$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft File: 4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft (raw, json) Hash identifier: Uc1EaL360OBTUHKs1KWrJpeNrdLx0qy3mT0lOVn3Pss= Subject key identifier: B9:66:20:58:5D:E0:5B:12:45:95:A9:33:77:A9:F5:40:5C:E8:E4:C8 Authority key identifier: 4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E Certificate issuer: /CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E Certificate serial: 1402E5042981CBD2F376A901772BBEEDA23B964F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer Subject info access: rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft Manifest number: 0268 Signing time: Tue 19 Aug 2025 23:25:14 +0000 Manifest this update: Tue 19 Aug 2025 23:20:14 +0000 Manifest next update: Thu 21 Aug 2025 03:24:14 +0000 Files and hashes: 1: 323830343a313165303a3a2f33322d3335203d3e20323633343435.roa (hash: l52S43eaKfvUZ2t/kqDe9o3Cqn1Y9zJ+3VEnL0T6tag=) 2: 323830343a313165303a343230303a3a2f33392d3339203d3e20323633343435.roa (hash: 6tg5sOgRuiUxwwUq/7zsZLx+hQOy6cWz5ENkeccHj0I=) 3: 323830343a313165303a343230313a3a2f34382d3438203d3e20323633343435.roa (hash: T+zhAAYd5vuAwlu8lxtEbL3qZyJYr9GqRyZTr/PPqRg=) 4: 3137372e39312e3136342e302f32322d3235203d3e20323633343435.roa (hash: scT74f9+IGXquXgeiznfoCCJYP7gQXwCIwX0K3d7sQY=) 5: 4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl (hash: oV/SIZ6JIRJtsoXZ/vX4xcXrmInFvfE8oF/izwfcC4U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 03:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:02:e5:04:29:81:cb:d2:f3:76:a9:01:77:2b:be:ed:a2:3b:96:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E Validity Not Before: Aug 19 23:20:14 2025 GMT Not After : Aug 21 03:24:14 2025 GMT Subject: CN=B96620585DE05B124595A93377A9F5405CE8E4C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:02:1f:31:1d:e2:db:d3:f9:a9:cc:1e:c1:31: 1c:8e:f6:28:31:71:e0:5c:a7:2b:f3:ff:bf:ed:b3: ea:14:ef:50:72:10:1b:ac:a0:3e:36:1b:dc:3b:6d: 8b:23:b1:94:8a:36:4b:c6:2c:4b:6c:16:53:cf:9e: 73:a6:63:06:1e:b6:be:af:42:e7:4f:47:18:b1:12: f9:0a:dd:7a:66:98:b3:aa:83:8f:67:b7:7f:c3:3f: 88:41:18:59:9d:38:f5:f9:2f:e8:4e:e9:17:b7:35: 4a:e6:a4:3e:cc:2a:24:3d:24:d1:ab:47:25:a0:2c: a4:d5:2a:9c:45:1c:ec:86:90:6e:13:7c:22:c4:f2: 1b:03:b1:49:91:a1:8e:7d:c5:89:c1:d0:2b:d4:d4: 6e:5a:2a:8a:7a:66:05:53:d2:06:43:4b:16:ed:d9: 6e:c5:e5:cc:f3:92:a9:17:a3:13:02:25:38:26:0b: 3e:92:a8:be:2b:8d:55:d0:9a:d6:6d:90:7a:db:40: 7c:b7:a7:bf:2a:72:8f:ff:07:9f:60:ef:6f:96:a3: d7:e4:fb:2d:52:2d:17:41:b0:61:c5:b6:ab:87:b3: ad:cb:db:7e:94:82:f2:51:2f:7f:fa:7a:00:2c:c4: 05:f9:4c:30:9a:37:ea:26:35:36:45:35:71:06:23: 04:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:66:20:58:5D:E0:5B:12:45:95:A9:33:77:A9:F5:40:5C:E8:E4:C8 X509v3 Authority Key Identifier: keyid:4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e9:83:4d:98:6d:9c:dc:16:52:a4:cb:15:4a:30:b8:b3:8b: 2c:ff:de:8e:6b:7c:06:03:57:99:93:10:b3:f3:e7:cc:43:14: c8:38:57:34:5e:84:b3:01:90:2f:2d:45:94:98:b5:32:4a:09: 93:06:66:e6:14:37:ea:ad:03:39:40:11:e2:4d:c1:53:c6:64: 0e:24:17:1d:01:f1:62:35:62:09:91:1b:00:16:cb:31:7a:a2: 84:fc:d5:6e:1c:26:6f:7b:44:30:39:4e:cf:47:42:d3:f9:1f: 5d:9d:14:91:02:ca:31:6f:61:74:4f:c0:5e:26:40:d1:8d:2e: e9:93:45:84:00:1f:09:5a:fa:ca:bf:65:43:e1:90:a0:ae:54: b9:c7:c8:6b:5e:aa:fb:d0:33:bf:d6:89:4b:95:df:d1:39:d5: af:23:58:50:fa:08:bc:2d:b5:44:18:08:55:be:c2:4e:43:2e: 49:cf:3f:ed:86:f9:02:bf:4a:5f:e1:02:08:63:3c:dc:fe:81: 71:59:bd:6f:78:e3:29:54:5c:58:e3:bd:80:03:13:9a:a1:bd: f6:00:12:34:9d:66:24:d5:bc:ce:08:81:48:14:7a:bd:80:d4: 29:d5:ee:44:45:b2:68:86:d5:4c:df:23:d8:13:b8:6a:fa:37: 5d:3f:74:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFALlBCmBy9LzdqkBdyu+7aI7lk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzRTlDRDA5RTNGNEE2OUI0MEI0NEM4QzgxNjFFMUYw MEJFMEY1RTAeFw0yNTA4MTkyMzIwMTRaFw0yNTA4MjEwMzI0MTRaMDMxMTAvBgNV BAMTKEI5NjYyMDU4NURFMDVCMTI0NTk1QTkzMzc3QTlGNTQwNUNFOEU0QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmAh8xHeLb0/mpzB7BMRyO9igx ceBcpyvz/7/ts+oU71ByEBusoD42G9w7bYsjsZSKNkvGLEtsFlPPnnOmYwYetr6v QudPRxixEvkK3XpmmLOqg49nt3/DP4hBGFmdOPX5L+hO6Re3NUrmpD7MKiQ9JNGr RyWgLKTVKpxFHOyGkG4TfCLE8hsDsUmRoY59xYnB0CvU1G5aKop6ZgVT0gZDSxbt 2W7F5czzkqkXoxMCJTgmCz6SqL4rjVXQmtZtkHrbQHy3p78qco//B59g72+Wo9fk +y1SLRdBsGHFtquHs63L236UgvJRL3/6egAsxAX5TDCaN+omNTZFNXEGIwRdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuWYgWF3gWxJFlakzd6n1QFzo5MgwHwYDVR0j BBgwFoAUSz6c0J4/Smm0C0TIyBYeHwC+D14wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjlvc3BXYlZxdFlOWWtQYmZreFZiaWNLZE1EWFdKZ0RCcVJOVXlIUzZE bXgvMC80QjNFOUNEMDlFM0Y0QTY5QjQwQjQ0QzhDODE2MUUxRjAwQkUwRjVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCM0U5Q0QwOUUzRjRBNjlC NDBCNDRDOEM4MTYxRTFGMDBCRTBGNUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Sjlvc3BXYlZxdFlOWWtQYmZreFZiaWNLZE1EWFdKZ0RCcVJOVXlIUzZEbXgvMC80 QjNFOUNEMDlFM0Y0QTY5QjQwQjQ0QzhDODE2MUUxRjAwQkUwRjVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGumDTZhtnNwWUqTLFUowuLOLLP/ejmt8BgNXmZMQs/PnzEMUyDhXNF6EswGQ Ly1FlJi1MkoJkwZm5hQ36q0DOUAR4k3BU8ZkDiQXHQHxYjViCZEbABbLMXqihPzV bhwmb3tEMDlOz0dC0/kfXZ0UkQLKMW9hdE/AXiZA0Y0u6ZNFhAAfCVr6yr9lQ+GQ oK5UucfIa16q+9Azv9aJS5Xf0TnVryNYUPoIvC21RBgIVb7CTkMuSc8/7Yb5Ar9K X+ECCGM83P6BcVm9b3jjKVRcWOO9gAMTmqG99gASNJ1mJNW8zgiBSBR6vYDUKdXu REWyaIbVTN8j2BO4avo3XT90Lg== -----END CERTIFICATE-----Generated at Wed Aug 20 17:24:08 2025 by rpki-client