$ rpki-client -vvf rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft File: 295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft (raw, json) Hash identifier: dm0m7KpzgtNcNm+I1QlgftWG+eIlLgZPt0fmBgLwwf8= Subject key identifier: 84:12:49:05:A5:1E:F6:AD:DF:12:4F:88:57:F3:A4:B1:45:9C:9D:66 Authority key identifier: 29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20 Certificate issuer: /CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520 Certificate serial: 0EB4EDA4059BAB1C1FF5601AE5414C40FCFBFB58 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer Subject info access: rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft Manifest number: 0256 Signing time: Fri 19 Sep 2025 02:23:05 +0000 Manifest this update: Fri 19 Sep 2025 02:18:05 +0000 Manifest next update: Sat 20 Sep 2025 03:56:05 +0000 Files and hashes: 1: 295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl (hash: m5IN/Cw5Xi4si4xi9EedmjGJeqfWOrcnpo6sj7OtEt0=) 2: 34352e3138302e35362e302f32322d3332203d3e20323639313331.roa (hash: If21jOcvMUFkh16cxpcGthCoNkKvfyC5oUDpgsyZRvQ=) 3: 323830343a356665383a3a2f33322d313238203d3e20323639313331.roa (hash: Knl+wwRgdmDvowjQ9JACRJfXXqw4YrTkY1L1JgQ1SZk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Sep 2025 03:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b4:ed:a4:05:9b:ab:1c:1f:f5:60:1a:e5:41:4c:40:fc:fb:fb:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520 Validity Not Before: Sep 19 02:18:05 2025 GMT Not After : Sep 20 03:56:05 2025 GMT Subject: CN=84124905A51EF6ADDF124F8857F3A4B1459C9D66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a3:04:17:83:89:ef:ce:a7:0d:ac:a4:b0:b7: 4f:33:12:2d:c6:ae:c6:ed:1d:65:a5:dc:51:c0:ce: bf:f0:40:95:6f:b1:98:29:15:67:90:0b:4a:b3:27: 03:1b:c0:ba:1b:13:e5:72:42:36:34:9d:76:00:61: d2:4a:86:39:22:c1:c1:26:a8:9c:87:a7:c0:a7:2d: f1:be:07:d1:cd:24:e0:d8:66:ba:a4:d0:f9:f0:80: d1:e6:f4:91:26:23:5e:6f:ed:b1:bb:42:0d:d3:80: c0:a3:7a:4c:a9:99:ad:b5:fa:93:6e:20:e7:9d:97: 19:2f:7d:e1:21:a8:1d:a0:04:bf:ba:0f:b8:23:2c: 3c:41:e5:73:0c:8b:24:2f:3d:0a:11:a4:fe:c8:bd: a2:80:ac:69:2f:f5:49:ec:0b:44:bd:36:a8:80:b4: bc:33:0b:fb:9f:c1:61:e9:e2:47:8d:d8:9f:ee:0c: f1:bc:d9:c4:c5:09:b2:c4:35:f1:da:c9:f1:4d:89: a1:bb:e2:b8:d3:12:8a:b9:80:fa:bd:43:fb:47:07: b9:b5:0a:35:05:d2:63:67:03:95:aa:83:9b:9e:9c: b0:8c:0a:c5:5e:c0:05:a0:4c:94:2e:a8:91:23:9b: 8e:aa:f4:d0:b9:8f:b2:d6:c5:9f:58:c7:43:cc:13: 42:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:12:49:05:A5:1E:F6:AD:DF:12:4F:88:57:F3:A4:B1:45:9C:9D:66 X509v3 Authority Key Identifier: keyid:29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:b2:95:08:c6:e2:43:0b:bb:9a:f2:b4:5c:af:20:ac:c4:c4: 24:b2:25:5f:29:1c:4f:c8:aa:54:28:a2:b4:2a:7c:0c:f3:2d: 82:72:bb:83:ff:1c:98:c1:c2:55:ea:44:c9:cb:03:32:c4:57: fe:7c:68:9f:02:7c:d6:31:c5:2e:39:db:97:a3:a1:97:5a:5c: b5:86:f6:71:66:e1:6a:8b:b9:7c:53:1c:d8:65:e0:43:7f:d7: ff:51:f3:8a:6c:4f:5d:47:d2:df:b1:48:da:d0:14:83:bb:66: 64:5e:6c:0c:a7:30:96:3e:0e:8c:7d:05:42:54:84:5d:a9:61: c8:19:98:99:9f:25:8b:87:ed:c1:0f:cf:a1:b6:99:32:62:83: 3f:f7:e2:dd:9a:eb:42:c8:0e:fc:bb:34:40:13:a3:39:0b:a9: 57:cc:a6:e4:54:ed:25:74:04:e0:c0:0b:b5:57:18:86:12:42: b7:64:09:ce:3e:e2:e1:4b:56:2b:12:fd:88:ea:b0:6a:1a:87: 65:90:f6:89:e2:c4:10:9f:34:10:78:c8:43:f7:70:de:0a:80: ee:71:71:81:10:68:f7:73:16:db:46:3b:b8:29:94:53:ef:b7: c7:08:73:61:eb:a9:dc:2c:61:20:30:3a:75:34:06:a4:75:17: 1f:f9:c5:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDrTtpAWbqxwf9WAa5UFMQPz7+1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1QjlEMzY0QkQ3NkE4MUREMzRBQTVENUM5NjVCQjFG QzI3QTUyMDAeFw0yNTA5MTkwMjE4MDVaFw0yNTA5MjAwMzU2MDVaMDMxMTAvBgNV BAMTKDg0MTI0OTA1QTUxRUY2QURERjEyNEY4ODU3RjNBNEIxNDU5QzlENjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeowQXg4nvzqcNrKSwt08zEi3G rsbtHWWl3FHAzr/wQJVvsZgpFWeQC0qzJwMbwLobE+VyQjY0nXYAYdJKhjkiwcEm qJyHp8CnLfG+B9HNJODYZrqk0PnwgNHm9JEmI15v7bG7Qg3TgMCjekypma21+pNu IOedlxkvfeEhqB2gBL+6D7gjLDxB5XMMiyQvPQoRpP7IvaKArGkv9UnsC0S9NqiA tLwzC/ufwWHp4keN2J/uDPG82cTFCbLENfHayfFNiaG74rjTEoq5gPq9Q/tHB7m1 CjUF0mNnA5Wqg5uenLCMCsVewAWgTJQuqJEjm46q9NC5j7LWxZ9Yx0PME0LzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhBJJBaUe9q3fEk+IV/OksUWcnWYwHwYDVR0j BBgwFoAUKVudNkvXaoHdNKpdXJZbsfwnpSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGJOVmhqeXZzRTZUQXpreFRaV0dHajZSMWJidnlZMWNKcTNUeXA4Ujg1 OVEvMS8yOTVCOUQzNjRCRDc2QTgxREQzNEFBNUQ1Qzk2NUJCMUZDMjdBNTIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NUI5RDM2NEJENzZBODFE RDM0QUE1RDVDOTY1QkIxRkMyN0E1MjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGJOVmhqeXZzRTZUQXpreFRaV0dHajZSMWJidnlZMWNKcTNUeXA4Ujg1OVEvMS8y OTVCOUQzNjRCRDc2QTgxREQzNEFBNUQ1Qzk2NUJCMUZDMjdBNTIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACLKVCMbiQwu7mvK0XK8grMTEJLIlXykcT8iqVCiitCp8DPMtgnK7g/8cmMHC VepEycsDMsRX/nxonwJ81jHFLjnbl6Ohl1pctYb2cWbhaou5fFMc2GXgQ3/X/1Hz imxPXUfS37FI2tAUg7tmZF5sDKcwlj4OjH0FQlSEXalhyBmYmZ8li4ftwQ/PobaZ MmKDP/fi3ZrrQsgO/Ls0QBOjOQupV8ym5FTtJXQE4MALtVcYhhJCt2QJzj7i4UtW KxL9iOqwahqHZZD2ieLEEJ80EHjIQ/dw3gqA7nFxgRBo93MW20Y7uCmUU++3xwhz Yeup3CxhIDA6dTQGpHUXH/nFMQ== -----END CERTIFICATE-----Generated at Fri Sep 19 18:21:03 2025 by rpki-client