$ rpki-client -vvf rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/9869B7BB10C305641024541DE28962BF2DFBF206.mft File: 9869B7BB10C305641024541DE28962BF2DFBF206.mft (raw, json) Hash identifier: 5mw7y5Td1c0iR3O8Ee0gOe2yk3G34N0Pusk6Ark7bfs= Subject key identifier: B1:22:39:B5:0E:B9:A8:95:1D:7F:99:8A:28:7C:E8:7A:A7:FD:4F:95 Authority key identifier: 98:69:B7:BB:10:C3:05:64:10:24:54:1D:E2:89:62:BF:2D:FB:F2:06 Certificate issuer: /CN=9869B7BB10C305641024541DE28962BF2DFBF206 Certificate serial: 25EC2B443172E71A87C3487AD1A46F7C47D01478 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9869B7BB10C305641024541DE28962BF2DFBF206.cer Subject info access: rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/9869B7BB10C305641024541DE28962BF2DFBF206.mft Manifest number: 33 Signing time: Mon 20 Oct 2025 13:30:21 +0000 Manifest this update: Mon 20 Oct 2025 13:25:21 +0000 Manifest next update: Tue 21 Oct 2025 15:33:21 +0000 Files and hashes: 1: 9869B7BB10C305641024541DE28962BF2DFBF206.crl (hash: jfaXtq9SENe7IyjTQmtd0d5ivHTrIqqWcRr/zj/vZKA=) 2: 323830343a3965633a3a2f33322d3438203d3e20323633303032.roa (hash: iaQHmi93FgOtNCakLIyqhKyBIX4rSs3F3w6eWplB5yk=) 3: 3137302e37382e3134342e302f32322d3234203d3e20323633303032.roa (hash: 9hx9Uo3esJX9MtuBR8glnF/LXUxGD3P8xvXpKAxCGrg=) 4: 3138362e3232372e3131322e302f32312d3234203d3e20323633303032.roa (hash: PFiRRuFvDDNxIrkUiBtHc5gLLxwWpOR6yYBWtACfOH0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/9869B7BB10C305641024541DE28962BF2DFBF206.crl rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/9869B7BB10C305641024541DE28962BF2DFBF206.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9869B7BB10C305641024541DE28962BF2DFBF206.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ec:2b:44:31:72:e7:1a:87:c3:48:7a:d1:a4:6f:7c:47:d0:14:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9869B7BB10C305641024541DE28962BF2DFBF206 Validity Not Before: Oct 20 13:25:21 2025 GMT Not After : Oct 21 15:33:21 2025 GMT Subject: CN=B12239B50EB9A8951D7F998A287CE87AA7FD4F95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a1:aa:64:43:0e:4d:e3:99:66:ee:d6:8e:a1: c0:15:9a:b0:49:fe:bd:f5:43:90:82:0e:6f:b7:7c: 4b:59:67:39:2a:99:bf:a7:f2:f9:a5:2f:93:da:40: 37:2f:45:2f:95:50:4b:28:01:46:75:69:dd:72:61: b9:0d:28:5e:55:2d:5d:0f:ee:f3:96:86:e2:13:21: f8:ea:b1:f5:e4:82:3b:39:a7:9b:1c:a4:62:64:bb: 6e:49:a2:9d:9e:51:cd:7c:40:a7:9b:e3:c8:e3:f1: 36:40:6a:67:dd:ca:26:70:7d:74:74:8d:e0:d4:ae: 34:6b:b2:a4:1f:83:32:80:e8:0d:98:b5:5f:6a:23: 6b:54:b2:24:f5:e8:19:56:47:8c:06:26:ea:a5:e5: b6:9a:bd:5d:98:0d:ef:c1:5e:4d:59:84:cc:2a:4f: 96:87:67:1d:30:61:43:86:80:dc:c7:38:77:14:a9: 75:61:ba:57:3e:09:67:60:22:0e:41:c9:39:ec:fc: 0b:cf:8a:19:72:4b:8e:9a:c7:38:00:be:a2:62:13: c9:3c:75:c2:5f:ee:8f:e4:4a:7f:22:a2:f3:7f:b8: fa:52:f5:3f:62:82:13:49:69:34:38:79:f2:44:e5: 30:42:f2:30:51:25:76:f3:c1:6d:ee:21:a5:68:5d: e1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:22:39:B5:0E:B9:A8:95:1D:7F:99:8A:28:7C:E8:7A:A7:FD:4F:95 X509v3 Authority Key Identifier: keyid:98:69:B7:BB:10:C3:05:64:10:24:54:1D:E2:89:62:BF:2D:FB:F2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/9869B7BB10C305641024541DE28962BF2DFBF206.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9869B7BB10C305641024541DE28962BF2DFBF206.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/9869B7BB10C305641024541DE28962BF2DFBF206.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:90:9f:bf:a6:42:4b:84:93:a8:67:eb:d6:00:a6:77:c7:5a: 09:b5:25:06:90:6b:f4:51:45:b3:2b:d2:0f:78:aa:f9:82:7d: ca:43:cb:4d:f8:c7:bf:42:d7:39:d5:41:bc:c9:45:10:62:1e: 5c:4b:a1:03:76:f6:42:0d:3d:c2:8a:2b:5e:2b:e3:36:be:53: 47:41:4e:2c:a8:27:3f:36:33:74:40:1b:07:c6:99:c2:2e:df: b5:49:62:15:24:14:cc:69:49:0d:8a:86:0a:3a:b3:f6:3a:11: 07:54:10:02:c2:a0:c9:11:4d:4c:eb:08:e8:b8:e2:ac:84:8f: 57:d0:2e:de:8f:95:3a:38:e9:df:b4:34:6f:80:62:a9:e1:25: 6c:a3:08:21:db:fc:22:f8:24:73:00:d9:7c:f7:00:a5:5f:6c: 9b:31:d3:5f:f1:1d:46:5f:13:02:3f:a7:49:36:d7:79:91:1f: 7c:4a:50:44:8f:9b:dd:94:99:87:9a:01:06:cb:70:fe:17:61: 87:30:26:4f:3d:6f:6b:35:c0:d8:24:c9:b4:5e:67:37:6a:65: 89:54:11:fc:b4:b0:43:61:e8:ce:79:44:62:55:c2:94:af:24: 35:6f:b6:0b:56:0a:95:b6:8a:8b:0b:52:f3:5f:20:20:64:b8: 29:f0:b9:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJewrRDFy5xqHw0h60aRvfEfQFHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2OUI3QkIxMEMzMDU2NDEwMjQ1NDFERTI4OTYyQkYy REZCRjIwNjAeFw0yNTEwMjAxMzI1MjFaFw0yNTEwMjExNTMzMjFaMDMxMTAvBgNV BAMTKEIxMjIzOUI1MEVCOUE4OTUxRDdGOTk4QTI4N0NFODdBQTdGRDRGOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/oapkQw5N45lm7taOocAVmrBJ /r31Q5CCDm+3fEtZZzkqmb+n8vmlL5PaQDcvRS+VUEsoAUZ1ad1yYbkNKF5VLV0P 7vOWhuITIfjqsfXkgjs5p5scpGJku25Jop2eUc18QKeb48jj8TZAamfdyiZwfXR0 jeDUrjRrsqQfgzKA6A2YtV9qI2tUsiT16BlWR4wGJuql5baavV2YDe/BXk1ZhMwq T5aHZx0wYUOGgNzHOHcUqXVhulc+CWdgIg5ByTns/AvPihlyS46axzgAvqJiE8k8 dcJf7o/kSn8iovN/uPpS9T9ighNJaTQ4efJE5TBC8jBRJXbzwW3uIaVoXeFDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsSI5tQ65qJUdf5mKKHzoeqf9T5UwHwYDVR0j BBgwFoAUmGm3uxDDBWQQJFQd4olivy378gYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNTR1cEtBZEUzSEJNUG43dkNiZm1VQzY3enVyVkZpMTZUZUFDeGpxZXhB NEsvMC85ODY5QjdCQjEwQzMwNTY0MTAyNDU0MURFMjg5NjJCRjJERkJGMjA2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4NjlCN0JCMTBDMzA1NjQx MDI0NTQxREUyODk2MkJGMkRGQkYyMDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NTR1cEtBZEUzSEJNUG43dkNiZm1VQzY3enVyVkZpMTZUZUFDeGpxZXhBNEsvMC85 ODY5QjdCQjEwQzMwNTY0MTAyNDU0MURFMjg5NjJCRjJERkJGMjA2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA5JCfv6ZCS4STqGfr1gCmd8daCbUlBpBr9FFFsyvSD3iq+YJ9ykPLTfjHv0LX OdVBvMlFEGIeXEuhA3b2Qg09woorXivjNr5TR0FOLKgnPzYzdEAbB8aZwi7ftUli FSQUzGlJDYqGCjqz9joRB1QQAsKgyRFNTOsI6LjirISPV9Au3o+VOjjp37Q0b4Bi qeElbKMIIdv8IvgkcwDZfPcApV9smzHTX/EdRl8TAj+nSTbXeZEffEpQRI+b3ZSZ h5oBBstw/hdhhzAmTz1vazXA2CTJtF5nN2pliVQR/LSwQ2HoznlEYlXClK8kNW+2 C1YKlbaKiwtS818gIGS4KfC5yg== -----END CERTIFICATE-----Generated at Mon Oct 20 16:09:23 2025 by rpki-client