$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft File: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft (raw, json) Hash identifier: sl1/jZdn64Q1YUamUdDzS0PGncHbmU2+O/MuDwHDO3g= Subject key identifier: 1D:AD:A3:25:6D:F9:7F:4F:88:5F:A8:20:41:F8:EB:45:99:7C:8F:B2 Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 Certificate issuer: /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Certificate serial: 395D7AEBD6F6184882D9629AEB096113859C4556 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft Manifest number: 02A4 Signing time: Sat 23 Aug 2025 14:21:10 +0000 Manifest this update: Sat 23 Aug 2025 14:16:10 +0000 Manifest next update: Sun 24 Aug 2025 16:40:10 +0000 Files and hashes: 1: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl (hash: /v5sb1xDHce5eNfiVaU0bUYGjJ3fwPmJ8EMIP50RyXc=) 2: 323830343a346335633a3a2f33322d3438203d3e20323637333636.roa (hash: aBuDzalJjtN6QjODimHKIqdgYVt/ZmaeAC/ItTdnYZs=) 3: 34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa (hash: uvDWAWwHQEIwaeCaS7oSbgW6akspuwjD8Bob8V00050=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5d:7a:eb:d6:f6:18:48:82:d9:62:9a:eb:09:61:13:85:9c:45:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Validity Not Before: Aug 23 14:16:10 2025 GMT Not After : Aug 24 16:40:10 2025 GMT Subject: CN=1DADA3256DF97F4F885FA82041F8EB45997C8FB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0e:05:09:87:9f:af:41:0a:c7:42:ba:a9:4a: 53:f4:93:7a:13:fd:6d:d8:8c:4e:b6:76:43:3a:02: 0a:e6:e7:d9:9a:55:1b:33:be:6d:79:32:1f:53:41: 31:71:52:aa:19:f4:e4:80:b6:84:4f:fc:2a:3c:8f: 63:ad:8f:9e:4c:ce:c3:1b:5e:3d:5e:b5:ca:d0:42: b7:a0:c5:cf:0a:43:ec:8d:4c:2f:e4:47:df:31:45: 4e:d0:2f:17:31:f5:0f:96:5b:cc:42:6f:d4:1c:bb: fe:78:aa:5c:6a:43:96:0b:5f:c2:48:e1:be:6d:e0: db:2c:d8:9a:e8:a9:df:55:f3:cd:0d:c5:2e:c0:79: e4:16:11:d2:37:bf:0c:28:b2:fc:fe:fc:43:c2:fa: 2b:7e:ef:4a:59:96:89:c6:f8:44:76:8a:7d:15:9b: fa:b0:d4:3e:8a:92:96:f4:a6:a6:7b:49:9d:1d:9c: cb:fe:a5:3f:8d:4a:28:71:13:cc:7e:2e:61:7a:f5: 18:28:8e:d1:82:c0:d7:b7:4c:58:2c:ef:8c:14:ef: d0:5a:4c:5f:fe:13:4c:b9:ec:d5:34:23:be:c4:9e: 2a:c6:e2:cc:49:2c:e7:6e:92:ee:08:d8:da:3d:32: 4f:8a:04:55:b9:4f:22:5a:d1:1c:b0:f2:83:44:25: 13:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AD:A3:25:6D:F9:7F:4F:88:5F:A8:20:41:F8:EB:45:99:7C:8F:B2 X509v3 Authority Key Identifier: keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:24:48:d7:2d:3a:d8:aa:66:b3:20:0d:b0:bf:39:32:96:89: 44:c8:1c:50:29:7d:5d:9a:18:d7:c4:ce:7c:9d:0e:99:6f:fd: ce:e0:30:aa:c6:c9:bd:8d:76:26:b0:09:3e:fc:50:8a:02:65: ee:26:54:3c:1f:a7:6e:4c:d9:0f:b8:35:73:33:25:4e:16:c7: 0e:d2:c6:b5:cd:c5:ad:ed:0f:b1:96:30:11:01:bc:e1:6c:b4: 2d:10:ef:08:a3:3a:5e:3d:f4:4f:ce:03:a0:b7:70:db:7e:db: 99:8b:56:9b:0b:ec:8d:de:6b:f5:df:60:84:85:ee:59:00:06: f4:4a:91:b2:24:f3:af:f3:da:20:45:a2:bb:be:50:6e:b0:c5: d8:5e:15:3d:c3:ee:e7:9e:64:89:84:63:2d:27:ce:b6:10:91: 18:ef:e3:66:23:ff:b6:dd:6e:d5:fb:9f:c0:91:69:b9:18:87: b5:b2:66:01:7d:71:b5:5a:e9:16:f8:78:ef:1c:e7:fa:54:29: 6e:4e:31:52:8e:45:4d:ab:4b:67:61:12:9a:76:ae:e4:94:46: af:ab:e9:6a:06:8c:1d:52:9e:6b:6f:88:de:59:41:8b:d0:57: 3d:cc:48:c4:30:55:28:b7:a3:cd:06:02:0b:a8:ee:1f:29:9e: 11:bc:bd:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOV1669b2GEiC2WKa6wlhE4WcRVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMEFFNjNFRDk5MTI0RjdEM0YxNEI4RkE5QzFGRjM3 ODAwNjdDMjAeFw0yNTA4MjMxNDE2MTBaFw0yNTA4MjQxNjQwMTBaMDMxMTAvBgNV BAMTKDFEQURBMzI1NkRGOTdGNEY4ODVGQTgyMDQxRjhFQjQ1OTk3QzhGQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJDgUJh5+vQQrHQrqpSlP0k3oT /W3YjE62dkM6Agrm59maVRszvm15Mh9TQTFxUqoZ9OSAtoRP/Co8j2Otj55MzsMb Xj1etcrQQregxc8KQ+yNTC/kR98xRU7QLxcx9Q+WW8xCb9Qcu/54qlxqQ5YLX8JI 4b5t4Nss2Jroqd9V880NxS7AeeQWEdI3vwwosvz+/EPC+it+70pZlonG+ER2in0V m/qw1D6Kkpb0pqZ7SZ0dnMv+pT+NSihxE8x+LmF69RgojtGCwNe3TFgs74wU79Ba TF/+E0y57NU0I77EnirG4sxJLOduku4I2No9Mk+KBFW5TyJa0Ryw8oNEJRMtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHa2jJW35f0+IX6ggQfjrRZl8j7IwHwYDVR0j BBgwFoAU9CCuY+2ZEk99PxS4+pwf83gAZ8IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhH MWYvMC9GNDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0MjBBRTYzRUQ5OTEyNEY3 RDNGMTRCOEZBOUMxRkYzNzgwMDY3QzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhHMWYvMC9G NDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwiRI1y062KpmsyANsL85MpaJRMgcUCl9XZoY18TOfJ0OmW/9zuAwqsbJvY12 JrAJPvxQigJl7iZUPB+nbkzZD7g1czMlThbHDtLGtc3Fre0PsZYwEQG84Wy0LRDv CKM6Xj30T84DoLdw237bmYtWmwvsjd5r9d9ghIXuWQAG9EqRsiTzr/PaIEWiu75Q brDF2F4VPcPu555kiYRjLSfOthCRGO/jZiP/tt1u1fufwJFpuRiHtbJmAX1xtVrp Fvh47xzn+lQpbk4xUo5FTatLZ2ESmnau5JRGr6vpagaMHVKea2+I3llBi9BXPcxI xDBVKLejzQYCC6juHymeEby9HA== -----END CERTIFICATE-----Generated at Sat Aug 23 16:23:41 2025 by rpki-client