$ rpki-client -vvf rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft File: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft (raw, json) Hash identifier: c+kU9Ewpme2MTw3/gkyVJHI7lqcG9dH2sOdGyWNYyA8= Subject key identifier: FA:33:9A:B1:B3:5F:72:48:A4:74:C9:EA:88:31:6E:E2:A8:B3:3B:07 Authority key identifier: 09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0 Certificate issuer: /CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0 Certificate serial: 386C768498E8E7E455B41D229E78AC79B872D7AE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer Subject info access: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft Manifest number: 01E2 Signing time: Fri 22 Aug 2025 22:25:36 +0000 Manifest this update: Fri 22 Aug 2025 22:20:36 +0000 Manifest next update: Sat 23 Aug 2025 23:38:36 +0000 Files and hashes: 1: 323830343a353232633a3a2f33322d313238203d3e20323638353030.roa (hash: VL/snBcA4TQASO1JgrhJJ4GnQSQZ2IO6gxXlLXQGjG8=) 2: 34352e3136312e33362e302f32322d3332203d3e20323638353030.roa (hash: i8P9i+svn6eTugjVKIH7LsBAziQNryR6tY4w3i2ypmg=) 3: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl (hash: KslwAWuz9Og0dco6L53t0rcIzODCdXogbmfNGh7c7YQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 23:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6c:76:84:98:e8:e7:e4:55:b4:1d:22:9e:78:ac:79:b8:72:d7:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0 Validity Not Before: Aug 22 22:20:36 2025 GMT Not After : Aug 23 23:38:36 2025 GMT Subject: CN=FA339AB1B35F7248A474C9EA88316EE2A8B33B07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:99:80:67:9b:4d:7f:91:e9:27:4b:40:dc:b7: 6c:ed:f4:16:40:3b:5c:20:97:a3:9b:10:36:00:43: 97:62:f5:97:df:b6:01:6a:9c:be:ba:4e:96:a1:59: 33:45:f7:38:55:5e:70:11:ab:e7:a8:fe:34:2a:3f: 0c:50:09:e7:f5:2b:7a:b8:e0:ef:fb:4a:50:59:fd: db:db:87:52:9b:6d:ef:fe:b6:bf:6c:32:d6:df:8c: 8f:db:b6:ff:1c:1f:70:5f:5d:bb:e3:93:b0:f8:41: eb:27:ce:42:12:17:a6:7e:aa:48:19:8d:30:c7:43: 71:87:c0:23:9c:63:6b:55:35:94:54:0f:03:59:5d: 09:b9:f3:0c:47:dd:f0:2a:bc:3c:e3:58:bd:07:61: 28:25:84:57:95:03:6a:28:1e:d0:1c:98:e3:00:fd: 71:c3:67:24:a9:09:7d:8e:29:8b:3d:86:c2:8f:30: ad:65:ef:8b:86:b8:2d:ae:37:1f:0d:f5:cc:1a:2a: 6f:b0:87:d1:77:c6:c3:93:30:0e:09:4d:50:1a:45: 2a:19:67:75:42:c3:db:7d:1c:76:fb:5c:2a:39:72: 07:4d:fd:83:cd:2d:80:e0:e0:2e:0a:e1:aa:51:89: e3:cc:ed:0e:98:6e:26:b4:6c:68:9b:be:df:6b:1f: b6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:33:9A:B1:B3:5F:72:48:A4:74:C9:EA:88:31:6E:E2:A8:B3:3B:07 X509v3 Authority Key Identifier: keyid:09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ca:a1:21:58:24:1f:0d:f6:be:3e:fb:77:72:29:5a:45:5c: d8:fd:6f:b4:c5:16:df:64:54:e5:75:6e:e0:fd:62:5a:20:e6: db:ff:9f:c6:86:4e:ae:43:66:46:ce:c9:08:33:05:89:02:76: df:2f:3a:27:be:8c:50:b2:0e:99:52:18:fa:50:67:0d:eb:3f: 27:99:49:1e:22:79:15:49:07:a2:c7:74:b2:05:d6:b8:c9:2e: c5:32:75:1d:06:21:e5:58:90:7d:a4:7c:5e:81:4b:13:01:6e: d2:24:2d:0f:fa:e6:0f:2d:bd:6a:de:eb:f5:e3:10:8c:32:5a: f3:57:68:88:b6:9b:85:18:0a:ff:ba:df:06:c6:7c:72:3f:bd: a7:e6:97:13:14:bd:4d:df:39:30:e3:c1:ef:c6:8f:14:7c:c6: 63:6d:5f:63:81:dd:3a:07:f6:45:4b:ff:49:25:80:8f:48:71: a4:95:94:e2:be:f0:09:1c:12:2a:b5:a3:f9:47:db:2c:fc:15: 29:44:71:9c:95:81:70:b6:ce:f5:0f:ef:ee:75:c8:b4:a5:76: d6:24:81:23:8f:bb:12:d7:62:21:19:07:9e:b2:95:b3:61:5c: 27:50:0d:9a:c3:f5:f1:29:be:85:66:e9:31:8b:b4:ce:1c:a4: e2:93:67:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOGx2hJjo5+RVtB0innisebhy164wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlEOEQ0QTY3MDY5NTgwRTM0RjE2QUIwNDc0MjBCRDRB MDhENEZGMDAeFw0yNTA4MjIyMjIwMzZaFw0yNTA4MjMyMzM4MzZaMDMxMTAvBgNV BAMTKEZBMzM5QUIxQjM1RjcyNDhBNDc0QzlFQTg4MzE2RUUyQThCMzNCMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtmYBnm01/keknS0Dct2zt9BZA O1wgl6ObEDYAQ5di9ZfftgFqnL66TpahWTNF9zhVXnARq+eo/jQqPwxQCef1K3q4 4O/7SlBZ/dvbh1Kbbe/+tr9sMtbfjI/btv8cH3BfXbvjk7D4QesnzkISF6Z+qkgZ jTDHQ3GHwCOcY2tVNZRUDwNZXQm58wxH3fAqvDzjWL0HYSglhFeVA2ooHtAcmOMA /XHDZySpCX2OKYs9hsKPMK1l74uGuC2uNx8N9cwaKm+wh9F3xsOTMA4JTVAaRSoZ Z3VCw9t9HHb7XCo5cgdN/YPNLYDg4C4K4apRiePM7Q6Ybia0bGibvt9rH7aDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+jOasbNfckikdMnqiDFu4qizOwcwHwYDVR0j BBgwFoAUCdjUpnBpWA408WqwR0IL1KCNT/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnlMMURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9D UWsvMC8wOUQ4RDRBNjcwNjk1ODBFMzRGMTZBQjA0NzQyMEJENEEwOEQ0RkYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5RDhENEE2NzA2OTU4MEUz NEYxNkFCMDQ3NDIwQkQ0QTA4RDRGRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnlMMURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9DUWsvMC8w OUQ4RDRBNjcwNjk1ODBFMzRGMTZBQjA0NzQyMEJENEEwOEQ0RkYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT8qhIVgkHw32vj77d3IpWkVc2P1vtMUW32RU5XVu4P1iWiDm2/+fxoZOrkNm Rs7JCDMFiQJ23y86J76MULIOmVIY+lBnDes/J5lJHiJ5FUkHosd0sgXWuMkuxTJ1 HQYh5ViQfaR8XoFLEwFu0iQtD/rmDy29at7r9eMQjDJa81doiLabhRgK/7rfBsZ8 cj+9p+aXExS9Td85MOPB78aPFHzGY21fY4HdOgf2RUv/SSWAj0hxpJWU4r7wCRwS KrWj+UfbLPwVKURxnJWBcLbO9Q/v7nXItKV21iSBI4+7EtdiIRkHnrKVs2FcJ1AN msP18Sm+hWbpMYu0zhyk4pNnIw== -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:56 2025 by rpki-client