$ rpki-client -vvf rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/F8FCC9D0A386F207C9FD886E269D8F44B338578D.mft File: F8FCC9D0A386F207C9FD886E269D8F44B338578D.mft (raw, json) Hash identifier: YfqSa1nD0gSi1L3gs4WIdgFy9xeXPRylnzYJZ3FIRDQ= Subject key identifier: 42:F6:A5:82:34:D0:71:34:EE:47:AE:DD:5D:5C:AF:3E:57:61:75:C3 Authority key identifier: F8:FC:C9:D0:A3:86:F2:07:C9:FD:88:6E:26:9D:8F:44:B3:38:57:8D Certificate issuer: /CN=F8FCC9D0A386F207C9FD886E269D8F44B338578D Certificate serial: 2CB18C7734318751E7CCCCACA841C44CB1F0082B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8FCC9D0A386F207C9FD886E269D8F44B338578D.cer Subject info access: rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/F8FCC9D0A386F207C9FD886E269D8F44B338578D.mft Manifest number: 020D Signing time: Sat 23 Aug 2025 10:43:21 +0000 Manifest this update: Sat 23 Aug 2025 10:38:21 +0000 Manifest next update: Sun 24 Aug 2025 14:05:21 +0000 Files and hashes: 1: F8FCC9D0A386F207C9FD886E269D8F44B338578D.crl (hash: iudz9jOhuadk94mpn4BUGkFdbxY8goKQtF/sGLKTDbw=) 2: 323830343a316161343a3a2f33322d3334203d3e203631383733.roa (hash: 8sIH0ZelYmsVoQtiez4w+0drrJ+3+rUc+jsPodUrlso=) 3: 3230312e3134392e3130382e302f32322d3234203d3e203631383733.roa (hash: n2s5CT0kda59q9O9WExIKnE9TjbbSzgabvmzaUkmfnk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/F8FCC9D0A386F207C9FD886E269D8F44B338578D.crl rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/F8FCC9D0A386F207C9FD886E269D8F44B338578D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8FCC9D0A386F207C9FD886E269D8F44B338578D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b1:8c:77:34:31:87:51:e7:cc:cc:ac:a8:41:c4:4c:b1:f0:08:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8FCC9D0A386F207C9FD886E269D8F44B338578D Validity Not Before: Aug 23 10:38:21 2025 GMT Not After : Aug 24 14:05:21 2025 GMT Subject: CN=42F6A58234D07134EE47AEDD5D5CAF3E576175C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:93:32:36:88:fc:46:77:c3:7a:a9:e9:dc:2c: 50:35:96:06:c9:c5:dd:f4:dd:e1:ab:a6:5d:a1:79: c2:18:3e:22:85:61:7e:f8:7a:6a:4d:48:7f:f2:fd: 67:18:7b:e6:b7:29:f7:83:5a:0d:41:4f:5a:24:31: b7:27:97:03:77:a6:be:8f:d3:82:3b:65:4c:5c:3f: 2e:ed:2d:98:08:35:ca:53:c1:5f:11:6b:73:cd:f2: b5:7b:d5:2d:3d:73:89:a9:93:48:80:8c:db:54:1e: 4a:ac:29:e1:bd:e5:cb:69:e7:12:08:ff:36:ec:59: b4:c5:c6:e8:c2:5f:48:e3:95:e1:bd:00:68:4a:ed: 4b:7c:da:8d:4b:3e:5d:84:8b:13:37:d9:44:d7:b3: 32:20:c2:9a:a7:aa:4d:39:0a:2f:10:34:72:98:34: b0:f2:b3:0f:cd:f1:77:0a:a8:16:17:ca:67:e5:7d: 4a:e4:e0:19:a4:c2:66:c2:4d:16:7c:b7:cf:37:09: 4e:19:1d:06:65:16:1e:5f:2d:d0:71:bb:19:32:79: 8b:6a:e0:b6:c2:86:a6:0a:7b:ca:88:6c:60:3f:02: 2b:19:b9:54:91:c1:19:40:90:a0:b8:88:6b:5b:71: 7c:aa:63:b1:75:f7:27:49:86:51:50:55:96:1d:db: 72:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F6:A5:82:34:D0:71:34:EE:47:AE:DD:5D:5C:AF:3E:57:61:75:C3 X509v3 Authority Key Identifier: keyid:F8:FC:C9:D0:A3:86:F2:07:C9:FD:88:6E:26:9D:8F:44:B3:38:57:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/F8FCC9D0A386F207C9FD886E269D8F44B338578D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8FCC9D0A386F207C9FD886E269D8F44B338578D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/F8FCC9D0A386F207C9FD886E269D8F44B338578D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:87:d3:59:b5:7b:53:d0:a1:b0:4a:7e:2d:33:36:0f:4b:36: da:cb:eb:0c:17:42:96:3d:19:5d:35:6c:c7:87:a9:98:22:8a: db:2f:2e:15:ad:fd:12:9e:b0:4c:78:ea:3b:9e:8b:b1:34:43: ac:49:59:34:f9:4e:db:1d:55:42:bd:0c:fd:c4:8e:2d:f1:1c: a1:48:c6:92:ce:96:7d:e7:db:ad:ea:60:4d:ec:5e:8e:9d:a3: 14:81:d7:0e:c6:16:d6:48:49:2c:e2:c0:9d:e6:6f:1e:fc:a3: 1d:cd:9d:6e:72:bf:af:96:29:85:2e:7e:18:42:56:cb:73:c5: f3:af:01:ea:a5:0c:1b:df:85:15:17:b7:85:8b:7f:19:9d:59: 56:70:73:4b:b6:2d:2d:5e:c2:21:fc:31:83:91:3f:83:e7:9f: c7:b6:e4:ef:39:06:ed:5c:6e:77:eb:54:4f:0f:37:c4:eb:91: db:d3:c4:25:9b:69:c7:c8:db:77:e8:35:a5:b2:ae:4a:58:c4: d3:59:1d:0b:83:dd:cb:c6:dd:ea:45:9e:ef:2e:d2:8b:f3:c7: d3:ad:c2:b8:44:b6:c8:44:60:55:6b:4e:48:72:36:2c:f0:71: 5a:f2:96:98:af:db:a6:9e:bc:75:98:f8:e5:93:c0:d5:9b:2d: 30:ae:78:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULLGMdzQxh1HnzMysqEHETLHwCCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGQ0M5RDBBMzg2RjIwN0M5RkQ4ODZFMjY5RDhGNDRC MzM4NTc4RDAeFw0yNTA4MjMxMDM4MjFaFw0yNTA4MjQxNDA1MjFaMDMxMTAvBgNV BAMTKDQyRjZBNTgyMzREMDcxMzRFRTQ3QUVERDVENUNBRjNFNTc2MTc1QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCckzI2iPxGd8N6qencLFA1lgbJ xd303eGrpl2hecIYPiKFYX74empNSH/y/WcYe+a3KfeDWg1BT1okMbcnlwN3pr6P 04I7ZUxcPy7tLZgINcpTwV8Ra3PN8rV71S09c4mpk0iAjNtUHkqsKeG95ctp5xII /zbsWbTFxujCX0jjleG9AGhK7Ut82o1LPl2EixM32UTXszIgwpqnqk05Ci8QNHKY NLDysw/N8XcKqBYXymflfUrk4BmkwmbCTRZ8t883CU4ZHQZlFh5fLdBxuxkyeYtq 4LbChqYKe8qIbGA/AisZuVSRwRlAkKC4iGtbcXyqY7F19ydJhlFQVZYd23JPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQvalgjTQcTTuR67dXVyvPldhdcMwHwYDVR0j BBgwFoAU+PzJ0KOG8gfJ/YhuJp2PRLM4V40wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkNvSk1XZndvWkhHcGpDdU5TNHNlUkhRSkVKU0VvMnBrOUhTNGVmUFZ2 dDcvMC9GOEZDQzlEMEEzODZGMjA3QzlGRDg4NkUyNjlEOEY0NEIzMzg1NzhELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4RkNDOUQwQTM4NkYyMDdD OUZEODg2RTI2OUQ4RjQ0QjMzODU3OEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkNvSk1XZndvWkhHcGpDdU5TNHNlUkhRSkVKU0VvMnBrOUhTNGVmUFZ2dDcvMC9G OEZDQzlEMEEzODZGMjA3QzlGRDg4NkUyNjlEOEY0NEIzMzg1NzhELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP4fTWbV7U9ChsEp+LTM2D0s22svrDBdClj0ZXTVsx4epmCKK2y8uFa39Ep6w THjqO56LsTRDrElZNPlO2x1VQr0M/cSOLfEcoUjGks6WfefbrepgTexejp2jFIHX DsYW1khJLOLAneZvHvyjHc2dbnK/r5YphS5+GEJWy3PF868B6qUMG9+FFRe3hYt/ GZ1ZVnBzS7YtLV7CIfwxg5E/g+efx7bk7zkG7Vxud+tUTw83xOuR29PEJZtpx8jb d+g1pbKuSljE01kdC4Pdy8bd6kWe7y7Si/PH063CuES2yERgVWtOSHI2LPBxWvKW mK/bpp68dZj45ZPA1ZstMK54uQ== -----END CERTIFICATE-----Generated at Sat Aug 23 16:23:15 2025 by rpki-client