$ rpki-client -vvf rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft File: 4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft (raw, json) Hash identifier: Lv+RoU+ablZdkN7pgrvWDX+7coPf+vkX7+HuFZpwDK0= Subject key identifier: 98:04:F0:A1:B2:64:8E:F9:1B:E4:C0:3F:CA:1F:FB:06:BF:62:6F:20 Authority key identifier: 4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75 Certificate issuer: /CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75 Certificate serial: 2E2D19BD6CF40804CCA8179A7186271D06B35CAB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer Subject info access: rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft Manifest number: 02B3 Signing time: Sat 23 Aug 2025 12:19:48 +0000 Manifest this update: Sat 23 Aug 2025 12:14:48 +0000 Manifest next update: Sun 24 Aug 2025 14:55:48 +0000 Files and hashes: 1: 4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl (hash: niGcrQm0hgbt7IjwLwfryEtr+hLGq/+Y0snJxU5iLu8=) 2: 3137372e3132342e32342e302f32322d3234203d3e20323632333135.roa (hash: rEIptntol3bvN9Apv0evK+bT/pr64GrQa6zIT5wXlrI=) 3: 323830343a3762383a3a2f33322d3430203d3e20323632333135.roa (hash: 8AHmINNTuIvylE8wzmf4Hk4M9s/xGc0DPLMYiUl530c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:2d:19:bd:6c:f4:08:04:cc:a8:17:9a:71:86:27:1d:06:b3:5c:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75 Validity Not Before: Aug 23 12:14:48 2025 GMT Not After : Aug 24 14:55:48 2025 GMT Subject: CN=9804F0A1B2648EF91BE4C03FCA1FFB06BF626F20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:01:59:50:bf:cf:ba:f1:6f:be:29:48:18:49: 84:20:ff:2e:8e:22:82:40:c8:73:a1:f4:65:fa:df: 12:67:ff:6f:28:46:4f:cc:0c:85:88:e9:e0:0d:cf: e0:51:e5:ec:39:bc:57:fb:51:7c:5b:a7:57:85:ea: 60:01:8b:7c:f3:24:e2:3f:91:c3:b1:19:78:43:70: a3:bb:cc:5c:77:99:13:a4:aa:40:cc:d7:67:47:1b: 07:de:cb:85:94:43:e8:c5:7d:01:59:88:02:2b:bd: e2:e3:5a:99:f1:10:d8:36:d7:1e:7a:ec:09:c3:6f: 14:9d:54:d2:87:86:29:ef:3c:52:82:47:78:2f:0b: 6d:8c:1b:15:7d:73:27:df:f5:24:c2:ff:8f:21:c7: 64:30:78:b0:6b:dd:4d:b4:24:67:6f:ae:4e:8f:da: 5f:8e:a2:f8:5b:8e:96:57:1b:e7:02:ef:c9:c1:a1: 6f:83:26:50:4c:11:88:c1:34:f4:9e:a1:07:fb:c9: 79:e0:2e:12:b8:d0:28:2e:f2:72:77:53:b5:eb:28: 1e:73:b6:23:6a:da:7e:8e:cb:0e:a1:90:cb:bb:5e: e4:4d:58:58:19:de:fe:44:d8:7f:7f:de:8b:b0:d1: df:c9:42:dd:3a:33:9c:2c:64:8e:b3:fb:5f:4d:d8: 3f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:04:F0:A1:B2:64:8E:F9:1B:E4:C0:3F:CA:1F:FB:06:BF:62:6F:20 X509v3 Authority Key Identifier: keyid:4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:dc:f5:94:35:ac:e2:87:16:28:63:26:63:9e:24:e0:0c:69: d3:e2:bd:cd:e1:61:a7:d9:70:a7:21:da:ea:ac:82:b2:7a:63: 8a:97:96:31:dd:72:63:a2:0a:8f:dd:ce:b3:ba:8c:76:f9:84: 24:8e:e1:80:14:f9:71:ac:50:42:77:31:95:6a:6a:fe:78:65: b4:89:a0:dd:d5:6a:b4:ac:31:9c:b6:69:83:67:83:ac:3f:b3: b2:bb:de:f7:05:8e:19:7b:16:64:0a:a2:9b:20:0d:5a:22:df: 44:d6:b1:fa:25:40:ef:68:14:41:44:55:7f:87:6e:45:80:12: ef:03:54:29:02:ca:56:eb:c3:5e:64:7a:16:4e:5a:b3:47:fc: 5a:b5:d3:c0:cd:ba:d6:ce:54:fe:20:4a:69:ff:44:40:5e:aa: d3:b2:78:a7:8d:76:ce:4e:60:f4:3b:c3:3a:d5:6d:d9:c1:ee: a1:4a:24:cf:d1:dd:3d:89:38:f0:81:1b:f6:81:43:d6:26:ea: e8:90:0d:ad:76:0d:fd:2f:dd:0d:32:11:29:0b:fc:1a:f1:bc: 8e:13:14:fd:4c:db:72:9d:0e:1c:57:fd:6d:3e:10:b4:d8:cc: e3:55:c5:5e:be:0f:f7:2e:44:54:6a:0c:22:6b:8c:23:ac:90: fc:fb:26:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULi0ZvWz0CATMqBeacYYnHQazXKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI5QjY1MzAyQTEzNjNGM0RDNzgwRkYzOUNCRUFFQjkw NjM3NEU3NTAeFw0yNTA4MjMxMjE0NDhaFw0yNTA4MjQxNDU1NDhaMDMxMTAvBgNV BAMTKDk4MDRGMEExQjI2NDhFRjkxQkU0QzAzRkNBMUZGQjA2QkY2MjZGMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwAVlQv8+68W++KUgYSYQg/y6O IoJAyHOh9GX63xJn/28oRk/MDIWI6eANz+BR5ew5vFf7UXxbp1eF6mABi3zzJOI/ kcOxGXhDcKO7zFx3mROkqkDM12dHGwfey4WUQ+jFfQFZiAIrveLjWpnxENg21x56 7AnDbxSdVNKHhinvPFKCR3gvC22MGxV9cyff9STC/48hx2QweLBr3U20JGdvrk6P 2l+OovhbjpZXG+cC78nBoW+DJlBMEYjBNPSeoQf7yXngLhK40Cgu8nJ3U7XrKB5z tiNq2n6Oyw6hkMu7XuRNWFgZ3v5E2H9/3ouw0d/JQt06M5wsZI6z+19N2D/DAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmATwobJkjvkb5MA/yh/7Br9ibyAwHwYDVR0j BBgwFoAUS5tlMCoTY/PceA/znL6uuQY3TnUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEttVmR2TDFVUFZnbXp2Q3UzNEhQVDM2Y1pjS0tGcGFLSDZCemNKZVQ1 V1kvMS80QjlCNjUzMDJBMTM2M0YzREM3ODBGRjM5Q0JFQUVCOTA2Mzc0RTc1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCOUI2NTMwMkExMzYzRjNE Qzc4MEZGMzlDQkVBRUI5MDYzNzRFNzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEttVmR2TDFVUFZnbXp2Q3UzNEhQVDM2Y1pjS0tGcGFLSDZCemNKZVQ1V1kvMS80 QjlCNjUzMDJBMTM2M0YzREM3ODBGRjM5Q0JFQUVCOTA2Mzc0RTc1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKdz1lDWs4ocWKGMmY54k4Axp0+K9zeFhp9lwpyHa6qyCsnpjipeWMd1yY6IK j93Os7qMdvmEJI7hgBT5caxQQncxlWpq/nhltImg3dVqtKwxnLZpg2eDrD+zsrve 9wWOGXsWZAqimyANWiLfRNax+iVA72gUQURVf4duRYAS7wNUKQLKVuvDXmR6Fk5a s0f8WrXTwM261s5U/iBKaf9EQF6q07J4p412zk5g9DvDOtVt2cHuoUokz9HdPYk4 8IEb9oFD1ibq6JANrXYN/S/dDTIRKQv8GvG8jhMU/Uzbcp0OHFf9bT4QtNjM41XF Xr4P9y5EVGoMImuMI6yQ/PsmHg== -----END CERTIFICATE-----Generated at Sat Aug 23 17:22:09 2025 by rpki-client