$ rpki-client -vvf rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.mft File: 9AD736118DEE4B1A75B2C689365A87E1543247BA.mft (raw, json) Hash identifier: 4s9eP7E2hPr4bOKCsKFKXxchm+2KSasdOIGhgYKxWc0= Subject key identifier: D0:F9:E8:FC:EC:DE:0E:79:3C:97:F9:7D:C6:8A:B0:FF:CE:00:8A:C3 Authority key identifier: 9A:D7:36:11:8D:EE:4B:1A:75:B2:C6:89:36:5A:87:E1:54:32:47:BA Certificate issuer: /CN=9AD736118DEE4B1A75B2C689365A87E1543247BA Certificate serial: 7C420B20CA5E70C816692A2E9B8ABA2E992FF0D7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AD736118DEE4B1A75B2C689365A87E1543247BA.cer Subject info access: rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.mft Manifest number: E1 Signing time: Mon 20 Oct 2025 08:15:21 +0000 Manifest this update: Mon 20 Oct 2025 08:10:21 +0000 Manifest next update: Tue 21 Oct 2025 12:01:21 +0000 Files and hashes: 1: 323830343a393162303a3a2f33322d3438203d3e20323734363538.roa (hash: OHDgjz8XKrpjYqeCeBLrr9sjRso+Et//ZZ2WnBAfncg=) 2: 9AD736118DEE4B1A75B2C689365A87E1543247BA.crl (hash: 8mPxEoYCYjURY/kcPvQmcuLQriWElkrB1oxlhSj1O7U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.crl rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AD736118DEE4B1A75B2C689365A87E1543247BA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:42:0b:20:ca:5e:70:c8:16:69:2a:2e:9b:8a:ba:2e:99:2f:f0:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD736118DEE4B1A75B2C689365A87E1543247BA Validity Not Before: Oct 20 08:10:21 2025 GMT Not After : Oct 21 12:01:21 2025 GMT Subject: CN=D0F9E8FCECDE0E793C97F97DC68AB0FFCE008AC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e1:b3:9d:cc:d3:30:00:f5:11:b5:1b:f8:c7: 84:e3:0a:f2:91:ec:a7:e9:45:58:4c:3d:78:ee:39: 46:b1:ba:9e:bc:2f:9b:14:97:6d:bc:8d:f4:fb:fd: e8:41:59:7a:da:a5:6f:04:85:7e:cf:5a:61:84:a2: 39:c2:0c:a0:48:0c:7e:6a:72:ab:38:bf:c1:43:6e: 13:ed:8f:30:cf:f6:68:8a:10:46:c3:20:e4:42:40: bf:4c:2d:11:0b:b6:a4:28:b0:d9:60:a1:67:31:23: 5c:28:e6:ee:fc:fc:30:f8:ec:50:64:1e:6a:7e:f3: c1:85:5c:fa:61:cd:9a:dd:51:db:eb:d7:66:5a:b3: ac:e6:be:8b:77:42:8c:c4:00:4c:21:6b:3a:d1:73: 49:b0:87:75:8c:c3:1e:97:02:fe:e1:d9:4e:9c:7a: cb:f8:27:66:aa:49:5e:4e:2d:01:d7:7e:e6:35:45: 93:d0:c1:a0:1e:dc:38:a6:1d:1c:02:ea:c3:a6:db: 71:99:c3:df:8c:79:86:1b:22:57:ff:13:55:47:82: e2:a1:cf:1d:65:da:32:41:69:5a:7b:31:6c:77:b5: 15:83:9f:6c:69:90:39:60:3b:84:0c:29:d1:37:f5: 82:b2:fd:3a:09:ab:48:4e:f2:d7:9f:8e:6e:1c:82: 98:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F9:E8:FC:EC:DE:0E:79:3C:97:F9:7D:C6:8A:B0:FF:CE:00:8A:C3 X509v3 Authority Key Identifier: keyid:9A:D7:36:11:8D:EE:4B:1A:75:B2:C6:89:36:5A:87:E1:54:32:47:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AD736118DEE4B1A75B2C689365A87E1543247BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9a:c2:ad:45:e3:3c:40:27:59:db:c2:e5:aa:7a:8a:05:e4: fc:d6:0d:13:3e:af:48:10:67:b2:fd:a4:aa:16:f5:7e:26:58: f0:72:d3:4b:57:85:e1:23:00:f0:08:b0:b8:17:fc:f8:49:a2: ca:03:08:3e:5e:5d:07:fd:e5:60:6f:7e:b6:89:f0:e3:d3:87: 8e:31:79:8b:4b:37:91:e3:fc:50:4d:79:7d:09:0c:6e:af:e3: 27:f4:fb:60:d6:a1:68:c2:50:9f:8c:25:f8:e8:42:a6:d9:91: ef:4f:99:a2:cf:40:d5:e5:e1:53:e4:de:9b:d2:d3:43:09:db: 72:b3:79:17:e6:7a:2b:9e:9d:27:ca:1b:fc:c5:a1:05:2b:15: 96:d2:ae:81:8e:b9:10:96:83:33:04:e2:15:67:48:f3:47:de: 20:1e:e5:90:e3:48:e3:cb:2d:df:28:d9:d7:ee:44:6d:b4:1f: 30:ab:bc:6e:75:1e:01:67:fa:98:ea:5c:69:ce:c7:e6:9d:c7: 0f:20:51:a0:d8:f9:6b:21:9c:3d:c6:35:1b:95:30:c4:83:19: 94:72:b9:4a:cc:fc:7e:37:db:5e:fa:52:b7:ef:72:0b:da:6f: 5a:ad:5f:ef:68:ae:d7:12:cf:93:8b:c4:a6:c1:59:cd:e0:45: c5:f4:7b:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfEILIMpecMgWaSoum4q6Lpkv8NcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFENzM2MTE4REVFNEIxQTc1QjJDNjg5MzY1QTg3RTE1 NDMyNDdCQTAeFw0yNTEwMjAwODEwMjFaFw0yNTEwMjExMjAxMjFaMDMxMTAvBgNV BAMTKEQwRjlFOEZDRUNERTBFNzkzQzk3Rjk3REM2OEFCMEZGQ0UwMDhBQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI4bOdzNMwAPURtRv4x4TjCvKR 7KfpRVhMPXjuOUaxup68L5sUl228jfT7/ehBWXrapW8EhX7PWmGEojnCDKBIDH5q cqs4v8FDbhPtjzDP9miKEEbDIORCQL9MLRELtqQosNlgoWcxI1wo5u78/DD47FBk Hmp+88GFXPphzZrdUdvr12Zas6zmvot3QozEAEwhazrRc0mwh3WMwx6XAv7h2U6c esv4J2aqSV5OLQHXfuY1RZPQwaAe3DimHRwC6sOm23GZw9+MeYYbIlf/E1VHguKh zx1l2jJBaVp7MWx3tRWDn2xpkDlgO4QMKdE39YKy/ToJq0hO8tefjm4cgpiHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0Pno/OzeDnk8l/l9xoqw/84AisMwHwYDVR0j BBgwFoAUmtc2EY3uSxp1ssaJNlqH4VQyR7owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNW54QnZybWVFaFZVb3RGdUxoOTM3U1h4cHFmOUVlc2VqNEtjeWtSVGla b2cvMC85QUQ3MzYxMThERUU0QjFBNzVCMkM2ODkzNjVBODdFMTU0MzI0N0JBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBRDczNjExOERFRTRCMUE3 NUIyQzY4OTM2NUE4N0UxNTQzMjQ3QkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NW54QnZybWVFaFZVb3RGdUxoOTM3U1h4cHFmOUVlc2VqNEtjeWtSVGlab2cvMC85 QUQ3MzYxMThERUU0QjFBNzVCMkM2ODkzNjVBODdFMTU0MzI0N0JBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKprCrUXjPEAnWdvC5ap6igXk/NYNEz6vSBBnsv2kqhb1fiZY8HLTS1eF4SMA 8AiwuBf8+EmiygMIPl5dB/3lYG9+tonw49OHjjF5i0s3keP8UE15fQkMbq/jJ/T7 YNahaMJQn4wl+OhCptmR70+Zos9A1eXhU+Tem9LTQwnbcrN5F+Z6K56dJ8ob/MWh BSsVltKugY65EJaDMwTiFWdI80feIB7lkONI48st3yjZ1+5EbbQfMKu8bnUeAWf6 mOpcac7H5p3HDyBRoNj5ayGcPcY1G5UwxIMZlHK5Ssz8fjfbXvpSt+9yC9pvWq1f 72iu1xLPk4vEpsFZzeBFxfR7XA== -----END CERTIFICATE-----Generated at Mon Oct 20 10:13:46 2025 by rpki-client