$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft File: F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft (raw, json) Hash identifier: ksi+mSwUtiTVjsiRJfFTqBkrfVpK5pBOgdI8exYunQg= Subject key identifier: 1A:FA:7A:F4:7E:89:7A:CF:A4:B8:2F:3E:74:62:45:36:14:65:29:A9 Authority key identifier: F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 Certificate issuer: /CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5 Certificate serial: 49F38E7681B9F967FA6E2ECF0E3A9920BBE7FE4D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer Subject info access: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft Manifest number: 028E Signing time: Mon 04 Aug 2025 23:05:21 +0000 Manifest this update: Mon 04 Aug 2025 23:00:21 +0000 Manifest next update: Tue 05 Aug 2025 23:07:21 +0000 Files and hashes: 1: 323830313a62363a3a2f33322d3438203d3e20323633303833.roa (hash: /sq5AM8I6YaMflMxl5q4xXK1dCuBrTD/NmShXyjbG5M=) 2: 3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa (hash: rojlOjdeX3UrPuGCG6PrXeAls8xreKNh9ggg9OI9Em4=) 3: 3137392e3130362e3139322e302f31382d3234203d3e20323633303833.roa (hash: fFcuOyny+lMAM8e0QThYzGDXjn34h9O3teYEKFUfcPs=) 4: F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl (hash: GAqfttcGhq0KbWRDxxYX1qJBBSQLRBlUcDzOJFjwP6s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 05 Aug 2025 23:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:f3:8e:76:81:b9:f9:67:fa:6e:2e:cf:0e:3a:99:20:bb:e7:fe:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5 Validity Not Before: Aug 4 23:00:21 2025 GMT Not After : Aug 5 23:07:21 2025 GMT Subject: CN=1AFA7AF47E897ACFA4B82F3E74624536146529A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c9:77:0e:c5:fd:76:e7:25:b8:95:6e:77:e1: 12:0e:17:ed:93:89:3f:6c:ea:31:f0:ba:c5:8c:0d: dc:28:c6:d2:8e:73:8d:c9:2c:f8:97:08:48:ca:1a: 46:4a:b1:c9:e3:82:c6:86:28:c0:c8:c8:05:71:e3: a3:8b:39:42:e4:47:7e:f8:68:37:38:34:6b:8f:f9: 8a:ec:9d:20:69:7c:2d:6c:71:bd:3e:15:73:48:5b: 21:c3:55:10:a0:30:2b:67:3b:12:18:a0:16:62:e2: 2a:f9:f0:e9:9d:76:67:81:f0:ec:ef:7e:2a:dd:2d: 54:5a:6b:a4:33:89:71:aa:6c:57:07:43:45:08:41: e0:32:8c:64:f7:e5:57:d5:51:00:ba:d9:7f:b0:5c: 87:cd:cd:09:2b:54:30:24:8d:99:58:21:f3:03:b7: 8e:19:ef:50:88:92:b1:1e:55:ac:63:8f:ba:22:f5: 25:7e:f2:ec:a4:1a:0b:fe:3a:74:dc:93:f3:28:b7: f6:56:99:1a:d7:35:77:16:c5:92:83:93:bc:6f:85: a0:78:d8:4d:36:94:5b:d6:a2:3d:90:ac:6d:c0:1a: 84:58:00:a5:b8:9f:64:52:ea:e9:02:e0:f9:66:c8: 3a:37:86:19:b5:55:bb:3c:b8:81:68:a9:b8:4c:2b: 8f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FA:7A:F4:7E:89:7A:CF:A4:B8:2F:3E:74:62:45:36:14:65:29:A9 X509v3 Authority Key Identifier: keyid:F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:dc:bd:2e:ce:a9:cc:93:7a:9c:1d:ed:ab:9f:ed:31:c3:de: 01:05:55:7a:7e:e3:af:5b:f5:70:54:90:2a:b4:d9:72:86:57: 7c:7b:d1:98:fc:73:1d:f9:70:f5:63:c9:48:a3:fc:05:66:6b: 4b:59:57:b1:19:f4:93:eb:79:23:81:6d:32:23:2d:d5:04:eb: 4c:63:8c:29:32:e2:77:3c:2d:63:99:f9:5b:c4:4c:30:30:6b: ec:53:64:ed:a3:57:ad:63:fc:ec:03:2c:35:7d:4b:9f:51:80: 0d:69:4f:e0:38:97:69:59:5e:e8:31:1f:99:57:ae:6b:24:e6: be:c3:9c:53:27:a5:19:91:bf:42:f3:da:18:5b:4c:71:36:7f: 9e:d7:c0:f8:92:25:d0:13:97:ca:37:93:b3:e2:51:1f:c3:10: d6:19:b5:a8:ee:35:91:19:da:0e:7c:9a:94:1e:ba:0d:e1:7c: 4b:20:d0:79:6b:53:ae:0e:7c:59:44:eb:62:20:61:32:28:dc: 4d:30:b3:d2:64:6f:2a:f3:4e:60:1f:28:a9:c3:04:2c:95:2f: 92:a9:6a:b2:a6:0b:83:6d:5d:c4:89:80:bb:03:b7:96:da:1b: 32:89:4f:ad:01:1f:2c:45:d1:38:07:4d:27:e3:17:8b:7b:19: 3a:31:88:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSfOOdoG5+Wf6bi7PDjqZILvn/k0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBOThGNzc5RDNCRUY2NTk1OTZCNjRCMzJCMjhFQjZB RkU4RUFCNTAeFw0yNTA4MDQyMzAwMjFaFw0yNTA4MDUyMzA3MjFaMDMxMTAvBgNV BAMTKDFBRkE3QUY0N0U4OTdBQ0ZBNEI4MkYzRTc0NjI0NTM2MTQ2NTI5QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiyXcOxf125yW4lW534RIOF+2T iT9s6jHwusWMDdwoxtKOc43JLPiXCEjKGkZKscnjgsaGKMDIyAVx46OLOULkR374 aDc4NGuP+YrsnSBpfC1scb0+FXNIWyHDVRCgMCtnOxIYoBZi4ir58OmddmeB8Ozv firdLVRaa6QziXGqbFcHQ0UIQeAyjGT35VfVUQC62X+wXIfNzQkrVDAkjZlYIfMD t44Z71CIkrEeVaxjj7oi9SV+8uykGgv+OnTck/Mot/ZWmRrXNXcWxZKDk7xvhaB4 2E02lFvWoj2QrG3AGoRYAKW4n2RS6ukC4PlmyDo3hhm1Vbs8uIFoqbhMK49BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGvp69H6Jes+kuC8+dGJFNhRlKakwHwYDVR0j BBgwFoAU8KmPd50772WVlrZLMrKOtq/o6rUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE5uWjgyYTJrSnZiOWZ3YUhnakpWb29iTVY3V25YSzlIRDRzUHgxUlRt OWIvMS9GMEE5OEY3NzlEM0JFRjY1OTU5NkI2NEIzMkIyOEVCNkFGRThFQUI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwQTk4Rjc3OUQzQkVGNjU5 NTk2QjY0QjMyQjI4RUI2QUZFOEVBQjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE5uWjgyYTJrSnZiOWZ3YUhnakpWb29iTVY3V25YSzlIRDRzUHgxUlRtOWIvMS9G MEE5OEY3NzlEM0JFRjY1OTU5NkI2NEIzMkIyOEVCNkFGRThFQUI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOdy9Ls6pzJN6nB3tq5/tMcPeAQVVen7jr1v1cFSQKrTZcoZXfHvRmPxzHflw 9WPJSKP8BWZrS1lXsRn0k+t5I4FtMiMt1QTrTGOMKTLidzwtY5n5W8RMMDBr7FNk 7aNXrWP87AMsNX1Ln1GADWlP4DiXaVle6DEfmVeuayTmvsOcUyelGZG/QvPaGFtM cTZ/ntfA+JIl0BOXyjeTs+JRH8MQ1hm1qO41kRnaDnyalB66DeF8SyDQeWtTrg58 WUTrYiBhMijcTTCz0mRvKvNOYB8oqcMELJUvkqlqsqYLg21dxImAuwO3ltobMolP rQEfLEXROAdNJ+MXi3sZOjGIEg== -----END CERTIFICATE-----Generated at Tue Aug 5 17:16:05 2025 by rpki-client