$ rpki-client -vvf rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft File: B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft (raw, json) Hash identifier: rd/+KA771rsAChfXQn1Gch5m5Jorri6g7zuDqc5+LyM= Subject key identifier: 72:39:1C:F9:03:96:A4:4F:07:C5:85:45:3E:59:E7:1A:58:D1:D5:9B Authority key identifier: B9:CB:AB:6E:2B:98:D7:CF:3F:3A:EE:9E:B8:BE:ED:E0:EE:99:93:41 Certificate issuer: /CN=B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341 Certificate serial: 334CAF2CD7AE33B6A44A618BEB6BB9AA3C59D050 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer Subject info access: rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft Manifest number: 64 Signing time: Mon 20 Oct 2025 09:25:29 +0000 Manifest this update: Mon 20 Oct 2025 09:20:29 +0000 Manifest next update: Tue 21 Oct 2025 11:07:29 +0000 Files and hashes: 1: B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.crl (hash: kOx8/yPKYWoM/UQJ8SW/cX+m673tPJfssTtGQ9OmtSU=) 2: 323830343a393437343a3a2f33322d3334203d3e20323734383433.roa (hash: LGKOYiD6Tp7ttJ6lg6hcYTjD8Cvq9uUvcrgbHV50Q2w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.crl rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:4c:af:2c:d7:ae:33:b6:a4:4a:61:8b:eb:6b:b9:aa:3c:59:d0:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341 Validity Not Before: Oct 20 09:20:29 2025 GMT Not After : Oct 21 11:07:29 2025 GMT Subject: CN=72391CF90396A44F07C585453E59E71A58D1D59B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c3:60:95:7b:aa:f4:c1:72:4c:fd:d1:0b:06: b4:c7:5e:a3:d8:97:b9:11:d8:42:9e:a8:68:a5:6e: 45:57:e7:3b:95:e1:36:9e:75:38:b0:c3:55:7f:3a: 7d:40:fc:fd:dd:b5:e3:0e:de:43:61:df:ed:0f:e2: fb:74:52:59:7a:75:91:a2:eb:ed:24:65:ea:8f:3f: 7b:f9:87:a3:7b:bc:a9:dc:46:33:d0:c7:e0:6a:cc: a2:cc:b1:e6:0d:c6:b6:6c:a0:54:04:7f:44:db:3d: 7b:a9:c8:be:3b:e6:db:dd:59:3a:a7:26:37:e2:cf: 1e:64:08:5a:d3:41:1f:e8:1f:26:a9:b3:b9:e3:77: fe:50:3c:f7:a4:2d:aa:d9:0f:25:cd:4a:10:bd:04: 96:21:5c:99:b0:7c:e3:02:f4:35:9e:a5:88:45:b2: 8e:05:84:92:54:0b:d9:bc:35:93:a9:76:b0:bb:cd: 71:96:e0:da:35:d6:24:01:35:8b:15:60:2b:50:ac: d9:ba:e6:f8:9c:d6:89:74:8d:e5:ac:31:31:a7:c5: d6:8a:d8:0f:e0:93:6c:6d:3d:ea:a1:e3:0d:60:02: 0d:32:cc:17:dd:3b:9c:a0:01:14:56:47:8a:03:22: a5:80:f9:c3:fd:f9:18:e6:69:ab:79:81:91:8e:76: 2c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:39:1C:F9:03:96:A4:4F:07:C5:85:45:3E:59:E7:1A:58:D1:D5:9B X509v3 Authority Key Identifier: keyid:B9:CB:AB:6E:2B:98:D7:CF:3F:3A:EE:9E:B8:BE:ED:E0:EE:99:93:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:01:9b:bf:17:e5:9e:83:52:75:0c:c5:eb:8c:aa:e8:16:b2: 15:b4:e8:44:21:38:88:6a:f0:2b:d9:75:f5:f2:9b:4d:1e:8f: 7f:6d:14:0a:00:f6:8a:5e:a0:11:a9:ea:89:a2:e2:3c:ba:0d: bc:f0:82:bb:f0:6a:23:b6:07:eb:08:60:69:ef:dc:51:68:f8: 17:92:03:e0:ec:ce:6b:ea:83:cd:aa:2d:55:eb:b1:be:bb:80: ed:54:0f:b2:7e:fd:c4:69:af:0e:af:c0:35:2f:b4:42:f0:41: 9b:a2:7a:15:3a:72:5e:aa:4a:6c:c9:b9:a2:c4:8c:1a:63:21: 20:a9:07:e8:4b:9c:5a:6d:11:c1:fa:d2:cc:14:3b:ad:4d:bd: 07:c9:aa:1f:06:7a:c8:d9:56:18:dc:ab:d8:f2:10:82:94:5a: 52:37:0a:9a:fb:55:a1:c1:c0:c2:d1:74:28:40:7d:8a:85:21: ef:29:11:f7:84:f8:7d:79:1c:b0:7b:8e:17:1b:71:4e:48:b4: b3:56:e2:7e:b2:cd:e3:8d:9d:d4:dc:ea:d5:46:b9:d0:69:85: 7a:03:39:9b:e8:7c:b5:60:e2:05:53:0c:a9:de:f8:ac:a7:c3: 67:61:4e:5c:f0:f1:2e:68:8c:5a:7f:17:e8:e3:58:dc:43:83: d8:5b:86:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUM0yvLNeuM7akSmGL62u5qjxZ0FAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlDQkFCNkUyQjk4RDdDRjNGM0FFRTlFQjhCRUVERTBF RTk5OTM0MTAeFw0yNTEwMjAwOTIwMjlaFw0yNTEwMjExMTA3MjlaMDMxMTAvBgNV BAMTKDcyMzkxQ0Y5MDM5NkE0NEYwN0M1ODU0NTNFNTlFNzFBNThEMUQ1OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkw2CVe6r0wXJM/dELBrTHXqPY l7kR2EKeqGilbkVX5zuV4TaedTiww1V/On1A/P3dteMO3kNh3+0P4vt0Ull6dZGi 6+0kZeqPP3v5h6N7vKncRjPQx+BqzKLMseYNxrZsoFQEf0TbPXupyL475tvdWTqn Jjfizx5kCFrTQR/oHyaps7njd/5QPPekLarZDyXNShC9BJYhXJmwfOMC9DWepYhF so4FhJJUC9m8NZOpdrC7zXGW4No11iQBNYsVYCtQrNm65vic1ol0jeWsMTGnxdaK 2A/gk2xtPeqh4w1gAg0yzBfdO5ygARRWR4oDIqWA+cP9+Rjmaat5gZGOdiypAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcjkc+QOWpE8HxYVFPlnnGljR1ZswHwYDVR0j BBgwFoAUucurbiuY188/Ou6euL7t4O6Zk0EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHhXenM2aXN6bUpxaFBUZkhwakFDc2o0dzU3cUR4ZE1VU1ZpdUprTGZG N1UvMC9COUNCQUI2RTJCOThEN0NGM0YzQUVFOUVCOEJFRURFMEVFOTk5MzQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5Q0JBQjZFMkI5OEQ3Q0Yz RjNBRUU5RUI4QkVFREUwRUU5OTkzNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHhXenM2aXN6bUpxaFBUZkhwakFDc2o0dzU3cUR4ZE1VU1ZpdUprTGZGN1UvMC9C OUNCQUI2RTJCOThEN0NGM0YzQUVFOUVCOEJFRURFMEVFOTk5MzQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZQGbvxflnoNSdQzF64yq6BayFbToRCE4iGrwK9l19fKbTR6Pf20UCgD2il6g EanqiaLiPLoNvPCCu/BqI7YH6whgae/cUWj4F5ID4OzOa+qDzaotVeuxvruA7VQP sn79xGmvDq/ANS+0QvBBm6J6FTpyXqpKbMm5osSMGmMhIKkH6EucWm0RwfrSzBQ7 rU29B8mqHwZ6yNlWGNyr2PIQgpRaUjcKmvtVocHAwtF0KEB9ioUh7ykR94T4fXkc sHuOFxtxTki0s1bifrLN442d1Nzq1Ua50GmFegM5m+h8tWDiBVMMqd74rKfDZ2FO XPDxLmiMWn8X6ONY3EOD2FuGCQ== -----END CERTIFICATE-----Generated at Mon Oct 20 20:59:13 2025 by rpki-client