$ rpki-client -vvf rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft File: 484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft (raw, json) Hash identifier: FOcsT4nn+PoonvsDzeMd6qDH86oasgJyEhNkGal7QRA= Subject key identifier: C4:79:AE:5B:B2:7D:11:E5:54:DD:4E:CE:E1:6F:3F:6C:EB:A6:38:3B Authority key identifier: 48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3 Certificate issuer: /CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3 Certificate serial: 640CAAF5400A0151999BBBD2EEE0B9397AD9EA08 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer Subject info access: rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft Manifest number: 02C1 Signing time: Thu 18 Sep 2025 03:38:50 +0000 Manifest this update: Thu 18 Sep 2025 03:33:50 +0000 Manifest next update: Fri 19 Sep 2025 05:30:50 +0000 Files and hashes: 1: 484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl (hash: BzbKs1fkvXSGUygo3ZkpReg7MMORjUBD67rULpofZ0Y=) 2: 323830343a383034303a3a2f33322d3332203d3e20323731373339.roa (hash: k8/Tw+SgoiL84ZsrYLWHWBEWIwVDj1v9BVLZaSH4bik=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 05:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:0c:aa:f5:40:0a:01:51:99:9b:bb:d2:ee:e0:b9:39:7a:d9:ea:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3 Validity Not Before: Sep 18 03:33:50 2025 GMT Not After : Sep 19 05:30:50 2025 GMT Subject: CN=C479AE5BB27D11E554DD4ECEE16F3F6CEBA6383B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:70:f6:58:3b:e7:79:cb:f2:7c:a8:e9:f0:47: e1:c0:c3:fa:85:65:18:c7:c8:1d:84:89:d7:ad:5f: 15:6d:79:1f:81:b2:44:86:8b:05:30:c0:86:10:75: fb:65:4c:70:cb:4e:26:2c:70:1d:58:23:9e:67:70: 5b:3f:65:de:ad:7e:f4:50:f1:a2:9c:eb:99:9e:80: c3:35:02:5c:73:dd:33:16:0e:73:17:aa:37:2e:1e: da:cd:86:3e:7f:9a:b9:ae:fa:75:53:c1:02:32:01: ba:ab:62:8d:62:9c:3e:a8:12:71:c5:3d:73:81:5a: b8:b6:5d:3c:e0:43:89:5e:5c:9b:df:dc:ee:de:6b: 35:a0:d4:79:66:ad:66:91:8e:11:07:3f:97:23:ca: 05:1e:7e:6e:7c:f6:8d:11:af:f1:81:42:ac:ec:5a: a1:a2:e3:8f:b4:3d:43:68:72:02:99:90:fe:ee:83: dc:df:9c:17:13:8d:47:9b:d8:8e:f8:fa:6e:4e:b4: 5a:85:f5:8c:34:23:06:67:80:e6:9b:78:b9:d8:58: 0b:b5:48:d9:19:43:82:f7:81:c6:01:ab:c0:e4:7b: 29:7a:29:65:60:3d:dd:7b:7c:d4:da:90:91:a5:bf: 23:53:48:34:ac:31:2e:3f:21:d3:04:ae:50:be:c7: 42:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:79:AE:5B:B2:7D:11:E5:54:DD:4E:CE:E1:6F:3F:6C:EB:A6:38:3B X509v3 Authority Key Identifier: keyid:48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:06:7a:cc:73:42:01:ec:bb:0c:2a:4c:ad:28:0b:67:92:e2: b9:9a:a4:3e:8c:04:16:dc:29:ee:25:e2:b8:d4:eb:11:7e:39: a3:6e:f9:a6:a2:6c:53:f7:6c:76:d3:99:9d:1a:c7:e4:97:ad: 91:ef:d6:5d:b7:7d:c3:62:8d:24:a1:98:2a:fa:4c:c2:79:65: 21:4d:97:85:8e:83:1b:d4:be:d0:59:0b:fa:3c:77:c1:51:38: 72:71:ad:36:02:61:67:d5:1c:a0:b1:79:d8:4a:3c:51:78:b9: ee:05:5e:d6:81:bb:2a:71:67:5d:f8:ed:df:e6:7b:b5:76:93: f2:91:78:36:d1:6f:dc:87:04:7f:7d:cb:5d:2c:2d:ec:40:b4: 0e:d8:de:3f:84:23:91:8b:df:a2:cc:03:e8:ff:3b:a5:42:2c: 53:c3:70:ff:18:5d:c9:42:da:64:af:9f:d5:17:f2:7d:8d:12: 35:f0:19:63:cb:63:9b:39:c1:de:10:56:e8:b4:56:e2:86:17: 4a:9b:e9:2b:a4:22:d6:5c:78:63:8f:70:73:13:08:dd:eb:1d: a8:39:5c:6a:8e:9e:94:07:b3:18:42:79:fa:f1:22:2f:08:77: e4:df:7d:b2:b0:45:63:05:e1:22:7f:e8:c4:3f:8e:dc:0c:da: 46:cc:fb:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZAyq9UAKAVGZm7vS7uC5OXrZ6ggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg0Q0FGRUQxN0QwMkM0NTU1RTVENDU4NjlGMzBFQ0FB N0UxRTVFMzAeFw0yNTA5MTgwMzMzNTBaFw0yNTA5MTkwNTMwNTBaMDMxMTAvBgNV BAMTKEM0NzlBRTVCQjI3RDExRTU1NERENEVDRUUxNkYzRjZDRUJBNjM4M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3cPZYO+d5y/J8qOnwR+HAw/qF ZRjHyB2EidetXxVteR+BskSGiwUwwIYQdftlTHDLTiYscB1YI55ncFs/Zd6tfvRQ 8aKc65megMM1Alxz3TMWDnMXqjcuHtrNhj5/mrmu+nVTwQIyAbqrYo1inD6oEnHF PXOBWri2XTzgQ4leXJvf3O7eazWg1HlmrWaRjhEHP5cjygUefm589o0Rr/GBQqzs WqGi44+0PUNocgKZkP7ug9zfnBcTjUeb2I74+m5OtFqF9Yw0IwZngOabeLnYWAu1 SNkZQ4L3gcYBq8Dkeyl6KWVgPd17fNTakJGlvyNTSDSsMS4/IdMErlC+x0ItAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxHmuW7J9EeVU3U7O4W8/bOumODswHwYDVR0j BBgwFoAUSEyv7RfQLEVV5dRYafMOyqfh5eMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGhUeVptaE1CcEN2TUJ1REhOVmZzSldvUnR5dE5aUjhQWUNQUU52Zktv S0cvMS80ODRDQUZFRDE3RDAyQzQ1NTVFNUQ0NTg2OUYzMEVDQUE3RTFFNUUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4NENBRkVEMTdEMDJDNDU1 NUU1RDQ1ODY5RjMwRUNBQTdFMUU1RTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGhUeVptaE1CcEN2TUJ1REhOVmZzSldvUnR5dE5aUjhQWUNQUU52ZktvS0cvMS80 ODRDQUZFRDE3RDAyQzQ1NTVFNUQ0NTg2OUYzMEVDQUE3RTFFNUUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApgZ6zHNCAey7DCpMrSgLZ5LiuZqkPowEFtwp7iXiuNTrEX45o275pqJsU/ds dtOZnRrH5Jetke/WXbd9w2KNJKGYKvpMwnllIU2XhY6DG9S+0FkL+jx3wVE4cnGt NgJhZ9UcoLF52Eo8UXi57gVe1oG7KnFnXfjt3+Z7tXaT8pF4NtFv3IcEf33LXSwt 7EC0DtjeP4QjkYvfoswD6P87pUIsU8Nw/xhdyULaZK+f1RfyfY0SNfAZY8tjmznB 3hBW6LRW4oYXSpvpK6Qi1lx4Y49wcxMI3esdqDlcao6elAezGEJ5+vEiLwh35N99 srBFYwXhIn/oxD+O3AzaRsz7Ag== -----END CERTIFICATE-----Generated at Thu Sep 18 16:50:27 2025 by rpki-client