$ rpki-client -vvf rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.mft File: 0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.mft (raw, json) Hash identifier: itXtoOXj+O03BoMpc7QPtoW23Svk7bUwnw8wXI3rVBA= Subject key identifier: 93:D7:70:B6:AC:19:81:ED:40:11:5D:6B:DB:D9:7E:25:6B:93:B3:C1 Authority key identifier: 0F:73:AF:CF:07:9B:05:DD:A5:5B:9F:90:9C:C9:30:63:B7:D1:C1:A2 Certificate issuer: /CN=0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2 Certificate serial: 732C6641FC204291B11E9CD769496D4CE7782B45 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.mft Manifest number: 02C8 Signing time: Thu 18 Sep 2025 16:19:15 +0000 Manifest this update: Thu 18 Sep 2025 16:14:15 +0000 Manifest next update: Fri 19 Sep 2025 18:01:15 +0000 Files and hashes: 1: 0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.crl (hash: Hn4m5OYSFuaAej0Fga+x2tC+x/a3ZWU0fe6WuVQ31zg=) 2: 3137372e34342e3231362e302f32322d3234203d3e20323633353636.roa (hash: bGnR+WkNs7p0RBufr9jEqbqttazLr+HeIQrCdeZTcYY=) 3: 3137302e37392e32382e302f32322d3234203d3e20323633353636.roa (hash: rRcy8ewNN8KtY/VoKPEvFrpVwfoQppvqwOy37SAUArU=) 4: 323830343a6631383a3a2f33322d3438203d3e20323633353636.roa (hash: cXUKgwkHmIVs0YsO9hKZSLfuZAgMe8nKbeE7rT1Twos=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.crl rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 18:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2c:66:41:fc:20:42:91:b1:1e:9c:d7:69:49:6d:4c:e7:78:2b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2 Validity Not Before: Sep 18 16:14:15 2025 GMT Not After : Sep 19 18:01:15 2025 GMT Subject: CN=93D770B6AC1981ED40115D6BDBD97E256B93B3C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0b:90:b8:90:78:31:6e:ae:19:69:ed:3c:a6: 24:bb:22:70:d6:d2:29:43:b4:40:7e:c8:bd:fe:44: 2f:2f:2a:2b:ec:30:b4:a0:09:09:93:d2:38:da:f5: 6d:2e:4c:9d:82:14:ad:08:02:dd:e3:3b:52:c3:c0: 87:ba:09:3e:eb:c6:a0:37:31:ec:9f:96:4b:5a:3d: 25:b6:2d:b8:5c:70:c7:b1:dd:58:36:63:38:bf:aa: c1:31:9e:9a:ac:f4:6d:e0:1b:4d:ed:d0:0e:98:95: ab:d1:1e:5c:02:53:48:03:b9:c4:a3:68:a4:87:a7: 22:82:77:00:da:31:33:df:be:85:9e:3e:9d:17:be: cc:df:65:2c:4b:c8:8e:34:dc:c5:3e:f2:c2:00:c5: 6a:20:93:56:ac:7b:d6:f6:91:fb:e8:f6:9b:3f:3c: 35:fb:cd:f8:65:72:0d:f4:87:ad:38:bf:21:d6:87: 26:bb:19:a9:e1:1a:b7:cc:27:7d:9f:db:62:d5:12: d7:e8:de:6a:86:23:1c:08:05:55:45:f3:bb:5a:57: 50:5e:fd:6e:03:bb:ae:18:c7:26:f4:c8:77:3f:46: c2:dc:a1:c8:db:30:55:30:27:a8:be:14:b9:8b:a0: ba:e5:5e:fc:90:b5:32:2a:4b:12:a3:68:ff:33:e9: c1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D7:70:B6:AC:19:81:ED:40:11:5D:6B:DB:D9:7E:25:6B:93:B3:C1 X509v3 Authority Key Identifier: keyid:0F:73:AF:CF:07:9B:05:DD:A5:5B:9F:90:9C:C9:30:63:B7:D1:C1:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:00:62:67:55:cc:89:74:44:d7:26:08:52:86:79:5f:cf:12: 9a:cb:8a:c3:04:79:b4:8d:3b:c3:36:0c:7f:47:3b:15:07:1c: 77:c6:6f:4c:61:51:d4:0e:44:0f:17:67:3b:cd:0e:d4:93:17: b5:4c:08:89:79:8f:5d:86:45:53:dc:15:db:32:6c:1e:10:7e: 9e:60:b3:75:99:48:af:ec:b2:31:02:75:05:a7:ed:d6:38:0b: bf:51:a5:d4:86:99:fe:7c:9e:d2:18:18:4b:72:6b:ee:8d:51: 7b:c0:95:9e:0a:d7:56:ac:71:62:f6:a6:bc:37:b7:32:ed:33: 5d:8e:ca:99:d7:d3:73:64:4a:7f:74:cd:b0:ce:25:c8:1e:e3: a9:90:3d:3b:ba:fe:b3:41:88:b4:c5:65:23:f6:c1:a5:af:fc: 62:3f:fc:88:6a:ac:93:51:3c:a0:79:af:7d:90:83:52:ea:fa: 04:8d:37:82:69:63:73:7a:e2:5e:cd:fa:bd:e1:42:d3:bf:ca: ed:0b:6d:50:85:a7:a3:89:8f:71:ae:38:1a:bb:7b:06:dd:06: 14:d9:44:e0:e7:1d:a1:be:4b:c2:fb:77:c9:f5:0b:b3:64:66: 33:ab:2d:65:65:8e:f1:dd:28:6f:f5:b0:45:08:c6:37:01:0b: b2:34:ab:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcyxmQfwgQpGxHpzXaUltTOd4K0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY3M0FGQ0YwNzlCMDVEREE1NUI5RjkwOUNDOTMwNjNC N0QxQzFBMjAeFw0yNTA5MTgxNjE0MTVaFw0yNTA5MTkxODAxMTVaMDMxMTAvBgNV BAMTKDkzRDc3MEI2QUMxOTgxRUQ0MDExNUQ2QkRCRDk3RTI1NkI5M0IzQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGC5C4kHgxbq4Zae08piS7InDW 0ilDtEB+yL3+RC8vKivsMLSgCQmT0jja9W0uTJ2CFK0IAt3jO1LDwIe6CT7rxqA3 MeyflktaPSW2LbhccMex3Vg2Yzi/qsExnpqs9G3gG03t0A6YlavRHlwCU0gDucSj aKSHpyKCdwDaMTPfvoWePp0XvszfZSxLyI403MU+8sIAxWogk1ase9b2kfvo9ps/ PDX7zfhlcg30h604vyHWhya7GanhGrfMJ32f22LVEtfo3mqGIxwIBVVF87taV1Be /W4Du64Yxyb0yHc/RsLcocjbMFUwJ6i+FLmLoLrlXvyQtTIqSxKjaP8z6cGxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUk9dwtqwZge1AEV1r29l+JWuTs8EwHwYDVR0j BBgwFoAUD3OvzwebBd2lW5+QnMkwY7fRwaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDRhZlhyZVBlWW1iUkMyaWllVU5YeWJGVXdwd2U4cW50dnYyaTJySkFw c2QvMS8wRjczQUZDRjA3OUIwNUREQTU1QjlGOTA5Q0M5MzA2M0I3RDFDMUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGNzNBRkNGMDc5QjA1RERB NTVCOUY5MDlDQzkzMDYzQjdEMUMxQTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDRhZlhyZVBlWW1iUkMyaWllVU5YeWJGVXdwd2U4cW50dnYyaTJySkFwc2QvMS8w RjczQUZDRjA3OUIwNUREQTU1QjlGOTA5Q0M5MzA2M0I3RDFDMUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOgBiZ1XMiXRE1yYIUoZ5X88SmsuKwwR5tI07wzYMf0c7FQccd8ZvTGFR1A5E DxdnO80O1JMXtUwIiXmPXYZFU9wV2zJsHhB+nmCzdZlIr+yyMQJ1Baft1jgLv1Gl 1IaZ/nye0hgYS3Jr7o1Re8CVngrXVqxxYvamvDe3Mu0zXY7KmdfTc2RKf3TNsM4l yB7jqZA9O7r+s0GItMVlI/bBpa/8Yj/8iGqsk1E8oHmvfZCDUur6BI03gmljc3ri Xs36veFC07/K7QttUIWno4mPca44Grt7Bt0GFNlE4Ocdob5Lwvt3yfULs2RmM6st ZWWO8d0ob/WwRQjGNwELsjSrAg== -----END CERTIFICATE-----Generated at Fri Sep 19 00:00:12 2025 by rpki-client