$ rpki-client -vvf rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A3EDDFE04A45C8B895057324A100C0F681DF4A77.mft File: A3EDDFE04A45C8B895057324A100C0F681DF4A77.mft (raw, json) Hash identifier: v5HVi70PGXCQXAKibWQyXxRbsBH4f6YrFsUKUTBEcko= Subject key identifier: 64:53:68:4C:5A:48:A2:6B:5D:3F:0F:FC:AE:B5:99:F9:CD:14:AB:92 Authority key identifier: A3:ED:DF:E0:4A:45:C8:B8:95:05:73:24:A1:00:C0:F6:81:DF:4A:77 Certificate issuer: /CN=A3EDDFE04A45C8B895057324A100C0F681DF4A77 Certificate serial: 63F849D411530559AA61DA4C9265D798044DA631 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3EDDFE04A45C8B895057324A100C0F681DF4A77.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A3EDDFE04A45C8B895057324A100C0F681DF4A77.mft Manifest number: 21 Signing time: Thu 18 Sep 2025 09:02:26 +0000 Manifest this update: Thu 18 Sep 2025 08:57:26 +0000 Manifest next update: Fri 19 Sep 2025 10:58:26 +0000 Files and hashes: 1: A3EDDFE04A45C8B895057324A100C0F681DF4A77.crl (hash: J3J2reDc6lvMYkkW04Yh+gaetBh/09/Mt8VH2U0+e6g=) 2: 323830343a323932343a3a2f33322d3438203d3e20323634303030.roa (hash: 425fRHipWeVVhwQE9GftMQzYng6sGZHWVyNs2OmtrKw=) 3: 3134332e302e3132342e302f32322d3234203d3e20323634303030.roa (hash: ijHgzffF1WmSmPVPdsbjAHJZ2LyVKnmtEMBPuBZWZB4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A3EDDFE04A45C8B895057324A100C0F681DF4A77.crl rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A3EDDFE04A45C8B895057324A100C0F681DF4A77.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3EDDFE04A45C8B895057324A100C0F681DF4A77.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 10:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f8:49:d4:11:53:05:59:aa:61:da:4c:92:65:d7:98:04:4d:a6:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3EDDFE04A45C8B895057324A100C0F681DF4A77 Validity Not Before: Sep 18 08:57:26 2025 GMT Not After : Sep 19 10:58:26 2025 GMT Subject: CN=6453684C5A48A26B5D3F0FFCAEB599F9CD14AB92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9d:4c:ac:10:e0:00:33:a0:15:34:f0:97:fd: 8d:50:02:18:1e:0d:75:b5:84:f3:c3:1f:01:cf:09: 1f:27:ed:7e:62:f9:c3:c1:50:cf:fe:41:42:a1:ad: 2f:c8:ca:3a:76:2c:7f:89:07:e3:28:83:3f:8b:38: 9c:f6:08:10:3c:fe:44:72:d3:05:dd:08:c8:e9:8c: e6:d4:0e:39:c2:d8:7f:29:21:da:08:54:54:fe:08: 0b:e1:a6:53:07:93:e9:33:31:ff:3c:c7:57:7d:1a: 5f:77:01:89:89:c9:8d:0f:16:99:aa:59:75:5a:d1: 0a:fa:ad:be:b5:41:a3:ec:7f:61:9c:8d:bc:d7:81: 50:37:cd:71:e2:a6:7c:9f:71:4e:49:5c:7e:6d:ca: cf:47:67:1d:0b:67:70:ba:37:2f:93:6a:b0:b8:57: 33:42:3f:da:9d:c6:b3:57:a3:e2:1d:11:d0:28:df: 52:a3:50:5c:11:1c:94:e5:79:da:b6:f5:dd:48:fd: 53:3d:50:05:ec:2a:e6:16:9b:ad:f7:5f:24:66:fd: 90:c5:84:ed:b1:f8:17:a0:fd:e7:85:12:be:65:1b: 87:1d:6d:9b:bf:23:97:c5:f2:ce:8a:42:52:d4:da: 4f:81:af:d4:a7:06:16:7c:b1:fc:25:fc:64:73:67: ff:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:53:68:4C:5A:48:A2:6B:5D:3F:0F:FC:AE:B5:99:F9:CD:14:AB:92 X509v3 Authority Key Identifier: keyid:A3:ED:DF:E0:4A:45:C8:B8:95:05:73:24:A1:00:C0:F6:81:DF:4A:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A3EDDFE04A45C8B895057324A100C0F681DF4A77.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3EDDFE04A45C8B895057324A100C0F681DF4A77.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A3EDDFE04A45C8B895057324A100C0F681DF4A77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:3b:9c:8f:16:40:bd:29:f3:15:d8:fe:e2:31:f4:d7:b9:ac: d4:05:32:8c:3e:57:6e:84:c1:ba:67:dd:e7:b5:56:a9:e1:af: 1c:6d:bc:c2:66:db:bf:b5:fb:0e:f2:0a:5a:34:f4:e9:1e:52: 59:ae:84:f2:81:00:9f:75:a7:87:c1:5f:99:c2:6f:e0:36:34: 37:b6:5d:c3:44:74:a4:c4:ad:40:0c:9b:a8:2f:4f:b2:f7:5b: 98:86:ba:b0:92:5b:ea:ef:81:36:0d:85:b0:75:4c:66:9d:e4: 71:85:2d:69:eb:cd:b6:ea:79:4d:c2:6d:57:20:e2:fc:5d:75: 8e:ff:fa:57:fc:19:49:4e:a8:70:7b:c5:21:33:da:07:3c:41: 8c:c3:61:ac:22:90:79:fe:2e:93:24:bd:46:0c:89:8a:9e:9f: 7c:85:0d:9d:74:bb:00:77:99:ef:cb:3a:e9:54:6d:9b:91:92: f5:14:08:07:dd:e0:44:e0:c5:dd:98:5b:63:51:6e:59:ed:66: d4:95:61:c9:a4:95:11:2c:75:98:ac:aa:36:06:df:f4:0c:e1: 53:ed:d2:62:4c:01:86:8f:88:eb:43:95:ed:1a:84:3d:ed:17: 06:ce:1f:01:9e:17:4c:38:3c:50:05:0b:c7:31:eb:45:4e:70: 71:a1:1b:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUY/hJ1BFTBVmqYdpMkmXXmARNpjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFRERGRTA0QTQ1QzhCODk1MDU3MzI0QTEwMEMwRjY4 MURGNEE3NzAeFw0yNTA5MTgwODU3MjZaFw0yNTA5MTkxMDU4MjZaMDMxMTAvBgNV BAMTKDY0NTM2ODRDNUE0OEEyNkI1RDNGMEZGQ0FFQjU5OUY5Q0QxNEFCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXnUysEOAAM6AVNPCX/Y1QAhge DXW1hPPDHwHPCR8n7X5i+cPBUM/+QUKhrS/Iyjp2LH+JB+Mogz+LOJz2CBA8/kRy 0wXdCMjpjObUDjnC2H8pIdoIVFT+CAvhplMHk+kzMf88x1d9Gl93AYmJyY0PFpmq WXVa0Qr6rb61QaPsf2GcjbzXgVA3zXHipnyfcU5JXH5tys9HZx0LZ3C6Ny+TarC4 VzNCP9qdxrNXo+IdEdAo31KjUFwRHJTledq29d1I/VM9UAXsKuYWm633XyRm/ZDF hO2x+Beg/eeFEr5lG4cdbZu/I5fF8s6KQlLU2k+Br9SnBhZ8sfwl/GRzZ/93AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZFNoTFpIomtdPw/8rrWZ+c0Uq5IwHwYDVR0j BBgwFoAUo+3f4EpFyLiVBXMkoQDA9oHfSncwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUtqQ2RTaGt2NFk5Ymh2Q0p5eUd6OTRGTllZN3lQYmk1MmRUUFp6VkxL cHIvMC9BM0VEREZFMDRBNDVDOEI4OTUwNTczMjRBMTAwQzBGNjgxREY0QTc3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EzRURERkUwNEE0NUM4Qjg5 NTA1NzMyNEExMDBDMEY2ODFERjRBNzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUtqQ2RTaGt2NFk5Ymh2Q0p5eUd6OTRGTllZN3lQYmk1MmRUUFp6VkxLcHIvMC9B M0VEREZFMDRBNDVDOEI4OTUwNTczMjRBMTAwQzBGNjgxREY0QTc3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACDucjxZAvSnzFdj+4jH017ms1AUyjD5XboTBumfd57VWqeGvHG28wmbbv7X7 DvIKWjT06R5SWa6E8oEAn3Wnh8FfmcJv4DY0N7Zdw0R0pMStQAybqC9PsvdbmIa6 sJJb6u+BNg2FsHVMZp3kcYUtaevNtup5TcJtVyDi/F11jv/6V/wZSU6ocHvFITPa BzxBjMNhrCKQef4ukyS9RgyJip6ffIUNnXS7AHeZ78s66VRtm5GS9RQIB93gRODF 3ZhbY1FuWe1m1JVhyaSVESx1mKyqNgbf9AzhU+3SYkwBho+I60OV7RqEPe0XBs4f AZ4XTDg8UAULxzHrRU5wcaEbWA== -----END CERTIFICATE-----Generated at Thu Sep 18 13:40:22 2025 by rpki-client