$ rpki-client -vvf rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft File: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft (raw, json) Hash identifier: gUKvYj/71qGHevguK24IPrVyGkNFiPWwxExTZMZzIOI= Subject key identifier: DA:7F:05:0B:F0:64:3D:E5:39:22:27:49:E8:D1:1A:FC:DB:BE:FD:D6 Authority key identifier: 9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC Certificate issuer: /CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Certificate serial: 6A2A1FFA0BC94EC4F0B286C639F4CB852C4D7A01 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject info access: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft Manifest number: 010E Signing time: Sat 23 Aug 2025 13:48:59 +0000 Manifest this update: Sat 23 Aug 2025 13:43:59 +0000 Manifest next update: Sun 24 Aug 2025 17:19:59 +0000 Files and hashes: 1: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl (hash: 6gOkUcRghWBpMwDkKbtQVNK/KAoHfdPIHt471hGvdO8=) 2: 323830343a326634303a3a2f33322d3438203d3e20323634383830.roa (hash: 3g8/sjxV8E647/HAZRmu2PV+IP7H3yOgtmHvSu2jRew=) 3: 3136382e3232372e35362e302f32322d3234203d3e20323634383830.roa (hash: ZIjfSo+Y8U8r36JCVeoF2b5UMYHuJK9csANlSvslsHk=) 4: 3137302e3234362e3138342e302f32322d3234203d3e20323634383830.roa (hash: vIm2Zj8tyzVDc+8CKc8N8ILHLVLvBtHG21RZkNA4OZE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:2a:1f:fa:0b:c9:4e:c4:f0:b2:86:c6:39:f4:cb:85:2c:4d:7a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Validity Not Before: Aug 23 13:43:59 2025 GMT Not After : Aug 24 17:19:59 2025 GMT Subject: CN=DA7F050BF0643DE539222749E8D11AFCDBBEFDD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:77:1c:f6:69:27:24:82:d2:10:2a:e5:70:1a: fa:ac:d9:63:3a:22:fd:75:be:ef:0a:70:f6:d9:d9: aa:d6:ed:12:c4:e7:71:a3:f6:51:f3:1d:10:01:1c: 28:f7:9a:24:dd:b4:8b:85:d6:92:67:87:c4:e2:b4: 0e:d2:cf:78:59:24:8d:d7:09:40:de:ba:3f:fd:77: 3e:cf:9c:b4:18:21:9a:fb:53:5f:28:e4:cb:79:9a: e7:55:3f:b6:0c:05:06:14:83:f6:7c:ee:26:a9:85: bc:5c:4a:75:3f:31:65:54:89:3a:ab:db:84:c3:55: be:af:94:f0:27:eb:27:72:77:aa:38:bd:2c:e0:33: 83:aa:af:4d:7e:ea:f3:07:0f:57:30:67:24:c3:9a: 2c:fe:28:27:b9:82:74:5d:a9:81:30:f0:57:10:54: 38:ba:bb:5a:5c:a7:1d:b4:a0:5e:c5:0e:14:1f:b4: 21:4b:f7:c0:2e:27:db:dc:c8:41:75:35:37:50:28: 48:db:0b:ef:e8:cd:ee:a1:20:98:2e:05:5d:97:1c: 7a:72:12:43:74:e7:72:fb:12:41:f1:d0:f9:cb:e4: 9f:37:e2:27:ce:32:01:06:13:4c:07:37:c6:dc:3c: 9c:9e:00:49:3a:05:f2:74:bb:43:49:fe:3d:46:5c: 89:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7F:05:0B:F0:64:3D:E5:39:22:27:49:E8:D1:1A:FC:DB:BE:FD:D6 X509v3 Authority Key Identifier: keyid:9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:10:76:29:7e:cf:9c:83:d2:17:9f:1e:ad:52:82:c9:99:a0: e1:5c:b0:b3:e8:01:42:e9:d0:24:b1:d6:58:71:53:88:cd:a1: 20:a8:1b:9b:34:f2:eb:f8:5a:ca:bb:b3:35:3d:56:7a:3d:9c: ca:af:79:64:6c:04:19:a7:31:2c:8c:12:34:7a:97:78:2d:c6: 2f:49:43:7a:99:a5:07:45:b7:b1:c6:67:ab:f7:39:b6:6e:81: d5:05:42:47:1e:0b:05:fb:04:f9:43:f3:cd:92:45:60:e5:6d: 60:18:6f:19:a1:e1:a8:e2:0a:cf:72:21:4d:5c:20:bf:e6:2f: 2c:4f:eb:9f:f5:fb:f5:84:44:ef:de:47:a0:c0:8c:fd:cc:23: ad:71:62:b6:f2:45:70:55:71:08:80:e9:4b:35:d5:aa:09:ab: 71:a9:c8:34:9e:af:3e:91:11:b1:16:2a:ee:bd:2c:ae:ba:94: d1:07:f4:71:30:84:e8:09:4d:f8:13:ee:fc:d6:03:5b:41:e8: 73:28:3b:47:29:f8:6c:8e:a2:bb:12:47:c3:c0:32:db:bd:95: 6b:fb:e3:96:57:61:ac:74:c6:8d:77:84:75:0f:9c:e6:ee:0b: a4:ae:7c:6e:14:9b:c5:bb:1a:e5:ce:b2:7b:06:0f:0c:80:98: eb:3e:a3:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaiof+gvJTsTwsobGOfTLhSxNegEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEzMkNEOTFGQ0U5Q0FEQkYyOEJFREY0QzcyMEU2N0I3 OUFGQjlDQzAeFw0yNTA4MjMxMzQzNTlaFw0yNTA4MjQxNzE5NTlaMDMxMTAvBgNV BAMTKERBN0YwNTBCRjA2NDNERTUzOTIyMjc0OUU4RDExQUZDREJCRUZERDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTdxz2aSckgtIQKuVwGvqs2WM6 Iv11vu8KcPbZ2arW7RLE53Gj9lHzHRABHCj3miTdtIuF1pJnh8TitA7Sz3hZJI3X CUDeuj/9dz7PnLQYIZr7U18o5Mt5mudVP7YMBQYUg/Z87iaphbxcSnU/MWVUiTqr 24TDVb6vlPAn6ydyd6o4vSzgM4Oqr01+6vMHD1cwZyTDmiz+KCe5gnRdqYEw8FcQ VDi6u1pcpx20oF7FDhQftCFL98AuJ9vcyEF1NTdQKEjbC+/oze6hIJguBV2XHHpy EkN053L7EkHx0PnL5J834ifOMgEGE0wHN8bcPJyeAEk6BfJ0u0NJ/j1GXIm/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2n8FC/BkPeU5IidJ6NEa/Nu+/dYwHwYDVR0j BBgwFoAUmjLNkfzpytvyi+30xyDme3mvucwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1 Q2gvMC85QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBMzJDRDkxRkNFOUNBREJG MjhCRURGNEM3MjBFNjdCNzlBRkI5Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1Q2gvMC85 QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAchB2KX7PnIPSF58erVKCyZmg4Vyws+gBQunQJLHWWHFTiM2hIKgbmzTy6/ha yruzNT1Wej2cyq95ZGwEGacxLIwSNHqXeC3GL0lDepmlB0W3scZnq/c5tm6B1QVC Rx4LBfsE+UPzzZJFYOVtYBhvGaHhqOIKz3IhTVwgv+YvLE/rn/X79YRE795HoMCM /cwjrXFitvJFcFVxCIDpSzXVqgmrcanINJ6vPpERsRYq7r0srrqU0Qf0cTCE6AlN +BPu/NYDW0Hocyg7Ryn4bI6iuxJHw8Ay272Va/vjlldhrHTGjXeEdQ+c5u4LpK58 bhSbxbsa5c6yewYPDICY6z6jGw== -----END CERTIFICATE-----Generated at Sat Aug 23 16:27:43 2025 by rpki-client