$ rpki-client -vvf rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.mft File: 1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.mft (raw, json) Hash identifier: 9jGYRHttZdHqtO0NJLOQys4si40Ii/OOjWU1Ondk7eQ= Subject key identifier: 3C:A9:5B:FC:F5:B9:A3:0B:DB:C9:F1:30:69:76:A9:14:EC:37:62:DE Authority key identifier: 19:20:A0:AD:22:86:EB:26:B5:D8:87:A0:E2:DA:2E:52:90:F7:AD:53 Certificate issuer: /CN=1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53 Certificate serial: 7FA0C9625CCB761C870EF8FD01C921BA363997BB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.cer Subject info access: rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.mft Manifest number: 0227 Signing time: Mon 20 Oct 2025 13:42:05 +0000 Manifest this update: Mon 20 Oct 2025 13:37:05 +0000 Manifest next update: Tue 21 Oct 2025 16:41:05 +0000 Files and hashes: 1: 323830343a313236303a3a2f33322d313238203d3e20323633343733.roa (hash: P5tpt3sNZYNxkNQZ5A3TTCitEaagJlKaWoGIaLkqVfE=) 2: 3139312e3234322e36342e302f32312d3332203d3e20323633343733.roa (hash: +Za1I8jk75yASHx/HTv79/GfTrfpEfOc/C3YRop2iRY=) 3: 1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.crl (hash: gk8YMqEJhRmVXNmq2mpa+jr2Ex/iFZlc1mapH96w0+I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.crl rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:a0:c9:62:5c:cb:76:1c:87:0e:f8:fd:01:c9:21:ba:36:39:97:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53 Validity Not Before: Oct 20 13:37:05 2025 GMT Not After : Oct 21 16:41:05 2025 GMT Subject: CN=3CA95BFCF5B9A30BDBC9F1306976A914EC3762DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:18:25:b9:6a:e3:30:32:32:c3:85:30:c4:44: 90:a7:d4:09:1e:c7:61:df:30:66:1e:9f:11:42:66: 16:37:1f:18:22:37:30:44:9e:fa:bc:7d:de:79:7e: 47:94:71:8a:60:79:ec:c3:ab:46:8a:2b:4c:66:b9: c0:9b:55:7b:dc:bd:33:2b:bf:a7:f6:09:a6:b0:a0: 3d:de:5c:f2:c1:90:5b:ae:bd:08:2f:5c:8c:fb:74: 0e:33:5a:3b:f5:3f:d9:0c:c6:43:2d:4e:19:71:71: 30:43:79:75:96:a8:c0:b8:19:ce:04:98:34:84:3d: 9c:13:cd:f2:35:70:eb:b2:a2:d8:5b:b8:50:9f:b6: 5c:b0:85:ce:32:ca:8e:29:b0:7b:26:98:a8:d0:92: f9:cf:00:9b:4d:c2:dc:e7:ab:16:4b:3f:b2:13:f3: 1a:bc:12:43:73:be:bb:71:c6:ac:3b:11:0c:03:7d: 5c:28:06:fb:22:95:d0:cd:cf:cc:11:4a:8c:43:89: 34:8a:96:20:a2:4f:44:4e:ad:a6:7d:63:4f:c9:47: e2:b4:b7:d8:0f:72:40:f7:3e:af:ab:25:54:76:e7: 55:03:7f:83:a9:a8:5c:94:d7:e4:a0:8e:b4:b9:bb: 4d:6e:28:b5:61:52:f6:8b:40:4e:ec:8f:cb:d0:0b: ed:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A9:5B:FC:F5:B9:A3:0B:DB:C9:F1:30:69:76:A9:14:EC:37:62:DE X509v3 Authority Key Identifier: keyid:19:20:A0:AD:22:86:EB:26:B5:D8:87:A0:E2:DA:2E:52:90:F7:AD:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:61:4b:4d:cd:c8:e6:8a:6c:7c:f0:20:12:e7:d4:f1:74:6d: d1:93:8c:8d:56:63:8d:34:7d:04:c6:a4:93:54:f0:4e:b9:5d: 87:01:e0:8e:16:c1:91:26:e8:da:3b:09:a2:f0:93:6b:30:fc: f3:ac:31:6a:d4:c5:68:c1:73:74:ba:f7:16:d0:f2:f0:bb:6f: 4e:93:24:d9:9e:d0:f1:61:a7:49:b1:c5:42:6a:42:75:35:d2: 29:27:03:ae:27:bc:05:45:ec:13:a4:3b:e2:bc:ff:bf:41:e2: 39:1c:d9:3f:ea:ef:b7:49:1c:0b:e5:e8:6b:e9:fc:93:ad:92: 60:ee:cd:f8:74:cd:03:31:bb:15:e5:d0:17:3b:eb:e8:59:e0: f9:19:98:6b:95:14:8a:2f:51:4a:9f:4a:46:99:b5:8a:45:ed: 3e:10:76:e8:ca:b4:cb:a3:1f:1f:25:01:ff:3b:83:41:79:76: c0:95:aa:24:82:c0:a6:d2:83:21:22:7f:ff:df:2a:48:86:5b: 7e:61:9b:20:b9:35:93:07:91:e4:33:e9:30:f7:c4:bc:7b:ba: 1f:8f:5f:19:d3:76:a9:65:59:7f:9c:91:60:7a:78:72:01:83: 84:e7:fd:83:a2:61:cf:c5:0d:b8:34:de:44:ea:32:28:7e:61: 69:c2:1e:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUf6DJYlzLdhyHDvj9AckhujY5l7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkyMEEwQUQyMjg2RUIyNkI1RDg4N0EwRTJEQTJFNTI5 MEY3QUQ1MzAeFw0yNTEwMjAxMzM3MDVaFw0yNTEwMjExNjQxMDVaMDMxMTAvBgNV BAMTKDNDQTk1QkZDRjVCOUEzMEJEQkM5RjEzMDY5NzZBOTE0RUMzNzYyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnGCW5auMwMjLDhTDERJCn1Ake x2HfMGYenxFCZhY3HxgiNzBEnvq8fd55fkeUcYpgeezDq0aKK0xmucCbVXvcvTMr v6f2CaawoD3eXPLBkFuuvQgvXIz7dA4zWjv1P9kMxkMtThlxcTBDeXWWqMC4Gc4E mDSEPZwTzfI1cOuyothbuFCftlywhc4yyo4psHsmmKjQkvnPAJtNwtznqxZLP7IT 8xq8EkNzvrtxxqw7EQwDfVwoBvsildDNz8wRSoxDiTSKliCiT0ROraZ9Y0/JR+K0 t9gPckD3Pq+rJVR251UDf4OpqFyU1+SgjrS5u01uKLVhUvaLQE7sj8vQC+31AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPKlb/PW5owvbyfEwaXapFOw3Yt4wHwYDVR0j BBgwFoAUGSCgrSKG6ya12Ieg4touUpD3rVMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUQ0VGh2dUJzQllHRWpKS0hYSkh0NjMyWExhNTZUbVhneHB0SllmZzZi VEUvMC8xOTIwQTBBRDIyODZFQjI2QjVEODg3QTBFMkRBMkU1MjkwRjdBRDUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5MjBBMEFEMjI4NkVCMjZC NUQ4ODdBMEUyREEyRTUyOTBGN0FENTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUQ0VGh2dUJzQllHRWpKS0hYSkh0NjMyWExhNTZUbVhneHB0SllmZzZiVEUvMC8x OTIwQTBBRDIyODZFQjI2QjVEODg3QTBFMkRBMkU1MjkwRjdBRDUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM2FLTc3I5opsfPAgEufU8XRt0ZOMjVZjjTR9BMakk1TwTrldhwHgjhbBkSbo 2jsJovCTazD886wxatTFaMFzdLr3FtDy8LtvTpMk2Z7Q8WGnSbHFQmpCdTXSKScD rie8BUXsE6Q74rz/v0HiORzZP+rvt0kcC+Xoa+n8k62SYO7N+HTNAzG7FeXQFzvr 6Fng+RmYa5UUii9RSp9KRpm1ikXtPhB26Mq0y6MfHyUB/zuDQXl2wJWqJILAptKD ISJ//98qSIZbfmGbILk1kweR5DPpMPfEvHu6H49fGdN2qWVZf5yRYHp4cgGDhOf9 g6Jhz8UNuDTeROoyKH5hacIetw== -----END CERTIFICATE-----Generated at Mon Oct 20 15:00:44 2025 by rpki-client