$ rpki-client -vvf rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.mft File: 843E46AA209E75F9302824E3938E138395B4B3A9.mft (raw, json) Hash identifier: 3VBBRvUmthOTMFMUI9B2OAEgl2ML4vXCeDbGAWkv+Qw= Subject key identifier: AE:4E:BF:52:0A:69:28:08:AE:41:46:49:3B:07:10:5C:BB:0C:8E:DD Authority key identifier: 84:3E:46:AA:20:9E:75:F9:30:28:24:E3:93:8E:13:83:95:B4:B3:A9 Certificate issuer: /CN=843E46AA209E75F9302824E3938E138395B4B3A9 Certificate serial: 0EB42F09F9737C34BDB8EA79AE47C18A68FDAA96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/843E46AA209E75F9302824E3938E138395B4B3A9.cer Subject info access: rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.mft Manifest number: 0109 Signing time: Wed 20 Aug 2025 12:01:14 +0000 Manifest this update: Wed 20 Aug 2025 11:56:14 +0000 Manifest next update: Thu 21 Aug 2025 13:16:14 +0000 Files and hashes: 1: 3136382e3232382e36342e302f32322d3332203d3e20323634393132.roa (hash: p4b4Vstsxvxn/G+yhujfDYwQG/toX5MsUbE4tvC9CWg=) 2: 843E46AA209E75F9302824E3938E138395B4B3A9.crl (hash: VMSh1z33GPayaV0qQazmzeH9oo+uLbvNR+g6tY72boE=) 3: 323830343a326663633a3a2f33322d313238203d3e20323634393132.roa (hash: Bjl8br3vFBSlFT3tbWGmmMhH9xDDhVw6vdzMuzsf+Dc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.crl rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/843E46AA209E75F9302824E3938E138395B4B3A9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 13:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b4:2f:09:f9:73:7c:34:bd:b8:ea:79:ae:47:c1:8a:68:fd:aa:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843E46AA209E75F9302824E3938E138395B4B3A9 Validity Not Before: Aug 20 11:56:14 2025 GMT Not After : Aug 21 13:16:14 2025 GMT Subject: CN=AE4EBF520A692808AE4146493B07105CBB0C8EDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a0:23:35:00:7e:65:ed:ee:5f:2b:b6:9e:97: 36:02:5f:77:db:8a:0a:1e:6f:3f:5b:da:18:d8:b4: 28:03:e8:78:e4:a0:e0:4d:f7:e9:fe:92:09:73:08: 04:ef:65:14:92:df:0e:73:9e:61:27:ff:5b:a6:81: 3c:50:de:3f:cd:d7:b4:c1:19:cc:e5:80:1e:b3:a4: 4a:56:f5:2d:75:21:93:c5:e2:79:70:15:75:bd:7c: 0e:12:65:ce:7e:f1:17:55:02:91:77:b8:e2:28:4a: c0:73:84:a1:28:f8:6d:33:63:c3:b6:27:68:83:82: 3e:89:21:f3:f5:9d:d6:1a:4a:c1:35:85:b9:99:02: 4f:bc:5b:b9:7a:eb:b8:2a:dd:e5:5e:38:f5:ec:f0: e9:8d:a2:6e:54:a7:2e:78:50:a0:a2:0a:8e:17:62: 9e:a1:f0:c4:5a:a5:b8:e4:ce:af:b1:c3:12:7c:c8: cf:98:c8:36:65:0f:e4:39:c4:14:34:8d:bc:27:76: 8f:95:f4:68:6f:15:c1:62:2a:f3:63:63:a6:9b:57: 78:57:19:39:78:fe:b2:9e:1c:61:7e:45:8e:35:0d: be:68:79:a8:af:9e:80:d3:31:31:6e:58:d8:bb:4c: 3e:0b:a0:9a:da:06:f7:18:06:1f:b2:06:fa:17:15: a8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4E:BF:52:0A:69:28:08:AE:41:46:49:3B:07:10:5C:BB:0C:8E:DD X509v3 Authority Key Identifier: keyid:84:3E:46:AA:20:9E:75:F9:30:28:24:E3:93:8E:13:83:95:B4:B3:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/843E46AA209E75F9302824E3938E138395B4B3A9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:3b:77:49:db:71:64:02:ec:51:38:2b:f4:3f:d3:65:03:db: 84:4c:f1:8e:3c:93:7a:ab:db:45:e9:fd:45:d7:f8:71:57:d3: 87:c5:58:be:f9:30:9d:56:fa:e9:7c:37:a0:16:ec:03:a0:c3: 46:39:17:19:ad:20:01:c4:06:20:61:b8:ff:46:63:ac:05:b0: 5b:da:e7:81:27:b4:4b:5b:b7:c1:a8:31:9d:27:e9:02:5e:e0: 71:0f:05:3b:aa:74:ec:9f:a2:1b:65:c5:85:1e:87:22:be:61: 42:e5:a2:91:06:42:c1:a8:cd:2a:f5:59:34:35:a2:a3:d3:28: 1d:d8:6f:97:ad:7b:34:f5:2b:11:1e:0f:5e:8e:3a:b3:64:92: 6a:30:3f:6f:63:16:09:1e:0d:58:a7:2e:47:fd:62:b6:15:c1: 92:6b:5b:e3:4d:ec:e2:97:30:6f:cc:c5:97:9b:f5:69:d9:c0: c3:7f:e4:1f:7f:a4:9d:9d:f2:01:7e:26:40:e1:ab:e7:81:57: 93:99:14:56:9b:fc:76:f7:dd:0c:2b:c7:c3:f2:ad:c1:74:56: bc:d4:91:61:0a:61:bc:2e:19:3a:9f:08:30:1b:39:10:53:f4: f0:4f:b9:3d:01:8d:b2:fb:6b:1e:3e:67:d2:fe:81:1c:a5:2b: 07:e8:d4:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDrQvCflzfDS9uOp5rkfBimj9qpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQzRTQ2QUEyMDlFNzVGOTMwMjgyNEUzOTM4RTEzODM5 NUI0QjNBOTAeFw0yNTA4MjAxMTU2MTRaFw0yNTA4MjExMzE2MTRaMDMxMTAvBgNV BAMTKEFFNEVCRjUyMEE2OTI4MDhBRTQxNDY0OTNCMDcxMDVDQkIwQzhFREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCroCM1AH5l7e5fK7aelzYCX3fb igoebz9b2hjYtCgD6HjkoOBN9+n+kglzCATvZRSS3w5znmEn/1umgTxQ3j/N17TB GczlgB6zpEpW9S11IZPF4nlwFXW9fA4SZc5+8RdVApF3uOIoSsBzhKEo+G0zY8O2 J2iDgj6JIfP1ndYaSsE1hbmZAk+8W7l667gq3eVeOPXs8OmNom5Upy54UKCiCo4X Yp6h8MRapbjkzq+xwxJ8yM+YyDZlD+Q5xBQ0jbwndo+V9GhvFcFiKvNjY6abV3hX GTl4/rKeHGF+RY41Db5oeaivnoDTMTFuWNi7TD4LoJraBvcYBh+yBvoXFah/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrk6/UgppKAiuQUZJOwcQXLsMjt0wHwYDVR0j BBgwFoAUhD5GqiCedfkwKCTjk44Tg5W0s6kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjkyZFZRUEN0aXBXbmRXNDJtVWdBYVdiQW02cm9vSm5nS2c4cGtjZHR5 aHAvMC84NDNFNDZBQTIwOUU3NUY5MzAyODI0RTM5MzhFMTM4Mzk1QjRCM0E5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0M0U0NkFBMjA5RTc1Rjkz MDI4MjRFMzkzOEUxMzgzOTVCNEIzQTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NjkyZFZRUEN0aXBXbmRXNDJtVWdBYVdiQW02cm9vSm5nS2c4cGtjZHR5aHAvMC84 NDNFNDZBQTIwOUU3NUY5MzAyODI0RTM5MzhFMTM4Mzk1QjRCM0E5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFzt3SdtxZALsUTgr9D/TZQPbhEzxjjyTeqvbRen9Rdf4cVfTh8VYvvkwnVb6 6Xw3oBbsA6DDRjkXGa0gAcQGIGG4/0ZjrAWwW9rngSe0S1u3wagxnSfpAl7gcQ8F O6p07J+iG2XFhR6HIr5hQuWikQZCwajNKvVZNDWio9MoHdhvl617NPUrER4PXo46 s2SSajA/b2MWCR4NWKcuR/1ithXBkmtb403s4pcwb8zFl5v1adnAw3/kH3+knZ3y AX4mQOGr54FXk5kUVpv8dvfdDCvHw/KtwXRWvNSRYQphvC4ZOp8IMBs5EFP08E+5 PQGNsvtrHj5n0v6BHKUrB+jUNA== -----END CERTIFICATE-----Generated at Wed Aug 20 16:29:14 2025 by rpki-client