$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft File: D539CF929B6A6A2B9596B922F417FAD917799ED7.mft (raw, json) Hash identifier: 4aAzC95AbJPDwl98bZ9119odcAAOrycOvIzkswsJd+U= Subject key identifier: 9E:33:9C:96:C1:A3:7D:37:77:73:7D:D4:A8:36:62:ED:83:39:C2:C1 Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 Certificate issuer: /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Certificate serial: 405101DBA479632D5E674EC7445F25300C3A67A2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft Manifest number: 02CA Signing time: Thu 18 Sep 2025 02:25:19 +0000 Manifest this update: Thu 18 Sep 2025 02:20:19 +0000 Manifest next update: Fri 19 Sep 2025 05:39:19 +0000 Files and hashes: 1: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (hash: 01pAW4QCHBpNqYLYxhHBFF+Hirycj7LT0087UnT0sog=) 2: 34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (hash: FE+7zbwcRwFNCNZQz6JTL4PFhynEDJA2jUUaWQGOwlw=) 3: D539CF929B6A6A2B9596B922F417FAD917799ED7.crl (hash: t1tiUHGMlgdfS+Cy7EjMIjFgEpEn7uo5x0YVtIU+CSg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 05:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:51:01:db:a4:79:63:2d:5e:67:4e:c7:44:5f:25:30:0c:3a:67:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Validity Not Before: Sep 18 02:20:19 2025 GMT Not After : Sep 19 05:39:19 2025 GMT Subject: CN=9E339C96C1A37D3777737DD4A83662ED8339C2C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f5:10:e5:0a:6f:a0:4e:6c:a4:79:52:f3:ab: f4:17:6f:e9:ba:a3:d1:be:e6:7d:6d:0d:0d:55:59: e5:29:35:9f:c9:12:79:08:bf:97:4e:db:84:ab:e1: 96:03:3c:0f:d0:c8:60:12:4c:d7:87:86:a1:d7:fe: ac:42:94:1b:d7:a6:82:52:02:58:75:ac:d7:a9:aa: ed:0e:dc:5e:8a:61:1a:1b:03:70:86:e3:58:33:cf: a6:56:b8:b9:0c:90:e9:5f:ef:85:be:72:0b:e9:08: b8:8d:41:1d:62:ce:1e:f4:a9:6f:0f:ff:c9:5e:52: ce:02:5d:4b:6e:2f:48:4c:b4:ec:c0:0b:dc:9d:38: ab:34:de:ca:14:aa:8a:45:74:cc:7c:c4:05:b4:26: f8:f1:91:ea:31:f4:6d:d6:c7:61:f8:ba:f3:ac:2b: 74:8b:80:2c:21:89:40:81:dc:c4:e6:06:00:4c:88: 7b:a0:7e:a3:2e:fd:31:b8:01:0b:50:46:ef:1d:d1: ab:03:3f:de:9e:8f:d7:49:41:e3:e3:c7:27:9d:83: b9:f8:f6:31:be:9a:2b:50:6d:46:f6:73:ab:87:84: b1:79:51:e7:90:2f:9b:5f:f6:bb:e4:dd:e4:2b:87: d4:14:d1:1c:6b:77:ef:08:c4:39:14:9f:e6:2e:dc: 16:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:33:9C:96:C1:A3:7D:37:77:73:7D:D4:A8:36:62:ED:83:39:C2:C1 X509v3 Authority Key Identifier: keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:94:e3:33:9a:56:00:fe:d6:54:95:41:a7:c0:96:af:bc:16: 23:ed:76:b7:44:4f:c9:7b:e2:7f:18:88:20:47:1f:9a:26:32: 11:0c:42:3a:07:00:32:a7:e9:17:7a:08:a4:ce:59:f4:12:c0: 3e:bc:eb:3d:a0:db:aa:44:3c:e6:4a:d6:f2:ec:c2:f0:49:53: ea:25:e7:8e:a2:1c:6b:56:a0:24:4a:1d:1e:b9:7d:bf:78:2d: 18:86:19:27:2f:8b:67:7a:4c:3a:2f:51:1b:68:87:1f:ab:2f: 80:01:67:ed:61:63:6d:cc:3f:06:01:f8:51:98:1a:dc:54:36: 29:b0:2e:6a:7b:49:ad:38:ce:75:21:4c:3a:0f:21:2c:51:7f: a1:c9:7e:a0:0a:ca:71:6e:9b:6e:5c:36:05:86:0a:f1:ee:be: 5a:b7:8d:42:02:40:ed:21:a5:4b:67:87:bc:08:19:67:09:02: 98:df:4b:c1:1d:4b:05:1f:c1:30:60:97:eb:0d:a9:4c:22:94: f1:6f:62:32:05:72:9b:d4:3f:25:a6:a0:b8:08:1a:8f:63:e4: 2c:c1:69:47:3a:37:a5:d4:b8:65:1e:45:df:57:d7:37:ba:25: 80:b4:cf:d3:65:20:87:a9:a5:93:8e:7b:89:56:37:fa:77:6a: 1f:b5:d0:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQFEB26R5Yy1eZ07HRF8lMAw6Z6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUzOUNGOTI5QjZBNkEyQjk1OTZCOTIyRjQxN0ZBRDkx Nzc5OUVENzAeFw0yNTA5MTgwMjIwMTlaFw0yNTA5MTkwNTM5MTlaMDMxMTAvBgNV BAMTKDlFMzM5Qzk2QzFBMzdEMzc3NzczN0RENEE4MzY2MkVEODMzOUMyQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY9RDlCm+gTmykeVLzq/QXb+m6 o9G+5n1tDQ1VWeUpNZ/JEnkIv5dO24Sr4ZYDPA/QyGASTNeHhqHX/qxClBvXpoJS Alh1rNepqu0O3F6KYRobA3CG41gzz6ZWuLkMkOlf74W+cgvpCLiNQR1izh70qW8P /8leUs4CXUtuL0hMtOzAC9ydOKs03soUqopFdMx8xAW0Jvjxkeox9G3Wx2H4uvOs K3SLgCwhiUCB3MTmBgBMiHugfqMu/TG4AQtQRu8d0asDP96ej9dJQePjxyedg7n4 9jG+mitQbUb2c6uHhLF5UeeQL5tf9rvk3eQrh9QU0Rxrd+8IxDkUn+Yu3BYpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnjOclsGjfTd3c33UqDZi7YM5wsEwHwYDVR0j BBgwFoAU1TnPkptqaiuVlrki9Bf62Rd5ntcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNT M1QvMS9ENTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MzlDRjkyOUI2QTZBMkI5 NTk2QjkyMkY0MTdGQUQ5MTc3OTlFRDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNTM1QvMS9E NTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFpTjM5pWAP7WVJVBp8CWr7wWI+12t0RPyXvifxiIIEcfmiYyEQxCOgcAMqfp F3oIpM5Z9BLAPrzrPaDbqkQ85krW8uzC8ElT6iXnjqIca1agJEodHrl9v3gtGIYZ Jy+LZ3pMOi9RG2iHH6svgAFn7WFjbcw/BgH4UZga3FQ2KbAuantJrTjOdSFMOg8h LFF/ocl+oArKcW6bblw2BYYK8e6+WreNQgJA7SGlS2eHvAgZZwkCmN9LwR1LBR/B MGCX6w2pTCKU8W9iMgVym9Q/JaaguAgaj2PkLMFpRzo3pdS4ZR5F31fXN7olgLTP 02Ugh6mlk457iVY3+ndqH7XQ1w== -----END CERTIFICATE-----Generated at Thu Sep 18 06:08:13 2025 by rpki-client