$ rpki-client -vvf rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft File: 01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft (raw, json) Hash identifier: rMqGcuTDvXL9V5YCO7pfYiDEwUeKChnmw6javSGhMu0= Subject key identifier: 99:1B:2A:74:8F:62:A7:40:22:9E:01:2C:A5:68:D2:EF:CC:E2:B3:8E Authority key identifier: 01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C Certificate issuer: /CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C Certificate serial: 3D2A73E0AEAAE6C08FCA8BB2E7BBBAE4039B007B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer Subject info access: rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft Manifest number: 02C8 Signing time: Thu 18 Sep 2025 04:48:20 +0000 Manifest this update: Thu 18 Sep 2025 04:43:20 +0000 Manifest next update: Fri 19 Sep 2025 08:16:20 +0000 Files and hashes: 1: 3137392e3130372e35322e302f32322d3234203d3e20323638383234.roa (hash: GXCJwGNSeovJEODltbl+tv+hc1YYl0zHS2TuTav4gew=) 2: 323830343a356233303a3a2f33322d3438203d3e20323638383234.roa (hash: 6f8pVuH01b1SF3mi0On+jZU5yb6oYEzn5QGJJ2ruw7o=) 3: 34352e3137322e3230302e302f32322d3234203d3e20323638383234.roa (hash: 0YsTjeqlNRVyQvgwlwqrsgilyPHmCf1iPKM6xbeuc78=) 4: 01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl (hash: YtrHx7qzoxb7Vkzl7tcPzA8kJSGB07DkK+MBjPXvDhg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 08:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:2a:73:e0:ae:aa:e6:c0:8f:ca:8b:b2:e7:bb:ba:e4:03:9b:00:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C Validity Not Before: Sep 18 04:43:20 2025 GMT Not After : Sep 19 08:16:20 2025 GMT Subject: CN=991B2A748F62A740229E012CA568D2EFCCE2B38E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:9c:7e:b2:4b:c3:76:df:5c:ee:2d:0c:4d: 4c:ea:3d:61:3d:b6:0f:1d:22:30:7d:60:a5:cb:db: 74:60:1e:0f:c1:e4:8c:62:42:c2:01:d0:30:a3:22: 7b:aa:c7:61:20:88:cb:30:ce:3f:51:1f:7d:ef:71: 9d:eb:ac:41:58:11:f2:f8:79:f9:6d:b2:f7:47:5e: f0:f8:9a:d2:b7:37:d1:bd:69:6d:78:83:7b:86:e2: 47:53:4e:c6:1a:01:13:e5:eb:0b:31:e6:b1:80:fb: 32:48:56:a2:14:e8:d1:e0:ac:fa:7d:e6:12:d3:50: 9d:a4:4d:51:38:1a:69:51:4f:3f:f4:b4:bf:4d:6e: 22:2b:92:8d:8f:c6:66:b4:f8:38:1b:da:f9:1d:e2: 87:c2:ec:07:63:e3:d1:47:0f:ba:7b:11:ca:c6:da: c3:aa:68:a4:9b:93:6b:25:32:8b:d2:b2:df:de:87: 56:c2:cb:07:06:be:83:2a:64:fb:80:0b:2c:87:cd: f7:e1:e4:22:de:b2:a8:19:7a:26:2f:9a:93:72:ba: 3f:3c:ce:34:2b:27:b7:9c:51:cf:9c:6f:4c:0b:19: 99:ac:c7:19:00:79:7a:e5:45:a0:c1:80:03:75:00: cd:d9:7a:4e:ca:94:bf:8d:f0:51:d3:df:dc:e7:e4: 48:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1B:2A:74:8F:62:A7:40:22:9E:01:2C:A5:68:D2:EF:CC:E2:B3:8E X509v3 Authority Key Identifier: keyid:01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e6:7e:d2:a7:23:5b:93:65:f7:38:03:17:25:40:5e:ba:99: 8c:67:97:44:01:8f:61:6e:01:f8:b0:98:59:a8:6b:2a:08:ca: cb:16:dd:3b:6c:ae:87:35:21:0f:e5:d1:25:53:22:46:37:bc: 33:fd:43:89:cb:60:d4:09:d2:cd:33:27:0d:76:44:ec:ba:47: 8c:8a:42:90:37:ff:d8:65:2d:5a:96:33:fc:9e:c9:30:c9:53: 5d:58:c2:8e:34:f5:c0:61:00:e1:b9:b1:34:e1:2a:7d:e3:d8: 52:81:f0:15:be:a4:f1:8c:7c:54:62:42:08:27:07:11:fd:0e: 86:be:0f:f7:66:d2:fc:9a:9e:6c:53:36:5e:80:b3:43:85:da: 5d:c2:4a:df:1a:da:0d:02:64:c2:b4:f6:4d:e9:66:79:c2:97: 8e:14:dc:61:32:fb:49:ae:d5:95:71:74:3b:5f:a0:67:5a:d6: 37:93:9c:f2:28:3b:5f:5e:14:6f:df:59:0f:e2:cc:1a:18:a4: af:e0:ba:6a:fc:e7:dd:2a:f1:51:65:0c:01:d6:2e:5e:97:25: 63:02:3c:5b:9b:cd:f1:aa:26:ff:1d:75:14:14:05:43:a8:6a: da:f3:5e:57:6f:96:a3:a6:17:a6:c7:d9:6b:f6:93:79:a6:a1: af:8e:43:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPSpz4K6q5sCPyouy57u65AObAHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFDQjcxMDhCQkNBMjlGNTU0RDQyMUFDRTAzMkI5NzdB QTFCRjY3QzAeFw0yNTA5MTgwNDQzMjBaFw0yNTA5MTkwODE2MjBaMDMxMTAvBgNV BAMTKDk5MUIyQTc0OEY2MkE3NDAyMjlFMDEyQ0E1NjhEMkVGQ0NFMkIzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJJZx+skvDdt9c7i0MTUzqPWE9 tg8dIjB9YKXL23RgHg/B5IxiQsIB0DCjInuqx2EgiMswzj9RH33vcZ3rrEFYEfL4 efltsvdHXvD4mtK3N9G9aW14g3uG4kdTTsYaARPl6wsx5rGA+zJIVqIU6NHgrPp9 5hLTUJ2kTVE4GmlRTz/0tL9NbiIrko2Pxma0+Dgb2vkd4ofC7Adj49FHD7p7EcrG 2sOqaKSbk2slMovSst/eh1bCywcGvoMqZPuACyyHzffh5CLesqgZeiYvmpNyuj88 zjQrJ7ecUc+cb0wLGZmsxxkAeXrlRaDBgAN1AM3Zek7KlL+N8FHT39zn5EhfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmRsqdI9ip0AingEspWjS78zis44wHwYDVR0j BBgwFoAUActxCLvKKfVU1CGs4DK5d6ob9nwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUU0Y0d3elR1V21rTWhtakI0enBjV2d6V2JZVlRKRXlkNU02R2JGU2ZV aUIvMS8wMUNCNzEwOEJCQ0EyOUY1NTRENDIxQUNFMDMyQjk3N0FBMUJGNjdDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQ0I3MTA4QkJDQTI5RjU1 NEQ0MjFBQ0UwMzJCOTc3QUExQkY2N0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUU0Y0d3elR1V21rTWhtakI0enBjV2d6V2JZVlRKRXlkNU02R2JGU2ZVaUIvMS8w MUNCNzEwOEJCQ0EyOUY1NTRENDIxQUNFMDMyQjk3N0FBMUJGNjdDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG+Z+0qcjW5Nl9zgDFyVAXrqZjGeXRAGPYW4B+LCYWahrKgjKyxbdO2yuhzUh D+XRJVMiRje8M/1Dictg1AnSzTMnDXZE7LpHjIpCkDf/2GUtWpYz/J7JMMlTXVjC jjT1wGEA4bmxNOEqfePYUoHwFb6k8Yx8VGJCCCcHEf0Ohr4P92bS/JqebFM2XoCz Q4XaXcJK3xraDQJkwrT2TelmecKXjhTcYTL7Sa7VlXF0O1+gZ1rWN5Oc8ig7X14U b99ZD+LMGhikr+C6avzn3SrxUWUMAdYuXpclYwI8W5vN8aom/x11FBQFQ6hq2vNe V2+Wo6YXpsfZa/aTeaahr45DFQ== -----END CERTIFICATE-----Generated at Thu Sep 18 14:16:21 2025 by rpki-client