$ rpki-client -vvf rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.mft File: 3701790BFCD740698BF2D59FB7800495728B1041.mft (raw, json) Hash identifier: mmTdY95T30+iJsSNEr7BgYmFYCYQfxGaRtCUXMc1ZvQ= Subject key identifier: E8:A9:92:B7:EF:EE:17:F9:03:C3:E2:DC:46:8F:A9:1B:C1:E4:19:28 Authority key identifier: 37:01:79:0B:FC:D7:40:69:8B:F2:D5:9F:B7:80:04:95:72:8B:10:41 Certificate issuer: /CN=3701790BFCD740698BF2D59FB7800495728B1041 Certificate serial: 559B9E93404792832A65B49098B42440C5BAC4B9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer Subject info access: rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.mft Manifest number: 02C8 Signing time: Thu 18 Sep 2025 19:14:26 +0000 Manifest this update: Thu 18 Sep 2025 19:09:26 +0000 Manifest next update: Fri 19 Sep 2025 22:47:26 +0000 Files and hashes: 1: 3133312e3130382e3132382e302f32322d3234203d3e20323634333534.roa (hash: CWhLjy2BUsQhohvVV10YgDUmAcI9UwT6x3hS2g96DFo=) 2: 323830343a316433343a3a2f33322d3438203d3e20323634333534.roa (hash: a3N/V8aHqktmXHIi586Wg0nt7SnrzILQK/aIuH3xgL8=) 3: 3701790BFCD740698BF2D59FB7800495728B1041.crl (hash: BlHQX1HUUQqCYZQXW2g4wGyjyJFy7xRf7bFe9MX+Lz8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.crl rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 22:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:9b:9e:93:40:47:92:83:2a:65:b4:90:98:b4:24:40:c5:ba:c4:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3701790BFCD740698BF2D59FB7800495728B1041 Validity Not Before: Sep 18 19:09:26 2025 GMT Not After : Sep 19 22:47:26 2025 GMT Subject: CN=E8A992B7EFEE17F903C3E2DC468FA91BC1E41928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5a:44:0a:29:6d:6c:32:a1:fb:4a:df:24:9c: bc:88:19:87:46:4f:4f:ef:8f:97:52:c0:fc:07:76: 5c:57:10:0d:04:4c:bf:7b:fc:0c:fb:5e:49:c6:84: d3:86:96:7f:a9:25:12:63:e3:72:db:5b:35:30:90: 19:ff:6d:7e:70:cb:56:38:14:c5:b4:fc:e7:bc:ae: c6:2a:5c:d1:be:96:dc:33:62:3e:58:ed:0c:dd:88: 8f:d7:cd:8f:3e:49:35:e7:e9:11:8e:f4:23:35:c6: 66:55:85:5a:78:c6:59:e4:0f:ba:a8:e3:c1:2e:6b: a1:fe:0d:c0:20:5b:10:ab:ae:e2:f5:cd:4a:c0:49: 08:72:4e:ee:b9:39:65:3d:fe:9a:ea:23:54:1d:7b: 3c:95:36:46:96:c7:05:b6:7e:7a:38:31:e8:2a:55: 33:6e:9f:9c:51:f2:c7:43:a0:e8:10:09:f4:3d:49: 0c:47:8b:0d:64:e8:bf:b3:d7:47:92:de:42:35:86: 0c:0c:8e:09:36:32:96:08:35:ab:31:6e:22:b0:46: fc:88:61:0a:77:53:8e:93:04:37:3e:e3:de:a3:48: 4d:0a:33:f2:a0:e4:55:ec:00:cd:b3:58:02:93:b1: 87:4e:3c:63:45:10:d4:93:f9:fc:59:7a:9c:f8:21: fa:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A9:92:B7:EF:EE:17:F9:03:C3:E2:DC:46:8F:A9:1B:C1:E4:19:28 X509v3 Authority Key Identifier: keyid:37:01:79:0B:FC:D7:40:69:8B:F2:D5:9F:B7:80:04:95:72:8B:10:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e4:fd:5d:72:06:f4:2b:5f:41:15:4b:a6:e0:95:da:52:5d: 22:a1:ab:46:36:a3:75:1e:c7:4c:05:a3:25:94:7c:af:e9:40: fe:31:51:2e:49:00:c9:46:af:21:14:62:39:b5:71:ae:21:e9: ce:1a:6a:bc:d9:bf:00:38:0f:48:3d:de:6b:33:ba:bf:a5:06: 2c:67:a9:3e:ea:d2:76:1f:d8:c4:4f:df:e8:78:9c:3c:8b:48: af:34:d1:2a:69:5f:c5:42:55:68:79:ce:16:97:91:69:f5:de: f4:2b:07:6f:da:5b:b6:ce:ef:d9:97:45:e2:87:47:32:46:00: 20:62:87:9f:3d:28:62:37:b0:87:52:43:a7:a5:0e:03:fd:ee: c1:c3:c5:a4:7d:02:60:67:6f:b2:62:36:1e:b2:4e:69:f0:01: a5:a5:4e:07:43:82:8a:4f:18:41:80:57:74:0c:6c:92:2d:e6: 26:97:f3:47:8b:78:64:3d:65:d5:e1:fd:ad:58:ac:66:a8:13: c7:fb:4c:3c:df:71:f0:02:dc:de:81:7b:c4:a7:08:23:ef:8e: 1c:46:ba:c5:4e:32:96:6c:b8:aa:5b:7f:0e:9d:77:92:f0:a5: d2:70:e7:95:12:ae:77:58:fd:7d:5c:3f:c2:cf:5c:e6:90:ac: 24:3d:ba:59 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUVZuek0BHkoMqZbSQmLQkQMW6xLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcwMTc5MEJGQ0Q3NDA2OThCRjJENTlGQjc4MDA0OTU3 MjhCMTA0MTAeFw0yNTA5MTgxOTA5MjZaFw0yNTA5MTkyMjQ3MjZaMDMxMTAvBgNV BAMTKEU4QTk5MkI3RUZFRTE3RjkwM0MzRTJEQzQ2OEZBOTFCQzFFNDE5MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnWkQKKW1sMqH7St8knLyIGYdG T0/vj5dSwPwHdlxXEA0ETL97/Az7XknGhNOGln+pJRJj43LbWzUwkBn/bX5wy1Y4 FMW0/Oe8rsYqXNG+ltwzYj5Y7QzdiI/XzY8+STXn6RGO9CM1xmZVhVp4xlnkD7qo 48Eua6H+DcAgWxCrruL1zUrASQhyTu65OWU9/prqI1QdezyVNkaWxwW2fno4Megq VTNun5xR8sdDoOgQCfQ9SQxHiw1k6L+z10eS3kI1hgwMjgk2MpYINasxbiKwRvyI YQp3U46TBDc+496jSE0KM/Kg5FXsAM2zWAKTsYdOPGNFENST+fxZepz4Ifo/AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU6KmSt+/uF/kDw+LcRo+pG8HkGSgwHwYDVR0j BBgwFoAUNwF5C/zXQGmL8tWft4AElXKLEEEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9vZFgyeEpMMlQ3RWgzcHRrVTR2M0xpbkNEVWh6S1QyeHlGZ2VXUEJyc2hT LzEvMzcwMTc5MEJGQ0Q3NDA2OThCRjJENTlGQjc4MDA0OTU3MjhCMTA0MS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zNzAxNzkwQkZDRDc0MDY5OEJG MkQ1OUZCNzgwMDQ5NTcyOEIxMDQxLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL29k WDJ4SkwyVDdFaDNwdGtVNHYzTGluQ0RVaHpLVDJ4eUZnZVdQQnJzaFMvMS8zNzAx NzkwQkZDRDc0MDY5OEJGMkQ1OUZCNzgwMDQ5NTcyOEIxMDQxLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA IuT9XXIG9CtfQRVLpuCV2lJdIqGrRjajdR7HTAWjJZR8r+lA/jFRLkkAyUavIRRi ObVxriHpzhpqvNm/ADgPSD3eazO6v6UGLGepPurSdh/YxE/f6HicPItIrzTRKmlf xUJVaHnOFpeRafXe9CsHb9pbts7v2ZdF4odHMkYAIGKHnz0oYjewh1JDp6UOA/3u wcPFpH0CYGdvsmI2HrJOafABpaVOB0OCik8YQYBXdAxski3mJpfzR4t4ZD1l1eH9 rVisZqgTx/tMPN9x8ALc3oF7xKcII++OHEa6xU4ylmy4qlt/Dp13kvCl0nDnlRKu d1j9fVw/ws9c5pCsJD26WQ== -----END CERTIFICATE-----Generated at Thu Sep 18 22:12:02 2025 by rpki-client