$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft File: 91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft (raw, json) Hash identifier: kuSgKc/emjhrX3M4PLuikdbAJeBl4Xl1IIHM2NmpEK8= Subject key identifier: CA:E2:C7:24:44:5C:C4:44:11:C0:2E:06:30:B6:45:04:ED:F4:B5:BB Authority key identifier: 91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0 Certificate issuer: /CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0 Certificate serial: 331EF8E785F22041A16C5A09C4D594F0FC2C6FD2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer Subject info access: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft Manifest number: 0132 Signing time: Fri 22 Aug 2025 22:20:59 +0000 Manifest this update: Fri 22 Aug 2025 22:15:59 +0000 Manifest next update: Sat 23 Aug 2025 23:42:59 +0000 Files and hashes: 1: 3139302e3132342e3234342e302f32322d3232203d3e20323730383630.roa (hash: GO7w8eqGTa8dskb5vIgzwgtC6sLrRWDcLwvfKurJi/c=) 2: 3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa (hash: 0eX90yaw+P6ZAxEPr/PJb8WsvDlA//ZNAwA4O0HitxQ=) 3: 3139302e3132342e3234362e302f32342d3234203d3e20323730383630.roa (hash: ouWOBSiTWgfnPLxBeA+7q0eMzrly3oy5U/Yxyh/uQG8=) 4: 3139302e3132342e3234362e302f32332d3233203d3e20323730383630.roa (hash: 4z8E5xkgAubJe79uhls2hM7yWHwnaNYYxTpUhSzfajo=) 5: 3139302e3132342e3234352e302f32342d3234203d3e20323730383630.roa (hash: C3k9FGsSHArcVIZOFQJRWxG6FRMI/42eNpKGM7EODK0=) 6: 323830343a373238633a3a2f33322d3332203d3e20323730383630.roa (hash: is1ce/85QOT7NztHS8d8OT2MR60xfEDAWq9FgKQpdCU=) 7: 3139302e3132342e3234372e302f32342d3234203d3e20323730383630.roa (hash: CcBSySmTVrGXjBmAZJ2qP+CxFizJEFvF6UAVfbjFZgA=) 8: 3139302e3132342e3234342e302f32342d3234203d3e20323730383630.roa (hash: q9Oe28bXTlG+wjfdfY0S2DKhkmcDPIsB3IHCjEfJUgQ=) 9: 91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl (hash: SwfTmRbwEjhUQWUl3ysuHJL7TCncSiykmrP8Hl1/b5Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 23:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:1e:f8:e7:85:f2:20:41:a1:6c:5a:09:c4:d5:94:f0:fc:2c:6f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0 Validity Not Before: Aug 22 22:15:59 2025 GMT Not After : Aug 23 23:42:59 2025 GMT Subject: CN=CAE2C724445CC44411C02E0630B64504EDF4B5BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c1:ee:6c:0c:d9:09:55:e6:69:b4:43:5d:f1: 7d:9b:c0:f9:de:1a:47:3d:a1:52:83:73:a6:d6:e5: c6:0e:67:68:2f:57:a4:30:0b:6f:f1:35:8c:64:ce: 30:01:5d:0a:13:c5:98:19:15:28:70:0d:04:44:fc: 4b:29:78:01:75:79:ad:3e:60:8c:18:05:14:9c:73: 95:3d:90:95:34:ed:45:18:17:37:91:df:2f:df:d1: 5a:79:1d:21:df:20:88:9d:19:a2:d2:fe:df:e5:0f: ad:ef:f4:a4:b6:c2:0f:2e:10:86:5f:e9:ad:53:1a: 87:79:79:d2:5e:64:02:b1:ee:18:97:fe:ae:be:71: 93:2a:6b:4f:6c:81:b6:e9:cf:cb:46:89:e3:2f:4c: b1:02:ac:fc:9e:a2:1b:fa:70:0c:af:5a:44:51:e2: bd:bf:1e:41:06:55:d2:00:4c:e5:14:a4:3d:28:ec: 94:ad:8d:a7:b3:2a:2b:84:a4:8c:43:2e:1f:08:bb: de:9c:3c:42:0c:44:09:b1:d4:d3:17:cb:d5:68:bc: 3d:01:a4:fa:02:41:09:11:58:1d:a4:2a:a1:48:b1: 6b:31:bd:12:f6:02:2f:a1:89:90:21:38:39:9c:74: 46:f7:f8:29:6c:68:bf:15:27:f3:b2:da:bf:33:86: df:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E2:C7:24:44:5C:C4:44:11:C0:2E:06:30:B6:45:04:ED:F4:B5:BB X509v3 Authority Key Identifier: keyid:91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ae:ce:fa:eb:35:dd:f8:c7:0c:d5:8e:45:65:bb:0a:52:8c: 2e:13:ae:20:38:24:7e:ca:3b:a6:aa:ff:57:0a:b6:87:b6:57: e0:bf:5e:c0:fa:7f:97:b7:c4:3a:48:c1:f4:38:7e:ea:f3:a7: 8c:45:97:18:65:96:79:e8:43:5e:e2:5c:da:e5:a4:a6:52:3b: 1d:66:b9:30:b0:7b:c2:28:2a:43:20:ec:2a:63:f0:e3:e4:50: 81:ab:2a:3e:d8:da:4c:20:7a:5a:c6:9e:1e:62:4d:09:02:ed: cd:8a:f0:09:f6:7c:c7:20:b5:fe:8c:e6:36:bb:c1:3b:49:dc: 50:ea:23:fb:b0:75:a8:09:ec:40:33:23:af:ad:72:bf:55:93: 25:c4:1f:a8:ce:1c:62:ef:6c:90:3c:d2:fc:3b:d3:93:1f:63: a4:bf:4e:8b:82:55:29:cb:70:5b:b8:99:55:24:47:f7:aa:a9: f3:d9:30:a5:38:c7:e2:47:88:67:04:79:ab:02:b0:5a:32:ae: 01:8b:b1:ee:5a:0a:c3:74:cb:a2:34:90:f0:df:76:5e:f9:70: 46:e4:45:23:7b:6d:0d:a9:2e:f4:1f:09:3a:45:58:c9:90:ce: 7d:d1:df:24:ea:aa:be:12:c0:4c:64:2b:42:b0:85:47:3e:92: 97:ea:36:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMx7454XyIEGhbFoJxNWU8Pwsb9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDQjBENDZGMzhBMTdDMEYzQUJDNDlEOTQ5NkFGQ0I2 MEVDQzVDMDAeFw0yNTA4MjIyMjE1NTlaFw0yNTA4MjMyMzQyNTlaMDMxMTAvBgNV BAMTKENBRTJDNzI0NDQ1Q0M0NDQxMUMwMkUwNjMwQjY0NTA0RURGNEI1QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzwe5sDNkJVeZptENd8X2bwPne Gkc9oVKDc6bW5cYOZ2gvV6QwC2/xNYxkzjABXQoTxZgZFShwDQRE/EspeAF1ea0+ YIwYBRScc5U9kJU07UUYFzeR3y/f0Vp5HSHfIIidGaLS/t/lD63v9KS2wg8uEIZf 6a1TGod5edJeZAKx7hiX/q6+cZMqa09sgbbpz8tGieMvTLECrPyeohv6cAyvWkRR 4r2/HkEGVdIATOUUpD0o7JStjaezKiuEpIxDLh8Iu96cPEIMRAmx1NMXy9VovD0B pPoCQQkRWB2kKqFIsWsxvRL2Ai+hiZAhODmcdEb3+ClsaL8VJ/Oy2r8zht9PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyuLHJERcxEQRwC4GMLZFBO30tbswHwYDVR0j BBgwFoAUkcsNRvOKF8Dzq8SdlJavy2DsxcAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2JOSjJLanJQaWplYXRiUHdGclExeWlQZXEyUkN3NnY5VEVpbnRXZ0hO QkwvMC85MUNCMEQ0NkYzOEExN0MwRjNBQkM0OUQ5NDk2QUZDQjYwRUNDNUMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxQ0IwRDQ2RjM4QTE3QzBG M0FCQzQ5RDk0OTZBRkNCNjBFQ0M1QzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2JOSjJLanJQaWplYXRiUHdGclExeWlQZXEyUkN3NnY5VEVpbnRXZ0hOQkwvMC85 MUNCMEQ0NkYzOEExN0MwRjNBQkM0OUQ5NDk2QUZDQjYwRUNDNUMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHa7O+us13fjHDNWORWW7ClKMLhOuIDgkfso7pqr/Vwq2h7ZX4L9ewPp/l7fE OkjB9Dh+6vOnjEWXGGWWeehDXuJc2uWkplI7HWa5MLB7wigqQyDsKmPw4+RQgasq PtjaTCB6WsaeHmJNCQLtzYrwCfZ8xyC1/ozmNrvBO0ncUOoj+7B1qAnsQDMjr61y v1WTJcQfqM4cYu9skDzS/DvTkx9jpL9Oi4JVKctwW7iZVSRH96qp89kwpTjH4keI ZwR5qwKwWjKuAYux7loKw3TLojSQ8N92XvlwRuRFI3ttDaku9B8JOkVYyZDOfdHf JOqqvhLATGQrQrCFRz6Sl+o21w== -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:31 2025 by rpki-client