$ rpki-client -vvf rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.mft File: 7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.mft (raw, json) Hash identifier: nQ12OxK5ChIZ2n8BLSMGAKhweSBHoJGyLXwKJjLjwwU= Subject key identifier: 70:F2:55:6B:26:18:4F:0E:B2:8B:77:24:60:F9:1D:27:3D:B8:28:5E Authority key identifier: 79:02:99:0B:6B:AE:3D:B7:24:9A:F5:2B:E3:F9:CA:51:F0:97:A6:A7 Certificate issuer: /CN=7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7 Certificate serial: 139C5389B22EA1A129F72F1176FCE5669450E5B6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.cer Subject info access: rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.mft Manifest number: 02C5 Signing time: Mon 20 Oct 2025 05:00:46 +0000 Manifest this update: Mon 20 Oct 2025 04:55:46 +0000 Manifest next update: Tue 21 Oct 2025 08:14:46 +0000 Files and hashes: 1: 7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.crl (hash: wAmdJy9ApPrcIC4OCFdFtfPEnWnMdCLx1/MVLRmaE3k=) 2: 323830343a363032303a3a2f33322d313238203d3e20323639313437.roa (hash: atPOZ+v+uoJyPzZjiZJs06SSiwIYkKzMtaHF/Bo7lH8=) 3: 34352e3138302e3139362e302f32322d3332203d3e20323639313437.roa (hash: ACybkxJyHsEODztG1bQeawA3C9JEJuUmPXdqdZx92D0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.crl rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:9c:53:89:b2:2e:a1:a1:29:f7:2f:11:76:fc:e5:66:94:50:e5:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7 Validity Not Before: Oct 20 04:55:46 2025 GMT Not After : Oct 21 08:14:46 2025 GMT Subject: CN=70F2556B26184F0EB28B772460F91D273DB8285E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a5:7e:13:aa:1e:09:64:c6:4b:2a:b2:48:6f: d0:13:79:dc:94:66:b7:02:35:de:d6:96:01:3e:3c: aa:2e:95:f5:23:3c:26:64:36:6f:94:58:76:f7:35: 0a:a8:36:65:da:56:51:d0:c0:6f:1f:90:34:a1:c9: 54:e7:10:93:9f:b3:74:6f:4b:fe:e2:d2:a6:a9:de: f3:18:0e:74:6a:3f:d8:81:ef:19:6a:07:dd:1d:17: 4f:db:9f:79:c8:09:6b:34:84:c0:49:a1:7a:07:a7: 8d:3e:24:d6:34:92:18:e8:bb:86:32:92:ac:c1:c0: f5:5d:4e:97:52:28:84:d7:08:a2:5c:7b:e5:46:52: 4a:aa:dd:a0:1e:7d:4c:c1:22:43:39:78:c5:c4:20: 41:98:d3:36:b5:c2:00:76:04:1f:c6:d2:17:08:bf: fa:57:f3:aa:e0:c0:ac:c6:22:bd:ea:f3:55:32:6e: 33:58:8d:d8:c6:aa:45:05:df:e0:93:8c:53:8f:c7: 6d:b4:20:50:3c:19:be:e1:75:ae:dc:77:95:55:74: 6d:02:40:14:ae:1f:cf:7f:7b:82:e1:e5:3b:bc:ba: 76:3c:c5:71:30:5b:00:9f:c2:f2:e8:99:d6:7c:6c: 04:3c:06:a3:40:5e:e0:1f:fe:15:31:a3:0f:7f:02: cc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F2:55:6B:26:18:4F:0E:B2:8B:77:24:60:F9:1D:27:3D:B8:28:5E X509v3 Authority Key Identifier: keyid:79:02:99:0B:6B:AE:3D:B7:24:9A:F5:2B:E3:F9:CA:51:F0:97:A6:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:bb:3b:28:7c:a1:52:3b:14:dc:d1:69:65:4b:44:dd:80:4b: 75:19:b4:1e:41:46:c0:1d:4f:c0:ec:1a:43:14:8b:af:3c:0f: 2f:43:9a:ac:15:e8:24:55:29:c1:5a:33:86:5c:58:80:9e:40: a4:ce:a0:fc:a5:70:fd:32:84:28:c5:7c:9a:cc:7e:b4:98:4e: 14:1d:f5:11:15:fc:e9:62:dc:fa:04:44:13:47:b6:29:1a:74: a1:24:18:63:51:57:90:02:09:c6:81:37:9b:8e:86:83:29:f1: c5:8a:23:92:13:cb:48:de:8b:f4:78:23:7b:27:10:36:55:23: a8:ad:3d:89:73:db:20:e9:bf:3c:e7:3b:97:4e:b2:03:c0:a9: 67:63:dd:bf:47:c1:52:7d:2d:8c:ac:c6:e1:c4:0c:52:f0:9b: 71:72:f2:1a:a8:20:5b:cf:96:72:a6:d3:5f:b9:ba:8b:af:45: 7d:4a:34:ce:f0:ea:cb:ae:72:e9:c4:fc:fb:b7:21:1f:a0:46: 1d:a5:a3:b2:dc:36:7e:0f:80:c7:c3:77:ce:e6:8b:2f:d4:5e: 88:00:f6:ac:de:82:e5:14:8a:d4:ee:e9:2a:73:24:92:1b:f2: 38:1d:94:d0:ef:5c:70:d6:94:36:1e:63:40:3d:22:53:5a:8e: b2:40:4d:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUE5xTibIuoaEp9y8RdvzlZpRQ5bYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzkwMjk5MEI2QkFFM0RCNzI0OUFGNTJCRTNGOUNBNTFG MDk3QTZBNzAeFw0yNTEwMjAwNDU1NDZaFw0yNTEwMjEwODE0NDZaMDMxMTAvBgNV BAMTKDcwRjI1NTZCMjYxODRGMEVCMjhCNzcyNDYwRjkxRDI3M0RCODI4NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0pX4Tqh4JZMZLKrJIb9ATedyU ZrcCNd7WlgE+PKoulfUjPCZkNm+UWHb3NQqoNmXaVlHQwG8fkDShyVTnEJOfs3Rv S/7i0qap3vMYDnRqP9iB7xlqB90dF0/bn3nICWs0hMBJoXoHp40+JNY0khjou4Yy kqzBwPVdTpdSKITXCKJce+VGUkqq3aAefUzBIkM5eMXEIEGY0za1wgB2BB/G0hcI v/pX86rgwKzGIr3q81UybjNYjdjGqkUF3+CTjFOPx220IFA8Gb7hda7cd5VVdG0C QBSuH89/e4Lh5Tu8unY8xXEwWwCfwvLomdZ8bAQ8BqNAXuAf/hUxow9/AsyPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcPJVayYYTw6yi3ckYPkdJz24KF4wHwYDVR0j BBgwFoAUeQKZC2uuPbckmvUr4/nKUfCXpqcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG9jUkZhUDhGUmVLZzdQMXlWZzY2b2JBb2JNdldaejZMaU1jQU1yRnFS emUvMC83OTAyOTkwQjZCQUUzREI3MjQ5QUY1MkJFM0Y5Q0E1MUYwOTdBNkE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5MDI5OTBCNkJBRTNEQjcy NDlBRjUyQkUzRjlDQTUxRjA5N0E2QTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG9jUkZhUDhGUmVLZzdQMXlWZzY2b2JBb2JNdldaejZMaU1jQU1yRnFSemUvMC83 OTAyOTkwQjZCQUUzREI3MjQ5QUY1MkJFM0Y5Q0E1MUYwOTdBNkE3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAobs7KHyhUjsU3NFpZUtE3YBLdRm0HkFGwB1PwOwaQxSLrzwPL0OarBXoJFUp wVozhlxYgJ5ApM6g/KVw/TKEKMV8msx+tJhOFB31ERX86WLc+gREE0e2KRp0oSQY Y1FXkAIJxoE3m46GgynxxYojkhPLSN6L9HgjeycQNlUjqK09iXPbIOm/POc7l06y A8CpZ2Pdv0fBUn0tjKzG4cQMUvCbcXLyGqggW8+WcqbTX7m6i69FfUo0zvDqy65y 6cT8+7chH6BGHaWjstw2fg+Ax8N3zuaLL9ReiAD2rN6C5RSK1O7pKnMkkhvyOB2U 0O9ccNaUNh5jQD0iU1qOskBNTA== -----END CERTIFICATE-----Generated at Mon Oct 20 18:27:25 2025 by rpki-client