$ rpki-client -vvf rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft File: FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft (raw, json) Hash identifier: PBTELCy0QVxsWXPzUlIiA3dNemRKiB1mRGIPIr2j7zw= Subject key identifier: 40:76:77:0D:F1:21:87:74:82:5C:A1:D5:D5:A7:28:3F:E2:09:2D:81 Authority key identifier: FA:A2:0D:01:76:A8:E0:99:3E:B6:3C:7F:51:07:16:3B:BE:5D:BA:8F Certificate issuer: /CN=FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F Certificate serial: 77F2223BE1A4B6F7877EA092C91495BEDE62E60A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft Manifest number: 18 Signing time: Wed 17 Sep 2025 21:10:12 +0000 Manifest this update: Wed 17 Sep 2025 21:05:12 +0000 Manifest next update: Thu 18 Sep 2025 21:36:12 +0000 Files and hashes: 1: 323830343a323837383a3a2f33322d313238203d3e20323633393633.roa (hash: hpg9sOEi3xaCO9v17zpfUf72FMO/U8MEML8fvgpIA8Q=) 2: 3137302e3234362e3136382e302f32322d3332203d3e20323633393633.roa (hash: 3hBRIGCUqb3DIjYAKZm9OcITGyCs0TuU0X+4zHfoRVQ=) 3: FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl (hash: APT1f382Ne4YvbSC5E6kl0YjVxTTNQH2XihXO2ATNUs=) 4: 3133382e3231392e3232302e302f32322d3332203d3e20323633393633.roa (hash: dgQenF0SOCgMjKxMC4O4DFcfxi1LaXIDVtj0og24Gxc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 18 Sep 2025 21:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:f2:22:3b:e1:a4:b6:f7:87:7e:a0:92:c9:14:95:be:de:62:e6:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F Validity Not Before: Sep 17 21:05:12 2025 GMT Not After : Sep 18 21:36:12 2025 GMT Subject: CN=4076770DF1218774825CA1D5D5A7283FE2092D81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ed:e5:a3:97:45:66:ea:d5:6a:47:e6:63:4f: 9f:e1:1a:c5:79:90:a1:b2:e2:06:ad:6c:3d:f6:55: d7:79:39:32:b1:c7:4c:0a:57:5f:a0:9d:11:81:e4: 8a:56:98:40:4b:19:c4:fb:26:03:62:2c:6f:ba:d7: b8:ff:09:2d:26:e6:94:3b:9f:ab:0e:1b:3e:51:37: 80:ac:b6:8a:eb:ed:f6:c2:57:50:1c:66:31:80:77: 0f:d5:50:6c:e1:e7:d2:26:8c:37:2f:9e:a0:9b:f5: bf:af:31:d6:9c:b0:01:31:35:fe:ac:69:10:34:82: 70:58:2a:d0:d4:04:31:02:88:bf:c8:ec:d5:30:ac: 3b:cf:ba:19:d4:de:83:b2:b5:db:30:56:29:48:fb: 2d:97:c2:10:a3:3b:9e:5e:f5:d9:f1:de:75:a6:f7: c8:60:cc:c8:b3:3a:92:0c:42:e9:a8:fa:06:51:9d: 26:b1:54:a8:bd:c4:24:33:ae:9d:85:04:e5:37:69: de:fa:92:9e:a1:84:a6:bb:92:22:af:4f:6f:11:2e: 59:a0:3e:a1:29:93:93:80:77:69:4f:c1:dc:92:89: 48:35:05:ee:75:94:40:d4:a0:e3:cb:b4:34:79:89: 46:f5:9f:6f:cb:4d:1f:9a:be:7c:76:8a:31:28:b1: ae:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:76:77:0D:F1:21:87:74:82:5C:A1:D5:D5:A7:28:3F:E2:09:2D:81 X509v3 Authority Key Identifier: keyid:FA:A2:0D:01:76:A8:E0:99:3E:B6:3C:7F:51:07:16:3B:BE:5D:BA:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e7:51:64:ba:8b:27:bb:f5:5b:48:da:4a:04:aa:ae:0e:e9: 69:4e:29:39:a9:02:5c:4f:ec:8c:4d:c2:79:33:90:78:2a:20: 46:96:7c:67:04:31:bf:ac:1f:e7:18:6a:e2:ee:67:e3:6d:9f: 31:c8:af:dd:a1:6a:78:a3:cf:a5:d8:01:70:3d:6c:70:83:3a: 9b:00:17:70:97:4a:61:b0:42:6a:b1:b6:5d:ce:48:b2:63:41: c2:b0:a5:53:05:68:5a:19:9e:e0:c1:49:63:8b:48:9b:e8:5b: 28:35:0d:75:fc:f1:cd:1d:08:03:6e:09:72:2a:fa:0d:d3:30: 77:5f:43:bc:20:8b:d6:99:f8:8b:79:3b:cc:21:fa:40:74:a5: 45:92:3c:96:9e:8d:f7:8e:0e:cc:65:db:79:3e:fa:b7:5e:2a: 67:7e:a7:67:82:06:70:7e:ba:69:f8:0f:d4:e4:bb:4f:b1:d6: e8:d8:4c:b7:b1:1a:8b:e4:a2:ae:70:7c:f6:eb:c6:e8:61:ea: df:e5:8f:12:51:af:f8:c1:ba:db:12:06:e7:40:30:65:0d:55: cb:47:3d:55:35:62:0b:48:13:b3:73:0a:0b:a0:7b:4a:27:f5: 7f:9d:b7:67:10:bc:45:25:50:c0:3a:48:30:bf:51:a2:d8:0a: 01:4d:be:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUd/IiO+GktveHfqCSyRSVvt5i5gowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFBMjBEMDE3NkE4RTA5OTNFQjYzQzdGNTEwNzE2M0JC RTVEQkE4RjAeFw0yNTA5MTcyMTA1MTJaFw0yNTA5MTgyMTM2MTJaMDMxMTAvBgNV BAMTKDQwNzY3NzBERjEyMTg3NzQ4MjVDQTFENUQ1QTcyODNGRTIwOTJEODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB7eWjl0Vm6tVqR+ZjT5/hGsV5 kKGy4gatbD32Vdd5OTKxx0wKV1+gnRGB5IpWmEBLGcT7JgNiLG+617j/CS0m5pQ7 n6sOGz5RN4Cstorr7fbCV1AcZjGAdw/VUGzh59ImjDcvnqCb9b+vMdacsAExNf6s aRA0gnBYKtDUBDECiL/I7NUwrDvPuhnU3oOytdswVilI+y2XwhCjO55e9dnx3nWm 98hgzMizOpIMQumo+gZRnSaxVKi9xCQzrp2FBOU3ad76kp6hhKa7kiKvT28RLlmg PqEpk5OAd2lPwdySiUg1Be51lEDUoOPLtDR5iUb1n2/LTR+avnx2ijEosa71AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQHZ3DfEhh3SCXKHV1acoP+IJLYEwHwYDVR0j BBgwFoAU+qINAXao4Jk+tjx/UQcWO75duo8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2FKQW5ENVBOS3B4S3hxOWRRSkdmMm5RTko1TXBUbnF3NVA3YTFYWHhI ZkcvMC9GQUEyMEQwMTc2QThFMDk5M0VCNjNDN0Y1MTA3MTYzQkJFNURCQThGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBQTIwRDAxNzZBOEUwOTkz RUI2M0M3RjUxMDcxNjNCQkU1REJBOEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2FKQW5ENVBOS3B4S3hxOWRRSkdmMm5RTko1TXBUbnF3NVA3YTFYWHhIZkcvMC9G QUEyMEQwMTc2QThFMDk5M0VCNjNDN0Y1MTA3MTYzQkJFNURCQThGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEOdRZLqLJ7v1W0jaSgSqrg7paU4pOakCXE/sjE3CeTOQeCogRpZ8ZwQxv6wf 5xhq4u5n422fMciv3aFqeKPPpdgBcD1scIM6mwAXcJdKYbBCarG2Xc5IsmNBwrCl UwVoWhme4MFJY4tIm+hbKDUNdfzxzR0IA24Jcir6DdMwd19DvCCL1pn4i3k7zCH6 QHSlRZI8lp6N944OzGXbeT76t14qZ36nZ4IGcH66afgP1OS7T7HW6NhMt7Eai+Si rnB89uvG6GHq3+WPElGv+MG62xIG50AwZQ1Vy0c9VTViC0gTs3MKC6B7Sif1f523 ZxC8RSVQwDpIML9RotgKAU2+Dg== -----END CERTIFICATE-----Generated at Thu Sep 18 10:41:54 2025 by rpki-client