$ rpki-client -vvf rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft File: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft (raw, json) Hash identifier: TBGen94vrcASHsnCsZ/YWxgRHrPJDOBod9/D83RxmCE= Subject key identifier: FE:8E:79:34:98:24:F1:C6:2D:0E:DC:B4:35:5C:72:47:0C:E7:4B:8D Authority key identifier: 40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE Certificate issuer: /CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE Certificate serial: 6EE37BA96407152F013AF68FEA5611A5B129F21D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft Manifest number: AF Signing time: Fri 22 Aug 2025 19:58:51 +0000 Manifest this update: Fri 22 Aug 2025 19:53:51 +0000 Manifest next update: Sat 23 Aug 2025 22:30:51 +0000 Files and hashes: 1: 323830343a393333343a666630303a3a2f34302d3430203d3e20323734373633.roa (hash: Y/91UtAKoquFsWubq6LOKvQldnEvym4LP9Ysec9nxMw=) 2: 34352e3138392e33332e302f32342d3234203d3e20323734373633.roa (hash: 94RYiufY7USp0r1Hhmx7uAPsAj5eXGZhHiDHteIZcag=) 3: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl (hash: gr0A7QrlXAOeUQCzEcsoCJ6r8wRe5CrdCXgqzPhYiQo=) 4: 34352e3138392e33352e302f32342d3234203d3e20323734373633.roa (hash: 1p2OZ2GU51vARCDd2EzB05jBSXBxDQiaqictJ71WwZg=) 5: 34352e3138392e33342e302f32342d3234203d3e20323734373633.roa (hash: +8SomA8CorpblFccJ5hAIRLE8zYsycHTpbXTAfqfp8w=) 6: 34352e3138392e33322e302f32342d3234203d3e20323734373633.roa (hash: f9h0xJPe6EC4HPN8Q4Vq2DpTHhojeqACv3nqBQ14BsY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 22:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:e3:7b:a9:64:07:15:2f:01:3a:f6:8f:ea:56:11:a5:b1:29:f2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE Validity Not Before: Aug 22 19:53:51 2025 GMT Not After : Aug 23 22:30:51 2025 GMT Subject: CN=FE8E79349824F1C62D0EDCB4355C72470CE74B8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:eb:31:0f:cb:94:79:d8:7d:f0:b8:70:fb: 0a:dc:b4:42:e9:39:ae:b8:c3:8e:c4:12:71:b4:cd: 5c:9e:f5:6b:df:98:4e:88:cd:47:95:fe:a1:7a:10: dc:23:cd:bc:5f:0b:3e:d2:16:c6:a4:5e:8e:d3:43: cb:c2:55:e4:3a:ee:e4:4d:9f:a8:21:6d:4c:78:1c: ae:dc:95:fc:62:60:e8:cc:c0:60:e4:e6:ce:68:78: 48:92:a7:65:86:dc:01:fd:93:d8:c9:20:01:30:26: ac:5a:22:ef:1f:e9:a5:7e:67:17:1a:6b:c0:65:3d: e9:d4:bc:78:c0:56:50:89:c6:32:69:b4:1f:b6:5b: 4c:89:26:07:0a:bb:27:38:1a:b5:e1:f0:39:a0:fb: 04:28:6d:11:02:e3:8a:02:0a:42:96:d6:10:9c:f6: 6c:25:c8:40:74:c2:ee:c2:1f:52:4c:c4:03:75:10: 5b:59:a1:c0:42:53:93:da:78:95:b4:c2:d4:31:0c: 3d:41:31:96:cb:a3:24:46:3b:76:a6:30:de:20:4d: 76:82:f1:39:a4:72:b0:08:3c:ed:4c:e4:aa:cb:83: ff:1f:16:df:ba:11:7a:93:ac:d1:8e:2b:6a:21:31: bc:62:b8:5a:ff:c1:bc:e7:f6:5c:45:8d:6d:70:ae: d3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8E:79:34:98:24:F1:C6:2D:0E:DC:B4:35:5C:72:47:0C:E7:4B:8D X509v3 Authority Key Identifier: keyid:40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:bb:07:dc:ef:a1:d4:3b:cd:68:72:5c:92:46:8e:c9:d5:a8: e4:eb:4d:1a:73:ef:6f:67:27:a9:bb:1c:c1:96:6f:34:d7:da: 90:13:28:06:4a:98:83:3d:73:e0:3a:08:68:d5:82:17:1c:8a: 10:30:56:12:02:ce:a2:40:2d:ca:a4:85:64:8b:db:f9:ae:3a: 65:c2:75:fe:8e:8f:5d:e2:38:89:46:da:0f:69:eb:e0:d5:d0: 42:29:57:05:ef:d7:c3:72:3a:c0:d8:93:3a:eb:87:ef:98:57: 1c:d7:5a:ea:7c:52:42:1d:e8:43:9b:a3:3c:d6:5d:5b:f2:2f: ff:e5:a8:39:1d:d9:c9:29:2b:e9:4a:f1:e5:ee:a5:2e:56:6e: 54:6c:35:bd:ed:01:48:7a:5d:f7:54:06:34:73:aa:6a:e0:e4: 94:84:7e:09:b0:6e:c3:a3:47:61:a8:8a:6f:41:d2:39:05:c7: 21:27:a5:d8:29:7f:e2:b6:5f:92:ba:9b:47:e1:00:c5:f4:95: eb:e5:d2:70:24:15:6b:03:2d:e1:c6:e6:6d:d1:eb:fe:72:b2: 93:42:62:93:e4:0e:22:21:8e:77:36:0e:4a:ed:32:ae:6a:c4: f6:78:fd:6b:95:89:11:41:86:db:90:01:ca:96:51:2d:d5:3b: 09:32:52:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbuN7qWQHFS8BOvaP6lYRpbEp8h0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCQjE0QTJGRDhCODExMDMwNDJCRjMyRkFDOUIyRDkw QUNGOEFGRTAeFw0yNTA4MjIxOTUzNTFaFw0yNTA4MjMyMjMwNTFaMDMxMTAvBgNV BAMTKEZFOEU3OTM0OTgyNEYxQzYyRDBFRENCNDM1NUM3MjQ3MENFNzRCOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4nusxD8uUedh98Lhw+wrctELp Oa64w47EEnG0zVye9WvfmE6IzUeV/qF6ENwjzbxfCz7SFsakXo7TQ8vCVeQ67uRN n6ghbUx4HK7clfxiYOjMwGDk5s5oeEiSp2WG3AH9k9jJIAEwJqxaIu8f6aV+Zxca a8BlPenUvHjAVlCJxjJptB+2W0yJJgcKuyc4GrXh8Dmg+wQobREC44oCCkKW1hCc 9mwlyEB0wu7CH1JMxAN1EFtZocBCU5PaeJW0wtQxDD1BMZbLoyRGO3amMN4gTXaC 8TmkcrAIPO1M5KrLg/8fFt+6EXqTrNGOK2ohMbxiuFr/wbzn9lxFjW1wrtORAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/o55NJgk8cYtDty0NVxyRwznS40wHwYDVR0j BBgwFoAUQLsUov2LgRAwQr8y+smy2QrPiv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2 NjIvMC80MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQkIxNEEyRkQ4QjgxMTAz MDQyQkYzMkZBQzlCMkQ5MEFDRjhBRkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2NjIvMC80 MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqbsH3O+h1DvNaHJckkaOydWo5OtNGnPvb2cnqbscwZZvNNfakBMoBkqYgz1z 4DoIaNWCFxyKEDBWEgLOokAtyqSFZIvb+a46ZcJ1/o6PXeI4iUbaD2nr4NXQQilX Be/Xw3I6wNiTOuuH75hXHNda6nxSQh3oQ5ujPNZdW/Iv/+WoOR3ZySkr6Urx5e6l LlZuVGw1ve0BSHpd91QGNHOqauDklIR+CbBuw6NHYaiKb0HSOQXHISel2Cl/4rZf krqbR+EAxfSV6+XScCQVawMt4cbmbdHr/nKyk0Jik+QOIiGOdzYOSu0yrmrE9nj9 a5WJEUGG25ABypZRLdU7CTJSuA== -----END CERTIFICATE-----Generated at Sat Aug 23 14:33:59 2025 by rpki-client