$ rpki-client -vvf rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft File: 9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft (raw, json) Hash identifier: KhPlEGoa+0FZ+AAQAkEVVvM2FngjG2V1nWKuirGEeoM= Subject key identifier: AD:04:41:0C:84:7D:A9:D1:CA:47:5D:29:3C:8D:2E:DC:22:97:32:96 Authority key identifier: 9B:CF:53:52:E2:C8:A4:37:59:7F:AB:4E:62:75:E8:61:F7:E4:2F:01 Certificate issuer: /CN=9BCF5352E2C8A437597FAB4E6275E861F7E42F01 Certificate serial: 57DEA9840D550546B09F59B9F2A39871E5B4D22C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.cer Subject info access: rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft Manifest number: BB Signing time: Mon 20 Oct 2025 15:23:34 +0000 Manifest this update: Mon 20 Oct 2025 15:18:34 +0000 Manifest next update: Tue 21 Oct 2025 19:10:34 +0000 Files and hashes: 1: 9BCF5352E2C8A437597FAB4E6275E861F7E42F01.crl (hash: QZQ2cNeNtU4Qe6oX/2Io3g9OomEwC6NOOfk0gLAhyBA=) 2: 3139322e3233312e3137352e302f32342d3234203d3e20323731323937.roa (hash: RvjBWTTGSRQhFYPFHIcADDXN+HPlEAjpyTfgUWjt4MY=) 3: 34352e3232392e3133362e302f32342d3234203d3e20323731323937.roa (hash: +o5sIScdM46kmAqqS9GWVWLK1tGhtWhWXgceQVZIZ0s=) 4: 323830343a373934633a3a2f33322d3332203d3e20323731323937.roa (hash: EPgT0uqHRP14e2Ydws+qdNEZrTAIh7Vm9BAP/DL1mMo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.crl rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 18:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:de:a9:84:0d:55:05:46:b0:9f:59:b9:f2:a3:98:71:e5:b4:d2:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BCF5352E2C8A437597FAB4E6275E861F7E42F01 Validity Not Before: Oct 20 15:18:34 2025 GMT Not After : Oct 21 19:10:34 2025 GMT Subject: CN=AD04410C847DA9D1CA475D293C8D2EDC22973296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:87:4d:7a:ef:4b:f5:28:c3:f7:cd:f9:a1:2f: 02:9b:74:d7:68:7c:99:da:85:e2:be:57:5c:03:51: 80:45:80:da:d1:70:8b:86:6e:45:a2:fe:6c:6d:68: c2:4b:a3:96:91:89:c6:22:78:ca:42:21:87:25:9d: 76:d7:c2:50:fa:22:57:bf:4b:3e:13:68:0c:e2:8c: 05:34:a2:80:9d:3e:d4:cf:c3:27:31:d9:be:25:82: dc:01:7e:5c:42:e6:7c:4d:ca:66:9c:93:63:a8:5f: f5:93:99:9a:f8:67:8a:90:73:00:83:88:cc:37:f9: 2f:cc:36:34:99:54:c9:88:99:38:d0:2d:9d:9f:13: 09:ca:0c:1a:6b:ed:d9:61:d2:7f:e6:54:8e:20:8f: 75:ad:90:eb:99:cf:a3:e0:55:ef:2a:ff:2d:88:92: ca:8f:6a:c7:e4:87:9a:4d:35:f0:8e:06:18:d5:4f: 09:bd:2b:4c:aa:61:a4:8a:48:20:bd:bc:bb:8c:ea: 1b:59:21:6f:da:30:50:5e:40:dd:a2:fd:f9:02:8e: 89:48:f5:a4:70:cc:c4:03:2d:22:2d:75:66:05:c3: 81:9e:95:ad:4f:b4:d4:46:b0:64:c3:b5:af:d6:08: 6b:bc:ec:2f:3a:37:5f:5b:f0:06:77:c9:86:f6:00: 5c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:04:41:0C:84:7D:A9:D1:CA:47:5D:29:3C:8D:2E:DC:22:97:32:96 X509v3 Authority Key Identifier: keyid:9B:CF:53:52:E2:C8:A4:37:59:7F:AB:4E:62:75:E8:61:F7:E4:2F:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:eb:58:f4:f2:bd:1b:20:88:ab:81:2b:c1:f9:c9:a0:1e:91: 47:a9:08:ee:10:ea:3c:07:62:da:17:43:4c:f9:9f:f5:49:63: 21:95:c1:81:25:ac:99:86:36:90:f7:d3:b4:4e:0e:e1:8b:d0: 5c:bf:0b:fe:a2:07:8e:03:8e:df:51:d7:8c:29:bc:e4:97:a4: 4a:e4:20:27:35:2b:67:1a:61:86:41:fd:99:08:45:6e:f4:31: c3:3c:9a:f5:8d:f7:5e:71:99:f8:0e:70:92:59:15:c5:da:fc: 1c:46:17:9e:b3:37:8c:74:7e:3c:ce:72:5f:58:5a:6f:d3:0e: d7:27:4c:93:ba:18:6e:50:55:a4:99:85:7e:e8:95:b8:62:57: 0f:9e:18:59:9e:cc:69:d8:f9:78:56:55:c6:10:3f:5b:76:7d: 12:a3:7b:7d:31:da:80:4c:ee:ee:91:f3:bc:fb:97:89:e3:c5: fa:26:8d:72:43:5b:d8:46:a6:e7:d3:ad:e1:84:5a:26:dd:b4: fd:ad:c9:62:fc:21:1c:dd:2d:b3:0e:7a:81:68:40:9e:bc:fe: 69:f4:68:d0:1d:a0:c1:28:94:e1:a0:a1:f7:f1:06:71:f5:ee: 78:aa:1b:52:57:e4:e3:9c:12:fb:03:49:1a:ca:54:d5:07:0a: 11:fd:29:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUV96phA1VBUawn1m58qOYceW00iwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJDRjUzNTJFMkM4QTQzNzU5N0ZBQjRFNjI3NUU4NjFG N0U0MkYwMTAeFw0yNTEwMjAxNTE4MzRaFw0yNTEwMjExOTEwMzRaMDMxMTAvBgNV BAMTKEFEMDQ0MTBDODQ3REE5RDFDQTQ3NUQyOTNDOEQyRURDMjI5NzMyOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgh01670v1KMP3zfmhLwKbdNdo fJnaheK+V1wDUYBFgNrRcIuGbkWi/mxtaMJLo5aRicYieMpCIYclnXbXwlD6Ile/ Sz4TaAzijAU0ooCdPtTPwycx2b4lgtwBflxC5nxNymack2OoX/WTmZr4Z4qQcwCD iMw3+S/MNjSZVMmImTjQLZ2fEwnKDBpr7dlh0n/mVI4gj3WtkOuZz6PgVe8q/y2I ksqPasfkh5pNNfCOBhjVTwm9K0yqYaSKSCC9vLuM6htZIW/aMFBeQN2i/fkCjolI 9aRwzMQDLSItdWYFw4Gela1PtNRGsGTDta/WCGu87C86N19b8AZ3yYb2AFyXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrQRBDIR9qdHKR10pPI0u3CKXMpYwHwYDVR0j BBgwFoAUm89TUuLIpDdZf6tOYnXoYffkLwEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN01aRWltbmFTNTlFMmVBdzhoNG9YS2VocjVDWW1tTXRIWGtuMW91QXRo ZFEvMC85QkNGNTM1MkUyQzhBNDM3NTk3RkFCNEU2Mjc1RTg2MUY3RTQyRjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCQ0Y1MzUyRTJDOEE0Mzc1 OTdGQUI0RTYyNzVFODYxRjdFNDJGMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N01aRWltbmFTNTlFMmVBdzhoNG9YS2VocjVDWW1tTXRIWGtuMW91QXRoZFEvMC85 QkNGNTM1MkUyQzhBNDM3NTk3RkFCNEU2Mjc1RTg2MUY3RTQyRjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr+tY9PK9GyCIq4ErwfnJoB6RR6kI7hDqPAdi2hdDTPmf9UljIZXBgSWsmYY2 kPfTtE4O4YvQXL8L/qIHjgOO31HXjCm85JekSuQgJzUrZxphhkH9mQhFbvQxwzya 9Y33XnGZ+A5wklkVxdr8HEYXnrM3jHR+PM5yX1hab9MO1ydMk7oYblBVpJmFfuiV uGJXD54YWZ7Madj5eFZVxhA/W3Z9EqN7fTHagEzu7pHzvPuXiePF+iaNckNb2Eam 59Ot4YRaJt20/a3JYvwhHN0tsw56gWhAnrz+afRo0B2gwSiU4aCh9/EGcfXueKob Ulfk45wS+wNJGspU1QcKEf0pAA== -----END CERTIFICATE-----Generated at Mon Oct 20 18:27:03 2025 by rpki-client