$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft File: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft (raw, json) Hash identifier: DjB/n/dnU4NpjWRG4j2tF6KCPdWSaQWRzizELR4qbK4= Subject key identifier: B2:4F:8C:66:1F:3F:6A:ED:9C:F7:65:B4:C0:66:58:4C:FC:F1:8B:B5 Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Certificate serial: 334AC00D2E5FA2BA4B4A9DA701D5E4C672871AE3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft Manifest number: 0340 Signing time: Thu 18 Sep 2025 12:39:14 +0000 Manifest this update: Thu 18 Sep 2025 12:34:14 +0000 Manifest next update: Fri 19 Sep 2025 14:23:14 +0000 Files and hashes: 1: 3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa (hash: AJNOOqPt9YDmVyj7oLMiS+ahRBlnaPrzhm3IG8z6/rY=) 2: 323830343a3937383a3a2f33322d313238203d3e20323633303837.roa (hash: xlFzvxIG/gYH0KzWQM5/0pJLtz7KgwD/JIoIT+dykDo=) 3: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl (hash: P782CSe/g1ov+F7SU4uzGeH7U7/zGl1y21cT+N1OjWI=) 4: 3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa (hash: oPMBUQyiQOvcv4tb1YKSLPGxZ04J+5T7lbQU8TfpNP8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 14:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:4a:c0:0d:2e:5f:a2:ba:4b:4a:9d:a7:01:d5:e4:c6:72:87:1a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Validity Not Before: Sep 18 12:34:14 2025 GMT Not After : Sep 19 14:23:14 2025 GMT Subject: CN=B24F8C661F3F6AED9CF765B4C066584CFCF18BB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:06:02:24:71:96:14:11:59:a9:97:6d:51:5c: 9b:98:ea:6d:40:47:13:a2:6b:65:b8:72:16:8c:86: 00:4e:f5:cf:47:1e:0d:f8:2b:5c:11:8c:5f:d2:9d: 84:c9:4b:64:e7:e5:ab:f0:f1:03:28:6f:54:fb:a1: 44:ed:53:77:95:76:42:e3:7f:04:64:9b:6a:cc:cb: d1:71:4f:88:74:9b:c7:1f:4b:49:1d:77:5b:56:a6: 54:08:6d:99:4e:61:b5:a2:21:2e:4e:9d:81:a1:e6: 38:ed:a4:21:1e:02:08:a0:f6:6d:46:c4:04:24:49: 19:77:f1:66:5f:87:e1:48:90:25:b7:59:ac:7b:b5: 99:c0:f6:cf:22:16:28:75:47:93:59:30:d6:f0:64: e3:1e:84:8d:78:49:e4:68:0f:97:be:93:ae:ff:f7: ef:c0:4f:63:f3:c7:19:3c:32:df:58:ae:de:ba:f5: 01:3b:be:6c:1a:ff:9f:6f:d2:38:99:0e:50:ef:09: 74:eb:43:df:94:80:3b:95:46:4c:2d:03:ab:cf:f7: f2:3a:3d:7f:73:27:c9:a8:19:7d:39:f3:ca:26:24: 3d:80:97:29:88:98:ef:bc:d1:6c:84:90:60:7f:d7: 79:ed:f4:9a:6f:4d:ec:2b:75:be:be:5a:26:8f:25: a0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4F:8C:66:1F:3F:6A:ED:9C:F7:65:B4:C0:66:58:4C:FC:F1:8B:B5 X509v3 Authority Key Identifier: keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:2c:60:df:cc:58:bd:8a:c8:7e:81:7d:d3:ee:92:68:91:99: 06:94:2e:df:d0:6a:ec:dc:ad:ec:7f:54:74:30:2e:cc:aa:14: 68:c2:a3:53:3d:e3:6c:b9:08:1c:65:c2:28:d0:e1:46:e7:ff: c5:30:02:e6:f5:54:c9:02:f9:6c:14:6d:2d:35:11:68:ab:64: bd:08:af:dc:d1:cd:2d:05:53:38:ed:11:61:f1:12:e6:59:f3: 93:c0:72:56:84:b1:9e:a0:b6:2c:a6:58:14:25:44:f6:8e:97: 01:fe:3d:1f:30:59:e4:74:86:7d:42:28:f9:ee:ea:87:b9:8b: 31:f9:e0:87:a5:fa:82:d3:fc:d4:a3:92:d2:ac:b6:88:fa:ad: 2d:8b:54:fb:a5:4f:cd:37:c2:16:83:1d:11:ae:b2:85:11:2f: b3:3f:21:6f:ef:43:43:af:06:38:c8:da:c5:0c:d5:15:44:a0: ea:09:2d:72:5d:90:ae:c5:21:4d:59:6c:33:fa:d2:31:0f:c7: c3:aa:c4:19:4a:6b:2b:54:1c:db:52:0c:dd:2e:29:5a:79:36: 84:03:9c:83:25:51:45:dd:43:bd:3a:2c:4a:14:95:4e:29:6a: c3:8c:69:6e:5c:d2:d5:d2:aa:fa:d8:66:4d:c6:2f:9d:27:27: fd:e9:9e:7b -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUM0rADS5forpLSp2nAdXkxnKHGuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFB MzY0M0Y5NDAeFw0yNTA5MTgxMjM0MTRaFw0yNTA5MTkxNDIzMTRaMDMxMTAvBgNV BAMTKEIyNEY4QzY2MUYzRjZBRUQ5Q0Y3NjVCNEMwNjY1ODRDRkNGMThCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFBgIkcZYUEVmpl21RXJuY6m1A RxOia2W4chaMhgBO9c9HHg34K1wRjF/SnYTJS2Tn5avw8QMob1T7oUTtU3eVdkLj fwRkm2rMy9FxT4h0m8cfS0kdd1tWplQIbZlOYbWiIS5OnYGh5jjtpCEeAgig9m1G xAQkSRl38WZfh+FIkCW3Wax7tZnA9s8iFih1R5NZMNbwZOMehI14SeRoD5e+k67/ 9+/AT2Pzxxk8Mt9Yrt669QE7vmwa/59v0jiZDlDvCXTrQ9+UgDuVRkwtA6vP9/I6 PX9zJ8moGX0588omJD2AlymImO+80WyEkGB/13nt9JpvTewrdb6+WiaPJaDXAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUsk+MZh8/au2c92W0wGZYTPzxi7UwHwYDVR0j BBgwFoAULQ0Ui98u1Pvb64DbHrN36qNkP5QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9LRmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1C LzAvMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFBMzY0M0Y5NC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yRDBEMTQ4QkRGMkVENEZCREJF QjgwREIxRUIzNzdFQUEzNjQzRjk0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0tG ZTlGRzNheEhabzVHZUhGM2ZGRmJtV0MxNTd1NW5jVFdkYzZZQXFWbUIvMC8yRDBE MTQ4QkRGMkVENEZCREJFQjgwREIxRUIzNzdFQUEzNjQzRjk0Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA XSxg38xYvYrIfoF90+6SaJGZBpQu39Bq7Nyt7H9UdDAuzKoUaMKjUz3jbLkIHGXC KNDhRuf/xTAC5vVUyQL5bBRtLTURaKtkvQiv3NHNLQVTOO0RYfES5lnzk8ByVoSx nqC2LKZYFCVE9o6XAf49HzBZ5HSGfUIo+e7qh7mLMfngh6X6gtP81KOS0qy2iPqt LYtU+6VPzTfCFoMdEa6yhREvsz8hb+9DQ68GOMjaxQzVFUSg6gktcl2QrsUhTVls M/rSMQ/Hw6rEGUprK1Qc21IM3S4pWnk2hAOcgyVRRd1DvTosShSVTilqw4xpblzS 1dKq+thmTcYvnScn/emeew== -----END CERTIFICATE-----Generated at Thu Sep 18 15:36:52 2025 by rpki-client