$ rpki-client -vvf rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft File: D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft (raw, json) Hash identifier: fqg7dcA3AxpqgmoGLgKtUUVnomyR6h/pp5sX0KHFiR0= Subject key identifier: 36:71:72:AA:E4:45:7C:43:FE:77:87:44:50:36:5D:02:B4:9D:4F:ED Authority key identifier: D1:40:32:9A:9C:2C:7F:8E:F6:7D:07:AE:69:78:FC:F2:C2:57:CB:DC Certificate issuer: /CN=D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC Certificate serial: 23D7323B8A0A95C0FC257AFAAD54D96DFE24AE77 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer Subject info access: rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft Manifest number: 22 Signing time: Thu 18 Sep 2025 05:02:17 +0000 Manifest this update: Thu 18 Sep 2025 04:57:17 +0000 Manifest next update: Fri 19 Sep 2025 08:16:17 +0000 Files and hashes: 1: 3133382e39392e38302e302f32332d3332203d3e20323731353936.roa (hash: HLRC3ILU1/Q0mbHQEP1oVDDagjnMAzt8TFJhqxGdn2k=) 2: D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl (hash: TLGGsDYQYIvF1Pnc4Pu2Y7YnhX1JqVY9IF/mCzvOwzY=) 3: 3139302e392e3132362e302f32342d3332203d3e20323731353936.roa (hash: uGWB+dLXvJyRVohmeQH5EDKbrZFb7329DIF62AsG+G4=) 4: 323830343a376530303a3a2f33322d313238203d3e20323731353936.roa (hash: atkpFiuFx9gI+NQUYhUM8BLIYtiVv1QBW1r3n1UGNww=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 08:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d7:32:3b:8a:0a:95:c0:fc:25:7a:fa:ad:54:d9:6d:fe:24:ae:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC Validity Not Before: Sep 18 04:57:17 2025 GMT Not After : Sep 19 08:16:17 2025 GMT Subject: CN=367172AAE4457C43FE77874450365D02B49D4FED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:13:54:53:5d:f0:1b:4c:4c:1d:fe:29:cd:1c: b6:87:c0:10:4c:a9:8e:83:bc:95:b3:35:5d:af:8c: 86:70:6e:d8:d9:48:d5:39:90:d6:ad:90:05:49:aa: f1:a7:6d:ef:30:7d:25:c3:fa:63:81:55:8a:a6:bb: 74:3a:b8:4c:d0:54:f9:af:35:f3:bc:a8:9a:22:d6: db:83:8b:9b:c5:04:eb:2a:b3:16:46:e4:e6:a5:c7: 15:a1:be:b2:e9:25:bf:25:43:6b:de:0f:da:83:72: fe:5c:a8:06:f9:38:74:30:cd:1c:07:ed:c2:2a:4b: b6:57:93:67:19:ab:1e:73:e0:0e:56:44:98:f1:2c: e6:e1:13:13:61:86:eb:57:5d:5d:02:e5:4a:0e:e8: c9:94:db:af:f8:99:86:69:28:e7:1c:9a:55:b3:9b: 32:5e:b4:c1:40:01:c1:fa:68:81:a1:bb:5e:02:b3: a8:8e:51:88:22:32:0e:85:b7:d4:bb:b4:97:80:d8: 20:ee:7c:31:1c:5e:c7:ad:64:7a:b6:71:82:98:20: 13:64:0e:8f:2b:53:99:51:51:ee:ca:ff:88:1d:c0: 54:e2:e0:ae:02:41:80:8c:7d:50:43:e8:a0:bc:dc: d4:0e:a8:ba:1b:b0:98:c1:97:2b:81:cb:39:2f:dc: c8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:71:72:AA:E4:45:7C:43:FE:77:87:44:50:36:5D:02:B4:9D:4F:ED X509v3 Authority Key Identifier: keyid:D1:40:32:9A:9C:2C:7F:8E:F6:7D:07:AE:69:78:FC:F2:C2:57:CB:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:69:d8:0a:62:6e:1c:a1:a0:8c:31:6e:b1:c9:78:4b:8d:8f: 75:90:ec:28:68:90:da:1c:41:fd:8e:3e:25:f7:fb:d7:c0:74: b9:73:76:7d:99:82:13:86:56:78:b4:3e:eb:a4:d3:31:44:3e: e1:27:db:73:06:12:25:01:f0:5d:29:58:7d:13:3a:69:5b:e9: 1b:4e:43:c6:5c:93:5a:15:90:1d:a3:81:88:ca:34:37:7f:ce: 0b:a6:ff:2c:51:10:ac:b8:4d:52:b2:18:8e:3d:99:97:9b:3e: 11:c7:24:b2:cf:1c:28:81:cd:b3:64:35:6c:5c:70:92:b9:d4: 08:8d:af:cc:7a:f4:9d:e4:1f:7b:f8:49:78:dc:bb:72:e0:78: 3d:84:21:f9:e2:57:59:93:dd:cb:ee:29:bf:37:9a:c9:fd:4f: 2e:90:7d:95:ea:bc:de:59:89:be:2b:d0:68:3a:13:c9:81:f2: 7f:52:ee:01:15:43:cc:ff:11:e7:71:a7:e8:3c:00:aa:3c:d4: 7d:a1:d5:b8:a7:19:b9:bf:31:0c:af:39:bb:72:da:b7:ce:a3: 05:3a:ff:71:5b:9b:55:5d:5e:b2:14:ae:d9:67:f0:37:be:8e: 23:da:5e:b8:4d:54:dd:1e:55:d1:25:c2:f0:fe:7d:8e:94:35: 0d:2a:fe:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI9cyO4oKlcD8JXr6rVTZbf4krncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE0MDMyOUE5QzJDN0Y4RUY2N0QwN0FFNjk3OEZDRjJD MjU3Q0JEQzAeFw0yNTA5MTgwNDU3MTdaFw0yNTA5MTkwODE2MTdaMDMxMTAvBgNV BAMTKDM2NzE3MkFBRTQ0NTdDNDNGRTc3ODc0NDUwMzY1RDAyQjQ5RDRGRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnE1RTXfAbTEwd/inNHLaHwBBM qY6DvJWzNV2vjIZwbtjZSNU5kNatkAVJqvGnbe8wfSXD+mOBVYqmu3Q6uEzQVPmv NfO8qJoi1tuDi5vFBOsqsxZG5OalxxWhvrLpJb8lQ2veD9qDcv5cqAb5OHQwzRwH 7cIqS7ZXk2cZqx5z4A5WRJjxLObhExNhhutXXV0C5UoO6MmU26/4mYZpKOccmlWz mzJetMFAAcH6aIGhu14Cs6iOUYgiMg6Ft9S7tJeA2CDufDEcXsetZHq2cYKYIBNk Do8rU5lRUe7K/4gdwFTi4K4CQYCMfVBD6KC83NQOqLobsJjBlyuByzkv3MiRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNnFyquRFfEP+d4dEUDZdArSdT+0wHwYDVR0j BBgwFoAU0UAympwsf472fQeuaXj88sJXy9wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0hxcXlFSGtvV2ptVzhwUGJwVUh1ZWVTWm53ZGRLaUVRRUhUbXlaMWVF SkwvMC9EMTQwMzI5QTlDMkM3RjhFRjY3RDA3QUU2OTc4RkNGMkMyNTdDQkRDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxNDAzMjlBOUMyQzdGOEVG NjdEMDdBRTY5NzhGQ0YyQzI1N0NCREMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0hxcXlFSGtvV2ptVzhwUGJwVUh1ZWVTWm53ZGRLaUVRRUhUbXlaMWVFSkwvMC9E MTQwMzI5QTlDMkM3RjhFRjY3RDA3QUU2OTc4RkNGMkMyNTdDQkRDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnmnYCmJuHKGgjDFuscl4S42PdZDsKGiQ2hxB/Y4+Jff718B0uXN2fZmCE4ZW eLQ+66TTMUQ+4SfbcwYSJQHwXSlYfRM6aVvpG05DxlyTWhWQHaOBiMo0N3/OC6b/ LFEQrLhNUrIYjj2Zl5s+Ecckss8cKIHNs2Q1bFxwkrnUCI2vzHr0neQfe/hJeNy7 cuB4PYQh+eJXWZPdy+4pvzeayf1PLpB9leq83lmJvivQaDoTyYHyf1LuARVDzP8R 53Gn6DwAqjzUfaHVuKcZub8xDK85u3Lat86jBTr/cVubVV1eshSu2WfwN76OI9pe uE1U3R5V0SXC8P59jpQ1DSr+/Q== -----END CERTIFICATE-----Generated at Thu Sep 18 13:43:31 2025 by rpki-client