$ rpki-client -vvf rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft File: B20E3C8281FB009A48EDFE56131C930D739F11C4.mft (raw, json) Hash identifier: miUo8XfDSzsAghxw9fNDCcZ6ev+RyxwGZg3xqtAlOWU= Subject key identifier: CA:EF:50:0D:60:94:F2:9F:7A:99:E4:47:1A:87:E2:A7:C1:59:F7:F1 Authority key identifier: B2:0E:3C:82:81:FB:00:9A:48:ED:FE:56:13:1C:93:0D:73:9F:11:C4 Certificate issuer: /CN=B20E3C8281FB009A48EDFE56131C930D739F11C4 Certificate serial: 6037D7C95BB2D254238E77B66DB2F2ADA2DCF5E6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer Subject info access: rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft Manifest number: 02B9 Signing time: Mon 20 Oct 2025 14:24:07 +0000 Manifest this update: Mon 20 Oct 2025 14:19:07 +0000 Manifest next update: Tue 21 Oct 2025 15:01:07 +0000 Files and hashes: 1: 323830343a323861343a3a2f33322d3334203d3e20323633393732.roa (hash: ahxK+WMTsV39KQhAViLFQ4numR+SobUNh2vqNKZYm0M=) 2: B20E3C8281FB009A48EDFE56131C930D739F11C4.crl (hash: 1x87uH0GbG/iD8dO+rjNm6kINbD2SHgvbFB++y5oEjU=) 3: 3133382e3235352e3132382e302f32322d3234203d3e20323633393732.roa (hash: gdg4CkiWZlxLCSS9uiJZl16iA1AfnTQyxIxntLHmqDo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.crl rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:37:d7:c9:5b:b2:d2:54:23:8e:77:b6:6d:b2:f2:ad:a2:dc:f5:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B20E3C8281FB009A48EDFE56131C930D739F11C4 Validity Not Before: Oct 20 14:19:07 2025 GMT Not After : Oct 21 15:01:07 2025 GMT Subject: CN=CAEF500D6094F29F7A99E4471A87E2A7C159F7F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:07:f7:4d:3f:df:58:11:08:47:5d:b6:01:f7: 43:b7:b0:7d:c9:77:97:32:82:37:7b:64:04:bb:a8: cd:5b:aa:fb:7f:45:8f:ab:53:ca:11:2c:14:b2:43: 5a:ec:06:f2:21:94:e7:fe:81:2e:73:82:e0:fe:fe: 2c:f6:a0:99:c4:d8:a7:4c:da:8a:08:c6:61:07:fa: 62:b6:ba:1d:c2:85:81:db:d1:e1:94:f4:04:9c:25: 8b:c6:7d:36:e2:18:da:a6:02:c0:72:2a:04:2b:61: 92:e4:6e:ce:10:34:19:80:70:8e:06:5b:42:2e:ad: f4:d2:33:28:3e:97:4f:1b:17:52:9c:94:aa:4c:6a: c2:16:a9:08:f5:1a:71:42:a0:14:fc:54:f7:4d:42: cc:ac:1b:8b:6f:20:4d:77:d3:f4:39:3e:e0:dc:1f: 0a:0e:cc:12:69:8c:09:96:be:fa:de:9c:36:72:59: b5:e5:c3:67:b1:9d:4e:ec:88:8c:c4:fe:e8:be:3b: a7:11:c0:a4:cf:c0:ff:2c:be:f0:25:1c:7b:28:4b: c2:a9:20:ce:e7:21:88:b4:a9:12:cb:4b:d5:05:01: 4e:74:2d:8c:f3:28:4e:06:fa:d9:c2:8a:ba:7b:90: a4:20:58:bc:31:c7:44:e1:4f:83:46:13:8d:fd:2a: 57:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EF:50:0D:60:94:F2:9F:7A:99:E4:47:1A:87:E2:A7:C1:59:F7:F1 X509v3 Authority Key Identifier: keyid:B2:0E:3C:82:81:FB:00:9A:48:ED:FE:56:13:1C:93:0D:73:9F:11:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:d3:53:b4:fd:2d:db:9b:19:5e:a4:a1:67:c6:ae:29:0c:da: 95:9a:02:fe:b4:08:69:af:bb:87:da:6d:e1:62:77:45:a7:6f: 63:89:ca:3e:4d:a9:d3:83:de:e3:22:4f:4a:d1:9c:78:b6:37: 6d:2b:48:9d:59:e3:8a:6a:bc:7b:df:73:a7:4d:b9:3b:92:fc: fa:b1:d1:32:e8:35:83:93:40:8a:87:c5:da:f9:4e:00:f8:d6: df:d2:30:a5:1d:d8:05:db:53:03:01:1f:9f:4e:c0:bb:a5:9e: 9e:0c:99:e1:4d:4b:19:4d:d4:50:e4:65:3b:42:71:40:6c:d7: 5a:df:0b:6e:0e:4c:d7:2f:c1:86:9f:d4:97:e2:70:c3:d7:9c: f4:59:c5:20:77:99:a8:c4:4d:7b:85:cf:7c:7b:9c:33:84:70: ae:1b:16:d1:15:f3:8e:f5:3c:cf:41:30:99:e3:81:bd:48:7a: 00:6a:38:e2:8c:f6:97:2e:bc:19:b5:1f:65:0c:67:e2:b8:17: ba:5f:89:60:e3:39:ab:9a:fc:e5:d1:fa:ca:6c:21:df:f4:19: 40:db:96:55:ac:b0:4d:05:11:04:2f:bb:7f:bb:72:2b:fb:83: eb:75:f5:c5:32:a5:ea:36:d5:55:f4:2a:1b:db:a6:df:b4:02: 51:dc:dc:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYDfXyVuy0lQjjne2bbLyraLc9eYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIwRTNDODI4MUZCMDA5QTQ4RURGRTU2MTMxQzkzMEQ3 MzlGMTFDNDAeFw0yNTEwMjAxNDE5MDdaFw0yNTEwMjExNTAxMDdaMDMxMTAvBgNV BAMTKENBRUY1MDBENjA5NEYyOUY3QTk5RTQ0NzFBODdFMkE3QzE1OUY3RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/B/dNP99YEQhHXbYB90O3sH3J d5cygjd7ZAS7qM1bqvt/RY+rU8oRLBSyQ1rsBvIhlOf+gS5zguD+/iz2oJnE2KdM 2ooIxmEH+mK2uh3ChYHb0eGU9AScJYvGfTbiGNqmAsByKgQrYZLkbs4QNBmAcI4G W0IurfTSMyg+l08bF1KclKpMasIWqQj1GnFCoBT8VPdNQsysG4tvIE130/Q5PuDc HwoOzBJpjAmWvvrenDZyWbXlw2exnU7siIzE/ui+O6cRwKTPwP8svvAlHHsoS8Kp IM7nIYi0qRLLS9UFAU50LYzzKE4G+tnCirp7kKQgWLwxx0ThT4NGE439KleRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyu9QDWCU8p96meRHGofip8FZ9/EwHwYDVR0j BBgwFoAUsg48goH7AJpI7f5WExyTDXOfEcQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkhoZ3hBOXBkQW1xRUNhVmljTU4yNkpiUVNXV3FKSlViTVA5c1BSdk1z bWcvMS9CMjBFM0M4MjgxRkIwMDlBNDhFREZFNTYxMzFDOTMwRDczOUYxMUM0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyMEUzQzgyODFGQjAwOUE0 OEVERkU1NjEzMUM5MzBENzM5RjExQzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NkhoZ3hBOXBkQW1xRUNhVmljTU4yNkpiUVNXV3FKSlViTVA5c1BSdk1zbWcvMS9C MjBFM0M4MjgxRkIwMDlBNDhFREZFNTYxMzFDOTMwRDczOUYxMUM0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUdNTtP0t25sZXqShZ8auKQzalZoC/rQIaa+7h9pt4WJ3RadvY4nKPk2p04Pe 4yJPStGceLY3bStInVnjimq8e99zp025O5L8+rHRMug1g5NAiofF2vlOAPjW39Iw pR3YBdtTAwEfn07Au6WengyZ4U1LGU3UUORlO0JxQGzXWt8Lbg5M1y/Bhp/Ul+Jw w9ec9FnFIHeZqMRNe4XPfHucM4RwrhsW0RXzjvU8z0EwmeOBvUh6AGo44oz2ly68 GbUfZQxn4rgXul+JYOM5q5r85dH6ymwh3/QZQNuWVaywTQURBC+7f7tyK/uD63X1 xTKl6jbVVfQqG9um37QCUdzctg== -----END CERTIFICATE-----Generated at Mon Oct 20 16:54:24 2025 by rpki-client