$ rpki-client -vvf rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.mft File: 1370A03EC954E150A22BE78FA96515CB0158F5C1.mft (raw, json) Hash identifier: 1ww3q4YqwbU7nczItQR+puQqYD9locx8Z8JWpMiG3/g= Subject key identifier: A1:1F:EA:0A:A1:09:EA:C2:5E:99:AC:9D:DA:AE:28:C7:4D:D1:D5:54 Authority key identifier: 13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1 Certificate issuer: /CN=1370A03EC954E150A22BE78FA96515CB0158F5C1 Certificate serial: 2ED8B9DD8190EC944764D91FBE1EC700F1676469 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer Subject info access: rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.mft Manifest number: 02E9 Signing time: Mon 20 Oct 2025 07:55:20 +0000 Manifest this update: Mon 20 Oct 2025 07:50:20 +0000 Manifest next update: Tue 21 Oct 2025 08:59:20 +0000 Files and hashes: 1: 1370A03EC954E150A22BE78FA96515CB0158F5C1.crl (hash: Fqi8wj9Zp3jPxD6RzmBfhjV5TTe+94EbsfEE/q0rOCg=) 2: 323830343a363639383a3a2f33322d3438203d3e20323639353730.roa (hash: OFdMKU6S0WFAkTIMD3HdnrcuWydrwrNdgMiawRNqr5o=) 3: 34352e3138392e34302e302f32322d3234203d3e20323639353730.roa (hash: szDqMvBKaQ1Teofo2a2BL5lHE9bDGVfMwWHACqMHxIg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.crl rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d8:b9:dd:81:90:ec:94:47:64:d9:1f:be:1e:c7:00:f1:67:64:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1370A03EC954E150A22BE78FA96515CB0158F5C1 Validity Not Before: Oct 20 07:50:20 2025 GMT Not After : Oct 21 08:59:20 2025 GMT Subject: CN=A11FEA0AA109EAC25E99AC9DDAAE28C74DD1D554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:da:94:1c:63:69:27:07:d6:96:03:9b:a8:60: 04:38:fb:07:04:21:38:34:ba:ef:f8:e1:f6:b3:b0: 2a:c5:fa:15:25:c5:9a:09:e4:93:52:4b:e1:06:76: 5d:54:77:56:f6:12:d2:70:68:38:fc:90:f1:89:fb: b8:40:4a:80:d5:73:32:a3:0f:73:1c:63:eb:2f:e5: a5:f8:fd:25:75:ae:d4:90:fb:7e:8b:bc:c1:77:87: e2:39:8d:ed:32:17:15:ae:a4:34:a8:d7:2b:fd:56: fa:d3:0c:95:50:5c:ed:64:9c:d9:0e:f4:df:0a:c6: 86:92:d8:27:3f:6e:32:d4:46:9d:72:75:c7:f4:d4: 61:e2:b0:ab:03:5a:1d:e5:f3:61:f2:f1:99:8b:52: 63:8c:36:c3:dc:1e:ac:1b:0e:41:f3:2f:70:17:c1: 8b:6c:ff:e1:c8:87:57:41:a5:1f:d8:4c:8f:00:62: d9:c6:13:a7:f5:19:e6:09:7e:20:bb:2d:4c:86:52: 52:a0:0c:d2:40:41:7e:2e:1a:e3:6d:20:34:c5:2e: 91:0a:0c:b1:66:43:af:a8:8b:d5:38:0d:35:2d:18: 76:57:01:d0:58:8d:ee:6b:b7:14:b3:28:d2:25:e9: 78:41:76:f7:ea:73:7a:0e:3b:64:34:8d:4f:39:44: 20:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1F:EA:0A:A1:09:EA:C2:5E:99:AC:9D:DA:AE:28:C7:4D:D1:D5:54 X509v3 Authority Key Identifier: keyid:13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:0b:22:93:4f:75:82:b8:2a:8c:6d:00:c0:af:60:f2:a8:47: 59:7c:e5:ab:eb:39:9f:ff:15:ac:1a:25:23:5d:3e:a7:0b:05: a3:d0:68:75:35:aa:b9:e7:23:52:a5:85:e0:c3:4d:31:8b:76: a8:f9:e8:f6:22:1f:bd:cc:20:b7:c7:d8:92:08:0c:b1:c1:70: 01:5c:79:8f:fc:ec:62:c2:24:ea:a0:0c:14:ec:74:36:07:b5: 0d:52:c5:52:bf:b5:7d:fb:62:65:80:9e:b3:98:10:be:33:44: 1d:60:11:3d:03:73:01:ae:a7:57:38:aa:2d:f9:1f:f2:61:54: a5:f4:b3:a5:91:eb:be:57:f7:10:53:1c:06:70:aa:de:8e:12: 3a:74:11:84:3d:48:12:cc:7a:6d:fe:09:a5:f0:b3:ca:2d:a9: 0e:18:08:30:47:f1:70:1e:8c:bb:9e:7d:ae:35:db:ef:f2:25: ef:7e:f4:ba:76:b4:d1:b4:94:b5:54:bd:e7:9b:89:40:aa:6d: 06:15:41:13:34:04:38:61:34:04:6a:c4:6a:bb:01:9b:de:32: 78:40:fb:f6:29:3a:fd:cd:97:3b:e6:98:3e:3e:32:e2:ab:28: 5b:05:7a:06:19:ce:4a:89:5f:1c:5c:c7:7c:ef:f9:72:82:fa: ef:fa:45:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULti53YGQ7JRHZNkfvh7HAPFnZGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM3MEEwM0VDOTU0RTE1MEEyMkJFNzhGQTk2NTE1Q0Iw MTU4RjVDMTAeFw0yNTEwMjAwNzUwMjBaFw0yNTEwMjEwODU5MjBaMDMxMTAvBgNV BAMTKEExMUZFQTBBQTEwOUVBQzI1RTk5QUM5RERBQUUyOEM3NEREMUQ1NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/2pQcY2knB9aWA5uoYAQ4+wcE ITg0uu/44fazsCrF+hUlxZoJ5JNSS+EGdl1Ud1b2EtJwaDj8kPGJ+7hASoDVczKj D3McY+sv5aX4/SV1rtSQ+36LvMF3h+I5je0yFxWupDSo1yv9VvrTDJVQXO1knNkO 9N8KxoaS2Cc/bjLURp1ydcf01GHisKsDWh3l82Hy8ZmLUmOMNsPcHqwbDkHzL3AX wYts/+HIh1dBpR/YTI8AYtnGE6f1GeYJfiC7LUyGUlKgDNJAQX4uGuNtIDTFLpEK DLFmQ6+oi9U4DTUtGHZXAdBYje5rtxSzKNIl6XhBdvfqc3oOO2Q0jU85RCDfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoR/qCqEJ6sJemayd2q4ox03R1VQwHwYDVR0j BBgwFoAUE3CgPslU4VCiK+ePqWUVywFY9cEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0tEakNqMWtObXhvQnRDcTM2RFVnblNhUWRDa3M5cWRQZ2Y3WDFiZnVn TmovMC8xMzcwQTAzRUM5NTRFMTUwQTIyQkU3OEZBOTY1MTVDQjAxNThGNUMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzNzBBMDNFQzk1NEUxNTBB MjJCRTc4RkE5NjUxNUNCMDE1OEY1QzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0tEakNqMWtObXhvQnRDcTM2RFVnblNhUWRDa3M5cWRQZ2Y3WDFiZnVnTmovMC8x MzcwQTAzRUM5NTRFMTUwQTIyQkU3OEZBOTY1MTVDQjAxNThGNUMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATQsik091grgqjG0AwK9g8qhHWXzlq+s5n/8VrBolI10+pwsFo9BodTWquecj UqWF4MNNMYt2qPno9iIfvcwgt8fYkggMscFwAVx5j/zsYsIk6qAMFOx0Nge1DVLF Ur+1fftiZYCes5gQvjNEHWARPQNzAa6nVziqLfkf8mFUpfSzpZHrvlf3EFMcBnCq 3o4SOnQRhD1IEsx6bf4JpfCzyi2pDhgIMEfxcB6Mu559rjXb7/Il7370una00bSU tVS955uJQKptBhVBEzQEOGE0BGrEarsBm94yeED79ik6/c2XO+aYPj4y4qsoWwV6 BhnOSolfHFzHfO/5coL67/pFCg== -----END CERTIFICATE-----Generated at Mon Oct 20 11:27:38 2025 by rpki-client