29 +0000 Files and hashes: 1: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl (hash: Cj42VJLXYwqOZ1M5Nkv9r1xHdMRu4qW8FpaOjuNOOw8=) 2: 323830343a346335633a3a2f33322d3438203d3e20323637333636.roa (hash: aBuDzalJjtN6QjODimHKIqdgYVt/ZmaeAC/ItTdnYZs=) 3: 34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa (hash: uvDWAWwHQEIwaeCaS7oSbgW6akspuwjD8Bob8V00050=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 17:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:10:5f:f8:0f:5d:d8:c6:15:df:e8:e0:dd:b7:49:d2:7f:48:2c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Validity Not Before: Aug 20 16:55:29 2025 GMT Not After : Aug 21 17:29:29 2025 GMT Subject: CN=9FF1C2D5E27DD8CFA2089D3E70F500DD1A24F954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:08:95:a4:02:70:a2:1b:ba:5f:aa:07:d2:3c: 83:60:15:fd:f1:4f:1a:d9:84:56:e7:b1:0b:54:3c: 87:10:b2:3e:38:af:e1:5e:d9:ae:c9:11:32:18:d9: 21:0c:89:cc:47:c9:8f:24:3e:ab:7e:86:24:2b:3b: 00:5d:e9:41:57:af:84:84:c6:6c:87:7e:b1:f1:b3: be:d1:8d:26:d9:9f:9b:36:5d:17:89:41:34:e8:98: 1e:4a:7a:d2:9d:ff:2c:70:40:a1:74:bd:3b:fe:60: fa:50:1a:cb:b8:bf:80:93:90:c7:43:95:ce:18:6e: de:bd:d2:02:c9:32:92:08:36:fe:0f:52:97:b3:7e: c1:d1:ee:49:13:e5:60:3b:b8:fc:12:e0:45:43:e3: a1:26:ad:ff:a8:31:87:9c:d4:e3:9a:d6:8a:34:13: 55:1b:e6:4e:16:6b:fe:c5:79:26:f1:31:85:c8:ff: 34:31:b0:3b:ab:9f:3f:1b:ac:8b:f6:cc:2a:84:fc: 64:09:64:b6:c8:6d:77:f9:6c:d8:46:c7:12:5c:bc: c7:54:a9:ac:89:72:4a:c1:d0:f2:78:6b:28:1f:9e: a4:13:15:d6:21:af:9b:a5:6a:3b:88:99:c0:9c:6b: 6c:c8:07:6d:cf:07:de:82:f4:7a:38:f4:fc:9d:4f: fa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F1:C2:D5:E2:7D:D8:CF:A2:08:9D:3E:70:F5:00:DD:1A:24:F9:54 X509v3 Authority Key Identifier: keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:75:a9:2d:d9:eb:f7:72:92:9b:68:be:10:38:94:2f:b8:14: 46:37:e0:12:b3:fe:2a:0a:ad:bf:44:16:3d:0f:8b:1b:49:98: 2f:0c:72:1b:ab:7f:10:ce:4d:f3:6f:7b:6a:6b:ff:f9:77:c2: 5a:d5:88:5a:56:d8:12:a5:f0:cb:cf:d8:1c:ae:6c:c3:28:34: c7:4c:b0:15:2c:63:c1:a3:00:1f:86:65:65:23:fd:13:73:c5: 83:a4:89:54:ce:38:be:41:50:94:a9:11:f0:1f:3c:52:20:8d: 96:0b:01:1a:84:b6:56:81:da:c3:2c:4b:ce:0a:ca:af:84:5c: 05:d7:9b:bc:6a:a5:26:dd:30:45:b8:f3:5d:04:41:55:23:e4: 46:05:45:07:54:d4:63:63:77:6a:fe:aa:c7:49:a2:22:ae:8f: 7c:24:f8:c9:a5:78:53:67:a8:f8:51:4a:b4:f3:05:d1:99:2a: 16:37:0f:9e:08:80:c9:dd:b7:7a:24:bb:d6:ab:57:78:c1:4c: 61:67:9b:e0:9f:19:f6:7c:44:16:f6:1b:0d:ce:58:7c:5d:18: 1c:8b:ec:5f:26:c3:4e:e6:d9:7e:7e:4a:e3:2d:19:9d:6c:15: 8f:4f:b6:e5:28:e8:36:eb:e9:35:32:ec:51:b4:5e:87:4a:f7: d4:cd:fc:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURBBf+A9d2MYV3+jg3bdJ0n9ILHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMEFFNjNFRDk5MTI0RjdEM0YxNEI4RkE5QzFGRjM3 ODAwNjdDMjAeFw0yNTA4MjAxNjU1MjlaFw0yNTA4MjExNzI5MjlaMDMxMTAvBgNV BAMTKDlGRjFDMkQ1RTI3REQ4Q0ZBMjA4OUQzRTcwRjUwMEREMUEyNEY5NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfCJWkAnCiG7pfqgfSPINgFf3x TxrZhFbnsQtUPIcQsj44r+Fe2a7JETIY2SEMicxHyY8kPqt+hiQrOwBd6UFXr4SE xmyHfrHxs77RjSbZn5s2XReJQTTomB5KetKd/yxwQKF0vTv+YPpQGsu4v4CTkMdD lc4Ybt690gLJMpIINv4PUpezfsHR7kkT5WA7uPwS4EVD46Emrf+oMYec1OOa1oo0 E1Ub5k4Wa/7FeSbxMYXI/zQxsDurnz8brIv2zCqE/GQJZLbIbXf5bNhGxxJcvMdU qayJckrB0PJ4aygfnqQTFdYhr5ulajuImcCca2zIB23PB96C9Ho49PydT/p1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUn/HC1eJ92M+iCJ0+cPUA3Rok+VQwHwYDVR0j BBgwFoAU9CCuY+2ZEk99PxS4+pwf83gAZ8IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhH MWYvMC9GNDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0MjBBRTYzRUQ5OTEyNEY3 RDNGMTRCOEZBOUMxRkYzNzgwMDY3QzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhHMWYvMC9G NDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGHWpLdnr93KSm2i+EDiUL7gURjfgErP+Kgqtv0QWPQ+LG0mYLwxyG6t/EM5N 8297amv/+XfCWtWIWlbYEqXwy8/YHK5swyg0x0ywFSxjwaMAH4ZlZSP9E3PFg6SJ VM44vkFQlKkR8B88UiCNlgsBGoS2VoHawyxLzgrKr4RcBdebvGqlJt0wRbjzXQRB VSPkRgVFB1TUY2N3av6qx0miIq6PfCT4yaV4U2eo+FFKtPMF0ZkqFjcPngiAyd23 eiS71qtXeMFMYWeb4J8Z9nxEFvYbDc5YfF0YHIvsXybDTubZfn5K4y0ZnWwVj0+2 5SjoNuvpNTLsUbReh0r31M38Wg== -----END CERTIFICATE-----Generated at Wed Aug 20 21:27:24 2025 by rpki-client