$ rpki-client -vvf rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft File: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft (raw, json) Hash identifier: EaZYTHvqrMZcLDXlpKqe5b3wJ/j789ts00wP+eMkUyQ= Subject key identifier: B3:A6:2B:6B:C5:F0:62:DD:B4:3F:72:02:A0:5F:CF:FA:94:0F:84:B2 Authority key identifier: 9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC Certificate issuer: /CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Certificate serial: 3099C1E753A4E4C27A261EFF9A6ED6FFF3ECA69A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject info access: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft Manifest number: 015E Signing time: Mon 20 Oct 2025 05:43:55 +0000 Manifest this update: Mon 20 Oct 2025 05:38:55 +0000 Manifest next update: Tue 21 Oct 2025 06:50:55 +0000 Files and hashes: 1: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl (hash: 3Ld7qv/XpKSuKmonpSWkUDm7xLY4vv9dqGu9boSSYPM=) 2: 3136382e3232372e35362e302f32322d3234203d3e20323634383830.roa (hash: cbbKnj2SOZFOPSYnm7IW0oAfYkFG8ZiF0WmU5IaJh4A=) 3: 323830343a326634303a3a2f33322d3438203d3e20323634383830.roa (hash: 3g8/sjxV8E647/HAZRmu2PV+IP7H3yOgtmHvSu2jRew=) 4: 3137302e3234362e3138342e302f32322d3234203d3e20323634383830.roa (hash: K2cK3NZIFljKeOpvvpHj0lLcmC4oQ0tB2wi3PEj4Arg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 06:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:99:c1:e7:53:a4:e4:c2:7a:26:1e:ff:9a:6e:d6:ff:f3:ec:a6:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Validity Not Before: Oct 20 05:38:55 2025 GMT Not After : Oct 21 06:50:55 2025 GMT Subject: CN=B3A62B6BC5F062DDB43F7202A05FCFFA940F84B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fd:1f:8d:ab:df:28:3e:d4:45:9e:e7:c0:32: ff:5b:ee:49:85:50:3b:ea:c7:51:c2:05:6c:5b:6d: 21:44:e6:2a:d2:00:62:82:14:65:8f:cb:9d:a3:fe: 06:45:d2:73:80:69:53:d5:20:99:1b:b1:a5:12:9d: d5:f0:44:0f:63:f1:b8:18:0b:03:12:c7:f5:bb:97: 16:d4:93:88:21:69:de:be:3f:ed:b0:16:0a:63:4f: 71:b6:09:28:8a:3e:f4:38:fb:83:84:a7:e3:4e:13: 5d:bd:0c:76:5f:ea:92:bd:af:5b:27:f1:73:40:0a: fc:4d:ba:83:06:a4:b9:12:d1:57:ea:0a:ae:90:80: c4:63:16:84:45:e3:f7:f5:50:5f:78:1d:6e:e7:ee: ea:a9:9d:7e:4e:1a:a8:11:dd:97:b4:f0:a7:19:ec: 9f:d3:e2:7a:e9:42:bb:f5:b9:67:90:3a:2b:14:0b: 27:17:88:c8:60:05:05:37:d5:71:86:ca:75:b2:84: c0:b7:5b:33:79:a9:f0:3e:c8:75:b4:35:60:d8:a0: e3:05:f0:77:46:66:87:52:d0:d7:93:08:93:c7:e6: f9:7d:49:f5:d1:f2:05:74:7d:1b:60:d4:9e:e7:29: f7:7a:09:ae:2a:4d:e6:d7:20:40:9a:61:7d:39:93: 69:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A6:2B:6B:C5:F0:62:DD:B4:3F:72:02:A0:5F:CF:FA:94:0F:84:B2 X509v3 Authority Key Identifier: keyid:9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7e:25:be:d4:91:d2:6c:20:a1:05:70:fc:40:c2:fd:45:e2: d7:67:18:ae:8f:75:39:ab:b7:5c:63:54:3e:85:24:e2:61:46: 28:d7:82:c3:53:5b:f0:95:bd:75:f4:e8:7b:64:d5:64:73:df: fe:7f:20:41:ad:28:42:33:8c:bd:8b:c2:c2:88:fa:40:d9:e6: a2:3d:65:72:f9:52:3d:97:e0:3a:ab:43:bd:46:04:84:a4:16: d7:e8:8a:74:e8:12:63:75:5e:4b:51:b5:74:bf:3b:db:01:59: cf:cd:3b:7c:c9:20:e9:0b:bf:d5:88:22:11:26:d9:33:a7:33: f5:1d:18:4a:ee:ac:5d:fa:0c:84:d6:6d:92:05:5b:76:e9:08: 5c:97:91:f1:d2:82:22:c5:ea:63:ed:2b:28:6d:7f:60:cd:49: 76:ef:4f:15:e3:1b:c9:9f:2d:9a:b2:58:c0:c1:75:be:d5:77: ce:45:28:e3:8e:02:48:16:b8:84:39:98:79:4d:2f:56:5c:13: fb:91:3a:d4:e6:e5:83:2c:98:27:0f:fb:f0:47:a2:11:2a:bf: bc:40:83:b8:24:31:47:f6:80:88:35:98:df:ae:a6:74:ba:0d: c1:18:d7:55:b3:d7:4d:4f:9d:7b:bf:a3:e2:cd:1e:fe:ea:4f: d9:0d:7f:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMJnB51Ok5MJ6Jh7/mm7W//PsppowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEzMkNEOTFGQ0U5Q0FEQkYyOEJFREY0QzcyMEU2N0I3 OUFGQjlDQzAeFw0yNTEwMjAwNTM4NTVaFw0yNTEwMjEwNjUwNTVaMDMxMTAvBgNV BAMTKEIzQTYyQjZCQzVGMDYyRERCNDNGNzIwMkEwNUZDRkZBOTQwRjg0QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV/R+Nq98oPtRFnufAMv9b7kmF UDvqx1HCBWxbbSFE5irSAGKCFGWPy52j/gZF0nOAaVPVIJkbsaUSndXwRA9j8bgY CwMSx/W7lxbUk4ghad6+P+2wFgpjT3G2CSiKPvQ4+4OEp+NOE129DHZf6pK9r1sn 8XNACvxNuoMGpLkS0VfqCq6QgMRjFoRF4/f1UF94HW7n7uqpnX5OGqgR3Ze08KcZ 7J/T4nrpQrv1uWeQOisUCycXiMhgBQU31XGGynWyhMC3WzN5qfA+yHW0NWDYoOMF 8HdGZodS0NeTCJPH5vl9SfXR8gV0fRtg1J7nKfd6Ca4qTebXIECaYX05k2lLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUs6Yra8XwYt20P3ICoF/P+pQPhLIwHwYDVR0j BBgwFoAUmjLNkfzpytvyi+30xyDme3mvucwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1 Q2gvMC85QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBMzJDRDkxRkNFOUNBREJG MjhCRURGNEM3MjBFNjdCNzlBRkI5Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1Q2gvMC85 QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATn4lvtSR0mwgoQVw/EDC/UXi12cYro91Oau3XGNUPoUk4mFGKNeCw1Nb8JW9 dfToe2TVZHPf/n8gQa0oQjOMvYvCwoj6QNnmoj1lcvlSPZfgOqtDvUYEhKQW1+iK dOgSY3VeS1G1dL872wFZz807fMkg6Qu/1YgiESbZM6cz9R0YSu6sXfoMhNZtkgVb dukIXJeR8dKCIsXqY+0rKG1/YM1Jdu9PFeMbyZ8tmrJYwMF1vtV3zkUo444CSBa4 hDmYeU0vVlwT+5E61OblgyyYJw/78EeiESq/vECDuCQxR/aAiDWY366mdLoNwRjX VbPXTU+de7+j4s0e/upP2Q1/Fw== -----END CERTIFICATE-----Generated at Mon Oct 20 17:50:26 2025 by rpki-client