$ rpki-client -vvf rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/FDB293D8646ACB35E10785D8B748695F452A1DC2.mft File: FDB293D8646ACB35E10785D8B748695F452A1DC2.mft (raw, json) Hash identifier: GkRPa89lkHlo/378R0HQfn/JeD+QwtOFdabAXCsTL5I= Subject key identifier: 70:EC:8C:57:7C:1F:BF:F3:74:78:64:6A:57:F0:B7:82:1B:13:48:D9 Authority key identifier: FD:B2:93:D8:64:6A:CB:35:E1:07:85:D8:B7:48:69:5F:45:2A:1D:C2 Certificate issuer: /CN=FDB293D8646ACB35E10785D8B748695F452A1DC2 Certificate serial: 5224BCC15D6ABDA01A00DD612183EFB21467FE31 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDB293D8646ACB35E10785D8B748695F452A1DC2.cer Subject info access: rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/FDB293D8646ACB35E10785D8B748695F452A1DC2.mft Manifest number: 0233 Signing time: Mon 20 Oct 2025 08:13:54 +0000 Manifest this update: Mon 20 Oct 2025 08:08:54 +0000 Manifest next update: Tue 21 Oct 2025 12:06:54 +0000 Files and hashes: 1: FDB293D8646ACB35E10785D8B748695F452A1DC2.crl (hash: y967kpmBWH4NNkdypL5IMfh++2qzjOzNpPTHc+Avcjc=) 2: 3230302e392e3232302e302f32322d3234203d3e20323632343538.roa (hash: +W+uXyiSpes6HPymb2byLXNi5+8H+daN8GvOjtq9weY=) 3: 323830343a3461633a3a2f33322d3332203d3e20323632343538.roa (hash: jV3LTzhNcCe4J2+Az0Sjk0NtDOt/LC8m5u2QHVsDkTA=) 4: 3137372e35332e34382e302f32312d3234203d3e20323632343538.roa (hash: p+EkDxCjYl7z32gVNMbAN/TbaQcSrWnpxgdWeD49zbw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/FDB293D8646ACB35E10785D8B748695F452A1DC2.crl rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/FDB293D8646ACB35E10785D8B748695F452A1DC2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDB293D8646ACB35E10785D8B748695F452A1DC2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:24:bc:c1:5d:6a:bd:a0:1a:00:dd:61:21:83:ef:b2:14:67:fe:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDB293D8646ACB35E10785D8B748695F452A1DC2 Validity Not Before: Oct 20 08:08:54 2025 GMT Not After : Oct 21 12:06:54 2025 GMT Subject: CN=70EC8C577C1FBFF37478646A57F0B7821B1348D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9a:e0:88:ff:a1:10:cc:2e:34:93:4b:8d:2d: ac:ac:1a:6c:1f:b9:a1:55:a3:40:38:33:19:8d:1d: 23:b7:da:63:1b:46:2b:12:55:18:a6:29:9a:3e:71: a7:47:ec:48:0b:23:46:c4:41:bc:ab:a0:36:37:01: f6:0c:ca:76:57:96:61:d7:ce:31:7a:e1:03:dd:03: 8e:93:46:e0:5c:90:d7:8e:d2:86:9e:4a:42:31:e1: 24:fc:69:25:bc:4c:4a:f1:eb:2a:43:a4:e0:64:56: 7b:16:52:95:be:6c:f7:76:25:ab:63:3e:ce:ba:c7: 3a:16:54:95:6e:ef:e5:d1:2d:8d:fe:cf:92:3e:14: 1e:98:45:c4:9f:5f:50:49:c9:4d:2b:72:ce:0d:f2: 5f:da:48:78:bf:89:f7:02:14:0e:7d:21:14:aa:3f: eb:38:a8:e2:67:13:3a:85:f1:a9:8c:50:07:98:b9: e0:a5:40:60:7a:94:c9:ea:66:6a:f8:97:f6:80:2a: e5:d8:89:0c:a2:ea:19:bc:bf:4f:6a:d6:23:09:6c: d2:bc:7b:67:66:69:ba:ae:1c:27:bc:c2:e9:c5:d4: f1:57:87:0c:4a:47:ca:b9:ac:fb:a6:c5:b0:ac:8d: dd:ff:b9:5a:6f:c7:56:a5:44:ae:cf:0e:5e:0d:9c: db:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EC:8C:57:7C:1F:BF:F3:74:78:64:6A:57:F0:B7:82:1B:13:48:D9 X509v3 Authority Key Identifier: keyid:FD:B2:93:D8:64:6A:CB:35:E1:07:85:D8:B7:48:69:5F:45:2A:1D:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/FDB293D8646ACB35E10785D8B748695F452A1DC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDB293D8646ACB35E10785D8B748695F452A1DC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/FDB293D8646ACB35E10785D8B748695F452A1DC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:de:67:49:0f:b2:a8:58:19:31:f3:6f:96:be:2d:ab:02:c8: 0f:b0:84:5d:7a:4b:e1:e5:11:85:cb:0c:fe:e4:66:d0:5d:ac: 23:4d:39:2f:fd:3d:72:65:ea:d5:60:3f:e1:b9:fd:f9:00:f8: d5:18:2a:ef:c8:e9:8e:dc:65:84:32:42:e9:b6:2b:54:f2:7a: 89:c2:ae:d8:4f:db:2d:b8:6b:8c:87:78:7b:31:aa:af:bf:eb: a2:89:74:8e:e0:01:9e:33:99:14:6b:e9:b2:4a:dc:87:9e:14: d6:33:f1:8f:94:07:a0:9a:c3:5f:2e:58:5d:f8:cd:01:87:31: 41:9d:54:74:8b:d2:b5:bd:55:e1:c5:cf:9b:79:cb:9d:86:22: 37:37:45:c2:c3:73:cb:66:12:70:45:35:f8:f4:d9:c9:81:b5: 67:f2:70:1e:12:d7:c8:36:f3:c1:42:b7:93:6b:2a:99:cf:90: 8b:24:2f:a7:df:0c:78:0d:67:1e:62:8e:3e:53:0c:e7:59:0d: 5e:c8:d6:19:7b:c6:d7:6e:0e:df:9e:84:36:a4:5b:f1:53:08: cd:29:57:4a:14:54:f5:ca:fe:e4:b2:43:47:7c:ff:55:60:ee: c8:e1:0f:f1:47:40:31:e3:ea:50:07:56:27:42:3a:a5:57:14: 5f:a6:fe:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUiS8wV1qvaAaAN1hIYPvshRn/jEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRCMjkzRDg2NDZBQ0IzNUUxMDc4NUQ4Qjc0ODY5NUY0 NTJBMURDMjAeFw0yNTEwMjAwODA4NTRaFw0yNTEwMjExMjA2NTRaMDMxMTAvBgNV BAMTKDcwRUM4QzU3N0MxRkJGRjM3NDc4NjQ2QTU3RjBCNzgyMUIxMzQ4RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5muCI/6EQzC40k0uNLaysGmwf uaFVo0A4MxmNHSO32mMbRisSVRimKZo+cadH7EgLI0bEQbyroDY3AfYMynZXlmHX zjF64QPdA46TRuBckNeO0oaeSkIx4ST8aSW8TErx6ypDpOBkVnsWUpW+bPd2Jatj Ps66xzoWVJVu7+XRLY3+z5I+FB6YRcSfX1BJyU0rcs4N8l/aSHi/ifcCFA59IRSq P+s4qOJnEzqF8amMUAeYueClQGB6lMnqZmr4l/aAKuXYiQyi6hm8v09q1iMJbNK8 e2dmabquHCe8wunF1PFXhwxKR8q5rPumxbCsjd3/uVpvx1alRK7PDl4NnNsbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcOyMV3wfv/N0eGRqV/C3ghsTSNkwHwYDVR0j BBgwFoAU/bKT2GRqyzXhB4XYt0hpX0UqHcIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWpya0ozd1dSMko3ZXRlN0U3VjV2NTQ0eXVkR3h0U3U0VTNDS3J1QXJ2 UHUvMC9GREIyOTNEODY0NkFDQjM1RTEwNzg1RDhCNzQ4Njk1RjQ1MkExREMyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZEQjI5M0Q4NjQ2QUNCMzVF MTA3ODVEOEI3NDg2OTVGNDUyQTFEQzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWpya0ozd1dSMko3ZXRlN0U3VjV2NTQ0eXVkR3h0U3U0VTNDS3J1QXJ2UHUvMC9G REIyOTNEODY0NkFDQjM1RTEwNzg1RDhCNzQ4Njk1RjQ1MkExREMyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABN5nSQ+yqFgZMfNvlr4tqwLID7CEXXpL4eURhcsM/uRm0F2sI005L/09cmXq 1WA/4bn9+QD41Rgq78jpjtxlhDJC6bYrVPJ6icKu2E/bLbhrjId4ezGqr7/rool0 juABnjOZFGvpskrch54U1jPxj5QHoJrDXy5YXfjNAYcxQZ1UdIvStb1V4cXPm3nL nYYiNzdFwsNzy2YScEU1+PTZyYG1Z/JwHhLXyDbzwUK3k2sqmc+QiyQvp98MeA1n HmKOPlMM51kNXsjWGXvG124O356ENqRb8VMIzSlXShRU9cr+5LJDR3z/VWDuyOEP 8UdAMePqUAdWJ0I6pVcUX6b+6Q== -----END CERTIFICATE-----Generated at Mon Oct 20 15:25:42 2025 by rpki-client