$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft File: 4B238277BD4501DC3B75403E74D8B541B7643097.mft (raw, json) Hash identifier: Q0hrdmgk0zOpEp9XgF+sEJktoJeKVlJP15SYyvF8tMY= Subject key identifier: 98:35:7D:BE:A6:74:72:2D:AD:D2:8B:FA:C2:15:97:80:A6:70:D6:9D Authority key identifier: 4B:23:82:77:BD:45:01:DC:3B:75:40:3E:74:D8:B5:41:B7:64:30:97 Certificate issuer: /CN=4B238277BD4501DC3B75403E74D8B541B7643097 Certificate serial: 12B185F2FC68177B0A1253C7CDD3FE8D62401D4D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B238277BD4501DC3B75403E74D8B541B7643097.cer Subject info access: rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft Manifest number: A9 Signing time: Fri 22 Aug 2025 23:01:13 +0000 Manifest this update: Fri 22 Aug 2025 22:56:13 +0000 Manifest next update: Sun 24 Aug 2025 02:59:13 +0000 Files and hashes: 1: 323830343a376537383a3a2f33322d313238203d3e20323731363236.roa (hash: YxjgGXwxk/DJwwWBvr8NXqtozbxcPEarptqHkvquf/s=) 2: 4B238277BD4501DC3B75403E74D8B541B7643097.crl (hash: fwsLMyG9iphvOIDIaGXF6KJHglDchFWhrgUkBgT7xtk=) 3: 3138312e3138392e38302e302f32322d3332203d3e20323731363236.roa (hash: 2xtykdlv2HZAR6UC1CtCNk3nexbhm2O6sDYzQQilQhs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.crl rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B238277BD4501DC3B75403E74D8B541B7643097.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 02:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b1:85:f2:fc:68:17:7b:0a:12:53:c7:cd:d3:fe:8d:62:40:1d:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B238277BD4501DC3B75403E74D8B541B7643097 Validity Not Before: Aug 22 22:56:13 2025 GMT Not After : Aug 24 02:59:13 2025 GMT Subject: CN=98357DBEA674722DADD28BFAC2159780A670D69D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2f:d4:0b:e2:78:85:08:c8:a3:86:71:3b:d0: 1a:c2:45:2c:63:38:53:c5:e5:92:77:20:20:6f:0e: a4:88:78:f3:4b:73:58:51:7f:13:ce:a9:d3:15:42: e8:65:4c:16:9f:7c:cd:c4:6f:7e:6d:29:28:b7:09: 7f:d8:4c:99:09:2c:83:6d:46:4e:ce:da:b6:3b:56: 1c:2b:43:d9:34:ef:ef:1b:0f:63:6b:40:78:fc:4e: 41:ef:97:bb:1c:4f:c4:53:84:b2:73:74:c2:36:b7: a3:22:55:0c:d3:3a:a1:f9:9e:1f:34:27:a4:bf:47: af:e5:47:75:a3:6a:44:8c:09:e9:f7:7e:f5:7a:80: f0:3b:e6:51:7b:cb:80:04:c5:16:4a:52:bc:bd:78: 95:19:25:ea:9f:2a:c4:a0:e6:2d:61:a8:74:9f:b0: 97:1d:b2:78:e1:11:cd:04:4c:43:82:41:b6:70:9c: 68:11:76:9b:1b:e5:ec:96:5b:ac:d1:9b:33:98:91: 0b:34:11:f7:b1:ea:bd:f3:09:30:be:bf:66:77:01: b9:4d:7b:1c:55:75:5f:d9:1c:e7:07:87:48:ce:b3: fe:35:0b:2f:30:af:8f:fd:0b:eb:52:39:ab:ce:5d: 25:7a:84:0b:da:54:63:d1:3a:5f:88:52:4f:8b:59: 7b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:35:7D:BE:A6:74:72:2D:AD:D2:8B:FA:C2:15:97:80:A6:70:D6:9D X509v3 Authority Key Identifier: keyid:4B:23:82:77:BD:45:01:DC:3B:75:40:3E:74:D8:B5:41:B7:64:30:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B238277BD4501DC3B75403E74D8B541B7643097.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:20:5f:97:fe:63:df:1d:18:7d:0b:dc:3c:a5:0f:a0:63:22: 31:9f:a0:ad:c2:8b:59:b5:45:14:32:8e:5f:52:80:68:ac:cc: 97:ae:a4:74:fb:70:cd:91:68:21:0a:06:5a:83:b1:29:b7:87: 15:47:f6:36:f8:a2:43:42:f5:49:78:17:21:f3:cb:72:7c:72: 83:57:7d:6e:21:21:74:9c:4c:a1:d3:65:52:74:11:d3:da:91: 45:a7:9a:e0:82:cb:ca:6f:5b:e8:e2:14:33:5b:13:42:60:10: 65:a4:e2:ad:d3:d5:a0:98:0d:ee:ea:7c:9e:8a:bc:1a:00:f3: a7:e5:52:1b:d5:68:60:e0:78:bd:d9:b8:60:32:d2:9d:e0:dc: ac:05:91:a9:ec:93:d2:7f:6f:6c:8f:c0:1e:a7:f2:ef:4f:ae: 0c:00:a4:9a:a8:38:e6:a3:ed:72:63:5e:9f:d4:e0:b7:2d:61: 5f:18:59:59:55:56:8a:b4:d1:08:f5:11:28:c9:ee:fa:eb:20: 55:cb:1e:42:4f:44:90:07:5f:77:8d:20:71:3b:b7:4e:fb:d2: 41:cb:d6:dd:60:96:86:99:5c:e6:58:3e:eb:d9:44:9e:7a:18: f4:a5:13:2d:a6:48:56:37:0a:5b:aa:81:fa:64:1e:13:a5:a6: 31:6b:db:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUErGF8vxoF3sKElPHzdP+jWJAHU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyMzgyNzdCRDQ1MDFEQzNCNzU0MDNFNzREOEI1NDFC NzY0MzA5NzAeFw0yNTA4MjIyMjU2MTNaFw0yNTA4MjQwMjU5MTNaMDMxMTAvBgNV BAMTKDk4MzU3REJFQTY3NDcyMkRBREQyOEJGQUMyMTU5NzgwQTY3MEQ2OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcL9QL4niFCMijhnE70BrCRSxj OFPF5ZJ3ICBvDqSIePNLc1hRfxPOqdMVQuhlTBaffM3Eb35tKSi3CX/YTJkJLINt Rk7O2rY7VhwrQ9k07+8bD2NrQHj8TkHvl7scT8RThLJzdMI2t6MiVQzTOqH5nh80 J6S/R6/lR3WjakSMCen3fvV6gPA75lF7y4AExRZKUry9eJUZJeqfKsSg5i1hqHSf sJcdsnjhEc0ETEOCQbZwnGgRdpsb5eyWW6zRmzOYkQs0Efex6r3zCTC+v2Z3AblN exxVdV/ZHOcHh0jOs/41Cy8wr4/9C+tSOavOXSV6hAvaVGPROl+IUk+LWXvlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmDV9vqZ0ci2t0ov6whWXgKZw1p0wHwYDVR0j BBgwFoAUSyOCd71FAdw7dUA+dNi1QbdkMJcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVhQWlFVN3BqV3pUd2I0N2E1TXpHdTJNdFNQTkh5RXZrbm9halVnRFBT bmgvMC80QjIzODI3N0JENDUwMURDM0I3NTQwM0U3NEQ4QjU0MUI3NjQzMDk3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCMjM4Mjc3QkQ0NTAxREMz Qjc1NDAzRTc0RDhCNTQxQjc2NDMwOTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVhQWlFVN3BqV3pUd2I0N2E1TXpHdTJNdFNQTkh5RXZrbm9halVnRFBTbmgvMC80 QjIzODI3N0JENDUwMURDM0I3NTQwM0U3NEQ4QjU0MUI3NjQzMDk3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANSBfl/5j3x0YfQvcPKUPoGMiMZ+grcKLWbVFFDKOX1KAaKzMl66kdPtwzZFo IQoGWoOxKbeHFUf2NviiQ0L1SXgXIfPLcnxyg1d9biEhdJxModNlUnQR09qRRaea 4ILLym9b6OIUM1sTQmAQZaTirdPVoJgN7up8noq8GgDzp+VSG9VoYOB4vdm4YDLS neDcrAWRqeyT0n9vbI/AHqfy70+uDACkmqg45qPtcmNen9Tgty1hXxhZWVVWirTR CPURKMnu+usgVcseQk9EkAdfd40gcTu3TvvSQcvW3WCWhplc5lg+69lEnnoY9KUT LaZIVjcKW6qB+mQeE6WmMWvb9w== -----END CERTIFICATE-----Generated at Sat Aug 23 12:37:40 2025 by rpki-client