$ rpki-client -vvf rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft File: 2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft (raw, json) Hash identifier: GwVLgybY60iFEP0X1MbN0gdmsDQ+nZwpIxgq+aX8S08= Subject key identifier: 86:83:FE:81:A0:25:F0:6B:1C:5D:EA:4A:7B:1E:75:3B:06:3F:9B:55 Authority key identifier: 2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1 Certificate issuer: /CN=2A0183D32B891D785CDF1CC86CFD0AE9460250B1 Certificate serial: 04238BC05919522E7CEEA9CED021972E78871E97 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer Subject info access: rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft Manifest number: 02C8 Signing time: Thu 18 Sep 2025 12:51:34 +0000 Manifest this update: Thu 18 Sep 2025 12:46:34 +0000 Manifest next update: Fri 19 Sep 2025 14:07:34 +0000 Files and hashes: 1: 323830343a373439383a3a2f33322d3434203d3e20323730393931.roa (hash: 1nVescDhZB748DPO06KLiKZQV7YLDmgTqov+PIhCxEo=) 2: 2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl (hash: OP7o57cZAL5TaLG+v3oWpgtob96u06X6CGmnVBbtcS0=) 3: 3138372e3130332e31362e302f32322d3234203d3e20323730393931.roa (hash: jv5mGEDvNirUNb+ywEWplBQ51qJkA6j3IlJ4XwV4itQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 14:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:23:8b:c0:59:19:52:2e:7c:ee:a9:ce:d0:21:97:2e:78:87:1e:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A0183D32B891D785CDF1CC86CFD0AE9460250B1 Validity Not Before: Sep 18 12:46:34 2025 GMT Not After : Sep 19 14:07:34 2025 GMT Subject: CN=8683FE81A025F06B1C5DEA4A7B1E753B063F9B55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:be:26:af:92:f4:0c:47:08:f6:eb:39:63: 83:6f:96:c1:88:99:d0:81:bd:58:4d:c1:a9:53:42: e9:68:7e:5f:12:55:1b:d1:c1:d6:cd:ce:0c:b5:64: 3f:c2:57:52:f5:c0:b8:05:d5:23:19:b0:f9:ed:73: b5:5d:e8:44:76:35:30:19:89:03:81:79:e1:55:cf: 3e:7b:cf:f5:28:2d:97:a1:62:b8:b7:8a:d4:c9:c4: d1:c2:da:44:4d:69:08:f3:1f:19:26:a5:f7:0b:ab: 50:1c:5c:7b:4d:03:0d:a0:24:f1:f3:08:fb:35:7a: 5e:c2:9c:17:a5:66:5e:0f:5a:c9:8e:e5:e5:68:39: 60:d2:c7:d9:58:3f:b9:c1:50:29:1f:d3:5d:46:e6: cc:33:4f:13:df:62:2a:94:46:1c:8b:c9:4d:4e:2a: b4:48:f3:ea:ba:cc:4d:8c:20:ca:3d:f1:73:4e:6a: 4f:64:df:08:ce:70:c9:65:45:87:dc:58:dc:15:e5: dd:1a:ba:78:ce:99:dc:2a:0a:f6:6c:50:d2:a7:26: 4e:d4:24:a0:3d:ef:1d:13:a3:e1:3d:f4:5b:a1:32: 41:b2:60:ba:5f:c8:63:e0:fb:7d:2c:f7:70:71:a0: 6f:04:af:1e:03:95:98:c3:f2:3c:31:aa:14:04:5e: f7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:83:FE:81:A0:25:F0:6B:1C:5D:EA:4A:7B:1E:75:3B:06:3F:9B:55 X509v3 Authority Key Identifier: keyid:2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:57:f2:b2:ce:26:c9:a9:5f:b9:48:4c:e4:da:52:29:a7:69: 6e:1f:d9:7e:13:0c:79:63:2d:19:fb:55:dd:c0:ab:fa:9e:35: 92:fb:29:af:a4:4e:0d:09:b0:29:69:69:24:63:de:38:60:38: 5c:42:bb:71:a6:27:31:e5:6f:6a:35:cf:e8:ed:b4:5c:99:92: e7:35:b2:12:22:b6:c8:d2:eb:b6:d2:f9:9f:e0:82:3e:80:0b: ff:72:19:7a:6f:7a:00:23:e5:78:04:fc:e5:3b:aa:67:5d:6c: d8:12:96:93:04:c7:f9:05:84:62:18:07:42:63:a1:fc:22:14: 3d:bc:8e:57:5a:fb:2b:e4:17:d3:e0:c8:7f:7f:68:98:6b:9f: 04:7f:7a:82:92:87:b4:2b:70:d7:36:11:a7:dc:99:3b:dc:f9: 6e:2d:8d:81:20:a7:e6:dc:3d:d6:7f:f9:61:05:ed:f0:22:f9: 09:f3:25:29:52:91:c8:f1:19:2d:0f:8b:c7:d8:65:b7:54:5e: 69:9e:16:63:7a:2e:1d:8b:58:6a:0b:c8:d9:87:31:e0:fb:47: 3c:f2:b5:99:2b:ea:1a:4c:0d:e6:2a:6c:16:31:b9:83:b7:09: cd:9a:ab:9a:df:88:27:17:a9:d1:a8:f7:10:36:1d:85:6a:da: a1:59:76:19 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUBCOLwFkZUi587qnO0CGXLniHHpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwMTgzRDMyQjg5MUQ3ODVDREYxQ0M4NkNGRDBBRTk0 NjAyNTBCMTAeFw0yNTA5MTgxMjQ2MzRaFw0yNTA5MTkxNDA3MzRaMDMxMTAvBgNV BAMTKDg2ODNGRTgxQTAyNUYwNkIxQzVERUE0QTdCMUU3NTNCMDYzRjlCNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1hL4mr5L0DEcI9us5Y4NvlsGI mdCBvVhNwalTQulofl8SVRvRwdbNzgy1ZD/CV1L1wLgF1SMZsPntc7Vd6ER2NTAZ iQOBeeFVzz57z/UoLZehYri3itTJxNHC2kRNaQjzHxkmpfcLq1AcXHtNAw2gJPHz CPs1el7CnBelZl4PWsmO5eVoOWDSx9lYP7nBUCkf011G5swzTxPfYiqURhyLyU1O KrRI8+q6zE2MIMo98XNOak9k3wjOcMllRYfcWNwV5d0aunjOmdwqCvZsUNKnJk7U JKA97x0To+E99FuhMkGyYLpfyGPg+30s93BxoG8Erx4DlZjD8jwxqhQEXvefAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUhoP+gaAl8GscXepKex51OwY/m1UwHwYDVR0j BBgwFoAUKgGD0yuJHXhc3xzIbP0K6UYCULEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9rc0tia2F1WHFOZk5oY0IzTTRpOXNvdFNYWEtGRURna1hrUkxNZzJYdk5S LzEvMkEwMTgzRDMyQjg5MUQ3ODVDREYxQ0M4NkNGRDBBRTk0NjAyNTBCMS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQTAxODNEMzJCODkxRDc4NUNE RjFDQzg2Q0ZEMEFFOTQ2MDI1MEIxLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2tz S2JrYXVYcU5mTmhjQjNNNGk5c290U1hYS0ZFRGdrWGtSTE1nMlh2TlIvMS8yQTAx ODNEMzJCODkxRDc4NUNERjFDQzg2Q0ZEMEFFOTQ2MDI1MEIxLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA k1fyss4myalfuUhM5NpSKadpbh/ZfhMMeWMtGftV3cCr+p41kvspr6RODQmwKWlp JGPeOGA4XEK7caYnMeVvajXP6O20XJmS5zWyEiK2yNLrttL5n+CCPoAL/3IZem96 ACPleAT85TuqZ11s2BKWkwTH+QWEYhgHQmOh/CIUPbyOV1r7K+QX0+DIf39omGuf BH96gpKHtCtw1zYRp9yZO9z5bi2NgSCn5tw91n/5YQXt8CL5CfMlKVKRyPEZLQ+L x9hlt1ReaZ4WY3ouHYtYagvI2Ycx4PtHPPK1mSvqGkwN5ipsFjG5g7cJzZqrmt+I Jxep0aj3EDYdhWraoVl2GQ== -----END CERTIFICATE-----Generated at Thu Sep 18 14:42:29 2025 by rpki-client