$ rpki-client -vvf rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.mft File: FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.mft (raw, json) Hash identifier: b8K+R8TnvdFOl6u+E2vlNrMn2ay3nZUGP7iDHGGEpI4= Subject key identifier: 10:73:68:C0:83:29:FF:1C:D4:E0:DD:E8:50:5C:14:0D:D7:AE:5B:5B Authority key identifier: FB:48:35:D4:1A:7B:3A:7F:4D:75:86:CB:20:38:F3:C8:2A:77:56:CA Certificate issuer: /CN=FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA Certificate serial: 3300EA0987E1D8C9ADDF87F9D27AA89760252BBB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.cer Subject info access: rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.mft Manifest number: 02C5 Signing time: Thu 18 Sep 2025 00:52:13 +0000 Manifest this update: Thu 18 Sep 2025 00:47:13 +0000 Manifest next update: Fri 19 Sep 2025 02:22:13 +0000 Files and hashes: 1: 323830343a3164633a3a2f33322d3438203d3e203533323032.roa (hash: PgXV8J2Qd7NngIygh5/nSAW9w+9Iq6Iq2O3ZLFIgI8Y=) 2: FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.crl (hash: 0rGd+LAzWtYZzZ+xvXp4ZnVlD+wXeM03kXs9vFSkXnw=) 3: 3138362e3233352e3132382e302f32342d3234203d3e203533323032.roa (hash: zzpZ2ddcPU5AT+b3GJMEA4WQtcwb3xrLQFGjCdYMOP8=) 4: 3138362e3233352e3132382e302f31392d3234203d3e203533323032.roa (hash: ejCxNdU4m0bf8zSk9PDhImqfUma+lX+P5kRkS19D0aQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.crl rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 02:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:00:ea:09:87:e1:d8:c9:ad:df:87:f9:d2:7a:a8:97:60:25:2b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA Validity Not Before: Sep 18 00:47:13 2025 GMT Not After : Sep 19 02:22:13 2025 GMT Subject: CN=107368C08329FF1CD4E0DDE8505C140DD7AE5B5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e8:e4:76:c9:8c:16:aa:5f:db:bd:60:f7:26: e3:4e:11:10:ae:a6:e0:9a:39:f5:db:d1:47:81:76: d6:84:18:cb:13:c0:da:71:6a:ba:a9:0b:ff:fb:7d: b2:4e:8c:f2:d6:3e:93:8f:06:1f:59:fb:ce:64:e5: 0d:ca:9f:d1:27:07:ca:90:5b:32:f5:bf:fa:2a:48: c3:03:37:25:92:d4:bb:2a:66:58:86:af:23:d8:bf: 56:20:4b:17:e6:ea:a7:f6:c4:ff:8d:d0:9e:0a:89: 88:e1:48:e1:f0:c7:81:ad:dc:1f:47:ce:01:63:83: e5:b0:2a:04:7e:37:d0:41:1c:78:88:b6:c5:f8:1a: ff:97:43:b3:6a:b9:79:14:29:27:be:0a:57:98:9b: b7:82:fe:6c:7e:5d:e3:9b:c3:7c:44:47:c4:20:b0: 0a:c4:24:3b:74:f5:0a:b5:e9:ee:5b:37:37:99:97: 71:c0:d9:60:36:6b:87:33:f2:d3:d9:b5:c6:bc:ca: 94:e3:f7:b6:0a:a3:26:18:3e:70:d7:74:8b:e6:53: de:24:2d:04:e5:50:4c:2d:af:bb:1c:07:23:d1:a1: 1c:ec:03:04:4f:41:10:31:2d:57:98:12:7e:c6:25: dc:ab:1a:92:d4:e5:20:fd:c2:eb:6e:34:b4:45:4c: bb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:73:68:C0:83:29:FF:1C:D4:E0:DD:E8:50:5C:14:0D:D7:AE:5B:5B X509v3 Authority Key Identifier: keyid:FB:48:35:D4:1A:7B:3A:7F:4D:75:86:CB:20:38:F3:C8:2A:77:56:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:9e:08:64:f1:66:dd:4f:a3:e2:de:58:e8:33:f4:20:78:9f: 83:13:71:b0:a8:2f:04:13:fc:29:50:b7:ef:35:0d:cf:8d:b3: 52:68:34:e0:8c:19:05:49:a5:e7:4a:02:e7:60:41:96:a4:47: 37:2c:57:77:0e:41:f8:e8:87:ef:b3:45:78:63:89:97:c1:40: 69:59:34:1b:20:b3:ba:1d:70:55:7a:0a:58:9c:2d:e6:3f:46: 2e:49:11:0a:8c:f2:96:1e:16:94:f9:1c:fc:8d:31:31:03:61: ce:f5:bc:d2:f8:98:1d:9e:ba:30:9f:40:41:d3:7f:0f:22:24: bc:77:13:f8:e8:db:bb:4f:1a:e7:a3:a0:c2:cf:73:1d:56:56: 45:c9:c3:02:80:4d:7c:81:70:bc:f3:cc:05:ec:13:29:13:5a: 64:16:44:e5:b6:5b:d6:95:66:96:49:1b:9b:44:50:bd:f0:5d: e7:ba:2a:6e:52:33:51:eb:46:cc:53:bd:a9:5e:e6:3c:a3:60: dc:d8:73:ce:59:cd:84:c8:d7:c8:ce:57:21:48:43:4e:e4:b6: 56:f4:c7:1c:fc:e6:50:ea:f7:a0:2b:09:f1:10:aa:99:dc:17: d8:d6:a3:43:b7:d5:86:83:19:ea:7f:47:ad:17:ee:90:cc:dc: bb:33:fc:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMwDqCYfh2Mmt34f50nqol2AlK7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI0ODM1RDQxQTdCM0E3RjRENzU4NkNCMjAzOEYzQzgy QTc3NTZDQTAeFw0yNTA5MTgwMDQ3MTNaFw0yNTA5MTkwMjIyMTNaMDMxMTAvBgNV BAMTKDEwNzM2OEMwODMyOUZGMUNENEUwRERFODUwNUMxNDBERDdBRTVCNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk6OR2yYwWql/bvWD3JuNOERCu puCaOfXb0UeBdtaEGMsTwNpxarqpC//7fbJOjPLWPpOPBh9Z+85k5Q3Kn9EnB8qQ WzL1v/oqSMMDNyWS1LsqZliGryPYv1YgSxfm6qf2xP+N0J4KiYjhSOHwx4Gt3B9H zgFjg+WwKgR+N9BBHHiItsX4Gv+XQ7NquXkUKSe+CleYm7eC/mx+XeObw3xER8Qg sArEJDt09Qq16e5bNzeZl3HA2WA2a4cz8tPZtca8ypTj97YKoyYYPnDXdIvmU94k LQTlUEwtr7scByPRoRzsAwRPQRAxLVeYEn7GJdyrGpLU5SD9wutuNLRFTLtfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEHNowIMp/xzU4N3oUFwUDdeuW1swHwYDVR0j BBgwFoAU+0g11Bp7On9NdYbLIDjzyCp3VsowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGNxY0pXa3NRQ1V3dW1CN00zTjNWRDhHNVdFbjZ3Q0RXQnVLWlpha1k0 SHYvMS9GQjQ4MzVENDFBN0IzQTdGNEQ3NTg2Q0IyMDM4RjNDODJBNzc1NkNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCNDgzNUQ0MUE3QjNBN0Y0 RDc1ODZDQjIwMzhGM0M4MkE3NzU2Q0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGNxY0pXa3NRQ1V3dW1CN00zTjNWRDhHNVdFbjZ3Q0RXQnVLWlpha1k0SHYvMS9G QjQ4MzVENDFBN0IzQTdGNEQ3NTg2Q0IyMDM4RjNDODJBNzc1NkNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ54IZPFm3U+j4t5Y6DP0IHifgxNxsKgvBBP8KVC37zUNz42zUmg04IwZBUml 50oC52BBlqRHNyxXdw5B+OiH77NFeGOJl8FAaVk0GyCzuh1wVXoKWJwt5j9GLkkR Cozylh4WlPkc/I0xMQNhzvW80viYHZ66MJ9AQdN/DyIkvHcT+Ojbu08a56Ogws9z HVZWRcnDAoBNfIFwvPPMBewTKRNaZBZE5bZb1pVmlkkbm0RQvfBd57oqblIzUetG zFO9qV7mPKNg3NhzzlnNhMjXyM5XIUhDTuS2VvTHHPzmUOr3oCsJ8RCqmdwX2Naj Q7fVhoMZ6n9HrRfukMzcuzP8OA== -----END CERTIFICATE-----Generated at Thu Sep 18 17:48:31 2025 by rpki-client