$ rpki-client -vvf rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft File: C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft (raw, json) Hash identifier: mVUKC93wnZ4GDQCle7gTctLlQhU68Exh35VGnDIk6YU= Subject key identifier: 9D:A4:B2:3F:ED:77:76:9F:6C:AB:DA:30:80:38:B1:D6:9B:D9:3B:2F Authority key identifier: C4:15:92:2F:5B:DC:B2:CD:CF:5C:21:42:D4:9F:80:F8:78:9A:0F:49 Certificate issuer: /CN=C415922F5BDCB2CDCF5C2142D49F80F8789A0F49 Certificate serial: 445ED665A79BFB8B50BE21B96853E0B320E1C62E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer Subject info access: rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft Manifest number: 02C2 Signing time: Thu 18 Sep 2025 13:42:19 +0000 Manifest this update: Thu 18 Sep 2025 13:37:19 +0000 Manifest next update: Fri 19 Sep 2025 16:38:19 +0000 Files and hashes: 1: C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.crl (hash: fxDkFkpFMFsNfWS2IRWvdWWmJEr4eWPVLZ97RKgT27c=) 2: 323830343a353466383a3a2f33322d3332203d3e20323638363831.roa (hash: l5tMqCIL7uBusTfXV1I+XZ+H5PbxWfeLrf5CFIwer+Q=) 3: 34352e3136352e39322e302f32322d3234203d3e20323638363831.roa (hash: xkndpxSWLgIvlVDbgR0GBVWnaeOnom0T/C1prhscmG8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.crl rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 16:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:5e:d6:65:a7:9b:fb:8b:50:be:21:b9:68:53:e0:b3:20:e1:c6:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C415922F5BDCB2CDCF5C2142D49F80F8789A0F49 Validity Not Before: Sep 18 13:37:19 2025 GMT Not After : Sep 19 16:38:19 2025 GMT Subject: CN=9DA4B23FED77769F6CABDA308038B1D69BD93B2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ea:ac:81:b3:87:d4:91:af:83:8f:a3:92:75: 9a:dc:1c:5f:ff:6c:70:f0:95:fe:df:7f:8a:5f:01: ea:e9:40:68:b3:41:af:48:2a:86:e6:8b:80:22:c5: 24:8e:84:a2:6e:03:66:68:1b:d5:c8:80:44:5c:b3: 28:21:25:de:4b:d8:ee:fa:48:4d:5a:d1:37:a3:ce: 5a:81:37:ad:2c:12:9d:f8:a2:1e:26:b9:17:77:db: c9:91:cc:3e:82:35:09:2a:e1:5e:c3:3d:38:5e:a1: ba:b1:c9:10:51:02:54:92:47:25:ef:92:dd:26:55: 32:5d:ad:fc:72:bb:6c:cc:32:9c:0d:0d:5d:59:a9: a3:50:f0:73:1a:c8:56:15:ee:e8:84:4b:65:b7:e1: 07:ca:09:7d:ac:bc:96:3d:bb:c8:29:86:78:ef:3d: 0f:09:a6:3a:78:ac:6b:08:08:e2:bb:39:92:a6:42: 1b:9f:ea:8a:df:88:b0:ab:fa:c9:54:c1:cc:6d:da: fa:3d:da:cc:32:61:69:3a:5b:65:9a:e7:34:bd:cc: 41:d9:70:3a:dc:84:9a:7a:fe:f4:05:46:cd:5c:48: aa:1f:67:8b:9c:02:18:ae:9f:a3:94:02:1a:84:e3: 9e:72:73:75:ca:b3:23:e6:6e:28:e4:a9:c8:af:85: 76:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A4:B2:3F:ED:77:76:9F:6C:AB:DA:30:80:38:B1:D6:9B:D9:3B:2F X509v3 Authority Key Identifier: keyid:C4:15:92:2F:5B:DC:B2:CD:CF:5C:21:42:D4:9F:80:F8:78:9A:0F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5a:37:fc:43:d9:2d:6d:5c:39:a4:da:d1:ce:fc:b8:01:e2: b7:d0:ec:9f:b6:9c:84:1b:c1:69:95:51:c2:10:22:a6:c3:87: e3:91:23:dd:5f:94:8f:66:24:27:b9:60:10:db:b1:fb:63:52: 45:cb:c0:32:62:ea:54:61:70:01:f7:7a:6b:e9:e6:23:61:7e: db:02:ae:cb:df:f5:5e:6b:5f:ce:98:e5:80:1f:3d:37:b1:89: ed:7e:88:fa:5b:ab:f3:0b:fe:38:44:62:29:ae:26:3e:12:2a: 38:56:ce:7b:2b:36:cb:24:2b:e4:d6:c8:ab:38:6b:c2:d3:c8: d2:25:9d:ac:f6:73:5b:a0:43:e9:4b:2b:4e:89:f4:8c:ac:ff: 21:07:58:e5:df:88:f1:46:14:8d:98:43:12:5f:46:f4:f1:e9: db:78:f2:12:b3:e0:a3:39:84:ce:e9:4f:61:99:6d:40:89:b5: 94:83:ab:1b:d8:f5:3e:ba:33:db:15:60:75:cc:34:73:d8:a8: bb:12:67:f2:ae:41:7d:3f:48:42:c3:94:99:c4:6f:5d:b2:f8: 1d:43:ae:83:85:ce:a6:33:36:17:8a:1c:d7:98:20:ca:b1:ca: e6:ba:08:a2:54:67:ae:fe:8e:09:2f:56:aa:b2:f6:b4:47:5b: 33:d6:33:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURF7WZaeb+4tQviG5aFPgsyDhxi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQxNTkyMkY1QkRDQjJDRENGNUMyMTQyRDQ5RjgwRjg3 ODlBMEY0OTAeFw0yNTA5MTgxMzM3MTlaFw0yNTA5MTkxNjM4MTlaMDMxMTAvBgNV BAMTKDlEQTRCMjNGRUQ3Nzc2OUY2Q0FCREEzMDgwMzhCMUQ2OUJEOTNCMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+6qyBs4fUka+Dj6OSdZrcHF// bHDwlf7ff4pfAerpQGizQa9IKobmi4AixSSOhKJuA2ZoG9XIgERcsyghJd5L2O76 SE1a0TejzlqBN60sEp34oh4muRd328mRzD6CNQkq4V7DPTheobqxyRBRAlSSRyXv kt0mVTJdrfxyu2zMMpwNDV1ZqaNQ8HMayFYV7uiES2W34QfKCX2svJY9u8gphnjv PQ8Jpjp4rGsICOK7OZKmQhuf6orfiLCr+slUwcxt2vo92swyYWk6W2Wa5zS9zEHZ cDrchJp6/vQFRs1cSKofZ4ucAhiun6OUAhqE455yc3XKsyPmbijkqcivhXZrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnaSyP+13dp9sq9owgDix1pvZOy8wHwYDVR0j BBgwFoAUxBWSL1vcss3PXCFC1J+A+HiaD0kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0NNc1lRRU00UVF1VGNBS2tBU3JlVEd1VHhMemJ4ZmtjWm9hUmd2RkFU SGMvMi9DNDE1OTIyRjVCRENCMkNEQ0Y1QzIxNDJENDlGODBGODc4OUEwRjQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0MTU5MjJGNUJEQ0IyQ0RD RjVDMjE0MkQ0OUY4MEY4Nzg5QTBGNDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0NNc1lRRU00UVF1VGNBS2tBU3JlVEd1VHhMemJ4ZmtjWm9hUmd2RkFUSGMvMi9D NDE1OTIyRjVCRENCMkNEQ0Y1QzIxNDJENDlGODBGODc4OUEwRjQ5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS1o3/EPZLW1cOaTa0c78uAHit9Dsn7achBvBaZVRwhAipsOH45Ej3V+Uj2Yk J7lgENux+2NSRcvAMmLqVGFwAfd6a+nmI2F+2wKuy9/1XmtfzpjlgB89N7GJ7X6I +lur8wv+OERiKa4mPhIqOFbOeys2yyQr5NbIqzhrwtPI0iWdrPZzW6BD6UsrTon0 jKz/IQdY5d+I8UYUjZhDEl9G9PHp23jyErPgozmEzulPYZltQIm1lIOrG9j1Proz 2xVgdcw0c9iouxJn8q5BfT9IQsOUmcRvXbL4HUOug4XOpjM2F4oc15ggyrHK5roI olRnrv6OCS9WqrL2tEdbM9YzIA== -----END CERTIFICATE-----Generated at Thu Sep 18 19:06:21 2025 by rpki-client