$ rpki-client -vvf rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.mft File: F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.mft (raw, json) Hash identifier: AxTP+2bCdlC9zH6tINZ18X1AF8aDtTc/ANms8+aXzjo= Subject key identifier: 21:DC:7B:23:01:53:F6:44:7F:70:25:0A:EA:C0:53:68:FE:38:8B:81 Authority key identifier: F3:D7:BC:2A:62:A3:A3:55:A4:38:BA:6B:F4:3C:6E:99:3B:37:CE:D1 Certificate issuer: /CN=F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1 Certificate serial: 48E4B857439C338CF39242C7B3FB199A3236A5D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.cer Subject info access: rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.mft Manifest number: 02A7 Signing time: Sat 23 Aug 2025 11:29:59 +0000 Manifest this update: Sat 23 Aug 2025 11:24:59 +0000 Manifest next update: Sun 24 Aug 2025 11:37:59 +0000 Files and hashes: 1: 323830343a323262343a3a2f33322d3438203d3e20323634313137.roa (hash: rdQOjvLMlW0bXs5xAVHntgONWyy3SsEvxNzB7/m/bM8=) 2: 3134332e3235352e342e302f32322d3234203d3e20323634313137.roa (hash: ml7IvTAudrfDZoR0pFnWcI9qaeHIA7AO/+Xp8RIq1CM=) 3: 3133382e39372e32382e302f32322d3234203d3e20323634313137.roa (hash: tFEZXNMjYK6lj3PYWIg8d8lqP45bR66ObxQP47CCwBQ=) 4: 3137372e36362e37362e302f32322d3234203d3e20323634313137.roa (hash: t2jnc/avTPkT2VxxURAGHpx0izm7DafxNwpl65Dyxgk=) 5: F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.crl (hash: gUia/2toeEL0zb16lJbivGmpiZhKqxTostMq9lHsOf0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.crl rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 11:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e4:b8:57:43:9c:33:8c:f3:92:42:c7:b3:fb:19:9a:32:36:a5:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1 Validity Not Before: Aug 23 11:24:59 2025 GMT Not After : Aug 24 11:37:59 2025 GMT Subject: CN=21DC7B230153F6447F70250AEAC05368FE388B81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7d:d6:bf:f1:62:68:57:b4:e3:a7:4d:5f:f8: ac:c3:12:0b:06:5d:74:46:65:26:59:8f:aa:ff:48: 0c:ec:48:e2:96:3a:c5:5d:a1:2f:e2:8a:8a:d7:1a: ce:1b:37:79:90:19:40:d4:b6:1a:8a:2e:ab:5d:64: 1b:68:28:c4:ca:24:94:8c:cf:0d:33:7f:41:32:08: aa:38:1b:ee:f7:50:0c:ab:75:a5:3a:17:62:26:0d: 52:1b:1e:88:04:56:f6:b7:b4:e0:e4:0e:d1:b0:4a: 49:48:0f:b4:3f:3b:34:21:9f:75:16:ae:6d:a0:ec: 14:e4:fa:c9:86:cf:d7:8f:0b:55:9a:d5:e2:71:8c: a3:ab:82:72:c6:bc:a9:cf:72:86:ca:87:fe:c7:19: 5f:56:cc:a0:7a:4d:0f:42:43:f7:49:37:4c:3f:70: 02:78:32:1b:09:3c:f3:65:a3:f3:77:20:46:dc:d8: f7:43:69:5c:1e:db:df:7b:22:1d:a2:40:3c:da:c8: 67:53:99:7c:47:51:bc:a5:3a:e1:ab:19:ba:37:f1: 49:a9:ce:a7:36:21:46:44:35:27:1c:ae:80:f7:47: 07:5a:8d:ec:ee:08:43:11:fb:90:4d:44:05:ca:76: c4:f2:11:b5:7e:4f:c2:c4:b9:42:ca:26:77:21:23: 44:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DC:7B:23:01:53:F6:44:7F:70:25:0A:EA:C0:53:68:FE:38:8B:81 X509v3 Authority Key Identifier: keyid:F3:D7:BC:2A:62:A3:A3:55:A4:38:BA:6B:F4:3C:6E:99:3B:37:CE:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:17:4d:cf:be:fe:22:3b:50:67:8a:a5:a9:a6:05:4f:82:74: b3:92:62:bf:f8:c0:9b:85:ec:03:56:92:0a:d2:db:6e:78:3b: 13:32:7b:32:75:b5:34:cf:c2:59:78:c9:6c:e4:bf:87:e9:48: 11:cf:d4:40:99:e1:10:65:69:d2:7f:a3:a5:75:cd:3b:4b:88: 46:bf:9c:06:3c:0a:7b:15:a6:be:f1:c0:2a:f7:c6:73:d3:b6: 54:2b:17:5e:60:32:a9:37:7e:fa:dd:be:4b:1e:58:7c:18:ba: e1:e8:c4:da:3e:51:9a:f3:30:3f:b6:11:2f:55:6a:13:11:83: 5f:e1:a4:09:5c:45:53:38:0f:a4:01:47:0f:53:47:81:14:c9: 31:ef:f4:7d:a4:5a:03:44:8a:61:31:06:c7:92:35:6e:fd:f8: 73:52:33:73:99:fc:33:5c:08:2e:47:dc:20:9d:71:59:01:2e: f2:71:34:3e:23:a9:40:fe:e5:bd:02:08:2b:12:4d:8e:b5:81: ef:2f:9b:2b:20:89:23:dd:25:57:af:cd:4c:38:ab:ee:66:db: 00:98:34:a3:4d:ab:31:08:db:ff:d3:d9:d1:31:e1:76:15:9e: 66:a8:2b:be:bb:4a:c5:a4:04:b7:62:ef:6a:d3:96:e2:b5:04: d2:1d:82:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSOS4V0OcM4zzkkLHs/sZmjI2pdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNEN0JDMkE2MkEzQTM1NUE0MzhCQTZCRjQzQzZFOTkz QjM3Q0VEMTAeFw0yNTA4MjMxMTI0NTlaFw0yNTA4MjQxMTM3NTlaMDMxMTAvBgNV BAMTKDIxREM3QjIzMDE1M0Y2NDQ3RjcwMjUwQUVBQzA1MzY4RkUzODhCODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCofda/8WJoV7Tjp01f+KzDEgsG XXRGZSZZj6r/SAzsSOKWOsVdoS/iiorXGs4bN3mQGUDUthqKLqtdZBtoKMTKJJSM zw0zf0EyCKo4G+73UAyrdaU6F2ImDVIbHogEVva3tODkDtGwSklID7Q/OzQhn3UW rm2g7BTk+smGz9ePC1Wa1eJxjKOrgnLGvKnPcobKh/7HGV9WzKB6TQ9CQ/dJN0w/ cAJ4MhsJPPNlo/N3IEbc2PdDaVwe2997Ih2iQDzayGdTmXxHUbylOuGrGbo38Ump zqc2IUZENSccroD3RwdajezuCEMR+5BNRAXKdsTyEbV+T8LEuULKJnchI0RTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIdx7IwFT9kR/cCUK6sBTaP44i4EwHwYDVR0j BBgwFoAU89e8KmKjo1WkOLpr9DxumTs3ztEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEJiSFVIVXVLQk42WmZ4R0VSSnRDR3Rvb0drZkxLRkJTMWhRczI5WlVX b0gvMi9GM0Q3QkMyQTYyQTNBMzU1QTQzOEJBNkJGNDNDNkU5OTNCMzdDRUQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzRDdCQzJBNjJBM0EzNTVB NDM4QkE2QkY0M0M2RTk5M0IzN0NFRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEJiSFVIVXVLQk42WmZ4R0VSSnRDR3Rvb0drZkxLRkJTMWhRczI5WlVXb0gvMi9G M0Q3QkMyQTYyQTNBMzU1QTQzOEJBNkJGNDNDNkU5OTNCMzdDRUQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWhdNz77+IjtQZ4qlqaYFT4J0s5Jiv/jAm4XsA1aSCtLbbng7EzJ7MnW1NM/C WXjJbOS/h+lIEc/UQJnhEGVp0n+jpXXNO0uIRr+cBjwKexWmvvHAKvfGc9O2VCsX XmAyqTd++t2+Sx5YfBi64ejE2j5RmvMwP7YRL1VqExGDX+GkCVxFUzgPpAFHD1NH gRTJMe/0faRaA0SKYTEGx5I1bv34c1Izc5n8M1wILkfcIJ1xWQEu8nE0PiOpQP7l vQIIKxJNjrWB7y+bKyCJI90lV6/NTDir7mbbAJg0o02rMQjb/9PZ0THhdhWeZqgr vrtKxaQEt2LvatOW4rUE0h2CqQ== -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:38 2025 by rpki-client