$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft File: A99D272225729B303C95F28914878741C6AE29BE.mft (raw, json) Hash identifier: 64WBPhtr4iH8iRRAQF22xptEykidLWzH9xtoytsfmUk= Subject key identifier: F1:D2:93:E4:70:9A:3E:FF:06:19:33:F3:84:29:52:9D:E0:0A:39:F7 Authority key identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE Certificate issuer: /CN=A99D272225729B303C95F28914878741C6AE29BE Certificate serial: 4DF0F1A2623B866AFF7445C481B42AAA242F8F39 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer Subject info access: rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft Manifest number: 02FC Signing time: Mon 20 Oct 2025 02:05:17 +0000 Manifest this update: Mon 20 Oct 2025 02:00:17 +0000 Manifest next update: Tue 21 Oct 2025 04:08:17 +0000 Files and hashes: 1: 323830343a343134633a3a2f33322d3438203d3e203238323034.roa (hash: r8cnAZ/4v8S40dmgDmHooqNyAvqo3wuz9559tBYcDq0=) 2: 3138392e39312e34382e302f32302d3332203d3e203238323034.roa (hash: mDfQLK61XcBdcZJh8AKS28XE2sEJ3Uz/m7Pd8PTtlc4=) 3: A99D272225729B303C95F28914878741C6AE29BE.crl (hash: O5cR25BTmm8CGYvhLUrYNXdQVeAiEuJe3BGFBWS1Kec=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 04:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f0:f1:a2:62:3b:86:6a:ff:74:45:c4:81:b4:2a:aa:24:2f:8f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A99D272225729B303C95F28914878741C6AE29BE Validity Not Before: Oct 20 02:00:17 2025 GMT Not After : Oct 21 04:08:17 2025 GMT Subject: CN=F1D293E4709A3EFF061933F38429529DE00A39F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:c7:a6:c2:04:f1:0d:af:1a:a1:3f:e6:81: ec:57:ff:7d:0c:5d:94:c3:21:ec:8b:7e:10:99:28: d4:3d:20:89:8a:2a:bc:6c:45:05:8a:3d:78:cf:03: 9e:b5:99:9c:81:e3:8f:9f:4e:c4:fe:cf:c5:f8:2b: b5:45:30:79:0b:92:50:29:7b:89:d0:6d:01:a2:f7: e8:b6:2d:e5:54:04:84:0d:fc:b2:92:75:73:f0:ce: d3:6a:9c:ba:5d:0f:af:68:7d:69:f8:b4:21:4b:63: 62:22:c3:e6:4c:27:dc:20:4d:8a:4e:f8:ae:6a:c4: 6c:ae:0a:55:22:19:52:32:5c:82:ad:72:44:31:0f: 7b:ac:b4:fa:fd:c1:41:50:63:0e:2c:41:43:10:66: 20:8b:1d:1a:3d:0e:e5:c7:42:07:9a:9f:c9:38:a6: 2c:19:0c:60:9e:26:dd:5c:89:1e:04:89:4b:39:f9: 0d:04:80:cc:97:c1:32:fc:dc:0f:3a:d6:cf:6e:71: 87:1c:45:6b:c6:c7:58:5f:88:1d:e0:c9:a6:5d:40: 76:f8:8a:45:de:d0:f9:57:33:6c:ca:f3:de:11:03: 4b:c2:ea:72:dd:17:b1:26:b0:13:fc:a2:dc:9c:9a: d9:f7:c1:e3:3e:12:0c:5f:89:ad:29:78:08:56:a9: 0d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D2:93:E4:70:9A:3E:FF:06:19:33:F3:84:29:52:9D:E0:0A:39:F7 X509v3 Authority Key Identifier: keyid:A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:68:9a:b7:c6:8a:13:9a:5b:1a:ab:aa:62:54:42:bf:3c:b0: a7:a6:3e:c0:e7:10:f9:98:53:51:47:39:c9:de:22:e7:5f:7d: ef:ed:64:2e:ca:33:d1:34:df:e9:c1:10:4a:ed:16:12:8e:d0: ad:f6:10:1c:a7:a2:47:99:ff:ad:2d:d8:fe:2d:70:66:39:b7: 16:37:e2:de:82:48:01:f4:d0:b0:ea:a9:b0:3a:41:5d:0f:94: 46:32:d8:0b:14:61:48:99:0e:05:16:ec:f3:69:ef:92:ca:ba: 93:a2:e5:be:8e:26:d6:df:88:52:30:f5:de:3f:95:1a:5f:ed: 53:97:d4:64:e2:b9:7c:ab:50:af:d8:c6:73:16:f7:b2:21:1e: c5:36:57:c1:a8:7d:8f:82:15:e9:ef:07:d4:13:6f:ef:e8:53: 77:92:24:5e:63:56:4e:4d:de:e6:f3:e0:77:5c:fe:e1:ce:9d: 44:19:50:0f:75:06:55:b1:53:f9:0a:3a:98:73:66:a6:43:f8: d4:e2:70:2a:85:6f:a4:37:dd:ee:7c:19:59:06:56:5c:31:27: 72:f1:34:5e:0d:d7:87:93:f4:67:12:3b:4b:53:80:66:f2:59: 8a:65:9f:1b:f0:19:12:35:99:c6:c5:06:9f:5a:4e:c9:57:32: cd:70:e5:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTfDxomI7hmr/dEXEgbQqqiQvjzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk5RDI3MjIyNTcyOUIzMDNDOTVGMjg5MTQ4Nzg3NDFD NkFFMjlCRTAeFw0yNTEwMjAwMjAwMTdaFw0yNTEwMjEwNDA4MTdaMDMxMTAvBgNV BAMTKEYxRDI5M0U0NzA5QTNFRkYwNjE5MzNGMzg0Mjk1MjlERTAwQTM5RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZ8emwgTxDa8aoT/mgexX/30M XZTDIeyLfhCZKNQ9IImKKrxsRQWKPXjPA561mZyB44+fTsT+z8X4K7VFMHkLklAp e4nQbQGi9+i2LeVUBIQN/LKSdXPwztNqnLpdD69ofWn4tCFLY2Iiw+ZMJ9wgTYpO +K5qxGyuClUiGVIyXIKtckQxD3ustPr9wUFQYw4sQUMQZiCLHRo9DuXHQgean8k4 piwZDGCeJt1ciR4EiUs5+Q0EgMyXwTL83A861s9ucYccRWvGx1hfiB3gyaZdQHb4 ikXe0PlXM2zK894RA0vC6nLdF7EmsBP8otycmtn3weM+Egxfia0peAhWqQ11AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8dKT5HCaPv8GGTPzhClSneAKOfcwHwYDVR0j BBgwFoAUqZ0nIiVymzA8lfKJFIeHQcauKb4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnRDa2h3eVROSHdMQjFZTG5pTWZNTjh0UmFrNlRRTFkza3Q2SnBXRFBN RmgvMC9BOTlEMjcyMjI1NzI5QjMwM0M5NUYyODkxNDg3ODc0MUM2QUUyOUJFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5OUQyNzIyMjU3MjlCMzAz Qzk1RjI4OTE0ODc4NzQxQzZBRTI5QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnRDa2h3eVROSHdMQjFZTG5pTWZNTjh0UmFrNlRRTFkza3Q2SnBXRFBNRmgvMC9B OTlEMjcyMjI1NzI5QjMwM0M5NUYyODkxNDg3ODc0MUM2QUUyOUJFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc2iat8aKE5pbGquqYlRCvzywp6Y+wOcQ+ZhTUUc5yd4i51997+1kLsoz0TTf 6cEQSu0WEo7QrfYQHKeiR5n/rS3Y/i1wZjm3Fjfi3oJIAfTQsOqpsDpBXQ+URjLY CxRhSJkOBRbs82nvksq6k6Llvo4m1t+IUjD13j+VGl/tU5fUZOK5fKtQr9jGcxb3 siEexTZXwah9j4IV6e8H1BNv7+hTd5IkXmNWTk3e5vPgd1z+4c6dRBlQD3UGVbFT +Qo6mHNmpkP41OJwKoVvpDfd7nwZWQZWXDEncvE0Xg3Xh5P0ZxI7S1OAZvJZimWf G/AZEjWZxsUGn1pOyVcyzXDl+A== -----END CERTIFICATE-----Generated at Mon Oct 20 12:45:33 2025 by rpki-client