$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft File: F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft (raw, json) Hash identifier: LpY/0r8to/WggMEMJmC8A02ViHUkCecpMpSJWrE4X64= Subject key identifier: 04:03:38:B9:FF:07:BB:DC:A6:16:09:69:D7:8E:20:74:C7:D1:B0:59 Authority key identifier: F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 Certificate issuer: /CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5 Certificate serial: 29B1CD5852A2518E775A335EEA6350B89D4AD482 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer Subject info access: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft Manifest number: 02F3 Signing time: Mon 20 Oct 2025 00:19:07 +0000 Manifest this update: Mon 20 Oct 2025 00:14:07 +0000 Manifest next update: Tue 21 Oct 2025 02:15:07 +0000 Files and hashes: 1: 3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa (hash: rojlOjdeX3UrPuGCG6PrXeAls8xreKNh9ggg9OI9Em4=) 2: 3137392e3130362e3139322e302f31382d3234203d3e20323633303833.roa (hash: fFcuOyny+lMAM8e0QThYzGDXjn34h9O3teYEKFUfcPs=) 3: F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl (hash: AsqmXzirHKzl1WdRDmE5QEUXkxoE61X785z7xNSzXrQ=) 4: 323830313a62363a3a2f33322d3438203d3e20323633303833.roa (hash: /sq5AM8I6YaMflMxl5q4xXK1dCuBrTD/NmShXyjbG5M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b1:cd:58:52:a2:51:8e:77:5a:33:5e:ea:63:50:b8:9d:4a:d4:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5 Validity Not Before: Oct 20 00:14:07 2025 GMT Not After : Oct 21 02:15:07 2025 GMT Subject: CN=040338B9FF07BBDCA6160969D78E2074C7D1B059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3b:8d:f1:bf:a9:08:07:a0:51:83:bc:f7:5a: ef:7a:79:83:88:e8:8c:8e:82:90:f7:ea:bc:f3:85: d4:3a:c3:53:e4:7e:18:f6:5a:f2:68:5b:35:d2:15: 8f:65:0f:58:02:f9:c9:b7:c4:c6:f1:53:0d:cb:fb: b3:ef:18:d1:cd:20:9b:21:3f:45:5c:be:22:5b:9a: 1e:90:cc:85:78:ec:45:b6:ec:f9:82:96:c0:05:d2: 90:58:d0:cb:bd:e0:11:9a:a8:ee:6e:75:1a:21:3b: 3a:2e:3f:e1:b0:f2:cb:48:75:15:71:bf:5a:d7:01: 3e:63:a4:20:7d:12:42:48:71:06:49:bf:3e:5f:3e: 40:02:9b:58:75:73:5e:0e:63:c6:79:1b:4b:08:fc: 5d:e3:39:1b:1e:5c:a7:0a:04:0e:ee:fa:22:9c:93: 2c:dd:58:98:12:92:15:99:ff:d9:f7:54:04:27:c0: ec:b9:83:38:3e:6d:5d:86:3a:45:e3:4a:23:d3:9d: 27:19:a3:01:26:9c:4d:b2:c4:95:6a:85:73:2e:26: 7e:f7:37:0f:e5:50:fb:60:e5:57:6e:01:e6:69:f8: f1:38:01:3f:9f:ff:a1:11:a7:68:60:09:59:a5:ae: c7:b5:3e:a4:b3:93:db:d5:07:31:83:bd:ab:99:21: 72:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:03:38:B9:FF:07:BB:DC:A6:16:09:69:D7:8E:20:74:C7:D1:B0:59 X509v3 Authority Key Identifier: keyid:F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:c7:8b:79:1d:48:d5:ee:42:c4:61:46:55:ac:6c:7f:7b:c2: 9c:f2:1b:aa:fb:a5:0f:4f:bf:0a:d8:56:e2:ed:d7:e1:74:c9: 19:b9:c6:96:e1:3d:5e:9a:ae:78:96:2b:34:cf:a5:af:36:58: 59:07:40:a0:28:38:14:c8:11:50:db:6e:6f:e8:79:60:4e:c2: 3e:da:2c:73:3a:68:3a:47:1f:b0:ea:99:38:f9:21:15:a4:c9: b3:4d:54:0c:1d:a7:63:4f:00:11:0f:ee:d2:23:99:2a:a6:f3: 00:9d:7a:03:9b:40:57:10:01:a1:32:7b:1a:98:26:82:32:2c: bd:94:eb:c6:3b:db:06:8d:20:e2:80:c1:91:91:cb:01:21:a2: 30:f2:8a:45:6d:d4:61:fd:a4:c7:ca:4e:c1:6b:14:e1:6d:04: 91:05:e2:d4:ed:97:d0:21:dd:23:a0:ce:27:7a:2b:10:71:32: f8:64:ee:fe:eb:ac:40:71:e1:ae:d3:42:b5:28:07:74:8a:00: 5b:7d:bb:54:a3:f7:2a:f3:1c:90:da:97:13:7c:87:17:12:b6: 39:ab:eb:d6:fd:45:2b:de:c1:36:93:19:d6:32:8f:91:74:c2: fe:7b:d6:a0:58:8f:86:41:1b:db:7e:53:3f:22:e5:d8:d9:7a: 12:a6:19:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKbHNWFKiUY53WjNe6mNQuJ1K1IIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBOThGNzc5RDNCRUY2NTk1OTZCNjRCMzJCMjhFQjZB RkU4RUFCNTAeFw0yNTEwMjAwMDE0MDdaFw0yNTEwMjEwMjE1MDdaMDMxMTAvBgNV BAMTKDA0MDMzOEI5RkYwN0JCRENBNjE2MDk2OUQ3OEUyMDc0QzdEMUIwNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZO43xv6kIB6BRg7z3Wu96eYOI 6IyOgpD36rzzhdQ6w1Pkfhj2WvJoWzXSFY9lD1gC+cm3xMbxUw3L+7PvGNHNIJsh P0VcviJbmh6QzIV47EW27PmClsAF0pBY0Mu94BGaqO5udRohOzouP+Gw8stIdRVx v1rXAT5jpCB9EkJIcQZJvz5fPkACm1h1c14OY8Z5G0sI/F3jORseXKcKBA7u+iKc kyzdWJgSkhWZ/9n3VAQnwOy5gzg+bV2GOkXjSiPTnScZowEmnE2yxJVqhXMuJn73 Nw/lUPtg5VduAeZp+PE4AT+f/6ERp2hgCVmlrse1PqSzk9vVBzGDvauZIXJ3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBAM4uf8Hu9ymFglp144gdMfRsFkwHwYDVR0j BBgwFoAU8KmPd50772WVlrZLMrKOtq/o6rUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE5uWjgyYTJrSnZiOWZ3YUhnakpWb29iTVY3V25YSzlIRDRzUHgxUlRt OWIvMS9GMEE5OEY3NzlEM0JFRjY1OTU5NkI2NEIzMkIyOEVCNkFGRThFQUI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwQTk4Rjc3OUQzQkVGNjU5 NTk2QjY0QjMyQjI4RUI2QUZFOEVBQjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE5uWjgyYTJrSnZiOWZ3YUhnakpWb29iTVY3V25YSzlIRDRzUHgxUlRtOWIvMS9G MEE5OEY3NzlEM0JFRjY1OTU5NkI2NEIzMkIyOEVCNkFGRThFQUI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq8eLeR1I1e5CxGFGVaxsf3vCnPIbqvulD0+/CthW4u3X4XTJGbnGluE9Xpqu eJYrNM+lrzZYWQdAoCg4FMgRUNtub+h5YE7CPtosczpoOkcfsOqZOPkhFaTJs01U DB2nY08AEQ/u0iOZKqbzAJ16A5tAVxABoTJ7GpgmgjIsvZTrxjvbBo0g4oDBkZHL ASGiMPKKRW3UYf2kx8pOwWsU4W0EkQXi1O2X0CHdI6DOJ3orEHEy+GTu/uusQHHh rtNCtSgHdIoAW327VKP3KvMckNqXE3yHFxK2Oavr1v1FK97BNpMZ1jKPkXTC/nvW oFiPhkEb235TPyLl2Nl6EqYZOw== -----END CERTIFICATE-----Generated at Mon Oct 20 09:24:03 2025 by rpki-client