$ rpki-client -vvf rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/1144858749953BBCD5008C7A51D22BAAB41681D4.mft File: 1144858749953BBCD5008C7A51D22BAAB41681D4.mft (raw, json) Hash identifier: Pv0PipOQj0qZDt0ysmpOj/o39yfpi3E7rMJdbNuCLsw= Subject key identifier: 13:8C:A9:68:B3:B1:87:4E:C7:6A:F1:D3:98:7A:D8:41:00:46:E1:A4 Authority key identifier: 11:44:85:87:49:95:3B:BC:D5:00:8C:7A:51:D2:2B:AA:B4:16:81:D4 Certificate issuer: /CN=1144858749953BBCD5008C7A51D22BAAB41681D4 Certificate serial: 21A7F63BB5C211246719F54E9C3D31E64007DF10 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1144858749953BBCD5008C7A51D22BAAB41681D4.cer Subject info access: rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/1144858749953BBCD5008C7A51D22BAAB41681D4.mft Manifest number: 28 Signing time: Wed 17 Sep 2025 17:41:00 +0000 Manifest this update: Wed 17 Sep 2025 17:36:00 +0000 Manifest next update: Thu 18 Sep 2025 19:02:00 +0000 Files and hashes: 1: 3138362e3233372e3234302e302f32312d3332203d3e203631353833.roa (hash: st3D2oKi7gvPd7A7ic3O+oERHfFAzI0yAqVI0JivdXg=) 2: 1144858749953BBCD5008C7A51D22BAAB41681D4.crl (hash: VetZsgBbjGdAmAukvMuCE7Qn9HiIPAWMrB/TzhMWaHw=) 3: 3230302e3139362e3133322e302f32322d3332203d3e203631353833.roa (hash: 32cWIB01DgLs+hcI45wpR87QUcIGSa24DTDxj+6tYPE=) 4: 323830343a313864383a3a2f33322d313238203d3e203631353833.roa (hash: FHCRUjMOEQyyvBulvh2P4MTGh030KqTUPO9q9F/WcSs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/1144858749953BBCD5008C7A51D22BAAB41681D4.crl rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/1144858749953BBCD5008C7A51D22BAAB41681D4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1144858749953BBCD5008C7A51D22BAAB41681D4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 18 Sep 2025 19:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a7:f6:3b:b5:c2:11:24:67:19:f5:4e:9c:3d:31:e6:40:07:df:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1144858749953BBCD5008C7A51D22BAAB41681D4 Validity Not Before: Sep 17 17:36:00 2025 GMT Not After : Sep 18 19:02:00 2025 GMT Subject: CN=138CA968B3B1874EC76AF1D3987AD8410046E1A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:07:f5:e0:5d:cf:97:70:a9:7d:5b:7b:d5:f3: 89:14:42:14:a2:bd:38:e1:e1:62:37:f1:5e:12:f3: 28:f0:65:9f:9a:0f:d6:c3:57:40:8d:35:99:22:3f: 11:37:e2:84:7e:c1:6d:0d:9f:55:2f:55:8b:da:2f: 7f:54:05:10:38:50:5a:53:64:21:26:91:1f:ca:44: dc:1e:07:51:2d:66:0e:62:44:6a:d0:63:27:62:ba: dd:ca:6f:af:bc:ae:bf:fa:dd:87:07:43:4a:29:9a: d7:bb:85:86:bc:4a:72:44:84:6c:c6:10:77:0b:cd: b9:82:67:a0:cb:94:ed:d0:68:c9:cd:a3:62:d0:50: d7:10:95:2a:f5:8e:ca:4c:60:27:7c:29:39:9a:5d: 8c:45:a0:13:6c:92:72:9d:fc:ee:89:e0:a2:fc:40: 1e:12:d4:48:d4:56:43:ee:be:a5:8b:92:42:38:f6: ec:11:a3:63:3b:61:42:fd:05:34:c7:43:28:3e:a9: e5:36:5e:dd:ad:5d:e1:25:8c:62:0b:cc:3a:00:61: 89:35:45:34:1e:aa:c8:f4:b6:94:ab:27:6b:18:46: 0e:b1:87:2b:27:0a:12:35:ef:6e:ee:7e:c6:18:21: 6e:4e:ef:74:bd:6b:c7:7c:b8:8c:a4:6c:19:54:64: 5c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:8C:A9:68:B3:B1:87:4E:C7:6A:F1:D3:98:7A:D8:41:00:46:E1:A4 X509v3 Authority Key Identifier: keyid:11:44:85:87:49:95:3B:BC:D5:00:8C:7A:51:D2:2B:AA:B4:16:81:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/1144858749953BBCD5008C7A51D22BAAB41681D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1144858749953BBCD5008C7A51D22BAAB41681D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/1144858749953BBCD5008C7A51D22BAAB41681D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a1:9a:84:a7:52:5e:51:99:17:fd:c6:51:72:1f:b6:8d:8a: c9:c9:7b:de:d0:dd:dd:0c:19:c7:96:4f:f6:1b:53:7e:20:2c: 81:16:28:f5:fd:06:25:35:e1:af:8d:99:b6:25:e2:2c:3d:4c: 5b:3a:1a:bc:32:e7:2c:0c:08:c4:62:92:4d:1d:6d:6a:b4:50: 7d:1d:5e:3b:aa:dd:37:54:45:61:73:a5:d1:5d:a3:13:00:03: 5a:dd:50:0a:ec:d8:9a:84:ad:37:a6:45:19:12:8a:3b:f9:79: 40:b9:36:f8:a6:ae:70:ea:7e:1b:50:c1:3f:14:f2:10:1b:94: 38:4a:e5:a3:32:5d:07:a3:3d:59:ae:76:e5:00:7a:4d:f7:9b: 65:1e:30:72:1a:b6:28:98:e9:60:b4:c9:30:84:79:2c:3f:e0: 47:42:f5:43:61:80:01:e7:90:3d:84:f8:b2:e5:ae:af:79:d4: 69:76:22:67:3b:58:f5:6b:0c:1d:48:b8:c8:d7:d3:50:93:b0: c1:18:43:4f:a4:de:6f:d2:77:85:64:b8:1a:ce:ef:b4:31:df: 94:e2:57:61:46:89:e8:1a:11:0e:a8:57:70:d2:7d:32:86:9f: 34:8b:23:0e:7f:0f:14:dd:e2:1b:52:88:f9:c1:94:ef:15:79: 51:88:72:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIaf2O7XCESRnGfVOnD0x5kAH3xAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0NDg1ODc0OTk1M0JCQ0Q1MDA4QzdBNTFEMjJCQUFC NDE2ODFENDAeFw0yNTA5MTcxNzM2MDBaFw0yNTA5MTgxOTAyMDBaMDMxMTAvBgNV BAMTKDEzOENBOTY4QjNCMTg3NEVDNzZBRjFEMzk4N0FEODQxMDA0NkUxQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+B/XgXc+XcKl9W3vV84kUQhSi vTjh4WI38V4S8yjwZZ+aD9bDV0CNNZkiPxE34oR+wW0Nn1UvVYvaL39UBRA4UFpT ZCEmkR/KRNweB1EtZg5iRGrQYydiut3Kb6+8rr/63YcHQ0opmte7hYa8SnJEhGzG EHcLzbmCZ6DLlO3QaMnNo2LQUNcQlSr1jspMYCd8KTmaXYxFoBNsknKd/O6J4KL8 QB4S1EjUVkPuvqWLkkI49uwRo2M7YUL9BTTHQyg+qeU2Xt2tXeEljGILzDoAYYk1 RTQeqsj0tpSrJ2sYRg6xhysnChI1727ufsYYIW5O73S9a8d8uIykbBlUZFxFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUE4ypaLOxh07HavHTmHrYQQBG4aQwHwYDVR0j BBgwFoAUEUSFh0mVO7zVAIx6UdIrqrQWgdQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFVvU2t2U1NOd29ZTkFkNlBNekFVdVVjaFc2WUJhdWd6cEhRTERTTVZF c0ovMC8xMTQ0ODU4NzQ5OTUzQkJDRDUwMDhDN0E1MUQyMkJBQUI0MTY4MUQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExNDQ4NTg3NDk5NTNCQkNE NTAwOEM3QTUxRDIyQkFBQjQxNjgxRDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFVvU2t2U1NOd29ZTkFkNlBNekFVdVVjaFc2WUJhdWd6cEhRTERTTVZFc0ovMC8x MTQ0ODU4NzQ5OTUzQkJDRDUwMDhDN0E1MUQyMkJBQUI0MTY4MUQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeKGahKdSXlGZF/3GUXIfto2Kycl73tDd3QwZx5ZP9htTfiAsgRYo9f0GJTXh r42ZtiXiLD1MWzoavDLnLAwIxGKSTR1tarRQfR1eO6rdN1RFYXOl0V2jEwADWt1Q CuzYmoStN6ZFGRKKO/l5QLk2+KaucOp+G1DBPxTyEBuUOErlozJdB6M9Wa525QB6 TfebZR4wchq2KJjpYLTJMIR5LD/gR0L1Q2GAAeeQPYT4suWur3nUaXYiZztY9WsM HUi4yNfTUJOwwRhDT6Teb9J3hWS4Gs7vtDHflOJXYUaJ6BoRDqhXcNJ9MoafNIsj Dn8PFN3iG1KI+cGU7xV5UYhy1A== -----END CERTIFICATE-----Generated at Thu Sep 18 07:28:26 2025 by rpki-client