$ rpki-client -vvf rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft File: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft (raw, json) Hash identifier: 2+BSlVFtZrUxvQTXLYr6p9EdVpEpM4HzZbIrcKglPU8= Subject key identifier: 96:A1:9B:B5:45:BD:74:D1:10:CC:99:D0:FD:BC:B7:23:96:A8:A7:3A Authority key identifier: CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D Certificate issuer: /CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D Certificate serial: 479CE7D8EC17E6B60FD013BCA7930D7250A2E559 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft Manifest number: 02D5 Signing time: Mon 20 Oct 2025 02:00:48 +0000 Manifest this update: Mon 20 Oct 2025 01:55:48 +0000 Manifest next update: Tue 21 Oct 2025 04:53:48 +0000 Files and hashes: 1: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl (hash: 2NG6DCTkLxD/AKDGJegkXoW6ZLfIfs3x4w02ADymSso=) 2: 323830343a6461633a3a2f33322d3438203d3e203238313831.roa (hash: JvwegUUzqtOYrCDplzNKYzOOoU16ChE9rMTQfVBPQa0=) 3: 3137392e39372e31362e302f32312d3234203d3e203238313831.roa (hash: h2W8XM2at3NYFJYnufJYaTXSX9GJvpJOp/TMajp4JtE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 04:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:9c:e7:d8:ec:17:e6:b6:0f:d0:13:bc:a7:93:0d:72:50:a2:e5:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D Validity Not Before: Oct 20 01:55:48 2025 GMT Not After : Oct 21 04:53:48 2025 GMT Subject: CN=96A19BB545BD74D110CC99D0FDBCB72396A8A73A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:54:e8:81:22:3f:17:1d:58:a7:e0:36:d4: 56:45:f4:6e:6e:2e:9a:f9:3a:5a:cb:08:d0:58:d4: 07:19:f9:a6:94:5e:c7:31:a6:88:34:f8:ec:19:f8: 6a:0a:4b:7f:9a:30:0b:f8:4c:24:d4:c2:02:34:bc: 79:e1:ff:fe:c8:70:30:d4:c9:29:89:1d:8e:29:31: 28:43:72:79:a9:ab:52:c0:08:26:b0:0c:b9:93:11: 91:92:28:d9:7d:88:18:4e:44:aa:06:77:d7:70:a0: 7b:6d:12:6e:ae:19:7c:71:ea:0e:57:15:72:f3:43: 0a:7b:ee:61:b0:11:0b:c3:68:8b:a4:77:13:3a:56: 8d:5d:f2:a8:d4:d2:60:77:5e:2d:ad:c1:16:42:f6: 59:c5:dd:94:6c:b4:02:39:9e:ac:f5:80:8c:cf:6c: 4a:39:a4:0e:aa:85:17:0d:62:4f:ac:aa:08:bc:d3: 3c:46:dd:0c:d9:1c:19:10:d7:fd:fd:6e:0f:36:bc: d8:3f:65:e1:36:a6:43:0e:38:46:51:7a:f4:6b:57: 1a:88:95:94:0d:dd:2d:06:ed:96:c0:04:65:7e:42: 65:dd:35:ae:3c:df:87:89:33:3f:2b:67:77:88:c0: a1:18:19:cd:ef:28:f2:99:5e:ee:7c:1e:31:e4:03: 3e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A1:9B:B5:45:BD:74:D1:10:CC:99:D0:FD:BC:B7:23:96:A8:A7:3A X509v3 Authority Key Identifier: keyid:CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:12:7f:6f:73:fa:30:13:24:9c:29:f0:db:14:dd:07:19:c6: fe:e7:ec:84:4b:3a:f0:b7:43:06:62:bd:ed:b7:cf:9f:16:8a: f3:23:c0:9c:9f:20:56:95:a8:28:65:e9:89:40:9a:72:3e:31: c6:45:b7:9a:48:d4:43:cc:ac:16:9e:17:4f:7e:e9:3b:ca:ba: 6c:28:58:6b:3d:8e:1e:8b:b2:9d:38:d8:ca:62:4b:df:5a:3e: b1:dd:c5:91:fa:8e:02:31:ac:a1:9a:6f:d6:95:89:bb:b5:e6: 3d:81:35:a2:29:b8:bf:cf:9d:03:a9:a8:12:85:0c:2b:cc:93: 79:db:b3:5b:24:21:31:94:6a:db:cb:0d:ac:86:4a:ab:75:86: 2e:9f:32:e1:e6:23:40:b4:43:e5:6e:33:74:92:1d:a1:f0:80: 72:42:5e:9f:1d:93:a3:80:6f:49:ab:a0:35:4f:81:df:26:16: a9:5a:c6:63:a5:45:7e:e9:9a:d4:ed:b8:54:4a:81:f3:e4:61: 16:d0:51:1d:02:04:4e:c5:58:31:69:2c:43:9b:0e:00:df:57: b4:60:ec:dd:9b:7a:09:4e:9a:60:f6:ba:de:c9:fb:78:9a:fb: 08:f7:46:ac:ea:3b:3c:69:b4:20:ae:09:6e:5e:42:3e:76:5f: 20:0e:2a:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR5zn2OwX5rYP0BO8p5MNclCi5VkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyMEVGQzBCOTlBOEE4NkI0QjRDRkExMDdCMDAxRDUw OEI3MjkwRDAeFw0yNTEwMjAwMTU1NDhaFw0yNTEwMjEwNDUzNDhaMDMxMTAvBgNV BAMTKDk2QTE5QkI1NDVCRDc0RDExMENDOTlEMEZEQkNCNzIzOTZBOEE3M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gVTogSI/Fx1Yp+A21FZF9G5u Lpr5OlrLCNBY1AcZ+aaUXscxpog0+OwZ+GoKS3+aMAv4TCTUwgI0vHnh//7IcDDU ySmJHY4pMShDcnmpq1LACCawDLmTEZGSKNl9iBhORKoGd9dwoHttEm6uGXxx6g5X FXLzQwp77mGwEQvDaIukdxM6Vo1d8qjU0mB3Xi2twRZC9lnF3ZRstAI5nqz1gIzP bEo5pA6qhRcNYk+sqgi80zxG3QzZHBkQ1/39bg82vNg/ZeE2pkMOOEZRevRrVxqI lZQN3S0G7ZbABGV+QmXdNa4834eJMz8rZ3eIwKEYGc3vKPKZXu58HjHkAz6LAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlqGbtUW9dNEQzJnQ/by3I5aopzowHwYDVR0j BBgwFoAUyiDvwLmaioa0tM+hB7AB1Qi3KQ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9Y R0cvMC9DQTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMjBFRkMwQjk5QThBODZC NEI0Q0ZBMTA3QjAwMUQ1MDhCNzI5MEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9YR0cvMC9D QTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuhJ/b3P6MBMknCnw2xTdBxnG/ufshEs68LdDBmK97bfPnxaK8yPAnJ8gVpWo KGXpiUCacj4xxkW3mkjUQ8ysFp4XT37pO8q6bChYaz2OHouynTjYymJL31o+sd3F kfqOAjGsoZpv1pWJu7XmPYE1oim4v8+dA6moEoUMK8yTeduzWyQhMZRq28sNrIZK q3WGLp8y4eYjQLRD5W4zdJIdofCAckJenx2To4BvSaugNU+B3yYWqVrGY6VFfuma 1O24VEqB8+RhFtBRHQIETsVYMWksQ5sOAN9XtGDs3Zt6CU6aYPa63sn7eJr7CPdG rOo7PGm0IK4Jbl5CPnZfIA4qJg== -----END CERTIFICATE-----Generated at Mon Oct 20 09:31:18 2025 by rpki-client