$ rpki-client -vvf rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.mft File: 9070D2E187CE3F862AB9E78E2A420A02C3525244.mft (raw, json) Hash identifier: TWgyygQCs5UoscKJFhNnP/PeGKz+qwwdb1t+8wyC7is= Subject key identifier: 12:3D:8C:B0:A5:FE:BB:54:A6:7B:B4:81:11:D0:B9:D9:46:1B:4C:B6 Authority key identifier: 90:70:D2:E1:87:CE:3F:86:2A:B9:E7:8E:2A:42:0A:02:C3:52:52:44 Certificate issuer: /CN=9070D2E187CE3F862AB9E78E2A420A02C3525244 Certificate serial: 684CF3576F345BBB15DE00D33242F80B69F15516 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9070D2E187CE3F862AB9E78E2A420A02C3525244.cer Subject info access: rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.mft Manifest number: 42 Signing time: Sun 19 Oct 2025 20:51:46 +0000 Manifest this update: Sun 19 Oct 2025 20:46:46 +0000 Manifest next update: Mon 20 Oct 2025 21:00:46 +0000 Files and hashes: 1: 323830343a393532343a3a2f33322d3438203d3e203631363235.roa (hash: i6NrnPeEmUZ9PBdw/Sv5k2uiHHpyfFWWELso32cI//w=) 2: 9070D2E187CE3F862AB9E78E2A420A02C3525244.crl (hash: mA1PED0SPc+yiQAjvBI+T7LqXzl/NqbEaTw+mkPNAp4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.crl rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9070D2E187CE3F862AB9E78E2A420A02C3525244.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:4c:f3:57:6f:34:5b:bb:15:de:00:d3:32:42:f8:0b:69:f1:55:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9070D2E187CE3F862AB9E78E2A420A02C3525244 Validity Not Before: Oct 19 20:46:46 2025 GMT Not After : Oct 20 21:00:46 2025 GMT Subject: CN=123D8CB0A5FEBB54A67BB48111D0B9D9461B4CB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:3a:dc:66:94:19:bd:4e:d2:c7:05:32:05: 12:f0:46:c4:63:46:13:6f:25:85:7d:81:a8:5f:ca: 68:dd:2a:a9:eb:85:f3:9e:54:ca:45:de:09:fc:74: 95:c7:f1:9d:03:50:2a:67:3d:e3:9d:57:49:2c:f0: 94:32:fe:fd:2f:e7:86:68:66:bf:c1:ac:0a:d5:9e: d0:2c:2e:1b:6a:b7:a2:04:0c:9d:cc:a5:39:36:02: 4d:cb:d3:b4:92:89:41:56:ee:da:18:ec:27:73:3b: b9:d6:24:4e:79:aa:b2:e1:1f:0c:bb:13:d6:07:25: 7c:df:e4:20:5f:5a:9f:f5:33:b3:15:2a:ba:b1:b1: ea:bc:d2:c5:f9:4e:ad:78:be:62:d6:6a:d6:66:17: 10:f7:3e:4d:83:70:8f:5a:38:c5:8c:c1:0b:13:d0: da:70:d8:2e:c3:53:31:1f:17:be:d5:a2:66:1c:80: b2:10:96:d9:17:de:cb:d3:27:40:81:e4:74:8e:09: 82:b7:b1:06:53:94:0f:41:1c:9c:27:b0:ca:d3:1d: f2:6b:a4:69:1d:38:53:8c:a7:af:48:7e:8f:27:e9: 81:88:87:f8:26:86:d3:e5:f7:7a:ff:92:e6:40:a8: 20:4d:ba:c7:03:18:4c:a5:e8:f1:a0:6d:99:9c:90: cf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3D:8C:B0:A5:FE:BB:54:A6:7B:B4:81:11:D0:B9:D9:46:1B:4C:B6 X509v3 Authority Key Identifier: keyid:90:70:D2:E1:87:CE:3F:86:2A:B9:E7:8E:2A:42:0A:02:C3:52:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9070D2E187CE3F862AB9E78E2A420A02C3525244.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:f3:7a:c4:67:83:7e:f1:5f:e7:12:f2:b7:31:b1:2c:6a:ef: 2c:59:7c:a8:05:85:33:f3:02:d0:ae:2a:59:64:18:c1:8a:25: 3d:3b:a4:4c:d8:7b:d2:f9:97:97:a1:9d:b1:5e:c9:44:77:52: d4:69:44:c3:b1:56:83:d0:04:ec:f6:41:e9:a8:8f:47:25:39: 0c:f5:ed:b1:71:f8:a2:ba:d3:4c:7f:54:9a:2e:9b:c8:cd:09: 3e:5b:7b:56:1c:f9:3c:a2:99:67:7b:cc:e1:68:c7:0e:b7:4f: 44:0c:01:f1:03:c9:2f:ca:ae:53:6f:f4:c2:30:1d:66:8a:85: d0:e2:5d:0a:50:d6:7b:70:8f:0b:ae:03:c0:76:02:4f:eb:f9: d6:39:08:71:ff:a6:92:c0:2e:26:59:6a:8c:a4:c8:d3:f7:93: 32:2d:96:d0:72:4a:bb:fe:34:e2:2e:fe:f4:5a:76:b6:39:56: bb:20:b7:ec:5e:af:57:5d:e3:b2:c4:e3:e9:57:13:94:a7:cf: 40:1d:2b:56:14:9c:d3:54:5d:b0:9c:0b:99:6a:c0:e1:9e:e1: 30:da:36:6e:20:52:61:c3:99:2b:cf:81:08:54:db:35:e2:85: 93:3c:59:c3:0e:2d:fa:a8:6c:10:ef:07:09:e1:34:e3:83:73: 81:79:a1:3f -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUaEzzV280W7sV3gDTMkL4C2nxVRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA3MEQyRTE4N0NFM0Y4NjJBQjlFNzhFMkE0MjBBMDJD MzUyNTI0NDAeFw0yNTEwMTkyMDQ2NDZaFw0yNTEwMjAyMTAwNDZaMDMxMTAvBgNV BAMTKDEyM0Q4Q0IwQTVGRUJCNTRBNjdCQjQ4MTExRDBCOUQ5NDYxQjRDQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpDTrcZpQZvU7SxwUyBRLwRsRj RhNvJYV9gahfymjdKqnrhfOeVMpF3gn8dJXH8Z0DUCpnPeOdV0ks8JQy/v0v54Zo Zr/BrArVntAsLhtqt6IEDJ3MpTk2Ak3L07SSiUFW7toY7CdzO7nWJE55qrLhHwy7 E9YHJXzf5CBfWp/1M7MVKrqxseq80sX5Tq14vmLWatZmFxD3Pk2DcI9aOMWMwQsT 0Npw2C7DUzEfF77VomYcgLIQltkX3svTJ0CB5HSOCYK3sQZTlA9BHJwnsMrTHfJr pGkdOFOMp69Ifo8n6YGIh/gmhtPl93r/kuZAqCBNuscDGEyl6PGgbZmckM8jAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUEj2MsKX+u1Sme7SBEdC52UYbTLYwHwYDVR0j BBgwFoAUkHDS4YfOP4YqueeOKkIKAsNSUkQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby83cUtac3RCUDMzQ0d0Y0I1bkd0cjJuWHhSUWVhV0F6VmNTdGhvRmFiNlF5 LzAvOTA3MEQyRTE4N0NFM0Y4NjJBQjlFNzhFMkE0MjBBMDJDMzUyNTI0NC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85MDcwRDJFMTg3Q0UzRjg2MkFC OUU3OEUyQTQyMEEwMkMzNTI1MjQ0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdx S1pzdEJQMzNDR3RjQjVuR3RyMm5YeFJRZWFXQXpWY1N0aG9GYWI2UXkvMC85MDcw RDJFMTg3Q0UzRjg2MkFCOUU3OEUyQTQyMEEwMkMzNTI1MjQ0Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA J/N6xGeDfvFf5xLytzGxLGrvLFl8qAWFM/MC0K4qWWQYwYolPTukTNh70vmXl6Gd sV7JRHdS1GlEw7FWg9AE7PZB6aiPRyU5DPXtsXH4orrTTH9Umi6byM0JPlt7Vhz5 PKKZZ3vM4WjHDrdPRAwB8QPJL8quU2/0wjAdZoqF0OJdClDWe3CPC64DwHYCT+v5 1jkIcf+mksAuJllqjKTI0/eTMi2W0HJKu/404i7+9Fp2tjlWuyC37F6vV13jssTj 6VcTlKfPQB0rVhSc01RdsJwLmWrA4Z7hMNo2biBSYcOZK8+BCFTbNeKFkzxZww4t +qhsEO8HCeE044NzgXmhPw== -----END CERTIFICATE-----Generated at Mon Oct 20 13:02:34 2025 by rpki-client