$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft File: 4D2990768E393F68FA14BF3F1F2B973208903FBC.mft (raw, json) Hash identifier: HgfaxxEVyKblvItxVOHqIQKUIVJplglQT2JT6WPlDMg= Subject key identifier: 36:BD:BC:7A:BD:DB:7D:C1:28:A7:65:32:38:79:F2:91:45:CB:B6:58 Authority key identifier: 4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC Certificate issuer: /CN=4D2990768E393F68FA14BF3F1F2B973208903FBC Certificate serial: 0AE6A3C35AA32BCD8EB5BAA21B28551A5A040296 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer Subject info access: rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft Manifest number: 0173 Signing time: Wed 20 Aug 2025 09:58:43 +0000 Manifest this update: Wed 20 Aug 2025 09:53:43 +0000 Manifest next update: Thu 21 Aug 2025 11:18:43 +0000 Files and hashes: 1: 323830343a316262383a3a2f33322d313238203d3e203631373435.roa (hash: dpARCrJGTbLpg4On6cAirQCdXCQ94JOs1o9PPF+Mus8=) 2: 3138362e3231392e3234382e302f32322d3332203d3e203631373435.roa (hash: /4kndRTLPJ7z6o8eMCZNO62enqlcrNH71OhR/rdSbZ4=) 3: 4D2990768E393F68FA14BF3F1F2B973208903FBC.crl (hash: b5+UzhZk5WLBHW4s63FgYwNgLx3etNBVCP+ENmRwH/Q=) 4: 3133312e37322e3135322e302f32322d3332203d3e203631373435.roa (hash: aaX0evGI+LGTHR5P0i5qo8nlo7eCrPGc7oIK0Znz8is=) 5: 3138362e3231392e3235342e302f32342d3332203d3e203631373435.roa (hash: 4ial0zG0Hlh0wQryAzFWfdM1DwjPagTJxoQv7hSVoFs=) 6: 3138362e3231392e3235322e302f32332d3332203d3e203631373435.roa (hash: V2aqog16FJYFlZorlWvK3dBz+3plH62MXPrM2Tg2udM=) 7: 3138362e3231392e3234302e302f32312d3332203d3e203631373435.roa (hash: Aulf2a9wygKS41lUZettmlaapWqTlD3AxwpFjZ12yBU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 11:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e6:a3:c3:5a:a3:2b:cd:8e:b5:ba:a2:1b:28:55:1a:5a:04:02:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D2990768E393F68FA14BF3F1F2B973208903FBC Validity Not Before: Aug 20 09:53:43 2025 GMT Not After : Aug 21 11:18:43 2025 GMT Subject: CN=36BDBC7ABDDB7DC128A765323879F29145CBB658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:35:e7:1c:5a:53:f8:36:36:24:cd:07:db: 00:2f:e2:a3:28:4a:cc:e4:20:93:99:6e:4e:2a:90: 43:54:0e:49:ec:ae:c3:75:c3:a5:6a:43:79:36:f0: 7f:e4:41:ac:e9:84:f9:cc:28:35:98:08:78:09:ca: 72:47:84:bb:d0:1b:7e:0f:0d:a7:50:c9:34:20:39: bb:cd:23:19:12:f7:12:50:26:99:5a:c6:8c:b1:1a: 14:ff:6c:59:e7:b0:d1:c0:f9:3c:03:61:ab:d8:55: 62:67:f5:81:ae:11:84:31:46:04:e6:ff:a7:c2:ab: 3b:81:ef:68:45:72:51:4a:08:61:fb:f9:57:0f:04: 78:f3:04:6c:1f:0b:66:ac:b5:65:f7:62:9a:18:0f: 72:50:71:41:d9:26:e4:e0:b1:b2:5c:09:72:94:70: e6:12:02:73:a8:f9:78:c3:35:6f:9a:90:d8:a2:2e: 9e:ec:b1:96:15:b8:ef:c2:3c:86:2f:90:29:40:a5: 68:ed:8f:c7:6b:cd:0b:01:06:2e:59:43:ee:90:0e: e7:ef:97:1f:9d:64:d8:de:3d:d7:68:d4:1a:87:c0: 68:86:bb:5a:b3:2a:68:57:b9:78:07:36:88:bd:cd: 71:15:02:a8:7f:45:b5:c8:2f:df:b4:e3:2c:2b:56: 70:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BD:BC:7A:BD:DB:7D:C1:28:A7:65:32:38:79:F2:91:45:CB:B6:58 X509v3 Authority Key Identifier: keyid:4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:16:f9:0e:6b:66:87:d3:ad:c1:23:91:cc:1c:88:64:fb:70: 6f:2e:46:26:34:d8:5f:42:c0:0d:50:da:06:3b:85:88:9e:ff: 81:78:34:10:58:04:04:78:bc:01:e1:d3:71:82:34:6f:ab:f7: 25:75:bf:4c:bc:92:d7:2a:67:2b:0c:66:16:c4:94:48:0f:71: aa:ed:41:04:82:73:3a:c6:28:e7:0a:f9:2e:34:f2:24:d7:a8: 9a:86:fd:d7:9f:45:78:0f:60:6a:1c:4d:7c:24:cc:b3:2e:df: ca:4b:e0:14:d9:7b:7e:01:58:eb:31:4f:62:73:85:dd:b7:06: 16:7f:59:36:b6:b0:d4:0b:b3:11:40:c0:aa:e4:88:3a:42:02: 5d:3b:b3:c7:03:90:6c:92:ee:dd:cb:1a:ae:f1:2f:e4:c0:26: 36:7c:67:e8:0b:c1:03:5f:e6:f7:2a:15:42:de:59:e4:6d:c5: c8:73:0f:52:97:5e:34:9d:34:54:d1:3c:46:40:75:13:35:ec: 81:8f:50:50:22:53:9c:05:ae:48:cc:59:95:55:33:cb:4b:8e: 5c:70:20:64:de:56:c3:da:b7:55:c3:6f:ba:d0:c2:d9:ab:7c: ce:37:2f:08:41:5f:58:12:05:60:16:a3:e7:cb:6b:c3:3d:57: 5c:09:95:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCuajw1qjK82OtbqiGyhVGloEApYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQyOTkwNzY4RTM5M0Y2OEZBMTRCRjNGMUYyQjk3MzIw ODkwM0ZCQzAeFw0yNTA4MjAwOTUzNDNaFw0yNTA4MjExMTE4NDNaMDMxMTAvBgNV BAMTKDM2QkRCQzdBQkREQjdEQzEyOEE3NjUzMjM4NzlGMjkxNDVDQkI2NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxgzXnHFpT+DY2JM0H2wAv4qMo SszkIJOZbk4qkENUDknsrsN1w6VqQ3k28H/kQazphPnMKDWYCHgJynJHhLvQG34P DadQyTQgObvNIxkS9xJQJplaxoyxGhT/bFnnsNHA+TwDYavYVWJn9YGuEYQxRgTm /6fCqzuB72hFclFKCGH7+VcPBHjzBGwfC2astWX3YpoYD3JQcUHZJuTgsbJcCXKU cOYSAnOo+XjDNW+akNiiLp7ssZYVuO/CPIYvkClApWjtj8drzQsBBi5ZQ+6QDufv lx+dZNjePddo1BqHwGiGu1qzKmhXuXgHNoi9zXEVAqh/RbXIL9+04ywrVnC9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNr28er3bfcEop2UyOHnykUXLtlgwHwYDVR0j BBgwFoAUTSmQdo45P2j6FL8/HyuXMgiQP7wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzhDVDhFa1FTbkVyd1VSOWF2MWgxdWNQVVFKaHFUbndURjlhODc0NGgx NGcvMC80RDI5OTA3NjhFMzkzRjY4RkExNEJGM0YxRjJCOTczMjA4OTAzRkJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzREMjk5MDc2OEUzOTNGNjhG QTE0QkYzRjFGMkI5NzMyMDg5MDNGQkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzhDVDhFa1FTbkVyd1VSOWF2MWgxdWNQVVFKaHFUbndURjlhODc0NGgxNGcvMC80 RDI5OTA3NjhFMzkzRjY4RkExNEJGM0YxRjJCOTczMjA4OTAzRkJDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAxb5Dmtmh9OtwSORzByIZPtwby5GJjTYX0LADVDaBjuFiJ7/gXg0EFgEBHi8 AeHTcYI0b6v3JXW/TLyS1ypnKwxmFsSUSA9xqu1BBIJzOsYo5wr5LjTyJNeomob9 159FeA9gahxNfCTMsy7fykvgFNl7fgFY6zFPYnOF3bcGFn9ZNraw1AuzEUDAquSI OkICXTuzxwOQbJLu3csarvEv5MAmNnxn6AvBA1/m9yoVQt5Z5G3FyHMPUpdeNJ00 VNE8RkB1EzXsgY9QUCJTnAWuSMxZlVUzy0uOXHAgZN5Ww9q3VcNvutDC2at8zjcv CEFfWBIFYBaj58trwz1XXAmVPg== -----END CERTIFICATE-----Generated at Wed Aug 20 16:14:18 2025 by rpki-client