$ rpki-client -vvf rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/F4295DF9D903508C9752EE48D417C2E0F09072B9.mft File: F4295DF9D903508C9752EE48D417C2E0F09072B9.mft (raw, json) Hash identifier: YpNyjGUiGJla0HrZDFL+TC14YaN14b77Hbas3Ae9cbc= Subject key identifier: 8E:13:DE:22:86:E0:D7:96:C3:ED:D0:3F:A4:B4:74:13:43:7F:B0:38 Authority key identifier: F4:29:5D:F9:D9:03:50:8C:97:52:EE:48:D4:17:C2:E0:F0:90:72:B9 Certificate issuer: /CN=F4295DF9D903508C9752EE48D417C2E0F09072B9 Certificate serial: 441935D442F2C194C5FDB65100835A5BFB95E91A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4295DF9D903508C9752EE48D417C2E0F09072B9.cer Subject info access: rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/F4295DF9D903508C9752EE48D417C2E0F09072B9.mft Manifest number: A2 Signing time: Mon 20 Oct 2025 09:23:58 +0000 Manifest this update: Mon 20 Oct 2025 09:18:58 +0000 Manifest next update: Tue 21 Oct 2025 11:52:58 +0000 Files and hashes: 1: F4295DF9D903508C9752EE48D417C2E0F09072B9.crl (hash: WQnvj0M5vpgKJn/+jEiTnRQQIHc8TP+1+YNEzqAbuJ0=) 2: 323830343a346630343a3a2f33322d313238203d3e20323638323938.roa (hash: Vrke0Oq4bo6mVeSeE988FSQcp7cmd2Nu1WQ35iKBUl0=) 3: 34352e3233372e3230382e302f32322d3332203d3e20323638323938.roa (hash: 6c3GdWcjKCcupf3f4vwcEM7/1n5r6TvUI5+yFIQGlag=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/F4295DF9D903508C9752EE48D417C2E0F09072B9.crl rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/F4295DF9D903508C9752EE48D417C2E0F09072B9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4295DF9D903508C9752EE48D417C2E0F09072B9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:19:35:d4:42:f2:c1:94:c5:fd:b6:51:00:83:5a:5b:fb:95:e9:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4295DF9D903508C9752EE48D417C2E0F09072B9 Validity Not Before: Oct 20 09:18:58 2025 GMT Not After : Oct 21 11:52:58 2025 GMT Subject: CN=8E13DE2286E0D796C3EDD03FA4B47413437FB038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:d5:3e:2f:6e:d0:3f:00:3e:a7:a5:66:5c: 4d:c8:15:e8:68:26:4a:12:26:ee:2d:07:31:a2:cc: 2c:f7:e2:05:83:91:17:65:5c:9d:f3:d3:1e:17:dd: 75:bc:c6:7b:f1:b7:d1:a4:61:8e:3b:b1:34:11:42: 15:1e:b1:d4:d8:bd:6c:8c:4c:23:d8:1c:5e:9f:b5: 2c:27:de:1b:69:87:b9:da:bd:02:ba:6c:bc:68:09: 92:a2:f1:97:d0:d3:96:21:90:0e:d7:82:ec:75:f1: fa:4e:17:38:23:de:8b:8a:64:32:e2:60:c3:d5:28: 10:a5:28:48:d0:59:24:95:05:c0:bb:cb:38:c9:e5: 55:e3:12:89:63:24:53:a4:0d:bb:39:3c:35:2e:b4: 82:02:3f:c9:ce:c4:42:8f:da:fd:84:f2:e2:0a:71: cc:70:97:b6:9e:ac:8a:5d:59:f7:20:03:13:47:cb: ce:e6:9a:e8:92:ce:d5:56:25:ba:84:b5:a4:24:5e: af:22:0e:f8:6e:d5:5d:1b:71:f7:93:f9:41:16:e0: 8c:df:d7:b1:82:6d:37:89:63:57:6f:ec:6d:8e:7b: c9:e1:b6:76:eb:cf:c0:96:31:ad:06:eb:56:c4:aa: d0:ce:cf:7c:ad:8e:a7:f5:55:63:9b:04:54:1f:2d: bd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:13:DE:22:86:E0:D7:96:C3:ED:D0:3F:A4:B4:74:13:43:7F:B0:38 X509v3 Authority Key Identifier: keyid:F4:29:5D:F9:D9:03:50:8C:97:52:EE:48:D4:17:C2:E0:F0:90:72:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/F4295DF9D903508C9752EE48D417C2E0F09072B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4295DF9D903508C9752EE48D417C2E0F09072B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/F4295DF9D903508C9752EE48D417C2E0F09072B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:62:8e:0c:bc:f1:91:fe:f5:a0:71:d1:ce:67:9f:f0:78:c3: 8e:05:b4:81:96:75:50:a5:ae:54:a4:e8:1a:10:c6:ef:6d:a4: ed:b2:05:78:9e:5c:c2:8a:4a:91:a9:dc:79:a0:4d:2f:ee:9c: f8:e0:b1:06:28:33:98:07:be:9e:51:4f:42:68:11:f4:34:ce: 14:86:69:86:3a:87:3b:0b:74:de:dc:97:1d:d6:61:5f:36:a1: b5:33:d9:f5:cc:38:da:d6:c7:bd:cc:67:d5:80:07:3e:8b:50: 97:5c:ed:de:ab:a6:04:42:25:d5:13:61:05:fe:9d:3c:1b:a0: a3:ed:a3:a2:2d:6a:33:b7:22:b1:f9:4c:49:6e:96:a7:83:2d: 21:59:b4:4f:95:37:07:14:0a:dd:86:54:04:53:43:3b:11:0d: 7f:7a:18:20:ef:a6:95:66:22:53:7c:6d:8e:24:96:fb:39:68: 87:9b:9d:74:75:7a:05:13:47:ef:82:a1:78:2f:f1:57:54:f7: 73:de:4c:c9:bc:fe:7b:0a:bc:16:c5:b6:cf:4e:7a:e9:a3:9a: 32:fc:d1:76:83:1c:03:49:b3:1c:4b:eb:e3:4e:75:f6:b7:65: aa:8e:eb:56:dc:48:5a:a3:97:16:a4:f5:12:1b:cb:3f:36:0b: 47:30:76:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURBk11ELywZTF/bZRAINaW/uV6RowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyOTVERjlEOTAzNTA4Qzk3NTJFRTQ4RDQxN0MyRTBG MDkwNzJCOTAeFw0yNTEwMjAwOTE4NThaFw0yNTEwMjExMTUyNThaMDMxMTAvBgNV BAMTKDhFMTNERTIyODZFMEQ3OTZDM0VERDAzRkE0QjQ3NDEzNDM3RkIwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpUtU+L27QPwA+p6VmXE3IFeho JkoSJu4tBzGizCz34gWDkRdlXJ3z0x4X3XW8xnvxt9GkYY47sTQRQhUesdTYvWyM TCPYHF6ftSwn3htph7navQK6bLxoCZKi8ZfQ05YhkA7Xgux18fpOFzgj3ouKZDLi YMPVKBClKEjQWSSVBcC7yzjJ5VXjEoljJFOkDbs5PDUutIICP8nOxEKP2v2E8uIK ccxwl7aerIpdWfcgAxNHy87mmuiSztVWJbqEtaQkXq8iDvhu1V0bcfeT+UEW4Izf 17GCbTeJY1dv7G2Oe8nhtnbrz8CWMa0G61bEqtDOz3ytjqf1VWObBFQfLb29AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjhPeIobg15bD7dA/pLR0E0N/sDgwHwYDVR0j BBgwFoAU9Cld+dkDUIyXUu5I1BfC4PCQcrkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFZNaXBMdlBMajU4R0pRaTRjN0hkcVpKeVdTa211aEJzbkdOTmN1aTQz bUUvMC9GNDI5NURGOUQ5MDM1MDhDOTc1MkVFNDhENDE3QzJFMEYwOTA3MkI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0Mjk1REY5RDkwMzUwOEM5 NzUyRUU0OEQ0MTdDMkUwRjA5MDcyQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFZNaXBMdlBMajU4R0pRaTRjN0hkcVpKeVdTa211aEJzbkdOTmN1aTQzbUUvMC9G NDI5NURGOUQ5MDM1MDhDOTc1MkVFNDhENDE3QzJFMEYwOTA3MkI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjmKODLzxkf71oHHRzmef8HjDjgW0gZZ1UKWuVKToGhDG722k7bIFeJ5cwopK kanceaBNL+6c+OCxBigzmAe+nlFPQmgR9DTOFIZphjqHOwt03tyXHdZhXzahtTPZ 9cw42tbHvcxn1YAHPotQl1zt3qumBEIl1RNhBf6dPBugo+2joi1qM7cisflMSW6W p4MtIVm0T5U3BxQK3YZUBFNDOxENf3oYIO+mlWYiU3xtjiSW+zloh5uddHV6BRNH 74KheC/xV1T3c95Mybz+ewq8FsW2z0566aOaMvzRdoMcA0mzHEvr40519rdlqo7r VtxIWqOXFqT1EhvLPzYLRzB2Qw== -----END CERTIFICATE-----Generated at Tue Oct 21 02:22:13 2025 by rpki-client