$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4B994881FDDD6F476745B62FD48604002A6D30C5.mft File: 4B994881FDDD6F476745B62FD48604002A6D30C5.mft (raw, json) Hash identifier: 3J0VSWw+0HrDw3rZADXPCKwu382OesEc5bMNaDbyUsM= Subject key identifier: 75:9A:23:F1:63:BC:5E:EE:86:DC:C7:FD:3C:01:A2:C0:C7:D9:B4:8A Authority key identifier: 4B:99:48:81:FD:DD:6F:47:67:45:B6:2F:D4:86:04:00:2A:6D:30:C5 Certificate issuer: /CN=4B994881FDDD6F476745B62FD48604002A6D30C5 Certificate serial: 5645A2ED71E8BABD1AFFABC66EC8ECEE12D46248 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B994881FDDD6F476745B62FD48604002A6D30C5.cer Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4B994881FDDD6F476745B62FD48604002A6D30C5.mft Manifest number: 36 Signing time: Sat 23 Aug 2025 08:20:19 +0000 Manifest this update: Sat 23 Aug 2025 08:15:19 +0000 Manifest next update: Sun 24 Aug 2025 11:31:19 +0000 Files and hashes: 1: 3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa (hash: CVrB2TH1zLHYU+jog8KsMgf4ayPUj0ZJlpK+xRR50gE=) 2: 3139382e35382e382e302f32322d3332203d3e20323633323536.roa (hash: Eqmsv6uZ9xrsgQW3OoXMlywoCoPFjCZ5RB4lI2BKJ1w=) 3: 4B994881FDDD6F476745B62FD48604002A6D30C5.crl (hash: 58Kct+ucze3LslZsVovM/8/+Psue1perz9cj/flx/tw=) 4: 323830343a313765303a3a2f33322d313238203d3e20323633323536.roa (hash: rhwbdd33SJ24dMOX8zNXqo729Fw0Dw/asbhUBAyr/QY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4B994881FDDD6F476745B62FD48604002A6D30C5.crl rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4B994881FDDD6F476745B62FD48604002A6D30C5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B994881FDDD6F476745B62FD48604002A6D30C5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 11:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:45:a2:ed:71:e8:ba:bd:1a:ff:ab:c6:6e:c8:ec:ee:12:d4:62:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B994881FDDD6F476745B62FD48604002A6D30C5 Validity Not Before: Aug 23 08:15:19 2025 GMT Not After : Aug 24 11:31:19 2025 GMT Subject: CN=759A23F163BC5EEE86DCC7FD3C01A2C0C7D9B48A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cd:4f:e0:1f:4e:d0:58:eb:6c:ee:e1:8b:25: ad:6d:28:c8:41:76:81:bf:12:48:50:d0:29:57:64: 9e:66:a4:ee:fa:e7:07:81:05:0d:6c:19:0e:6b:a9: 7d:44:e3:00:a2:3d:ee:fd:f3:2c:34:72:01:9c:0c: ea:2f:a3:f6:85:4d:da:98:22:c8:18:a7:19:6f:5d: c4:0c:af:95:a0:0c:97:cb:90:71:35:7b:e7:cb:1e: 8a:e3:eb:f4:66:95:84:7a:cd:9b:d9:a0:b9:ca:59: f7:ed:3b:c9:71:15:99:a2:4a:58:14:6c:21:f2:d0: 34:8a:09:63:26:f9:33:b4:96:6f:d7:d6:e5:be:86: f7:8e:65:38:a0:15:29:88:8a:4a:51:1a:e7:51:ef: 8d:9c:1a:70:a6:5c:4a:47:ce:46:f8:61:e1:c9:7a: 8b:05:98:5d:15:2a:7e:54:5b:af:11:01:89:83:99: 74:c4:9e:fc:95:ba:92:69:71:81:8a:a1:42:6c:82: 62:61:74:06:a6:a7:5a:01:ee:13:88:f5:c8:e8:a8: d9:13:34:a1:d2:b5:06:e8:08:9b:ef:c0:1b:47:f2: 7f:9c:83:a6:a0:8f:c8:b3:c8:be:22:fb:95:c2:40: db:8b:dc:cd:58:27:68:2e:44:7a:82:74:54:87:53: 46:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9A:23:F1:63:BC:5E:EE:86:DC:C7:FD:3C:01:A2:C0:C7:D9:B4:8A X509v3 Authority Key Identifier: keyid:4B:99:48:81:FD:DD:6F:47:67:45:B6:2F:D4:86:04:00:2A:6D:30:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4B994881FDDD6F476745B62FD48604002A6D30C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B994881FDDD6F476745B62FD48604002A6D30C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4B994881FDDD6F476745B62FD48604002A6D30C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:c4:43:25:3a:01:00:17:e4:52:b3:1c:7f:c0:09:54:63:87: 40:a4:7c:67:6d:11:e4:ed:5b:69:9e:9e:fa:19:e0:b3:cc:93: 90:c5:aa:30:bb:f0:cb:00:66:d9:8a:f1:9a:73:fd:db:f1:07: 84:b0:fc:47:59:cc:aa:ce:8e:6c:1b:ca:72:a7:0d:9a:f6:24: 57:d3:9f:6d:dd:f2:46:33:6d:16:39:5a:5e:9f:35:83:9d:bb: 46:72:ee:3b:cf:e6:9e:07:d5:d9:ee:01:2f:82:ff:77:bf:07: ab:80:94:e3:08:a3:6e:53:4d:9b:94:49:23:9a:ec:dd:0c:28: 51:b3:4f:82:e0:1b:b5:8d:15:c0:bf:86:78:fb:fb:99:9d:34: d7:ff:20:26:a3:76:7f:8b:73:14:a3:31:82:5f:2f:5a:4c:f7: 1f:db:f2:b6:ce:5f:00:a7:d9:7e:3a:27:57:74:1b:f7:f5:f6: f4:e6:7b:09:cf:6c:b8:c6:26:02:21:53:5c:58:9e:20:77:fc: 71:89:f0:24:cd:4a:51:ab:05:7a:41:24:e7:fe:bf:d6:4a:d6: 51:0d:8e:ed:01:91:de:5a:ca:3e:d2:f7:a6:da:06:f9:12:57: 05:56:ef:08:16:e1:dd:8c:3a:fe:a9:42:4f:eb:14:6f:6c:b0: 2c:6c:cd:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVkWi7XHour0a/6vGbsjs7hLUYkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI5OTQ4ODFGRERENkY0NzY3NDVCNjJGRDQ4NjA0MDAy QTZEMzBDNTAeFw0yNTA4MjMwODE1MTlaFw0yNTA4MjQxMTMxMTlaMDMxMTAvBgNV BAMTKDc1OUEyM0YxNjNCQzVFRUU4NkRDQzdGRDNDMDFBMkMwQzdEOUI0OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6zU/gH07QWOts7uGLJa1tKMhB doG/EkhQ0ClXZJ5mpO765weBBQ1sGQ5rqX1E4wCiPe798yw0cgGcDOovo/aFTdqY IsgYpxlvXcQMr5WgDJfLkHE1e+fLHorj6/RmlYR6zZvZoLnKWfftO8lxFZmiSlgU bCHy0DSKCWMm+TO0lm/X1uW+hveOZTigFSmIikpRGudR742cGnCmXEpHzkb4YeHJ eosFmF0VKn5UW68RAYmDmXTEnvyVupJpcYGKoUJsgmJhdAamp1oB7hOI9cjoqNkT NKHStQboCJvvwBtH8n+cg6agj8izyL4i+5XCQNuL3M1YJ2guRHqCdFSHU0bdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdZoj8WO8Xu6G3Mf9PAGiwMfZtIowHwYDVR0j BBgwFoAUS5lIgf3db0dnRbYv1IYEACptMMUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXB3UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJk U2QvMC80Qjk5NDg4MUZEREQ2RjQ3Njc0NUI2MkZENDg2MDQwMDJBNkQzMEM1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCOTk0ODgxRkRERDZGNDc2 NzQ1QjYyRkQ0ODYwNDAwMkE2RDMwQzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXB3UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJkU2QvMC80 Qjk5NDg4MUZEREQ2RjQ3Njc0NUI2MkZENDg2MDQwMDJBNkQzMEM1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkMRDJToBABfkUrMcf8AJVGOHQKR8Z20R5O1baZ6e+hngs8yTkMWqMLvwywBm 2YrxmnP92/EHhLD8R1nMqs6ObBvKcqcNmvYkV9Ofbd3yRjNtFjlaXp81g527RnLu O8/mngfV2e4BL4L/d78Hq4CU4wijblNNm5RJI5rs3QwoUbNPguAbtY0VwL+GePv7 mZ001/8gJqN2f4tzFKMxgl8vWkz3H9vyts5fAKfZfjonV3Qb9/X29OZ7Cc9suMYm AiFTXFieIHf8cYnwJM1KUasFekEk5/6/1krWUQ2O7QGR3lrKPtL3ptoG+RJXBVbv CBbh3Yw6/qlCT+sUb2ywLGzN8A== -----END CERTIFICATE-----Generated at Sat Aug 23 12:44:10 2025 by rpki-client