$ rpki-client -vvf rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft File: 2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft (raw, json) Hash identifier: ZxuDeweSOMFTmLmIjACnjNNGPufSLrl5f5oaz3zcDtA= Subject key identifier: 40:A9:98:BA:EE:C5:DA:CE:A1:A7:63:11:EC:38:97:73:56:C9:73:D1 Authority key identifier: 2A:9F:90:A6:C0:E7:A9:D2:C5:E1:C1:68:81:55:36:53:46:26:06:85 Certificate issuer: /CN=2A9F90A6C0E7A9D2C5E1C1688155365346260685 Certificate serial: 12C793258EC694D89BEC3D4407B43ADC2E208136 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.cer Subject info access: rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft Manifest number: 02F0 Signing time: Mon 20 Oct 2025 14:59:23 +0000 Manifest this update: Mon 20 Oct 2025 14:54:23 +0000 Manifest next update: Tue 21 Oct 2025 18:20:23 +0000 Files and hashes: 1: 3133382e3132312e34302e302f32322d3332203d3e20323730383931.roa (hash: 0TP0X4N5B/kB0sXJtzuafX2ea3uKpmvm4dgyq0U0O6A=) 2: 2A9F90A6C0E7A9D2C5E1C1688155365346260685.crl (hash: bSiBUJjeShZLznSG8kNCwD/mtJ2A90FPj1z1RWTJUVo=) 3: 323830343a373330383a3a2f33322d313238203d3e20323730383931.roa (hash: TFXsRnDBKiVgFfiHrP4nBxeZLl85ER7J0/zeEqj5uFw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.crl rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 18:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c7:93:25:8e:c6:94:d8:9b:ec:3d:44:07:b4:3a:dc:2e:20:81:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A9F90A6C0E7A9D2C5E1C1688155365346260685 Validity Not Before: Oct 20 14:54:23 2025 GMT Not After : Oct 21 18:20:23 2025 GMT Subject: CN=40A998BAEEC5DACEA1A76311EC38977356C973D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:70:a4:f5:41:6f:94:78:94:55:6c:2b:c7: 1a:61:45:4f:69:14:d9:92:17:14:0c:c8:52:30:0f: 59:fd:cf:f8:b9:84:42:60:88:fb:13:3a:ce:1b:2c: b6:f8:99:1d:d2:2b:df:b8:94:8d:12:9d:a5:3e:5e: 39:fd:9f:d7:53:05:8c:af:e0:d6:b7:fc:1a:be:f9: 4d:eb:57:56:c8:bf:a3:d7:bf:28:e1:55:f4:1a:f1: 32:40:d5:c9:0f:c8:d7:fe:4e:fc:56:cb:ef:cc:3a: cd:4e:4b:2a:19:4c:0f:d0:db:cf:7e:ed:b2:d6:c4: 78:37:c4:28:cd:30:c7:60:d0:2c:ba:dd:2c:ef:c8: da:69:05:36:ab:a2:5d:80:4b:b0:ce:de:8a:c4:87: e4:e0:ef:62:9e:1c:a5:4f:98:ea:43:69:81:4d:02: d3:16:9e:e8:da:1d:e4:92:5a:34:80:a6:8c:94:7a: 59:1e:bb:41:f7:6c:7e:c1:e1:61:d1:11:24:36:11: 27:5d:2e:86:68:a3:12:86:8a:0d:e4:a6:5c:f7:17: f0:aa:ad:62:ce:78:c0:bb:11:a3:02:34:38:ea:e3: 0f:1f:72:23:72:27:4e:61:fe:9b:42:5d:99:65:5c: 8b:a1:d4:5a:95:ac:5a:3f:91:17:b1:77:d5:1a:98: e6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A9:98:BA:EE:C5:DA:CE:A1:A7:63:11:EC:38:97:73:56:C9:73:D1 X509v3 Authority Key Identifier: keyid:2A:9F:90:A6:C0:E7:A9:D2:C5:E1:C1:68:81:55:36:53:46:26:06:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e6:8c:be:0e:e8:c8:2a:28:3e:8f:da:da:75:fe:7b:8e:b2: d2:8f:18:ba:5e:57:08:71:15:aa:8b:ad:99:6b:15:57:17:e5: 65:eb:da:16:78:f4:aa:1d:0e:6d:d4:18:98:dc:ae:6f:5c:1f: b6:3a:eb:44:9d:68:60:22:ea:ae:d8:93:e6:61:47:06:d4:25: 09:4f:2f:64:85:4e:fc:64:fe:19:ee:1e:91:be:93:29:d1:ac: 87:ca:aa:b1:68:a9:45:9b:06:38:f0:55:85:ee:ea:13:a7:10: 23:b1:2c:12:ba:23:81:3d:3a:61:16:28:8d:3a:ee:4a:e5:12: 18:0f:96:76:8a:cd:89:d1:59:cc:d0:cb:53:81:76:0d:24:f0: 7a:3e:11:c6:40:57:88:a3:36:e7:5d:71:b0:96:1e:16:9b:c2: af:29:b7:82:8a:79:cd:e7:fc:34:5b:16:72:17:08:27:53:b1: fe:a7:a9:99:89:31:48:20:ab:17:70:21:c3:d2:52:50:95:cc: b6:61:c7:dd:a3:ed:59:f8:c8:b7:d3:3a:b5:db:12:ae:bc:4e: fe:cc:27:07:89:45:19:b2:5f:fe:b1:83:e0:e3:21:6e:b8:fb: a5:a1:52:f9:fc:91:68:1f:54:50:4f:95:b5:d6:a1:3e:db:8f: f2:83:49:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEseTJY7GlNib7D1EB7Q63C4ggTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5RjkwQTZDMEU3QTlEMkM1RTFDMTY4ODE1NTM2NTM0 NjI2MDY4NTAeFw0yNTEwMjAxNDU0MjNaFw0yNTEwMjExODIwMjNaMDMxMTAvBgNV BAMTKDQwQTk5OEJBRUVDNURBQ0VBMUE3NjMxMUVDMzg5NzczNTZDOTczRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3nCk9UFvlHiUVWwrxxphRU9p FNmSFxQMyFIwD1n9z/i5hEJgiPsTOs4bLLb4mR3SK9+4lI0SnaU+Xjn9n9dTBYyv 4Na3/Bq++U3rV1bIv6PXvyjhVfQa8TJA1ckPyNf+TvxWy+/MOs1OSyoZTA/Q289+ 7bLWxHg3xCjNMMdg0Cy63SzvyNppBTarol2AS7DO3orEh+Tg72KeHKVPmOpDaYFN AtMWnujaHeSSWjSApoyUelkeu0H3bH7B4WHRESQ2ESddLoZooxKGig3kplz3F/Cq rWLOeMC7EaMCNDjq4w8fciNyJ05h/ptCXZllXIuh1FqVrFo/kRexd9UamOY1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQKmYuu7F2s6hp2MR7DiXc1bJc9EwHwYDVR0j BBgwFoAUKp+QpsDnqdLF4cFogVU2U0YmBoUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNENmbWN2WTRXcU52enF5cWZUckJ0SkhwZFVGOUtzM2hrRzF0OWZiQktr VnYvMS8yQTlGOTBBNkMwRTdBOUQyQzVFMUMxNjg4MTU1MzY1MzQ2MjYwNjg1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBOUY5MEE2QzBFN0E5RDJD NUUxQzE2ODgxNTUzNjUzNDYyNjA2ODUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NENmbWN2WTRXcU52enF5cWZUckJ0SkhwZFVGOUtzM2hrRzF0OWZiQktrVnYvMS8y QTlGOTBBNkMwRTdBOUQyQzVFMUMxNjg4MTU1MzY1MzQ2MjYwNjg1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALuaMvg7oyCooPo/a2nX+e46y0o8Yul5XCHEVqoutmWsVVxflZevaFnj0qh0O bdQYmNyub1wftjrrRJ1oYCLqrtiT5mFHBtQlCU8vZIVO/GT+Ge4ekb6TKdGsh8qq sWipRZsGOPBVhe7qE6cQI7EsErojgT06YRYojTruSuUSGA+WdorNidFZzNDLU4F2 DSTwej4RxkBXiKM2511xsJYeFpvCrym3gop5zef8NFsWchcIJ1Ox/qepmYkxSCCr F3Ahw9JSUJXMtmHH3aPtWfjIt9M6tdsSrrxO/swnB4lFGbJf/rGD4OMhbrj7paFS +fyRaB9UUE+VtdahPtuP8oNJZw== -----END CERTIFICATE-----Generated at Mon Oct 20 21:46:30 2025 by rpki-client