$ rpki-client -vvf rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft File: D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft (raw, json) Hash identifier: Vn4sila/drn03yLOUV/3ZwplaRpA92Y8o1qs6g3eruE= Subject key identifier: E4:F8:62:6D:10:8F:35:AE:05:B8:28:C8:32:DF:72:57:B7:70:44:18 Authority key identifier: D6:30:86:E4:2E:9B:AB:A0:28:DC:D8:D6:5C:FF:50:CE:EF:BD:78:DC Certificate issuer: /CN=D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC Certificate serial: 2C73222B241C4FD9B37ADFE8B2F5478540BC3001 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer Subject info access: rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft Manifest number: 02C8 Signing time: Fri 19 Sep 2025 09:10:58 +0000 Manifest this update: Fri 19 Sep 2025 09:05:58 +0000 Manifest next update: Sat 20 Sep 2025 10:55:58 +0000 Files and hashes: 1: 323830343a3934633a3a2f33322d3438203d3e20323633303731.roa (hash: a+ZxC/aVIvRBiL+9b6UmCNXG86FPx17UdrDq464ohKI=) 2: 3138362e3233322e3138382e302f32322d3234203d3e20323633303731.roa (hash: QZ++cLr6ePWgalsSJXAkh2lAerAWd1JhyTtP73I1+S8=) 3: 3139312e362e3134342e302f32312d3234203d3e20323633303731.roa (hash: 3z/seUfwbtY8VHvQVEp/hjesW7X+hzHuxNmo8T4n9yI=) 4: D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl (hash: Kxq2rX5lxEdtI3jREb76RgPknPmR5O+dXQVCDno8uoY=) 5: 3137372e37332e35362e302f32322d3234203d3e20323633303731.roa (hash: 0DCCZJbrhxGS3fKPi1a5Yh23caoQ1m2nGZ+Ls0nr36Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Sep 2025 10:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:73:22:2b:24:1c:4f:d9:b3:7a:df:e8:b2:f5:47:85:40:bc:30:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC Validity Not Before: Sep 19 09:05:58 2025 GMT Not After : Sep 20 10:55:58 2025 GMT Subject: CN=E4F8626D108F35AE05B828C832DF7257B7704418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9f:62:fd:96:d9:ee:86:3d:51:0a:1f:83:94: a8:8b:6b:7a:86:8b:b5:09:73:cd:66:2e:39:f9:26: 75:7b:fc:46:11:8d:36:17:60:bc:c8:db:cc:66:df: 81:65:20:28:71:9d:16:65:48:3d:16:e8:8c:ab:9e: 89:48:2c:9b:04:73:18:24:de:65:3a:99:fd:75:07: 11:b4:cc:99:a7:28:88:47:26:89:29:54:be:ef:e9: 0a:7e:3a:83:86:e9:ba:c9:1f:de:1f:47:0e:87:6d: 70:11:07:77:15:1a:56:4c:cc:58:78:79:98:cd:e2: 76:b8:21:fc:57:4c:3a:ee:6e:49:06:9e:29:b7:a4: d5:65:d1:e4:3a:21:aa:f7:dc:9a:7b:a5:66:02:b7: eb:21:b5:b6:80:70:07:38:6d:3b:1f:75:e0:2d:c2: 7e:1d:2c:d0:1b:c2:79:ae:f5:bb:55:ad:4d:fa:c5: ef:c9:7a:c8:72:20:b6:97:34:97:21:9d:38:8d:f3: ed:93:42:83:ba:0c:7b:ca:7d:a1:bc:84:92:1e:aa: 93:99:c7:d5:c2:5e:88:ae:0b:b7:a9:9f:71:67:00: 2d:14:08:7c:28:76:c7:2d:90:14:d3:4b:69:89:4c: 77:e7:02:6a:6a:e9:26:c2:a6:b9:a8:ee:5b:77:4c: 57:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F8:62:6D:10:8F:35:AE:05:B8:28:C8:32:DF:72:57:B7:70:44:18 X509v3 Authority Key Identifier: keyid:D6:30:86:E4:2E:9B:AB:A0:28:DC:D8:D6:5C:FF:50:CE:EF:BD:78:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:55:bb:04:1f:43:a5:9b:d0:ed:b6:2a:0f:98:18:f6:dd:55: 4f:1e:65:70:57:b2:fe:37:89:31:95:d0:ae:da:09:4e:59:ad: ca:d5:74:15:1c:a4:d0:89:0e:5d:47:7f:ba:3c:ce:a5:c2:69: 84:74:4d:2f:f7:e9:07:83:8f:c4:14:da:cf:ae:4f:34:cd:bb: 63:be:a9:3d:ee:91:fa:55:c8:6c:81:70:cc:0d:b9:f3:ff:8f: 60:39:b1:1a:13:f2:91:c6:f5:11:dc:6d:f5:84:0a:da:ca:54: 26:b6:df:af:2e:ee:0b:8e:99:44:f5:7c:d2:9d:10:f3:3f:06: fa:6d:29:42:f8:7e:19:c8:79:c7:74:ef:6c:ab:06:e2:fe:6e: 63:cc:3d:67:33:fc:0a:3c:2f:9a:af:5f:12:5b:2e:15:01:0d: 8b:ce:01:ba:d6:9b:eb:a5:f4:79:a8:11:11:3f:cc:86:72:60: 1f:01:47:f7:51:51:c6:c0:8b:5f:b6:03:42:8d:89:84:a9:b7: dc:d1:5b:fe:e9:cf:24:09:fd:fc:cf:6d:6c:05:57:48:4c:06: ba:93:9b:ea:f9:5b:5a:c3:20:3f:75:b0:7c:f2:f5:09:3e:94: e5:fa:9c:ff:48:60:c2:03:80:7a:1a:e1:c3:49:73:33:c1:73: 0f:12:7a:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULHMiKyQcT9mzet/osvVHhUC8MAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYzMDg2RTQyRTlCQUJBMDI4RENEOEQ2NUNGRjUwQ0VF RkJENzhEQzAeFw0yNTA5MTkwOTA1NThaFw0yNTA5MjAxMDU1NThaMDMxMTAvBgNV BAMTKEU0Rjg2MjZEMTA4RjM1QUUwNUI4MjhDODMyREY3MjU3Qjc3MDQ0MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0n2L9ltnuhj1RCh+DlKiLa3qG i7UJc81mLjn5JnV7/EYRjTYXYLzI28xm34FlIChxnRZlSD0W6IyrnolILJsEcxgk 3mU6mf11BxG0zJmnKIhHJokpVL7v6Qp+OoOG6brJH94fRw6HbXARB3cVGlZMzFh4 eZjN4na4IfxXTDrubkkGnim3pNVl0eQ6Iar33Jp7pWYCt+shtbaAcAc4bTsfdeAt wn4dLNAbwnmu9btVrU36xe/JeshyILaXNJchnTiN8+2TQoO6DHvKfaG8hJIeqpOZ x9XCXoiuC7epn3FnAC0UCHwodsctkBTTS2mJTHfnAmpq6SbCprmo7lt3TFcTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5PhibRCPNa4FuCjIMt9yV7dwRBgwHwYDVR0j BBgwFoAU1jCG5C6bq6Ao3NjWXP9Qzu+9eNwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzJRclpiUUw4dm1EdnIyR2YxTk5xU1lEWEo4b0FxQ3dnQmExMjMxSG5l U00vMS9ENjMwODZFNDJFOUJBQkEwMjhEQ0Q4RDY1Q0ZGNTBDRUVGQkQ3OERDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2MzA4NkU0MkU5QkFCQTAy OERDRDhENjVDRkY1MENFRUZCRDc4REMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzJRclpiUUw4dm1EdnIyR2YxTk5xU1lEWEo4b0FxQ3dnQmExMjMxSG5lU00vMS9E NjMwODZFNDJFOUJBQkEwMjhEQ0Q4RDY1Q0ZGNTBDRUVGQkQ3OERDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnVW7BB9DpZvQ7bYqD5gY9t1VTx5lcFey/jeJMZXQrtoJTlmtytV0FRyk0IkO XUd/ujzOpcJphHRNL/fpB4OPxBTaz65PNM27Y76pPe6R+lXIbIFwzA258/+PYDmx GhPykcb1Edxt9YQK2spUJrbfry7uC46ZRPV80p0Q8z8G+m0pQvh+Gch5x3TvbKsG 4v5uY8w9ZzP8Cjwvmq9fElsuFQENi84Butab66X0eagRET/MhnJgHwFH91FRxsCL X7YDQo2JhKm33NFb/unPJAn9/M9tbAVXSEwGupOb6vlbWsMgP3WwfPL1CT6U5fqc /0hgwgOAehrhw0lzM8FzDxJ6JA== -----END CERTIFICATE-----Generated at Fri Sep 19 12:11:26 2025 by rpki-client