$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft File: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft (raw, json) Hash identifier: mCFhJ1GX4Tnwit4gZ3nlizT7ex6F51Wwo4/vIOZwBhQ= Subject key identifier: 09:FE:31:01:4F:F0:62:EA:53:A3:1C:54:06:B0:79:30:69:4E:33:56 Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 Certificate issuer: /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Certificate serial: 50502B510B83C439536F9D03FB59D8E90C5A42E6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft Manifest number: 02F2 Signing time: Mon 20 Oct 2025 13:15:24 +0000 Manifest this update: Mon 20 Oct 2025 13:10:24 +0000 Manifest next update: Tue 21 Oct 2025 17:05:24 +0000 Files and hashes: 1: 34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa (hash: uvDWAWwHQEIwaeCaS7oSbgW6akspuwjD8Bob8V00050=) 2: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl (hash: UtzszXaQZKqTI5f6en3kiIerNrNsE8OAPs9Vs95LzYc=) 3: 323830343a346335633a3a2f33322d3438203d3e20323637333636.roa (hash: aBuDzalJjtN6QjODimHKIqdgYVt/ZmaeAC/ItTdnYZs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:50:2b:51:0b:83:c4:39:53:6f:9d:03:fb:59:d8:e9:0c:5a:42:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Validity Not Before: Oct 20 13:10:24 2025 GMT Not After : Oct 21 17:05:24 2025 GMT Subject: CN=09FE31014FF062EA53A31C5406B07930694E3356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d1:26:a7:f4:85:b6:73:34:29:5d:05:53:52: 45:7b:44:6d:de:07:c3:8b:14:7c:8c:8b:a7:00:70: 80:e9:79:f1:ad:24:15:3f:37:c3:d1:29:2a:a3:91: 2e:b3:c6:1f:69:31:3d:ab:e0:85:f4:99:77:84:37: 24:03:c4:d2:14:0f:3d:53:56:23:df:34:34:b5:2e: ad:b2:de:be:70:79:6e:61:34:4c:10:22:51:a3:2f: dd:ca:13:47:27:cd:21:83:b4:64:39:6a:e5:82:93: 5a:f9:47:e1:ba:05:27:92:78:87:1f:33:46:cf:9a: 7a:fe:0c:d6:4e:51:3c:77:1f:d9:2b:3a:13:c0:59: e3:59:50:84:de:84:a6:06:55:59:3a:0d:5b:66:61: 1a:e1:c9:b2:48:a3:a5:4d:ff:95:90:6e:7a:52:a8: 90:a1:39:5f:1d:de:3c:4e:18:af:ee:d9:7e:55:9f: 99:3c:20:47:a4:94:72:79:f2:7f:bc:13:3c:a0:92: 82:a4:49:2c:80:83:f8:77:a0:be:4f:3b:a2:8f:c2: f2:d0:45:c9:0c:5c:82:e3:b1:d0:17:bc:58:bf:1f: c8:43:56:81:56:9e:d0:9d:f9:30:e2:dd:23:40:24: db:37:52:80:99:0c:ea:fd:79:b0:5e:3e:c1:ef:de: 5d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FE:31:01:4F:F0:62:EA:53:A3:1C:54:06:B0:79:30:69:4E:33:56 X509v3 Authority Key Identifier: keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:7f:21:c9:54:89:8c:b5:1a:6e:44:24:da:96:e8:e3:df:bd: 26:cc:aa:1c:e9:f8:aa:7a:2c:14:56:ab:fa:c5:ac:a1:c2:93: 53:1e:36:b7:5e:5d:56:7e:d4:2b:02:04:c6:b8:a7:d9:4a:b2: 63:8c:1a:8b:ed:d3:c0:bb:44:34:6d:74:48:dc:e4:a7:6b:27: e8:38:45:c3:bc:f1:a8:b6:ec:85:d6:e2:a6:29:01:4d:51:8b: de:61:9a:c9:03:44:ab:24:c3:40:7d:9c:14:ee:63:a5:99:b8: 37:14:7a:af:b3:f9:c5:ba:a4:7d:e1:13:fd:97:21:b3:32:ab: 93:20:b0:c1:6c:d8:bc:ec:3c:e1:72:82:f4:a5:65:12:83:57: 61:08:f6:6e:6c:3f:81:ff:ec:0d:af:a0:f7:2c:79:7b:ba:1c: d6:ae:ae:7c:77:d5:e9:59:b1:03:1a:4f:14:fe:3c:89:ce:85: 44:f3:e4:97:d9:a1:94:22:92:46:ca:f2:72:f0:0d:9d:7c:6d: bb:b3:12:a0:c0:22:05:cf:0e:87:49:8a:15:d3:2f:31:87:58: f1:77:a3:41:6b:2e:d4:57:97:f8:8a:05:48:d3:80:28:2c:a5: 01:5a:cc:54:90:21:2d:1b:05:65:1a:11:24:4d:08:73:b0:60: 0f:b5:4f:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUFArUQuDxDlTb50D+1nY6QxaQuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMEFFNjNFRDk5MTI0RjdEM0YxNEI4RkE5QzFGRjM3 ODAwNjdDMjAeFw0yNTEwMjAxMzEwMjRaFw0yNTEwMjExNzA1MjRaMDMxMTAvBgNV BAMTKDA5RkUzMTAxNEZGMDYyRUE1M0EzMUM1NDA2QjA3OTMwNjk0RTMzNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl0San9IW2czQpXQVTUkV7RG3e B8OLFHyMi6cAcIDpefGtJBU/N8PRKSqjkS6zxh9pMT2r4IX0mXeENyQDxNIUDz1T ViPfNDS1Lq2y3r5weW5hNEwQIlGjL93KE0cnzSGDtGQ5auWCk1r5R+G6BSeSeIcf M0bPmnr+DNZOUTx3H9krOhPAWeNZUITehKYGVVk6DVtmYRrhybJIo6VN/5WQbnpS qJChOV8d3jxOGK/u2X5Vn5k8IEeklHJ58n+8EzygkoKkSSyAg/h3oL5PO6KPwvLQ RckMXILjsdAXvFi/H8hDVoFWntCd+TDi3SNAJNs3UoCZDOr9ebBePsHv3l3fAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCf4xAU/wYupToxxUBrB5MGlOM1YwHwYDVR0j BBgwFoAU9CCuY+2ZEk99PxS4+pwf83gAZ8IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhH MWYvMC9GNDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0MjBBRTYzRUQ5OTEyNEY3 RDNGMTRCOEZBOUMxRkYzNzgwMDY3QzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhHMWYvMC9G NDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE38hyVSJjLUabkQk2pbo49+9JsyqHOn4qnosFFar+sWsocKTUx42t15dVn7U KwIExrin2UqyY4wai+3TwLtENG10SNzkp2sn6DhFw7zxqLbshdbipikBTVGL3mGa yQNEqyTDQH2cFO5jpZm4NxR6r7P5xbqkfeET/ZchszKrkyCwwWzYvOw84XKC9KVl EoNXYQj2bmw/gf/sDa+g9yx5e7oc1q6ufHfV6VmxAxpPFP48ic6FRPPkl9mhlCKS RsrycvANnXxtu7MSoMAiBc8Oh0mKFdMvMYdY8XejQWsu1FeX+IoFSNOAKCylAVrM VJAhLRsFZRoRJE0Ic7BgD7VP7w== -----END CERTIFICATE-----Generated at Mon Oct 20 15:26:19 2025 by rpki-client