$ rpki-client -vvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.mft File: F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.mft (raw, json) Hash identifier: wOloQ28zGZnsm3+zQ+pikLeUdQb4Lv+1ES4vs8xPGKY= Subject key identifier: 3B:AB:43:D7:F0:B3:D0:14:44:43:5C:56:AF:33:66:3F:E8:54:D4:5D Authority key identifier: F3:9F:CE:F7:5A:85:E9:FA:24:47:77:F7:CE:DA:CC:58:2B:7A:BA:29 Certificate issuer: /CN=F39FCEF75A85E9FA244777F7CEDACC582B7ABA29 Certificate serial: 4A779A55514558B4B3FB6323BD181B404A68BD6B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.cer Subject info access: rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.mft Manifest number: 019B Signing time: Sat 23 Aug 2025 06:21:20 +0000 Manifest this update: Sat 23 Aug 2025 06:16:20 +0000 Manifest next update: Sun 24 Aug 2025 09:29:20 +0000 Files and hashes: 1: 3136382e302e3136352e302f32342d3234203d3e20323633343833.roa (hash: K7GvpcP23FlvcUYDW+06XF+u23S5lyvB473kdUEvaJo=) 2: 3136382e302e3136342e302f32342d3234203d3e20323633343833.roa (hash: WAVHV00hp8kQuY2m5oNryEnxV7rX87TuahPEF3PkZjY=) 3: F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.crl (hash: +hoMa0Pzvo5Dwxv4BcrFaddVv/dbB8bwcyM5ip51aLk=) 4: 3136382e302e3136362e302f32342d3234203d3e20323633343833.roa (hash: xnpHTIXw5NOAsWCdZzalk0/kRTMqwFcZy+7og3ox6hc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.crl rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 09:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:77:9a:55:51:45:58:b4:b3:fb:63:23:bd:18:1b:40:4a:68:bd:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39FCEF75A85E9FA244777F7CEDACC582B7ABA29 Validity Not Before: Aug 23 06:16:20 2025 GMT Not After : Aug 24 09:29:20 2025 GMT Subject: CN=3BAB43D7F0B3D01444435C56AF33663FE854D45D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b0:b0:0d:dc:dd:af:13:97:ff:4d:7c:d7:52: f6:29:eb:5a:7b:9d:1b:83:7d:2b:e7:f5:11:ad:7e: 25:83:40:58:9b:1a:8d:3c:53:d1:ab:7e:86:f4:af: 96:57:a8:d1:42:ff:f4:a3:70:9b:12:d3:e7:91:6b: 0b:e0:0e:be:cf:5b:a2:dc:38:13:ef:ab:cc:d3:f5: 4b:38:ac:06:4e:bb:b2:74:00:5b:bc:49:6b:e3:ce: 4b:d5:6e:e1:31:4d:36:dd:a2:72:f3:a9:2d:af:c8: 7f:9d:a0:b4:57:ec:25:a5:06:1d:50:c7:28:96:43: 0c:07:28:32:fa:43:05:2f:cd:47:bd:78:98:1a:41: 28:39:8a:f7:23:9f:ea:33:79:53:d6:87:58:09:50: 37:3a:a5:7c:a9:12:a4:48:d7:02:51:e2:8d:be:04: eb:3f:ff:69:4d:35:27:e4:cc:7e:c2:36:f3:f1:a2: 9f:53:c3:86:75:3a:54:3b:d7:50:ab:45:e3:93:60: d0:74:fb:a8:af:3c:a2:8d:b0:8b:c0:52:89:e3:95: 77:b6:e3:87:85:3c:81:f8:9a:88:bf:cd:f8:ad:ad: 2a:63:16:9d:a6:1f:e0:4b:e7:4b:ed:da:e2:7f:41: 23:2a:09:52:24:d8:83:48:1e:43:6f:b5:2a:b1:28: fc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AB:43:D7:F0:B3:D0:14:44:43:5C:56:AF:33:66:3F:E8:54:D4:5D X509v3 Authority Key Identifier: keyid:F3:9F:CE:F7:5A:85:E9:FA:24:47:77:F7:CE:DA:CC:58:2B:7A:BA:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:80:14:ba:af:e2:a0:04:bd:69:30:c5:46:3d:c5:13:50:98: 97:0e:83:ba:4f:83:19:64:e0:08:37:c0:fa:ba:10:4c:82:1b: e5:b7:e2:e9:aa:f7:14:37:ca:e5:47:d7:9c:33:3a:da:9f:c9: ef:fc:ff:4f:f5:b3:7d:6b:38:12:b5:95:f6:ac:f8:83:ea:54: a0:c8:c3:5e:73:42:37:eb:70:73:a4:bc:38:e0:5d:aa:89:d1: b6:45:67:ee:db:e4:94:bb:a4:9a:48:8b:8d:d0:b8:17:51:ee: be:6c:4c:b8:56:00:5e:5b:b7:ef:04:29:25:87:71:ee:bf:d3: 11:0d:92:4d:ae:b1:6e:d9:6b:dd:25:7c:bd:b7:81:f8:c8:2f: ad:2f:5b:be:e4:e9:72:85:e3:d7:a0:56:d1:a4:65:68:3a:79: ce:44:05:0b:d1:b6:93:b9:92:dd:b7:04:5b:4a:c9:2e:dc:8f: cc:e5:c0:4d:f8:9e:79:b7:13:f6:5f:7e:4b:ae:b9:af:0f:39: 85:8c:c9:20:c7:6b:07:9b:c8:45:b9:da:0e:73:a9:2e:8b:41: 60:70:49:eb:d0:19:a4:9e:e6:27:d3:c8:a4:cb:2a:04:40:fd: 32:0a:38:0d:3a:cd:82:a8:d0:46:42:ed:75:fa:fd:ef:25:ef: 53:02:41:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSneaVVFFWLSz+2MjvRgbQEpovWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5RkNFRjc1QTg1RTlGQTI0NDc3N0Y3Q0VEQUNDNTgy QjdBQkEyOTAeFw0yNTA4MjMwNjE2MjBaFw0yNTA4MjQwOTI5MjBaMDMxMTAvBgNV BAMTKDNCQUI0M0Q3RjBCM0QwMTQ0NDQzNUM1NkFGMzM2NjNGRTg1NEQ0NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnsLAN3N2vE5f/TXzXUvYp61p7 nRuDfSvn9RGtfiWDQFibGo08U9Grfob0r5ZXqNFC//SjcJsS0+eRawvgDr7PW6Lc OBPvq8zT9Us4rAZOu7J0AFu8SWvjzkvVbuExTTbdonLzqS2vyH+doLRX7CWlBh1Q xyiWQwwHKDL6QwUvzUe9eJgaQSg5ivcjn+ozeVPWh1gJUDc6pXypEqRI1wJR4o2+ BOs//2lNNSfkzH7CNvPxop9Tw4Z1OlQ711CrReOTYNB0+6ivPKKNsIvAUonjlXe2 44eFPIH4moi/zfitrSpjFp2mH+BL50vt2uJ/QSMqCVIk2INIHkNvtSqxKPy3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUO6tD1/Cz0BREQ1xWrzNmP+hU1F0wHwYDVR0j BBgwFoAU85/O91qF6fokR3f3ztrMWCt6uikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDR4Tlh1OWNaYko5QVd5ZnRYVXpYVGRzbUQ0R3NuQzI1Mms5WkFNZGVB VXAvMC9GMzlGQ0VGNzVBODVFOUZBMjQ0Nzc3RjdDRURBQ0M1ODJCN0FCQTI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzOUZDRUY3NUE4NUU5RkEy NDQ3NzdGN0NFREFDQzU4MkI3QUJBMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDR4Tlh1OWNaYko5QVd5ZnRYVXpYVGRzbUQ0R3NuQzI1Mms5WkFNZGVBVXAvMC9G MzlGQ0VGNzVBODVFOUZBMjQ0Nzc3RjdDRURBQ0M1ODJCN0FCQTI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsYAUuq/ioAS9aTDFRj3FE1CYlw6Duk+DGWTgCDfA+roQTIIb5bfi6ar3FDfK 5UfXnDM62p/J7/z/T/WzfWs4ErWV9qz4g+pUoMjDXnNCN+twc6S8OOBdqonRtkVn 7tvklLukmkiLjdC4F1HuvmxMuFYAXlu37wQpJYdx7r/TEQ2STa6xbtlr3SV8vbeB +MgvrS9bvuTpcoXj16BW0aRlaDp5zkQFC9G2k7mS3bcEW0rJLtyPzOXATfieebcT 9l9+S665rw85hYzJIMdrB5vIRbnaDnOpLotBYHBJ69AZpJ7mJ9PIpMsqBED9Mgo4 DTrNgqjQRkLtdfr97yXvUwJBsA== -----END CERTIFICATE-----Generated at Sat Aug 23 19:29:20 2025 by rpki-client