$ rpki-client -vvf rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.mft File: 98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.mft (raw, json) Hash identifier: 86n5+sNOGFmBNJAnkxn4+iMDA7dRMd3yZT4fTYw8ONk= Subject key identifier: E7:37:B3:AF:B1:35:61:50:A6:A4:4B:4F:89:A3:E8:7B:0A:C3:7B:B3 Authority key identifier: 98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2 Certificate issuer: /CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2 Certificate serial: 3081F7E3D7D0518192BBB4697DE84D77D81CB566 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.mft Manifest number: 0155 Signing time: Wed 20 Aug 2025 04:19:09 +0000 Manifest this update: Wed 20 Aug 2025 04:14:09 +0000 Manifest next update: Thu 21 Aug 2025 05:46:09 +0000 Files and hashes: 1: 34352e3137332e3131362e302f32322d3234203d3e20323638383130.roa (hash: JNyxID+gpuiIJFxC2JoVZpDW5lJY/bY+ID0T+4W/0SU=) 2: 98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.crl (hash: ydaTCOm47CjGeyjl9qhc4xCcp1uJeaG5cMEELKLHG+o=) 3: 323830343a356166383a3a2f33322d3438203d3e20323638383130.roa (hash: m8yM79Ui0jUcrLIMqQSDhUwukcLiQdHQnioL1vHdmkw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.crl rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 05:46:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:81:f7:e3:d7:d0:51:81:92:bb:b4:69:7d:e8:4d:77:d8:1c:b5:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2 Validity Not Before: Aug 20 04:14:09 2025 GMT Not After : Aug 21 05:46:09 2025 GMT Subject: CN=E737B3AFB1356150A6A44B4F89A3E87B0AC37BB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:29:9a:ab:12:c6:c2:26:3b:30:ae:af:8f:9c: e3:10:fe:0c:d2:87:68:3d:83:70:04:28:5f:d7:14: ce:c6:0f:f9:1b:13:7b:c9:3c:76:25:bf:88:b2:61: b6:49:51:96:38:74:06:87:ae:eb:d3:19:4d:f0:d7: a1:11:ce:10:82:83:be:18:f8:5e:b8:5d:85:8f:70: c3:8b:83:0b:15:37:26:a9:5a:f0:39:72:92:0f:20: ab:85:86:9d:a3:1d:7f:5a:ef:47:2e:83:89:6c:7c: 73:62:aa:b6:22:af:4f:c7:ac:eb:95:77:93:93:b1: bf:1f:dc:8a:20:7c:c0:3f:2e:a7:a1:32:c9:75:35: 64:4b:4c:8d:2c:e4:2e:7c:ab:c0:83:b6:90:aa:41: f7:f0:4a:df:58:ef:c9:6e:77:ad:e6:bb:56:31:56: 40:6e:e8:32:d1:0d:72:87:e5:6a:09:92:4a:3c:a5: 1b:cf:3b:d7:4a:ef:a4:f0:99:47:92:d3:20:9b:c4: b7:a5:57:2b:43:30:79:40:76:00:bb:de:d4:2d:ff: c1:d9:fd:1b:46:cb:ef:26:bb:78:ef:b6:71:ad:6e: 4c:63:1f:53:52:55:21:79:67:1a:4a:3c:76:5e:59: 70:3b:eb:8b:b9:f8:26:23:8e:ab:2a:27:1a:54:54: 72:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:37:B3:AF:B1:35:61:50:A6:A4:4B:4F:89:A3:E8:7B:0A:C3:7B:B3 X509v3 Authority Key Identifier: keyid:98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:5e:4c:eb:b9:f5:e5:8c:ed:fb:8e:33:99:19:2b:2e:37:ab: 38:7c:d8:67:c4:83:0d:d0:e8:b9:80:09:f1:7e:33:05:6b:e7: 19:b5:bd:5e:2f:43:a5:0d:70:ca:bb:0d:1b:14:d2:2c:7e:5c: 33:6b:23:eb:b8:88:f4:60:d5:31:fe:2a:79:b1:94:d2:a0:05: d7:b5:3b:f6:81:19:7a:df:ac:1c:8f:c0:8c:2f:a3:cf:8c:58: 47:f0:16:87:20:f3:81:dc:54:03:b5:23:24:f1:ef:2d:b9:e4: 07:5e:bd:25:35:ba:78:91:d4:b5:08:b4:cd:e3:81:69:3e:4e: 44:20:df:d7:1d:2b:21:11:db:eb:f2:5b:ed:a5:1a:b9:39:4c: 5b:df:d1:34:9e:fe:02:5b:fd:ed:93:0a:a3:d8:48:67:e0:55: 0c:d6:b6:7b:e1:77:99:49:67:a8:e4:80:d7:0e:34:50:86:14: 61:79:a1:82:3b:02:73:17:83:32:c9:b4:64:3e:4c:c1:d8:83: cf:16:1e:19:db:42:da:6c:82:3c:26:bc:9a:20:3a:9d:e7:29: 4f:fe:d0:d2:87:5d:1a:04:85:d0:0e:93:4e:73:5b:d5:60:9a: e8:30:4a:5f:d8:da:a9:d2:54:01:50:14:e7:ae:c5:b7:88:75: d9:24:88:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMIH349fQUYGSu7RpfehNd9gctWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThFMzE2NEVGQTZFQTlBQTlEODhCNzJFQUZGQTBDQ0ZF OTNDNDRFMjAeFw0yNTA4MjAwNDE0MDlaFw0yNTA4MjEwNTQ2MDlaMDMxMTAvBgNV BAMTKEU3MzdCM0FGQjEzNTYxNTBBNkE0NEI0Rjg5QTNFODdCMEFDMzdCQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoKZqrEsbCJjswrq+PnOMQ/gzS h2g9g3AEKF/XFM7GD/kbE3vJPHYlv4iyYbZJUZY4dAaHruvTGU3w16ERzhCCg74Y +F64XYWPcMOLgwsVNyapWvA5cpIPIKuFhp2jHX9a70cug4lsfHNiqrYir0/HrOuV d5OTsb8f3IogfMA/LqehMsl1NWRLTI0s5C58q8CDtpCqQffwSt9Y78lud63mu1Yx VkBu6DLRDXKH5WoJkko8pRvPO9dK76TwmUeS0yCbxLelVytDMHlAdgC73tQt/8HZ /RtGy+8mu3jvtnGtbkxjH1NSVSF5ZxpKPHZeWXA764u5+CYjjqsqJxpUVHKDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5zezr7E1YVCmpEtPiaPoewrDe7MwHwYDVR0j BBgwFoAUmOMWTvpuqaqdiLcur/oMz+k8ROIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFQ2N1Z3YzRTVnpCWEVHdlh3ZmJ6QVdZUFdxcjJIeE40UnpCZTdvN1o5 dDIvMC85OEUzMTY0RUZBNkVBOUFBOUQ4OEI3MkVBRkZBMENDRkU5M0M0NEUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4RTMxNjRFRkE2RUE5QUE5 RDg4QjcyRUFGRkEwQ0NGRTkzQzQ0RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFQ2N1Z3YzRTVnpCWEVHdlh3ZmJ6QVdZUFdxcjJIeE40UnpCZTdvN1o5dDIvMC85 OEUzMTY0RUZBNkVBOUFBOUQ4OEI3MkVBRkZBMENDRkU5M0M0NEUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJF5M67n15Yzt+44zmRkrLjerOHzYZ8SDDdDouYAJ8X4zBWvnGbW9Xi9DpQ1w yrsNGxTSLH5cM2sj67iI9GDVMf4qebGU0qAF17U79oEZet+sHI/AjC+jz4xYR/AW hyDzgdxUA7UjJPHvLbnkB169JTW6eJHUtQi0zeOBaT5ORCDf1x0rIRHb6/Jb7aUa uTlMW9/RNJ7+Alv97ZMKo9hIZ+BVDNa2e+F3mUlnqOSA1w40UIYUYXmhgjsCcxeD Msm0ZD5MwdiDzxYeGdtC2myCPCa8miA6necpT/7Q0oddGgSF0A6TTnNb1WCa6DBK X9jaqdJUAVAU567Ft4h12SSIxA== -----END CERTIFICATE-----Generated at Wed Aug 20 16:24:21 2025 by rpki-client