$ rpki-client -vvf rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft File: F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft (raw, json) Hash identifier: dD+lfD61c3nLhvItNpISn1eDzB5qHfkXJbNEJkGhsC4= Subject key identifier: 62:42:61:6D:83:F5:BF:21:BD:AA:7C:6F:1F:2B:B6:1F:51:A0:6D:BB Authority key identifier: F8:40:F3:A0:7A:5B:A8:A1:B8:C8:95:C5:96:26:D4:B9:07:A8:8F:7E Certificate issuer: /CN=F840F3A07A5BA8A1B8C895C59626D4B907A88F7E Certificate serial: 38F4B257E526E376E3FCAB337191862896DE5A53 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.cer Subject info access: rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft Manifest number: 02F2 Signing time: Sun 19 Oct 2025 19:15:21 +0000 Manifest this update: Sun 19 Oct 2025 19:10:21 +0000 Manifest next update: Mon 20 Oct 2025 20:44:21 +0000 Files and hashes: 1: F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.crl (hash: wWmkUwg8Etfbb8PCkrp8ofQ/j0fQ/4poaxplHIwCHCE=) 2: 3138392e33392e3138362e302f32342d3234203d3e20323730373932.roa (hash: WA3J0WguYs9zONV4TbORGUBacU9F5Nfbxix2CDq0vVM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.crl rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 20:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f4:b2:57:e5:26:e3:76:e3:fc:ab:33:71:91:86:28:96:de:5a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F840F3A07A5BA8A1B8C895C59626D4B907A88F7E Validity Not Before: Oct 19 19:10:21 2025 GMT Not After : Oct 20 20:44:21 2025 GMT Subject: CN=6242616D83F5BF21BDAA7C6F1F2BB61F51A06DBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f0:ce:ec:09:04:75:ef:6c:06:7c:88:94:9f: e5:df:b0:b6:6c:2d:e2:16:6b:1a:67:02:92:88:44: 55:c7:ef:7d:a5:5d:d1:04:8a:17:a4:21:76:3c:7b: 03:66:71:c5:d9:93:d7:ed:05:b2:c3:7a:99:a7:ad: a5:8b:ba:e4:79:ff:2d:a5:84:ea:65:83:d9:d6:1c: cc:63:ad:33:0d:7d:3c:02:8b:28:f7:9f:a3:54:f8: 65:c4:5b:4b:59:d4:74:22:db:70:ad:9b:1c:d2:2e: 0f:29:79:23:7f:52:a2:86:5b:e1:de:9b:b7:af:48: ec:a4:a5:79:8e:f3:af:29:02:1f:a3:ca:3c:d9:37: fc:f5:40:4d:6c:c6:3e:8b:65:91:d3:58:b1:f9:c2: ac:0e:b9:5b:d7:40:5c:05:85:b8:b7:87:24:d7:da: be:be:47:7f:ee:c0:68:d1:b7:32:10:86:a5:f2:94: ff:cd:f1:14:2e:32:93:46:92:4e:b7:ae:59:d6:77: ca:12:1c:d3:b6:34:c4:1a:de:71:4b:5c:b9:46:77: 7c:bd:ea:bf:4d:4e:5d:55:a9:2a:20:38:49:54:54: a7:db:b9:08:87:cb:15:5b:a4:4a:b4:66:c2:27:18: a6:c9:69:19:c0:b3:3f:1a:df:df:94:79:da:d0:72: 49:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:42:61:6D:83:F5:BF:21:BD:AA:7C:6F:1F:2B:B6:1F:51:A0:6D:BB X509v3 Authority Key Identifier: keyid:F8:40:F3:A0:7A:5B:A8:A1:B8:C8:95:C5:96:26:D4:B9:07:A8:8F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:04:ae:f6:ea:66:4a:3c:3b:63:ac:0a:b8:13:3b:c8:41:ff: 77:cc:58:37:b0:6f:02:ff:3e:f1:fa:46:03:db:0c:4a:26:88: 7c:0f:1d:16:d2:a6:92:ed:7f:49:6b:ba:0b:d8:92:bc:0a:0c: 20:ea:e6:a5:b2:5a:ed:1c:a5:da:18:ae:63:ee:1d:ed:47:27: 38:33:7c:b3:0a:9a:73:6b:0e:bb:2d:b5:7a:dd:0f:83:e5:b6: 6d:ce:d0:24:0d:86:9d:ad:3b:3c:b1:ca:43:b4:48:d5:8c:88: c9:ed:61:8b:9b:35:db:57:ec:7d:84:65:35:be:02:e1:91:0e: 2f:66:c1:46:c9:0e:89:79:12:b9:56:b8:a4:5c:5f:32:10:cb: 2c:7f:95:a2:e8:17:02:8e:dd:bc:ec:69:3f:39:80:76:8e:7c: f4:05:ff:2d:aa:3c:bf:ef:78:94:f7:0f:90:bd:b8:90:62:cf: be:7f:dc:e4:9a:5f:15:bf:9f:f6:4a:01:c1:68:23:ce:9b:53: 04:a6:42:cb:20:55:89:7f:3c:21:f2:47:4f:08:4a:bc:00:1c: 5a:73:64:24:a0:08:29:37:95:30:78:cc:4b:cd:b5:37:9d:ad: 0b:32:0a:0c:b5:58:c5:dc:3d:2a:af:7d:a9:fb:f0:4e:13:00: 27:77:c9:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOPSyV+Um43bj/KszcZGGKJbeWlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg0MEYzQTA3QTVCQThBMUI4Qzg5NUM1OTYyNkQ0Qjkw N0E4OEY3RTAeFw0yNTEwMTkxOTEwMjFaFw0yNTEwMjAyMDQ0MjFaMDMxMTAvBgNV BAMTKDYyNDI2MTZEODNGNUJGMjFCREFBN0M2RjFGMkJCNjFGNTFBMDZEQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx8M7sCQR172wGfIiUn+XfsLZs LeIWaxpnApKIRFXH732lXdEEihekIXY8ewNmccXZk9ftBbLDepmnraWLuuR5/y2l hOplg9nWHMxjrTMNfTwCiyj3n6NU+GXEW0tZ1HQi23CtmxzSLg8peSN/UqKGW+He m7evSOykpXmO868pAh+jyjzZN/z1QE1sxj6LZZHTWLH5wqwOuVvXQFwFhbi3hyTX 2r6+R3/uwGjRtzIQhqXylP/N8RQuMpNGkk63rlnWd8oSHNO2NMQa3nFLXLlGd3y9 6r9NTl1VqSogOElUVKfbuQiHyxVbpEq0ZsInGKbJaRnAsz8a39+UedrQcklxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYkJhbYP1vyG9qnxvHyu2H1GgbbswHwYDVR0j BBgwFoAU+EDzoHpbqKG4yJXFlibUuQeoj34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOG5nQ0xyY1VWY2lyb3BRdFBpWGZBZWR6cnRHbXJ4ODlvaHpGb1hOY3VH d20vMS9GODQwRjNBMDdBNUJBOEExQjhDODk1QzU5NjI2RDRCOTA3QTg4RjdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4NDBGM0EwN0E1QkE4QTFC OEM4OTVDNTk2MjZENEI5MDdBODhGN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OG5nQ0xyY1VWY2lyb3BRdFBpWGZBZWR6cnRHbXJ4ODlvaHpGb1hOY3VHd20vMS9G ODQwRjNBMDdBNUJBOEExQjhDODk1QzU5NjI2RDRCOTA3QTg4RjdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsQSu9upmSjw7Y6wKuBM7yEH/d8xYN7BvAv8+8fpGA9sMSiaIfA8dFtKmku1/ SWu6C9iSvAoMIOrmpbJa7Ryl2hiuY+4d7UcnODN8swqac2sOuy21et0Pg+W2bc7Q JA2Gna07PLHKQ7RI1YyIye1hi5s121fsfYRlNb4C4ZEOL2bBRskOiXkSuVa4pFxf MhDLLH+VougXAo7dvOxpPzmAdo589AX/Lao8v+94lPcPkL24kGLPvn/c5JpfFb+f 9koBwWgjzptTBKZCyyBViX88IfJHTwhKvAAcWnNkJKAIKTeVMHjMS821N52tCzIK DLVYxdw9Kq99qfvwThMAJ3fJtQ== -----END CERTIFICATE-----Generated at Mon Oct 20 18:26:49 2025 by rpki-client