$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft File: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft (raw, json) Hash identifier: yAKnkz9BWv5a+pcxsPYNdQe3I5IvJ67cK064oE0fJMk= Subject key identifier: 37:BF:29:3D:DE:DA:C8:A3:EA:FE:DB:4B:3D:BC:89:42:12:91:F1:17 Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 Certificate issuer: /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Certificate serial: 1CE2C781EDB1279D1BF83B0B2D842EBA062BC2A8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject info access: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft Manifest number: 0167 Signing time: Thu 18 Sep 2025 08:13:57 +0000 Manifest this update: Thu 18 Sep 2025 08:08:57 +0000 Manifest next update: Fri 19 Sep 2025 10:33:57 +0000 Files and hashes: 1: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (hash: uIh+Oz5wiODIMg7enOUna4NRPwYVYruwibBcWxdlN6k=) 2: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl (hash: +3rM4PTJDQB4H+kUEtbrr23X+8O2oq9ziJCwGy4qRzg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 10:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e2:c7:81:ed:b1:27:9d:1b:f8:3b:0b:2d:84:2e:ba:06:2b:c2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Validity Not Before: Sep 18 08:08:57 2025 GMT Not After : Sep 19 10:33:57 2025 GMT Subject: CN=37BF293DDEDAC8A3EAFEDB4B3DBC89421291F117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:83:35:2e:5f:a1:6f:40:88:34:88:ae:3f:e1: 26:12:1a:e8:35:dc:8d:0c:25:60:d0:54:a3:f4:c5: 19:0d:70:c7:27:99:9f:19:fe:a3:6b:40:81:0d:e8: 44:38:f1:3e:d0:24:d1:d5:53:b0:f0:80:4b:74:ff: 77:95:00:e7:e2:2b:43:72:1c:13:1f:a6:a6:09:6a: 4a:f8:6a:31:8d:bc:51:60:d3:ed:ed:06:7f:57:30: 25:4d:93:fa:27:87:0e:b9:98:9b:d4:92:c8:e4:65: f9:f6:7f:39:55:23:2d:03:5f:cb:88:36:2f:ae:72: 8d:f1:8b:c5:38:54:38:9c:1a:80:c7:96:08:91:f8: 77:f5:cd:d8:17:98:e9:4e:d0:93:5a:2d:9b:8a:98: f5:79:ea:96:bb:a8:64:97:83:77:a3:0c:54:42:ed: 8a:ee:7a:2f:44:84:35:f3:4b:41:cf:c5:98:b2:78: 2e:25:61:69:46:f6:68:07:de:1f:b2:c7:7d:0c:56: b4:b8:cc:01:c0:a5:90:e2:20:82:fe:c1:31:b9:6d: 0a:63:17:d8:c3:ad:c0:04:09:87:74:09:e1:7c:d4: 97:14:77:26:44:72:65:4f:4b:a0:a7:9d:8c:92:79: 89:9e:fe:a1:be:2d:c4:04:5b:f5:8f:3f:1a:63:55: 0d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BF:29:3D:DE:DA:C8:A3:EA:FE:DB:4B:3D:BC:89:42:12:91:F1:17 X509v3 Authority Key Identifier: keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d5:05:67:f3:81:38:58:6f:84:6c:39:49:69:c2:c7:7b:74: 38:e6:1f:15:76:71:a6:3d:db:55:f8:54:1b:ef:77:66:65:1a: 2f:29:91:c0:5d:76:96:fd:45:c8:6f:07:cb:72:27:19:e6:9c: 97:86:29:b8:a6:52:b4:91:81:c5:ee:48:1d:28:55:8c:99:87: 8b:e8:d7:c8:2e:8a:bb:27:cd:3e:98:d2:38:d6:b2:91:a3:4e: 8a:20:81:7e:12:04:b7:2b:ac:5b:c0:f1:4b:78:88:7f:b0:f4: 21:c7:82:ab:82:81:a5:d1:0c:c1:05:11:44:f4:68:a8:bc:c6: fd:38:5e:da:c7:7d:5e:8f:ff:87:ba:be:1c:8c:59:16:01:05: 6a:50:bf:f5:5d:d1:32:e0:57:e8:d9:38:7f:b0:28:f0:cc:4b: e9:0e:38:4a:6b:a8:ee:5e:78:31:04:31:fb:de:67:5c:e5:54: d5:8c:a5:d7:6e:cb:6c:8b:02:52:4f:91:c1:cb:70:25:91:d6: 91:38:5c:23:c5:4b:1f:85:5f:c4:7b:2a:0d:4a:68:ff:b4:da: d0:f0:e1:7d:7e:e6:38:cf:51:fb:76:3d:6d:fe:29:5d:d5:12: 99:06:5d:1e:2b:c4:37:38:72:ad:03:77:ee:a3:10:75:22:86: 3a:17:b6:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHOLHge2xJ50b+DsLLYQuugYrwqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM2RkNCMzFGMkMzM0Y4RTU3MEQzQ0EwMjc1NUJDQzUx QjIzRUEwMTAeFw0yNTA5MTgwODA4NTdaFw0yNTA5MTkxMDMzNTdaMDMxMTAvBgNV BAMTKDM3QkYyOTNEREVEQUM4QTNFQUZFREI0QjNEQkM4OTQyMTI5MUYxMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gzUuX6FvQIg0iK4/4SYSGug1 3I0MJWDQVKP0xRkNcMcnmZ8Z/qNrQIEN6EQ48T7QJNHVU7DwgEt0/3eVAOfiK0Ny HBMfpqYJakr4ajGNvFFg0+3tBn9XMCVNk/onhw65mJvUksjkZfn2fzlVIy0DX8uI Ni+uco3xi8U4VDicGoDHlgiR+Hf1zdgXmOlO0JNaLZuKmPV56pa7qGSXg3ejDFRC 7Yruei9EhDXzS0HPxZiyeC4lYWlG9mgH3h+yx30MVrS4zAHApZDiIIL+wTG5bQpj F9jDrcAECYd0CeF81JcUdyZEcmVPS6CnnYySeYme/qG+LcQEW/WPPxpjVQ35AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUN78pPd7ayKPq/ttLPbyJQhKR8RcwHwYDVR0j BBgwFoAUQ2/LMfLDP45XDTygJ1W8xRsj6gEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJI NGUvMC80MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNkZDQjMxRjJDMzNGOEU1 NzBEM0NBMDI3NTVCQ0M1MUIyM0VBMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJINGUvMC80 MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVtUFZ/OBOFhvhGw5SWnCx3t0OOYfFXZxpj3bVfhUG+93ZmUaLymRwF12lv1F yG8Hy3InGeacl4YpuKZStJGBxe5IHShVjJmHi+jXyC6KuyfNPpjSONaykaNOiiCB fhIEtyusW8DxS3iIf7D0IceCq4KBpdEMwQURRPRoqLzG/The2sd9Xo//h7q+HIxZ FgEFalC/9V3RMuBX6Nk4f7Ao8MxL6Q44Smuo7l54MQQx+95nXOVU1Yyl127LbIsC Uk+RwctwJZHWkThcI8VLH4VfxHsqDUpo/7Ta0PDhfX7mOM9R+3Y9bf4pXdUSmQZd HivENzhyrQN37qMQdSKGOhe28g== -----END CERTIFICATE-----Generated at Thu Sep 18 16:57:28 2025 by rpki-client