$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.mft File: 7920D02177ECD47B7DD8D2271C0793BAEA92E38F.mft (raw, json) Hash identifier: jcbURtjrWyS57s8ijBO7uKgB8c7/1HICnXbl6DB4LZg= Subject key identifier: 22:D4:92:2E:C1:9C:4F:67:7E:75:11:CB:3C:5D:45:57:98:7C:7F:B3 Authority key identifier: 79:20:D0:21:77:EC:D4:7B:7D:D8:D2:27:1C:07:93:BA:EA:92:E3:8F Certificate issuer: /CN=7920D02177ECD47B7DD8D2271C0793BAEA92E38F Certificate serial: 5EF35EDD4A83E3FB9352F590E6569E47838D7994 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.mft Manifest number: 0B Signing time: Mon 20 Oct 2025 15:35:24 +0000 Manifest this update: Mon 20 Oct 2025 15:30:24 +0000 Manifest next update: Tue 21 Oct 2025 15:40:24 +0000 Files and hashes: 1: 3138362e3230382e3137362e302f32302d3234203d3e20323632373431.roa (hash: jEz9zY+wxzS97iwHB9xE1PykVRf11fGW8YWmOIzhiCw=) 2: 323830343a326233303a3a2f33322d3336203d3e20323632373431.roa (hash: 7UQAkAdK8C+wlUP4V5aeumqZo5vBRfE6ctyUTDb+9ww=) 3: 7920D02177ECD47B7DD8D2271C0793BAEA92E38F.crl (hash: HWXgpLBRYZmMA2C30TVdcb1YDiY7xZhzbXG3SBpQBUU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.crl rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 15:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f3:5e:dd:4a:83:e3:fb:93:52:f5:90:e6:56:9e:47:83:8d:79:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7920D02177ECD47B7DD8D2271C0793BAEA92E38F Validity Not Before: Oct 20 15:30:24 2025 GMT Not After : Oct 21 15:40:24 2025 GMT Subject: CN=22D4922EC19C4F677E7511CB3C5D4557987C7FB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:59:92:e8:08:d7:0b:8e:a2:b5:b6:f2:b6: 3e:e3:e2:32:e2:e8:b9:e0:6c:2f:98:75:36:04:0a: cf:5b:c8:7d:b4:a9:cc:f6:9a:90:87:92:af:04:fc: 42:79:a4:9a:5c:dd:51:49:58:fc:29:1f:a2:c5:49: 48:cc:db:72:e7:1d:96:7c:d3:99:c8:37:10:7c:df: 57:d0:61:e7:e4:e3:bb:53:89:ca:a9:e4:be:ec:a5: 82:30:14:84:c2:26:2a:db:fd:0b:2e:76:79:1e:7a: a6:41:75:9c:60:75:dd:bd:e3:54:e7:f2:c0:ea:3e: 91:c4:44:cf:af:fc:bf:59:79:2d:2c:c0:ab:ce:66: 80:50:52:5c:42:84:08:79:f7:3e:02:9d:b0:b5:e5: 2b:ca:7c:eb:b4:e7:0b:cc:69:b0:6f:de:13:29:40: c9:7e:19:49:6d:6e:16:ac:9d:b1:5a:46:56:1b:5b: ec:cf:5d:e0:13:29:07:e4:55:6b:80:fe:9d:0e:80: 39:8b:d8:05:a7:7a:8f:dd:5c:98:a3:2e:a5:29:68: ea:59:ca:7c:78:aa:ff:7c:c6:1c:e8:a4:9e:7e:12: 77:e1:b3:b5:e8:54:40:10:17:c3:86:80:94:97:80: 8d:bc:0d:5a:30:41:2d:f6:0e:f7:60:6f:3d:dc:5c: c3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D4:92:2E:C1:9C:4F:67:7E:75:11:CB:3C:5D:45:57:98:7C:7F:B3 X509v3 Authority Key Identifier: keyid:79:20:D0:21:77:EC:D4:7B:7D:D8:D2:27:1C:07:93:BA:EA:92:E3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:66:13:43:99:48:cf:b8:2e:fa:6a:cd:27:d0:f9:46:63:14: e4:b2:57:41:30:b0:8c:f4:a3:4f:06:aa:bc:84:9b:02:6a:66: 76:fc:0a:8c:22:d3:4c:50:b9:69:b0:49:75:12:61:a0:29:95: 12:71:d0:d0:8e:a3:ab:1a:69:de:fd:ef:d2:f3:b2:c0:5f:e2: cd:16:50:63:34:ad:a6:bd:a7:42:78:d2:c2:48:5d:f7:b4:80: d7:9b:8b:1d:4b:12:bf:c2:d9:92:a9:7a:76:72:7e:ad:d8:72: 55:f2:4b:e7:38:cb:68:fe:c0:0b:7b:66:d5:a3:05:b9:df:da: 22:de:08:e5:99:4b:9c:9e:94:02:8f:d6:44:c7:d3:78:7f:f0: 7e:c7:de:c1:e5:c4:04:c7:31:1c:7c:1d:d3:d1:9a:10:c1:85: 68:19:ff:7a:72:e3:66:bc:7d:64:20:67:42:8e:d7:a1:b4:65: da:b8:52:54:bb:47:de:05:16:d9:06:b4:12:4f:9d:32:ff:4d: 0b:ae:1d:2e:7c:dc:59:70:c0:2d:ea:47:69:fb:31:a6:b4:04: b4:64:19:d8:c5:4d:69:f9:24:60:03:57:4e:53:d4:7b:23:38: 34:50:0c:4a:5e:55:f6:68:23:10:4c:05:a1:d6:bb:d9:0f:26: b3:01:fd:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXvNe3UqD4/uTUvWQ5laeR4ONeZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzkyMEQwMjE3N0VDRDQ3QjdERDhEMjI3MUMwNzkzQkFF QTkyRTM4RjAeFw0yNTEwMjAxNTMwMjRaFw0yNTEwMjExNTQwMjRaMDMxMTAvBgNV BAMTKDIyRDQ5MjJFQzE5QzRGNjc3RTc1MTFDQjNDNUQ0NTU3OTg3QzdGQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEoFmS6AjXC46itbbytj7j4jLi 6LngbC+YdTYECs9byH20qcz2mpCHkq8E/EJ5pJpc3VFJWPwpH6LFSUjM23LnHZZ8 05nINxB831fQYefk47tTicqp5L7spYIwFITCJirb/QsudnkeeqZBdZxgdd2941Tn 8sDqPpHERM+v/L9ZeS0swKvOZoBQUlxChAh59z4CnbC15SvKfOu05wvMabBv3hMp QMl+GUltbhasnbFaRlYbW+zPXeATKQfkVWuA/p0OgDmL2AWneo/dXJijLqUpaOpZ ynx4qv98xhzopJ5+Enfhs7XoVEAQF8OGgJSXgI28DVowQS32Dvdgbz3cXMM5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUItSSLsGcT2d+dRHLPF1FV5h8f7MwHwYDVR0j BBgwFoAUeSDQIXfs1Ht92NInHAeTuuqS448wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ21uSFJHWnpIQUJoeWh6eTVYUFhzNnF6VjVIeHhhMUFvRzN4cG5laUJj VzEvMC83OTIwRDAyMTc3RUNENDdCN0REOEQyMjcxQzA3OTNCQUVBOTJFMzhGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5MjBEMDIxNzdFQ0Q0N0I3 REQ4RDIyNzFDMDc5M0JBRUE5MkUzOEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q21uSFJHWnpIQUJoeWh6eTVYUFhzNnF6VjVIeHhhMUFvRzN4cG5laUJjVzEvMC83 OTIwRDAyMTc3RUNENDdCN0REOEQyMjcxQzA3OTNCQUVBOTJFMzhGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANGYTQ5lIz7gu+mrNJ9D5RmMU5LJXQTCwjPSjTwaqvISbAmpmdvwKjCLTTFC5 abBJdRJhoCmVEnHQ0I6jqxpp3v3v0vOywF/izRZQYzStpr2nQnjSwkhd97SA15uL HUsSv8LZkql6dnJ+rdhyVfJL5zjLaP7AC3tm1aMFud/aIt4I5ZlLnJ6UAo/WRMfT eH/wfsfeweXEBMcxHHwd09GaEMGFaBn/enLjZrx9ZCBnQo7XobRl2rhSVLtH3gUW 2Qa0Ek+dMv9NC64dLnzcWXDALepHafsxprQEtGQZ2MVNafkkYANXTlPUeyM4NFAM Sl5V9mgjEEwFoda72Q8mswH90w== -----END CERTIFICATE-----Generated at Mon Oct 20 17:58:47 2025 by rpki-client