$ rpki-client -vvf rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft File: 19260CFDC65E0274748EF44AA37858B8E34F0C25.mft (raw, json) Hash identifier: mBdqJnMkyNB4MGy2c2rkMbZNFQeMemNQnT3Zn+IyExQ= Subject key identifier: 3A:70:A3:3D:AD:52:F1:7C:D2:EC:2D:10:E7:40:A5:84:E8:7F:7D:E5 Authority key identifier: 19:26:0C:FD:C6:5E:02:74:74:8E:F4:4A:A3:78:58:B8:E3:4F:0C:25 Certificate issuer: /CN=19260CFDC65E0274748EF44AA37858B8E34F0C25 Certificate serial: 0E409AB5F213B3F1796B610A666A423EB9C0E49C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19260CFDC65E0274748EF44AA37858B8E34F0C25.cer Subject info access: rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft Manifest number: 0138 Signing time: Sun 10 Aug 2025 16:20:29 +0000 Manifest this update: Sun 10 Aug 2025 16:15:29 +0000 Manifest next update: Mon 11 Aug 2025 17:25:29 +0000 Files and hashes: 1: 3138362e3139352e39362e302f32302d3234203d3e20323632373230.roa (hash: syT/Sbgem75/2+FPj7DQALiSeFmma+ew6V2XqT7gzqc=) 2: 19260CFDC65E0274748EF44AA37858B8E34F0C25.crl (hash: bqE8dAgNm94+E88wuLiDD1j2lRMHECCjshh+vgzi+SA=) 3: 3137372e382e3139322e302f32302d3234203d3e20323632373230.roa (hash: ZoJKSec6k6riogUVp0cHV/6gr5piXlvNZBydTk1teNw=) 4: 323830343a6339343a3a2f33322d3438203d3e20323632373230.roa (hash: p+GTiuuAWFu/8S3EJbQPooQG4K6WnOklzedG1N3D0sA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.crl rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19260CFDC65E0274748EF44AA37858B8E34F0C25.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 17:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:40:9a:b5:f2:13:b3:f1:79:6b:61:0a:66:6a:42:3e:b9:c0:e4:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19260CFDC65E0274748EF44AA37858B8E34F0C25 Validity Not Before: Aug 10 16:15:29 2025 GMT Not After : Aug 11 17:25:29 2025 GMT Subject: CN=3A70A33DAD52F17CD2EC2D10E740A584E87F7DE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e2:c5:93:69:e5:bf:01:70:ab:95:23:c3:96: 6e:57:f8:79:03:46:4a:36:1a:5b:59:70:d9:08:35: 4d:5b:80:61:d1:cc:1a:c0:c9:a7:b7:b1:3a:9b:0c: 3a:2e:0a:f2:9d:64:69:8c:a5:66:c0:be:5b:7d:df: 16:c0:ef:5b:17:46:af:5b:df:0b:38:44:c3:a9:76: 13:c6:76:c0:ff:36:f1:8f:af:aa:20:5b:d2:da:e2: 30:68:6d:03:f0:69:e7:1a:21:03:66:0a:60:e3:56: 8a:48:4a:2f:80:28:a3:55:ed:44:4a:6e:ae:7e:b7: 94:e6:07:f0:45:7d:ef:9c:fb:46:17:b7:63:ae:87: 1a:e0:2f:70:a1:89:76:53:45:f0:31:60:4f:fe:1e: db:a5:4f:a1:4f:b0:cd:e4:3b:c9:82:eb:4d:bf:64: 8b:82:ec:32:8a:c0:cb:78:5d:76:fd:3f:a6:ff:df: 81:d6:02:07:74:d6:94:e4:22:83:8b:5c:32:73:4f: 51:4c:31:a4:ad:8e:7d:dd:63:62:27:10:bf:5f:c5: 20:4b:27:6d:71:ac:0c:ee:90:d4:82:73:48:66:80: c1:51:7d:90:d2:31:f2:91:40:7f:e6:6e:5e:2e:14: 5c:8e:da:6f:7d:3e:c1:6e:ab:c8:2e:40:a7:97:8f: 63:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:70:A3:3D:AD:52:F1:7C:D2:EC:2D:10:E7:40:A5:84:E8:7F:7D:E5 X509v3 Authority Key Identifier: keyid:19:26:0C:FD:C6:5E:02:74:74:8E:F4:4A:A3:78:58:B8:E3:4F:0C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19260CFDC65E0274748EF44AA37858B8E34F0C25.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:8c:e3:d7:12:0c:7b:68:c3:1d:77:67:01:81:46:a7:ae:64: 4f:37:3f:a4:13:d6:52:f7:32:3f:32:99:4e:6f:fb:e2:8c:98: 50:a7:ca:c4:09:9a:3d:0c:a8:a6:d1:20:3e:73:7f:8d:c0:dd: 29:8a:6b:6a:08:75:00:14:90:64:f8:e8:02:f9:f7:a4:8c:31: a9:fd:d5:d5:72:1c:0c:54:80:88:a5:52:69:22:91:f3:3d:dc: 56:bd:4b:45:b8:73:7c:4d:8e:25:c1:52:07:5b:9f:01:6b:ba: a9:3e:f9:08:ed:77:c2:0d:f1:0f:9a:56:f4:45:07:10:e3:5f: 9d:68:56:25:d5:56:e9:a4:e4:9f:40:a4:af:00:c0:b0:a7:c9: 00:04:88:a6:89:07:ad:d4:a2:9d:84:04:bc:ea:ea:8c:b3:dc: 83:fb:a9:60:d9:a3:04:79:98:52:b3:67:d7:c8:be:52:d9:45: d9:81:9a:dc:ff:d4:11:df:4a:ee:19:a5:88:66:b3:af:dc:e4: 88:07:76:20:02:21:46:6c:3a:dd:fb:79:0c:ef:ac:df:b7:42: 8f:01:65:6f:e8:51:14:c3:06:a1:d5:da:f2:45:40:fb:53:d2: b7:2b:bc:0a:3f:4c:bf:1d:09:f2:b3:1b:db:29:61:75:4f:e5: 5b:af:1a:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDkCatfITs/F5a2EKZmpCPrnA5JwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkyNjBDRkRDNjVFMDI3NDc0OEVGNDRBQTM3ODU4QjhF MzRGMEMyNTAeFw0yNTA4MTAxNjE1MjlaFw0yNTA4MTExNzI1MjlaMDMxMTAvBgNV BAMTKDNBNzBBMzNEQUQ1MkYxN0NEMkVDMkQxMEU3NDBBNTg0RTg3RjdERTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi4sWTaeW/AXCrlSPDlm5X+HkD Rko2GltZcNkINU1bgGHRzBrAyae3sTqbDDouCvKdZGmMpWbAvlt93xbA71sXRq9b 3ws4RMOpdhPGdsD/NvGPr6ogW9La4jBobQPwaecaIQNmCmDjVopISi+AKKNV7URK bq5+t5TmB/BFfe+c+0YXt2OuhxrgL3ChiXZTRfAxYE/+HtulT6FPsM3kO8mC602/ ZIuC7DKKwMt4XXb9P6b/34HWAgd01pTkIoOLXDJzT1FMMaStjn3dY2InEL9fxSBL J21xrAzukNSCc0hmgMFRfZDSMfKRQH/mbl4uFFyO2m99PsFuq8guQKeXj2M9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOnCjPa1S8XzS7C0Q50ClhOh/feUwHwYDVR0j BBgwFoAUGSYM/cZeAnR0jvRKo3hYuONPDCUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFEyVG9xUDJyR0t0M3pIZ1RHNldQTnRDNm5pMUMyZlNmbmUxS0xqRWF4 S2gvMC8xOTI2MENGREM2NUUwMjc0NzQ4RUY0NEFBMzc4NThCOEUzNEYwQzI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5MjYwQ0ZEQzY1RTAyNzQ3 NDhFRjQ0QUEzNzg1OEI4RTM0RjBDMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFEyVG9xUDJyR0t0M3pIZ1RHNldQTnRDNm5pMUMyZlNmbmUxS0xqRWF4S2gvMC8x OTI2MENGREM2NUUwMjc0NzQ4RUY0NEFBMzc4NThCOEUzNEYwQzI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANIzj1xIMe2jDHXdnAYFGp65kTzc/pBPWUvcyPzKZTm/74oyYUKfKxAmaPQyo ptEgPnN/jcDdKYpragh1ABSQZPjoAvn3pIwxqf3V1XIcDFSAiKVSaSKR8z3cVr1L RbhzfE2OJcFSB1ufAWu6qT75CO13wg3xD5pW9EUHEONfnWhWJdVW6aTkn0CkrwDA sKfJAASIpokHrdSinYQEvOrqjLPcg/upYNmjBHmYUrNn18i+UtlF2YGa3P/UEd9K 7hmliGazr9zkiAd2IAIhRmw63ft5DO+s37dCjwFlb+hRFMMGodXa8kVA+1PStyu8 Cj9Mvx0J8rMb2ylhdU/lW68azg== -----END CERTIFICATE-----Generated at Mon Aug 11 04:26:43 2025 by rpki-client