$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft File: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft (raw, json) Hash identifier: kldQH+Dl7YegXgQTDT8C9JKdXfrq9nrT8d0MTwJRRmg= Subject key identifier: A8:17:6B:63:25:7B:C8:75:01:24:70:16:64:9E:3C:C5:BB:DE:2C:5D Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 Certificate issuer: /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Certificate serial: 0E239A8B4DF055DC542084B2ADD57BCB99021266 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft Manifest number: 028D Signing time: Wed 06 Aug 2025 12:24:10 +0000 Manifest this update: Wed 06 Aug 2025 12:19:10 +0000 Manifest next update: Thu 07 Aug 2025 14:41:10 +0000 Files and hashes: 1: 323830343a346335633a3a2f33322d3438203d3e20323637333636.roa (hash: aBuDzalJjtN6QjODimHKIqdgYVt/ZmaeAC/ItTdnYZs=) 2: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl (hash: LcA6HWF9wuAEDf2eG0y7FV1x76PH5zW41xwSiU42+eM=) 3: 34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa (hash: uvDWAWwHQEIwaeCaS7oSbgW6akspuwjD8Bob8V00050=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 07 Aug 2025 14:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:23:9a:8b:4d:f0:55:dc:54:20:84:b2:ad:d5:7b:cb:99:02:12:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Validity Not Before: Aug 6 12:19:10 2025 GMT Not After : Aug 7 14:41:10 2025 GMT Subject: CN=A8176B63257BC87501247016649E3CC5BBDE2C5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e1:24:89:3d:d3:4d:f5:dd:f7:74:be:0f:54: 9d:99:8c:d0:cf:40:1c:d4:7e:dc:8f:6d:f9:56:92: 84:b7:5c:fa:b6:01:c6:7b:09:aa:50:cd:7b:94:26: fe:e2:a7:49:e2:53:2b:42:56:02:35:69:08:1d:47: 15:63:5c:76:63:9c:08:67:0a:60:6a:88:51:20:9a: 7d:0c:46:45:dd:cb:11:dd:82:1f:bd:9d:2c:7f:92: 95:49:39:f6:b0:ef:aa:43:86:ff:d9:0d:d9:c0:f0: 49:fa:b5:d2:c2:9e:6e:12:22:2f:4a:cc:56:31:b6: 39:f1:69:53:88:7d:b2:4b:b5:be:4b:0b:05:00:d2: 45:c8:a3:8a:fa:7b:5c:82:75:a0:86:63:0d:23:94: bc:45:9a:2d:e3:70:f3:e2:7f:91:6f:ff:ea:69:53: 92:79:b5:ec:0b:56:ed:33:1a:a6:60:8b:d5:82:d8: b2:87:c4:28:91:2e:bc:1e:f9:3f:05:26:84:ae:7b: f9:ca:98:da:e7:2f:30:84:3d:c0:c6:82:57:2e:fe: f3:3a:7d:b4:96:35:29:5e:ab:5d:4e:e8:ae:df:ff: a4:bc:0c:e4:52:c5:51:03:ec:98:ed:74:9b:bd:34: 5f:61:23:03:0d:19:de:b8:ee:89:71:2e:1b:b8:7b: d6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:17:6B:63:25:7B:C8:75:01:24:70:16:64:9E:3C:C5:BB:DE:2C:5D X509v3 Authority Key Identifier: keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:fb:b6:03:07:09:88:c5:82:28:ae:5f:8a:ad:25:2c:fe:e1: e2:0d:95:76:c5:82:84:0d:d2:3e:f3:5d:50:65:46:32:55:46: a1:93:4b:62:41:47:04:5b:71:4f:86:15:4b:c6:bf:e8:d6:2f: c1:f4:2b:25:33:88:8d:c1:23:55:d5:07:96:a0:97:01:02:2b: 43:9e:3f:44:bc:cc:0e:81:c5:6a:67:ca:81:82:94:95:6b:13: 7b:78:fc:6f:db:2e:e8:01:8a:ee:9e:64:31:27:7f:d6:4d:ef: 34:83:5b:86:8d:1d:d5:01:58:92:39:60:1f:3f:8f:a5:a5:2d: 65:06:66:92:5b:f1:61:03:c3:7e:ed:34:09:cb:53:d8:3b:51: 90:11:ca:9d:63:e5:96:02:b5:df:3e:8b:26:1b:3d:80:06:46: 0a:e7:30:d9:25:b0:47:dc:64:7d:6a:68:ce:c4:73:ad:ed:39: c7:2d:18:6d:c4:ed:d4:8f:10:16:78:48:5c:f4:61:01:3f:f8: 00:b3:1a:9b:6d:cd:44:09:df:8a:2c:c9:e2:83:94:ef:7a:3e: a6:2e:72:9b:80:26:06:97:cd:71:c5:b8:b5:88:a0:b4:d5:ef: 4c:68:29:af:71:27:22:07:4b:98:45:33:76:cb:0f:0f:39:08: da:33:32:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDiOai03wVdxUIISyrdV7y5kCEmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMEFFNjNFRDk5MTI0RjdEM0YxNEI4RkE5QzFGRjM3 ODAwNjdDMjAeFw0yNTA4MDYxMjE5MTBaFw0yNTA4MDcxNDQxMTBaMDMxMTAvBgNV BAMTKEE4MTc2QjYzMjU3QkM4NzUwMTI0NzAxNjY0OUUzQ0M1QkJERTJDNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp4SSJPdNN9d33dL4PVJ2ZjNDP QBzUftyPbflWkoS3XPq2AcZ7CapQzXuUJv7ip0niUytCVgI1aQgdRxVjXHZjnAhn CmBqiFEgmn0MRkXdyxHdgh+9nSx/kpVJOfaw76pDhv/ZDdnA8En6tdLCnm4SIi9K zFYxtjnxaVOIfbJLtb5LCwUA0kXIo4r6e1yCdaCGYw0jlLxFmi3jcPPif5Fv/+pp U5J5tewLVu0zGqZgi9WC2LKHxCiRLrwe+T8FJoSue/nKmNrnLzCEPcDGglcu/vM6 fbSWNSleq11O6K7f/6S8DORSxVED7JjtdJu9NF9hIwMNGd647olxLhu4e9YJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqBdrYyV7yHUBJHAWZJ48xbveLF0wHwYDVR0j BBgwFoAU9CCuY+2ZEk99PxS4+pwf83gAZ8IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhH MWYvMC9GNDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0MjBBRTYzRUQ5OTEyNEY3 RDNGMTRCOEZBOUMxRkYzNzgwMDY3QzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhHMWYvMC9G NDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFPu2AwcJiMWCKK5fiq0lLP7h4g2VdsWChA3SPvNdUGVGMlVGoZNLYkFHBFtx T4YVS8a/6NYvwfQrJTOIjcEjVdUHlqCXAQIrQ54/RLzMDoHFamfKgYKUlWsTe3j8 b9su6AGK7p5kMSd/1k3vNINbho0d1QFYkjlgHz+PpaUtZQZmklvxYQPDfu00CctT 2DtRkBHKnWPllgK13z6LJhs9gAZGCucw2SWwR9xkfWpozsRzre05xy0YbcTt1I8Q FnhIXPRhAT/4ALMam23NRAnfiizJ4oOU73o+pi5ym4AmBpfNccW4tYigtNXvTGgp r3EnIgdLmEUzdssPDzkI2jMyOg== -----END CERTIFICATE-----Generated at Thu Aug 7 02:10:18 2025 by rpki-client