$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft File: F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft (raw, json) Hash identifier: nn6+WvAM2wf/xdfx73LDeWTCg53zCYt2lUw/XOzgzQ8= Subject key identifier: 61:9E:87:03:42:98:64:01:BE:FB:5F:86:A7:5C:86:34:BA:78:AF:54 Authority key identifier: F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 Certificate issuer: /CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5 Certificate serial: 1514A725DF0741F59D8B68C567A810621493C9F2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer Subject info access: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft Manifest number: 02C9 Signing time: Thu 18 Sep 2025 00:49:18 +0000 Manifest this update: Thu 18 Sep 2025 00:44:18 +0000 Manifest next update: Fri 19 Sep 2025 01:12:18 +0000 Files and hashes: 1: 323830313a62363a3a2f33322d3438203d3e20323633303833.roa (hash: /sq5AM8I6YaMflMxl5q4xXK1dCuBrTD/NmShXyjbG5M=) 2: 3137392e3130362e3139322e302f31382d3234203d3e20323633303833.roa (hash: fFcuOyny+lMAM8e0QThYzGDXjn34h9O3teYEKFUfcPs=) 3: F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl (hash: XJVhagXVvcjazGWLwA8kj0xOiBBB6sdmCNTHqIsbtyQ=) 4: 3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa (hash: rojlOjdeX3UrPuGCG6PrXeAls8xreKNh9ggg9OI9Em4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 01:12:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:14:a7:25:df:07:41:f5:9d:8b:68:c5:67:a8:10:62:14:93:c9:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5 Validity Not Before: Sep 18 00:44:18 2025 GMT Not After : Sep 19 01:12:18 2025 GMT Subject: CN=619E870342986401BEFB5F86A75C8634BA78AF54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:48:db:35:51:14:d1:ea:33:b1:92:0d:d4:c3: 32:35:b8:7f:01:f6:70:55:0d:24:b2:f1:71:bd:30: 49:3d:c4:4c:86:78:6f:ca:73:31:c0:9b:c3:f0:8d: d3:33:fc:ac:d6:67:d7:28:64:19:b1:d5:92:77:78: 7f:cf:c5:5a:82:db:93:b4:0a:77:a7:05:d1:72:16: 50:c1:55:a2:a0:62:56:b7:16:c6:d1:2f:6b:91:7f: 71:38:a3:d1:4e:36:54:58:43:c1:93:ec:08:dc:d4: 3a:c7:8c:8c:71:4b:de:b7:5c:37:c6:c5:f5:92:25: 80:4d:19:31:bc:a6:ad:18:e4:5b:f9:00:5b:98:c3: 91:d0:1f:49:ca:2f:0f:a7:62:74:8f:d0:ab:0d:3e: 42:02:5d:67:ba:63:eb:c9:36:be:c2:b6:0d:af:2d: 3e:6c:3f:78:b7:3d:c7:34:e8:dc:96:b3:67:23:33: a0:ce:2b:57:96:20:7c:db:7c:f5:d4:99:60:33:0b: da:34:f2:f2:7b:c8:4e:cf:a1:ce:04:fe:5d:1a:67: 33:28:fa:52:32:4d:01:ed:67:35:bf:6e:05:1a:f0: 99:5f:9b:d9:ce:b4:cd:aa:d2:39:d8:a7:1f:89:be: da:fb:98:e6:e5:2f:4a:2d:be:b0:c0:22:a0:c6:41: f0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9E:87:03:42:98:64:01:BE:FB:5F:86:A7:5C:86:34:BA:78:AF:54 X509v3 Authority Key Identifier: keyid:F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:39:77:93:94:99:b4:11:f9:b8:7c:8a:59:5b:12:32:c8:fa: 4e:ab:e0:40:bb:93:b4:3c:7d:de:2f:6b:38:01:d2:ee:e6:cd: 38:02:1a:38:4f:2d:ef:e3:30:85:20:8c:4f:61:bb:b7:ed:68: 40:e3:f2:06:cd:6e:b9:ed:20:e6:89:76:e8:22:1b:89:58:c5: 92:2e:13:b4:20:7f:d2:2f:b5:10:ef:29:06:e5:d3:9d:da:31: a8:ea:81:ab:4c:38:0c:64:29:15:84:b1:b3:01:31:a5:85:84: e8:9f:c3:e3:48:e7:89:82:cc:84:f5:b9:40:68:79:7a:e0:b3: 2c:6d:da:b9:a9:08:7f:cc:09:3e:8b:63:64:94:7e:5a:9e:6b: ce:09:fb:af:8f:a4:ee:13:c4:67:08:4f:21:32:ba:39:18:1a: 6e:6a:ea:80:cd:a7:5e:67:7f:6d:0a:dd:0b:08:71:f9:e9:b2: df:90:47:19:5a:58:f8:06:cd:86:f9:3a:4c:3f:a1:2d:de:9e: 91:cc:2b:74:24:6f:39:63:db:59:26:94:d1:a4:e5:97:d8:0e: da:17:44:3f:5a:87:48:64:76:e9:ec:19:b8:55:9f:49:b0:e7: b7:fb:2f:5d:16:ed:5b:75:69:34:c6:5d:cc:95:f4:8a:2d:4a: cb:8a:74:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFRSnJd8HQfWdi2jFZ6gQYhSTyfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBOThGNzc5RDNCRUY2NTk1OTZCNjRCMzJCMjhFQjZB RkU4RUFCNTAeFw0yNTA5MTgwMDQ0MThaFw0yNTA5MTkwMTEyMThaMDMxMTAvBgNV BAMTKDYxOUU4NzAzNDI5ODY0MDFCRUZCNUY4NkE3NUM4NjM0QkE3OEFGNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeSNs1URTR6jOxkg3UwzI1uH8B 9nBVDSSy8XG9MEk9xEyGeG/KczHAm8PwjdMz/KzWZ9coZBmx1ZJ3eH/PxVqC25O0 CnenBdFyFlDBVaKgYla3FsbRL2uRf3E4o9FONlRYQ8GT7Ajc1DrHjIxxS963XDfG xfWSJYBNGTG8pq0Y5Fv5AFuYw5HQH0nKLw+nYnSP0KsNPkICXWe6Y+vJNr7Ctg2v LT5sP3i3Pcc06NyWs2cjM6DOK1eWIHzbfPXUmWAzC9o08vJ7yE7Poc4E/l0aZzMo +lIyTQHtZzW/bgUa8Jlfm9nOtM2q0jnYpx+Jvtr7mOblL0otvrDAIqDGQfAvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYZ6HA0KYZAG++1+Gp1yGNLp4r1QwHwYDVR0j BBgwFoAU8KmPd50772WVlrZLMrKOtq/o6rUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE5uWjgyYTJrSnZiOWZ3YUhnakpWb29iTVY3V25YSzlIRDRzUHgxUlRt OWIvMS9GMEE5OEY3NzlEM0JFRjY1OTU5NkI2NEIzMkIyOEVCNkFGRThFQUI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwQTk4Rjc3OUQzQkVGNjU5 NTk2QjY0QjMyQjI4RUI2QUZFOEVBQjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE5uWjgyYTJrSnZiOWZ3YUhnakpWb29iTVY3V25YSzlIRDRzUHgxUlRtOWIvMS9G MEE5OEY3NzlEM0JFRjY1OTU5NkI2NEIzMkIyOEVCNkFGRThFQUI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUDl3k5SZtBH5uHyKWVsSMsj6TqvgQLuTtDx93i9rOAHS7ubNOAIaOE8t7+Mw hSCMT2G7t+1oQOPyBs1uue0g5ol26CIbiVjFki4TtCB/0i+1EO8pBuXTndoxqOqB q0w4DGQpFYSxswExpYWE6J/D40jniYLMhPW5QGh5euCzLG3auakIf8wJPotjZJR+ Wp5rzgn7r4+k7hPEZwhPITK6ORgabmrqgM2nXmd/bQrdCwhx+emy35BHGVpY+AbN hvk6TD+hLd6ekcwrdCRvOWPbWSaU0aTll9gO2hdEP1qHSGR26ewZuFWfSbDnt/sv XRbtW3VpNMZdzJX0ii1Ky4p0MA== -----END CERTIFICATE-----Generated at Thu Sep 18 14:23:19 2025 by rpki-client