$ rpki-client -vvf rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.mft File: 098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.mft (raw, json) Hash identifier: uS6zlR8GjHt2jcQ7qIBHvB5R7rQNR5QTvezcKorcvm8= Subject key identifier: A3:08:E5:E4:10:E0:21:20:AC:B1:DA:14:64:06:9C:33:33:0E:6F:4D Authority key identifier: 09:8B:EF:EB:5B:1D:A4:5D:C7:F7:61:9C:D0:1A:80:3E:AF:39:1D:7E Certificate issuer: /CN=098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E Certificate serial: 3AAA7396F8C1FF610CC995DB8AD9C7EACC8EA595 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.cer Subject info access: rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.mft Manifest number: 028A Signing time: Tue 05 Aug 2025 19:13:23 +0000 Manifest this update: Tue 05 Aug 2025 19:08:23 +0000 Manifest next update: Wed 06 Aug 2025 20:24:23 +0000 Files and hashes: 1: 3139302e38392e37322e302f32322d3234203d3e20323730333538.roa (hash: /kaD+eglV+UCS31kU1T/ZKxHyziD3h0rrt4isfD2Yzk=) 2: 323830343a366163383a3a2f33322d3438203d3e20323730333538.roa (hash: YHhsYHFWyWxyju9E2dctdX+I5Ljam4Z+jjcqr7DqEo8=) 3: 098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.crl (hash: e+NZ1T8orOxoBE2ejzwl1pytx/RQ83QrErytUYEP7LY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.crl rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 20:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:aa:73:96:f8:c1:ff:61:0c:c9:95:db:8a:d9:c7:ea:cc:8e:a5:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E Validity Not Before: Aug 5 19:08:23 2025 GMT Not After : Aug 6 20:24:23 2025 GMT Subject: CN=A308E5E410E02120ACB1DA1464069C33330E6F4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e3:e2:b1:b4:8b:9c:34:90:2f:f8:5d:ac:24: 26:f7:59:85:c7:14:5b:7e:42:f4:67:28:f8:09:79: 44:d8:3f:0f:a2:00:e8:2c:64:e3:b4:87:8d:4e:5b: 58:b6:7b:7c:e5:9b:a5:0d:a5:ad:2c:db:4e:32:47: a7:fe:f2:d8:90:0d:81:16:b5:14:1f:9b:af:a7:2c: c6:e7:69:01:10:43:9b:47:08:6e:9f:60:db:63:09: 6f:d8:0d:bb:9a:0d:31:f5:fa:2b:6e:c3:d1:20:88: a6:cd:f9:a6:20:5c:65:29:ea:d4:a7:80:c6:7e:4b: 64:37:9e:e9:5b:b3:63:4f:32:e4:11:a7:41:48:f1: 91:7e:e1:c6:56:96:f5:aa:74:2d:56:c5:47:b8:3a: 19:5b:1a:60:29:cd:7b:27:2b:cd:b5:2b:d0:be:ff: 75:8e:45:83:e9:c1:ed:af:a1:96:96:3d:f7:28:fd: 05:2e:c7:94:40:e3:7d:15:ef:b1:6d:22:e4:82:87: a4:46:e3:c5:f5:53:e7:a6:5d:18:8a:af:99:36:dd: 10:08:a7:7a:1f:fb:ed:d3:eb:b3:b3:03:47:aa:22: 90:41:90:b9:7f:e6:66:63:d2:09:b4:3b:d8:d7:a9: ee:39:b3:dc:d2:4b:72:46:9a:e1:a2:6f:bb:68:c8: 46:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:08:E5:E4:10:E0:21:20:AC:B1:DA:14:64:06:9C:33:33:0E:6F:4D X509v3 Authority Key Identifier: keyid:09:8B:EF:EB:5B:1D:A4:5D:C7:F7:61:9C:D0:1A:80:3E:AF:39:1D:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/1/098BEFEB5B1DA45DC7F7619CD01A803EAF391D7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:cc:4b:38:1f:e9:a4:73:3a:c4:2f:a3:e5:dc:16:97:9c:f1: 1c:21:0d:a4:aa:73:60:32:4e:b5:7f:f3:f3:df:c8:98:cb:7f: 2a:a5:59:f3:5f:9c:7e:74:f1:b6:b2:85:9c:f9:9e:0c:a2:77: 33:6f:ac:2c:72:7a:86:b5:9c:30:a5:6c:3c:c9:93:cd:68:a1: 57:c9:05:50:c8:cf:41:34:fd:33:0a:35:49:6b:f4:79:8f:b0: 67:f2:29:0c:59:05:8b:a9:b6:b0:f1:99:96:cc:7d:41:57:66: e3:34:34:48:c2:f9:fe:87:6c:cf:92:a6:f6:cf:d2:c1:90:16: c1:ac:be:4b:78:c2:ef:5c:45:1b:a5:07:7f:8a:47:83:75:0c: e0:1b:56:f7:65:75:21:57:e8:d6:89:b4:c1:55:da:ac:7c:d4: ae:fb:09:f7:4a:db:7d:e8:1f:1b:cd:c3:bd:8f:bb:65:03:f9: 0f:b2:6f:81:a0:12:5c:fa:ed:ac:52:78:45:f2:94:23:0b:a2: 08:e9:58:4d:31:41:ff:6c:be:2c:c1:f7:1e:4d:cd:ac:d7:c8: 16:cd:ab:29:82:f8:d3:7b:ec:06:4b:69:1a:a2:fa:09:3f:34: 6a:2f:34:27:a6:c8:b3:5d:9c:08:c9:b8:a1:41:50:1e:83:62: 28:e0:d5:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOqpzlvjB/2EMyZXbitnH6syOpZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4QkVGRUI1QjFEQTQ1REM3Rjc2MTlDRDAxQTgwM0VB RjM5MUQ3RTAeFw0yNTA4MDUxOTA4MjNaFw0yNTA4MDYyMDI0MjNaMDMxMTAvBgNV BAMTKEEzMDhFNUU0MTBFMDIxMjBBQ0IxREExNDY0MDY5QzMzMzMwRTZGNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4+KxtIucNJAv+F2sJCb3WYXH FFt+QvRnKPgJeUTYPw+iAOgsZOO0h41OW1i2e3zlm6UNpa0s204yR6f+8tiQDYEW tRQfm6+nLMbnaQEQQ5tHCG6fYNtjCW/YDbuaDTH1+ituw9EgiKbN+aYgXGUp6tSn gMZ+S2Q3nulbs2NPMuQRp0FI8ZF+4cZWlvWqdC1WxUe4OhlbGmApzXsnK821K9C+ /3WORYPpwe2voZaWPfco/QUux5RA430V77FtIuSCh6RG48X1U+emXRiKr5k23RAI p3of++3T67OzA0eqIpBBkLl/5mZj0gm0O9jXqe45s9zSS3JGmuGib7toyEZ3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUowjl5BDgISCssdoUZAacMzMOb00wHwYDVR0j BBgwFoAUCYvv61sdpF3H92Gc0BqAPq85HX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNENjVjhZSkc5NDFhTTZWc1dycFRUVUQxb3dxbUF3aVhDMmZMVzlhYjJn QUgvMS8wOThCRUZFQjVCMURBNDVEQzdGNzYxOUNEMDFBODAzRUFGMzkxRDdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5OEJFRkVCNUIxREE0NURD N0Y3NjE5Q0QwMUE4MDNFQUYzOTFEN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NENjVjhZSkc5NDFhTTZWc1dycFRUVUQxb3dxbUF3aVhDMmZMVzlhYjJnQUgvMS8w OThCRUZFQjVCMURBNDVEQzdGNzYxOUNEMDFBODAzRUFGMzkxRDdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIMxLOB/ppHM6xC+j5dwWl5zxHCENpKpzYDJOtX/z89/ImMt/KqVZ81+cfnTx trKFnPmeDKJ3M2+sLHJ6hrWcMKVsPMmTzWihV8kFUMjPQTT9Mwo1SWv0eY+wZ/Ip DFkFi6m2sPGZlsx9QVdm4zQ0SML5/odsz5Km9s/SwZAWway+S3jC71xFG6UHf4pH g3UM4BtW92V1IVfo1om0wVXarHzUrvsJ90rbfegfG83DvY+7ZQP5D7JvgaASXPrt rFJ4RfKUIwuiCOlYTTFB/2y+LMH3Hk3NrNfIFs2rKYL403vsBktpGqL6CT80ai80 J6bIs12cCMm4oUFQHoNiKODV9A== -----END CERTIFICATE-----Generated at Wed Aug 6 04:00:38 2025 by rpki-client