$ rpki-client -vvf rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft File: B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft (raw, json) Hash identifier: IvZ/qsr2eAnPZ+NgVtzeFD9ozPRpKTVDGDbLwFcOO20= Subject key identifier: 0B:E8:D5:23:7C:7A:6A:7D:4F:8C:C5:F2:34:75:7F:09:0E:23:75:D0 Authority key identifier: B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4 Certificate issuer: /CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4 Certificate serial: 19E86625440FE316FCEA6E7C9560B28FD1E9D443 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer Subject info access: rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft Manifest number: 0303 Signing time: Sun 19 Oct 2025 22:49:32 +0000 Manifest this update: Sun 19 Oct 2025 22:44:31 +0000 Manifest next update: Tue 21 Oct 2025 00:10:31 +0000 Files and hashes: 1: B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl (hash: arTkU8lkjb+/W42Horaoodc5AT1cgDxZgQxNi+vZdEA=) 2: 323830343a373737343a3a2f33322d3332203d3e20323731313739.roa (hash: 15axzlvaPxlpvdEmdsItvuAH+wRillPEZD906FjgXUs=) 3: 3137392e35312e3134382e302f32322d3234203d3e20323731313739.roa (hash: fscH08Be33lLCrOFmFTelyKv56wGOusIcbHMYRtzIk0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 00:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e8:66:25:44:0f:e3:16:fc:ea:6e:7c:95:60:b2:8f:d1:e9:d4:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4 Validity Not Before: Oct 19 22:44:31 2025 GMT Not After : Oct 21 00:10:31 2025 GMT Subject: CN=0BE8D5237C7A6A7D4F8CC5F234757F090E2375D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:18:f4:14:17:80:93:c5:88:ee:55:f3:aa:b7: 8b:a4:13:2b:fe:07:4d:bb:d2:e6:d4:61:b9:53:b1: 47:d8:c0:1a:64:e5:3f:9c:96:01:9d:cc:5d:a1:1a: 1b:f7:d7:dd:4a:95:2c:68:87:62:27:b6:14:ae:f1: 7a:b9:73:19:43:91:78:e5:0c:cd:92:1c:38:06:a1: f1:2e:51:84:7f:f9:0f:3c:c2:21:25:3b:4a:e3:d1: 09:0c:ca:f9:a9:de:72:a0:10:62:3c:9d:1c:86:f6: 3d:88:07:33:16:fc:ef:ff:23:27:5a:54:4f:f5:cb: 87:06:52:3f:74:1a:04:6a:6b:8d:c0:fb:09:83:a9: 79:15:79:af:e3:ee:f8:a8:9b:93:57:25:65:2a:ad: 24:72:08:8a:db:3f:55:60:44:38:be:8d:37:3c:a6: b6:1b:66:5d:56:ca:aa:77:b7:09:91:ae:0e:ec:f8: f2:eb:5a:5a:19:96:b0:de:5d:2f:40:e2:51:ec:cf: 8f:d0:3d:df:fe:30:37:b6:2c:2e:40:e3:73:d6:95: 42:1b:3d:72:31:fe:9b:2a:aa:7b:26:88:af:30:88: e4:e0:b3:d0:f0:e6:1b:c9:98:6e:42:72:66:c2:51: 51:01:a8:f5:27:a4:94:f6:b2:05:f4:66:fc:05:8f: 2b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E8:D5:23:7C:7A:6A:7D:4F:8C:C5:F2:34:75:7F:09:0E:23:75:D0 X509v3 Authority Key Identifier: keyid:B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:52:40:a0:ea:d9:89:7b:03:49:a4:0b:40:9b:8b:eb:33:3c: 1f:f7:98:5b:54:da:2c:57:e5:0e:05:ff:21:72:72:b3:30:8c: a9:18:a2:cf:28:4e:ab:33:91:26:14:1b:3b:a4:29:ee:44:14: 01:d3:62:aa:ec:e5:1b:34:9d:0c:7b:4a:f4:78:9a:04:55:78: a3:86:19:b2:c2:5d:3f:fa:7c:2b:27:9c:30:62:6f:04:44:cb: 33:3f:34:c7:49:f7:a9:4d:2d:8f:4d:61:be:2f:db:50:5b:3a: f9:4d:d5:5f:83:02:ed:b6:d2:c3:da:15:b8:88:a0:52:97:db: c3:ee:8a:73:ec:71:6a:c1:a1:97:ec:b5:9c:59:ed:3e:74:d0: 95:cd:bf:da:c5:06:24:5d:82:40:38:42:ec:6c:18:8f:51:90: 96:a6:9b:76:23:ae:68:75:5c:d6:c7:48:a0:b8:fe:d6:30:20: fe:43:56:d6:9f:f7:6c:67:d5:2f:86:2b:e3:e9:fb:41:43:04: 59:e4:5b:1e:9e:bb:de:21:b6:ae:15:5a:6e:ea:c3:35:82:a2: 28:ea:73:e3:e3:2a:7a:e9:f3:9e:4b:70:48:5c:54:38:45:6f: 0d:ba:cb:77:89:06:36:c0:9b:3e:51:07:0d:b6:f2:0f:bd:30: 74:0e:1a:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGehmJUQP4xb86m58lWCyj9Hp1EMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlFRkYyRENDOEQzQjY5MjhFNTE2RTZBMkRGMDg2RTA4 Q0I4OTFFNDAeFw0yNTEwMTkyMjQ0MzFaFw0yNTEwMjEwMDEwMzFaMDMxMTAvBgNV BAMTKDBCRThENTIzN0M3QTZBN0Q0RjhDQzVGMjM0NzU3RjA5MEUyMzc1RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlGPQUF4CTxYjuVfOqt4ukEyv+ B0270ubUYblTsUfYwBpk5T+clgGdzF2hGhv3191KlSxoh2InthSu8Xq5cxlDkXjl DM2SHDgGofEuUYR/+Q88wiElO0rj0QkMyvmp3nKgEGI8nRyG9j2IBzMW/O//Iyda VE/1y4cGUj90GgRqa43A+wmDqXkVea/j7viom5NXJWUqrSRyCIrbP1VgRDi+jTc8 prYbZl1Wyqp3twmRrg7s+PLrWloZlrDeXS9A4lHsz4/QPd/+MDe2LC5A43PWlUIb PXIx/psqqnsmiK8wiOTgs9Dw5hvJmG5CcmbCUVEBqPUnpJT2sgX0ZvwFjys9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUC+jVI3x6an1PjMXyNHV/CQ4jddAwHwYDVR0j BBgwFoAUue/y3MjTtpKOUW5qLfCG4Iy4keQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1lnVUNGakVOYmlMZzRGTEJ6b2tXRGdqbzdVSE44TEtqV0pEemhvU3gx WkgvMS9COUVGRjJEQ0M4RDNCNjkyOEU1MTZFNkEyREYwODZFMDhDQjg5MUU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5RUZGMkRDQzhEM0I2OTI4 RTUxNkU2QTJERjA4NkUwOENCODkxRTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1lnVUNGakVOYmlMZzRGTEJ6b2tXRGdqbzdVSE44TEtqV0pEemhvU3gxWkgvMS9C OUVGRjJEQ0M4RDNCNjkyOEU1MTZFNkEyREYwODZFMDhDQjg5MUU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbFJAoOrZiXsDSaQLQJuL6zM8H/eYW1TaLFflDgX/IXJyszCMqRiizyhOqzOR JhQbO6Qp7kQUAdNiquzlGzSdDHtK9HiaBFV4o4YZssJdP/p8KyecMGJvBETLMz80 x0n3qU0tj01hvi/bUFs6+U3VX4MC7bbSw9oVuIigUpfbw+6Kc+xxasGhl+y1nFnt PnTQlc2/2sUGJF2CQDhC7GwYj1GQlqabdiOuaHVc1sdIoLj+1jAg/kNW1p/3bGfV L4Yr4+n7QUMEWeRbHp673iG2rhVaburDNYKiKOpz4+MqeunznktwSFxUOEVvDbrL d4kGNsCbPlEHDbbyD70wdA4adw== -----END CERTIFICATE-----Generated at Mon Oct 20 13:10:12 2025 by rpki-client