$ rpki-client -vvf rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.mft File: 099DF7CCFC5474CEBED5335C709CBFAE484FBA37.mft (raw, json) Hash identifier: sytWMgCgL8D1I9PoD7XRMSvXtlmuVvkWQEXWHCQka4E= Subject key identifier: 9E:04:66:04:95:13:7E:E2:22:4E:D7:A9:C2:9F:D3:68:2E:43:B9:DB Authority key identifier: 09:9D:F7:CC:FC:54:74:CE:BE:D5:33:5C:70:9C:BF:AE:48:4F:BA:37 Certificate issuer: /CN=099DF7CCFC5474CEBED5335C709CBFAE484FBA37 Certificate serial: 3F9DDEB70917F9A0ADC38A7230E12CB624274DA1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.cer Subject info access: rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.mft Manifest number: 0350 Signing time: Mon 20 Oct 2025 00:20:00 +0000 Manifest this update: Mon 20 Oct 2025 00:15:00 +0000 Manifest next update: Tue 21 Oct 2025 00:20:00 +0000 Files and hashes: 1: 099DF7CCFC5474CEBED5335C709CBFAE484FBA37.crl (hash: j1gBYXLTkpquDFkl4zOpOaHYhfXSGNSDOYN0Rcfg+YQ=) 2: 323830343a313763383a3a2f33322d3335203d3e20323633323531.roa (hash: dLtgWFo3Ut4Jpy9K/rkuZ219OW32xVuCAPOdnOBe8+M=) 3: 3230302e302e382e302f32312d3234203d3e20323633323531.roa (hash: l1Q29OsHW5uvKlsALc5e3lJ40T/OBW1wo6Bxuah0Ag8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.crl rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 00:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:9d:de:b7:09:17:f9:a0:ad:c3:8a:72:30:e1:2c:b6:24:27:4d:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099DF7CCFC5474CEBED5335C709CBFAE484FBA37 Validity Not Before: Oct 20 00:15:00 2025 GMT Not After : Oct 21 00:20:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bf:bc:23:e7:a3:a3:b2:70:df:78:9a:ce:b5: e1:c0:77:a4:de:01:1f:5c:11:4d:56:ff:8e:f6:e3: 95:a7:a8:11:48:4f:f3:74:dc:40:8b:4b:92:57:5c: 7d:41:b9:89:9c:2f:a6:19:63:55:84:cd:91:0d:eb: 44:a8:41:0c:7c:fe:03:47:6e:0b:0d:98:c5:e7:ce: 01:36:79:f9:06:c3:d9:fd:73:ce:51:64:39:48:36: 1e:aa:d8:b1:ba:25:00:91:3b:21:17:c1:4b:b2:29: 51:42:b8:3c:85:57:de:63:22:74:5e:e0:f4:76:1d: 37:66:60:97:10:31:f5:d8:a4:6c:11:5a:50:9b:13: 5b:89:68:c3:96:16:e7:2b:b8:64:c7:21:19:e3:04: 46:44:9c:a4:12:c2:5c:dc:66:7d:1f:ee:8a:bb:2a: 97:ac:ec:50:9c:5b:61:f4:73:f7:65:dd:d3:c1:12: 6b:20:46:fd:62:fa:94:3b:93:fd:39:ed:12:18:a9: 26:f4:46:35:24:a9:ab:bc:1a:5c:aa:be:67:d1:ca: 36:dd:22:28:0b:e7:14:15:2b:34:d0:61:7b:2c:03: aa:d8:fe:a4:74:32:c9:16:a9:a3:b9:c7:42:29:96: 0d:b2:2b:b8:50:4e:29:de:21:f7:25:01:dc:b7:5b: ef:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:04:66:04:95:13:7E:E2:22:4E:D7:A9:C2:9F:D3:68:2E:43:B9:DB X509v3 Authority Key Identifier: keyid:09:9D:F7:CC:FC:54:74:CE:BE:D5:33:5C:70:9C:BF:AE:48:4F:BA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a9:8f:da:16:2b:2c:53:53:f8:7e:ba:76:0c:cc:f6:4c:b1: cb:8a:cd:1e:b3:41:7b:e1:59:21:50:be:f7:3c:2f:d5:cf:66: 80:00:1a:e1:05:ae:0c:4c:d4:ba:37:9c:88:bb:69:d8:f6:88: 89:ca:ab:3f:a1:7d:15:d4:f9:38:17:b8:0a:8c:2f:e5:a1:91: 14:68:cc:d4:da:93:15:fa:a8:4c:00:00:a5:51:22:ef:eb:cb: 2a:df:cd:32:73:a4:cd:c2:00:df:09:31:a0:54:ee:3e:6e:d4: d1:24:a3:1b:5e:17:b2:05:ce:50:23:34:bd:7c:83:03:51:99: 36:7a:36:c0:2d:9e:80:52:1b:89:79:cb:b3:3c:1a:0b:c4:1a: 20:06:78:5a:0d:1a:1a:fe:c9:d7:8a:49:39:07:72:82:a8:77: 64:99:f2:e6:a9:a2:6f:bb:8d:17:91:a2:0f:17:dc:ca:d2:57: b9:87:bf:7c:4a:22:76:2a:c1:c6:43:75:7e:12:94:f0:0d:7c: ca:ce:76:45:55:b2:50:dd:5c:d0:10:3c:99:f7:41:84:33:b0: ca:9c:3e:39:be:28:ec:f5:9a:9f:56:98:7a:63:dd:98:57:56: dc:e7:97:99:f4:61:9d:38:47:cd:f3:f3:c7:ad:fe:ca:69:f7: 4a:ff:32:a4 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUP53etwkX+aCtw4pyMOEstiQnTaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk5REY3Q0NGQzU0NzRDRUJFRDUzMzVDNzA5Q0JGQUU0 ODRGQkEzNzAeFw0yNTEwMjAwMDE1MDBaFw0yNTEwMjEwMDIwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjRCRkJDMjNFN0EzQTNCMjcw REY3ODlBQ0VCNUUxQzA3N0E0REUwMTFGNUMxMTRENTZGRjhFRjZFMzk1QTdBODEx NDg0RkYzNzREQzQwOEI0QjkyNTc1QzdENDFCOTg5OUMyRkE2MTk2MzU1ODRDRDkx MERFQjQ0QTg0MTBDN0NGRTAzNDc2RTBCMEQ5OEM1RTdDRTAxMzY3OUY5MDZDM0Q5 RkQ3M0NFNTE2NDM5NDgzNjFFQUFEOEIxQkEyNTAwOTEzQjIxMTdDMTRCQjIyOTUx NDJCODNDODU1N0RFNjMyMjc0NUVFMEY0NzYxRDM3NjY2MDk3MTAzMUY1RDhBNDZD MTE1QTUwOUIxMzVCODk2OEMzOTYxNkU3MkJCODY0QzcyMTE5RTMwNDQ2NDQ5Q0E0 MTJDMjVDREM2NjdEMUZFRThBQkIyQTk3QUNFQzUwOUM1QjYxRjQ3M0Y3NjVEREQz QzExMjZCMjA0NkZENjJGQTk0M0I5M0ZEMzlFRDEyMThBOTI2RjQ0NjM1MjRBOUFC QkMxQTVDQUFCRTY3RDFDQTM2REQyMjI4MEJFNzE0MTUyQjM0RDA2MTdCMkMwM0FB RDhGRUE0NzQzMkM5MTZBOUEzQjlDNzQyMjk5NjBEQjIyQkI4NTA0RTI5REUyMUY3 MjUwMURDQjc1QkVGQTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAtL+8I+ejo7Jw33iazrXhwHek3gEfXBFNVv+O9uOVp6gRSE/zdNxA i0uSV1x9QbmJnC+mGWNVhM2RDetEqEEMfP4DR24LDZjF584BNnn5BsPZ/XPOUWQ5 SDYeqtixuiUAkTshF8FLsilRQrg8hVfeYyJ0XuD0dh03ZmCXEDH12KRsEVpQmxNb iWjDlhbnK7hkxyEZ4wRGRJykEsJc3GZ9H+6KuyqXrOxQnFth9HP3Zd3TwRJrIEb9 YvqUO5P9Oe0SGKkm9EY1JKmrvBpcqr5n0co23SIoC+cUFSs00GF7LAOq2P6kdDLJ FqmjucdCKZYNsiu4UE4p3iH3JQHct1vvqQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FJ4EZgSVE37iIk7XqcKf02guQ7nbMB8GA1UdIwQYMBaAFAmd98z8VHTOvtUzXHCc v65IT7o3MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJjYjJFb3lOclVCMkNt RlA1eHp2clN3OVc0QXBHRVJSWWJzdUp6ODhaOGVXLzEvMDk5REY3Q0NGQzU0NzRD RUJFRDUzMzVDNzA5Q0JGQUU0ODRGQkEzNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS8wOTlERjdDQ0ZDNTQ3NENFQkVENTMzNUM3MDlDQkZBRTQ4NEZC QTM3LmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJjYjJFb3lOclVCMkNtRlA1eHp2 clN3OVc0QXBHRVJSWWJzdUp6ODhaOGVXLzEvMDk5REY3Q0NGQzU0NzRDRUJFRDUz MzVDNzA5Q0JGQUU0ODRGQkEzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEupj9oWKyxTU/h+unYMzPZM scuKzR6zQXvhWSFQvvc8L9XPZoAAGuEFrgxM1Lo3nIi7adj2iInKqz+hfRXU+TgX uAqML+WhkRRozNTakxX6qEwAAKVRIu/ryyrfzTJzpM3CAN8JMaBU7j5u1NEkoxte F7IFzlAjNL18gwNRmTZ6NsAtnoBSG4l5y7M8GgvEGiAGeFoNGhr+ydeKSTkHcoKo d2SZ8uapom+7jReRog8X3MrSV7mHv3xKInYqwcZDdX4SlPANfMrOdkVVslDdXNAQ PJn3QYQzsMqcPjm+KOz1mp9WmHpj3ZhXVtznl5n0YZ04R83z88et/spp90r/MqQ= -----END CERTIFICATE-----Generated at Mon Oct 20 15:20:54 2025 by rpki-client