$ rpki-client -vvf rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft File: 4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft (raw, json) Hash identifier: AkvUVTYDA7lGITpA2plJsih2zE/nT2u4FtHw8zBQ0rE= Subject key identifier: BF:16:9C:6A:7D:ED:FC:C2:FE:EF:71:7B:0A:33:1F:73:FE:76:8E:4C Authority key identifier: 4A:1F:EB:8C:E3:07:A0:10:64:8F:FE:E1:98:D2:F6:AF:BE:64:5E:49 Certificate issuer: /CN=4A1FEB8CE307A010648FFEE198D2F6AFBE645E49 Certificate serial: 2F3E7A771730A72C49B0FBD670196A27BE8BB78C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft Manifest number: 02A5 Signing time: Sat 23 Aug 2025 15:21:09 +0000 Manifest this update: Sat 23 Aug 2025 15:16:09 +0000 Manifest next update: Sun 24 Aug 2025 15:25:09 +0000 Files and hashes: 1: 4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.crl (hash: IeOcnrKikuQOnc7ZTqEi/juvtzqrq8MRxqMH5o8Syzg=) 2: 34352e37302e3137362e302f32322d3234203d3e20323637353736.roa (hash: qPJDf0ZzOHhjuG0zLopodnYM0KBTlwwMbPfxeuoZ2to=) 3: 323830343a343338383a3a2f33322d3438203d3e20323637353736.roa (hash: cZd/ssKML83qdXJo2RFt0hxOAlYnrkcYP1rxyHfPV10=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.crl rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 15:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3e:7a:77:17:30:a7:2c:49:b0:fb:d6:70:19:6a:27:be:8b:b7:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A1FEB8CE307A010648FFEE198D2F6AFBE645E49 Validity Not Before: Aug 23 15:16:09 2025 GMT Not After : Aug 24 15:25:09 2025 GMT Subject: CN=BF169C6A7DEDFCC2FEEF717B0A331F73FE768E4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:87:b8:22:ab:3c:48:b7:23:45:94:48:6d:c4: a2:0f:73:2f:bd:70:63:41:50:95:46:7b:2f:48:71: f6:24:73:d0:76:8e:24:e7:f3:d5:38:43:74:c8:1a: 25:b7:6d:88:a8:04:40:24:f8:f5:b4:1d:53:d6:82: 8b:9b:e8:03:5d:d7:45:dc:0a:f9:d6:8e:ea:b1:0e: f1:90:59:99:7d:c9:c0:d6:89:0f:8b:76:f9:cb:91: 41:23:aa:75:5b:01:9c:db:75:28:97:0b:ad:72:03: b1:14:2d:51:35:26:3c:c0:ae:f4:78:85:9d:b1:67: ef:f6:d3:fa:bd:e2:34:e5:07:5f:53:13:d4:ed:ea: 3f:8a:56:6c:73:b4:28:b1:a4:1f:d1:6c:45:ad:a0: 90:31:cc:cd:2f:a9:ea:40:c5:8c:51:2f:a4:c8:59: 41:90:6f:4e:03:0d:2e:2e:ff:e8:00:3a:11:76:fe: 9b:95:a2:22:18:5e:cc:16:e9:99:1e:72:a9:b4:29: ec:dd:6b:06:11:12:a7:ba:02:c7:ac:9a:ce:1a:e7: 49:36:09:d0:1e:f9:1c:b9:55:da:59:d8:53:85:37: 23:8b:4a:63:bb:bc:66:f1:19:9f:ca:b0:53:b6:af: fd:0f:d5:dc:dd:c7:17:0b:f1:63:81:f4:88:39:b5: 51:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:16:9C:6A:7D:ED:FC:C2:FE:EF:71:7B:0A:33:1F:73:FE:76:8E:4C X509v3 Authority Key Identifier: keyid:4A:1F:EB:8C:E3:07:A0:10:64:8F:FE:E1:98:D2:F6:AF:BE:64:5E:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ec:c1:dc:8c:a2:03:41:3e:65:30:2c:c0:f1:ce:d6:70:48: 69:c5:ef:4a:b1:ed:53:c3:56:9e:d2:86:eb:5f:3a:bb:a0:e9: bd:87:af:b5:ca:99:0a:e0:4f:e2:73:d8:00:59:9d:90:38:f9: b6:47:85:6f:c8:de:99:4d:2f:e2:f6:16:b6:f0:64:81:88:92: 6a:91:7c:c9:a8:d5:6f:e5:14:32:66:56:d1:17:13:e7:15:c2: e2:f6:79:96:38:70:08:ff:93:ab:17:88:ec:00:a6:3f:89:2c: ee:ad:3f:17:62:f4:e7:66:bb:12:b5:91:80:6f:c7:df:3b:93: 11:19:ca:88:5a:8f:d9:e4:35:85:e6:f8:df:2e:8b:3f:33:7e: 03:c5:0e:cc:0a:2c:9b:96:2b:7a:7c:cb:9a:88:35:b9:0e:ef: ef:69:3a:b9:87:f6:f1:2a:c8:81:db:aa:c8:2f:c0:11:5f:cc: bc:bc:ca:84:e4:56:16:df:87:1b:2d:97:29:7a:64:f8:61:23: fd:51:60:d4:22:7c:fb:78:6a:26:83:05:21:93:90:18:47:98: 40:0b:f7:fd:ea:00:05:1d:97:70:15:a8:29:e0:5b:1c:ad:42: 16:da:30:36:76:8c:06:51:1d:52:e9:7e:d8:c4:b1:9a:cc:32: 91:16:52:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULz56dxcwpyxJsPvWcBlqJ76Lt4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEExRkVCOENFMzA3QTAxMDY0OEZGRUUxOThEMkY2QUZC RTY0NUU0OTAeFw0yNTA4MjMxNTE2MDlaFw0yNTA4MjQxNTI1MDlaMDMxMTAvBgNV BAMTKEJGMTY5QzZBN0RFREZDQzJGRUVGNzE3QjBBMzMxRjczRkU3NjhFNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5h7giqzxItyNFlEhtxKIPcy+9 cGNBUJVGey9IcfYkc9B2jiTn89U4Q3TIGiW3bYioBEAk+PW0HVPWgoub6ANd10Xc CvnWjuqxDvGQWZl9ycDWiQ+LdvnLkUEjqnVbAZzbdSiXC61yA7EULVE1JjzArvR4 hZ2xZ+/20/q94jTlB19TE9Tt6j+KVmxztCixpB/RbEWtoJAxzM0vqepAxYxRL6TI WUGQb04DDS4u/+gAOhF2/puVoiIYXswW6Zkecqm0KezdawYREqe6Asesms4a50k2 CdAe+Ry5VdpZ2FOFNyOLSmO7vGbxGZ/KsFO2r/0P1dzdxxcL8WOB9Ig5tVG5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvxacan3t/ML+73F7CjMfc/52jkwwHwYDVR0j BBgwFoAUSh/rjOMHoBBkj/7hmNL2r75kXkkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHdvbW02Y3RYUW84QXF0bllhR1ZGa3Z4VEhrdzNhOWVIU1Y3eW11MUVG VUEvMS80QTFGRUI4Q0UzMDdBMDEwNjQ4RkZFRTE5OEQyRjZBRkJFNjQ1RTQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBMUZFQjhDRTMwN0EwMTA2 NDhGRkVFMTk4RDJGNkFGQkU2NDVFNDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHdvbW02Y3RYUW84QXF0bllhR1ZGa3Z4VEhrdzNhOWVIU1Y3eW11MUVGVUEvMS80 QTFGRUI4Q0UzMDdBMDEwNjQ4RkZFRTE5OEQyRjZBRkJFNjQ1RTQ5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcuzB3IyiA0E+ZTAswPHO1nBIacXvSrHtU8NWntKG6186u6DpvYevtcqZCuBP 4nPYAFmdkDj5tkeFb8jemU0v4vYWtvBkgYiSapF8yajVb+UUMmZW0RcT5xXC4vZ5 ljhwCP+TqxeI7ACmP4ks7q0/F2L052a7ErWRgG/H3zuTERnKiFqP2eQ1heb43y6L PzN+A8UOzAosm5YrenzLmog1uQ7v72k6uYf28SrIgduqyC/AEV/MvLzKhORWFt+H Gy2XKXpk+GEj/VFg1CJ8+3hqJoMFIZOQGEeYQAv3/eoABR2XcBWoKeBbHK1CFtow NnaMBlEdUul+2MSxmswykRZSxQ== -----END CERTIFICATE-----Generated at Sun Aug 24 02:26:16 2025 by rpki-client