$ rpki-client -vvf rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.mft File: 1A38A38646592073E79DD636D868C5FD813E2EAB.mft (raw, json) Hash identifier: Gh3epm0ND3zLNI4+q/3COy5RjfFf36oOt7OioF/hzww= Subject key identifier: 0D:6A:47:DF:3C:CD:75:3B:78:1D:DA:54:1A:81:A8:BA:C1:BC:53:1F Authority key identifier: 1A:38:A3:86:46:59:20:73:E7:9D:D6:36:D8:68:C5:FD:81:3E:2E:AB Certificate issuer: /CN=1A38A38646592073E79DD636D868C5FD813E2EAB Certificate serial: 5FBA6B3BCA29132A677CC63680928A1D952BD791 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A38A38646592073E79DD636D868C5FD813E2EAB.cer Subject info access: rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.mft Manifest number: DA Signing time: Mon 20 Oct 2025 11:31:18 +0000 Manifest this update: Mon 20 Oct 2025 11:26:18 +0000 Manifest next update: Tue 21 Oct 2025 12:59:18 +0000 Files and hashes: 1: 1A38A38646592073E79DD636D868C5FD813E2EAB.crl (hash: HyzYFIsQPw/XZHzh0bLlEAy7miCD6+Wr/v1NJ1c++zs=) 2: 323830343a326665633a3a2f33322d313238203d3e203532393931.roa (hash: 3my3uv7ltgNut1ncZIKASqKiMcpFfLlntY163c+uZmc=) 3: 3137372e35342e3136302e302f31392d3332203d3e203532393931.roa (hash: GRHtAw8IRXyDj2utvNYmAUBYsDsFFQzi1ziAHF/4w6I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.crl rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A38A38646592073E79DD636D868C5FD813E2EAB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ba:6b:3b:ca:29:13:2a:67:7c:c6:36:80:92:8a:1d:95:2b:d7:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A38A38646592073E79DD636D868C5FD813E2EAB Validity Not Before: Oct 20 11:26:18 2025 GMT Not After : Oct 21 12:59:18 2025 GMT Subject: CN=0D6A47DF3CCD753B781DDA541A81A8BAC1BC531F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:24:f0:8d:29:a3:62:18:c2:76:35:b5:b9: 2c:84:0d:76:55:27:b3:30:d7:3b:1a:f7:e0:ae:ac: 2b:aa:9b:93:e9:37:98:96:6a:bf:01:e5:18:4d:49: 11:f3:3e:a5:6a:a5:dd:6a:03:d8:ae:47:ce:c0:f3: 1d:93:30:e2:13:a8:6c:cf:87:a4:c9:b2:8d:9b:b8: 82:e1:4e:81:85:98:82:50:f4:1a:93:18:f9:23:fd: 92:88:8e:7e:da:e6:9a:76:3b:ca:74:93:b1:9b:46: 90:60:a4:d5:9b:c9:cd:85:3b:78:43:72:56:ff:b9: f0:f2:58:d0:91:ac:55:d9:f2:e6:61:74:da:61:0d: 2f:7a:6d:92:ed:88:42:da:63:be:32:e9:6c:df:f3: 0c:52:89:a4:44:3e:9e:49:47:bb:2f:3c:f6:49:c6: c6:32:dd:d3:c8:dc:ca:9f:7e:c4:a5:26:36:8c:bc: b1:e6:8b:47:dd:ba:52:24:d8:f2:70:ad:a4:fd:eb: 7a:c8:8c:85:03:25:36:61:1e:10:86:0d:b3:87:e6: 39:f3:bb:99:ef:87:b4:55:ea:50:92:16:16:3f:d1: 3c:8e:8b:58:68:35:fb:8c:3c:cb:6c:37:cd:82:cb: 22:4e:74:d2:ea:99:93:03:b4:f9:6c:70:27:a8:76: 0e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6A:47:DF:3C:CD:75:3B:78:1D:DA:54:1A:81:A8:BA:C1:BC:53:1F X509v3 Authority Key Identifier: keyid:1A:38:A3:86:46:59:20:73:E7:9D:D6:36:D8:68:C5:FD:81:3E:2E:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A38A38646592073E79DD636D868C5FD813E2EAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:98:8a:03:7d:b2:f0:00:62:27:f8:13:ef:45:e2:84:7c:6b: 9f:4d:be:7f:5c:6e:79:b8:c4:98:58:7d:32:d7:ac:0a:fd:3e: 88:2e:f0:e2:7e:ad:16:85:04:7f:0b:bb:c5:d1:5f:77:f1:9f: 93:6a:99:bd:e4:a6:d0:9a:96:35:06:72:f7:c3:f1:35:77:17: 87:81:a4:0f:89:19:e7:e4:ab:59:46:9c:cc:00:34:6b:3a:f4: ac:48:d4:6a:6b:2e:a0:6a:1e:d2:53:7e:91:79:e0:2d:76:5a: 41:38:9c:0e:16:ae:48:1d:5e:ae:9f:ae:c1:07:d4:69:ff:79: 88:7f:25:34:f9:ed:20:2e:0f:d7:cc:3d:f3:ec:70:53:e3:5a: e2:16:61:81:5d:eb:72:f5:0a:66:4c:6b:c3:a6:b0:70:21:d5: e2:4a:11:ab:bc:ce:d4:1c:ad:a8:22:16:73:23:99:21:08:7a: 44:c0:9a:62:fe:bb:7d:c2:e3:d4:34:c2:2e:15:b3:e9:e1:b1: b4:8c:39:99:5f:8a:82:b2:61:37:2e:23:52:b2:cd:35:14:a1: 11:74:11:ef:82:8b:3a:ce:27:ae:52:b2:64:6f:15:17:75:0f: 78:6f:52:e1:37:9d:c9:4d:82:1b:11:fb:cb:88:61:9c:04:7d: 70:05:5e:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUX7prO8opEypnfMY2gJKKHZUr15EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzOEEzODY0NjU5MjA3M0U3OURENjM2RDg2OEM1RkQ4 MTNFMkVBQjAeFw0yNTEwMjAxMTI2MThaFw0yNTEwMjExMjU5MThaMDMxMTAvBgNV BAMTKDBENkE0N0RGM0NDRDc1M0I3ODFEREE1NDFBODFBOEJBQzFCQzUzMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98yTwjSmjYhjCdjW1uSyEDXZV J7Mw1zsa9+CurCuqm5PpN5iWar8B5RhNSRHzPqVqpd1qA9iuR87A8x2TMOITqGzP h6TJso2buILhToGFmIJQ9BqTGPkj/ZKIjn7a5pp2O8p0k7GbRpBgpNWbyc2FO3hD clb/ufDyWNCRrFXZ8uZhdNphDS96bZLtiELaY74y6Wzf8wxSiaREPp5JR7svPPZJ xsYy3dPI3MqffsSlJjaMvLHmi0fdulIk2PJwraT963rIjIUDJTZhHhCGDbOH5jnz u5nvh7RV6lCSFhY/0TyOi1hoNfuMPMtsN82CyyJOdNLqmZMDtPlscCeodg6VAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDWpH3zzNdTt4HdpUGoGousG8Ux8wHwYDVR0j BBgwFoAUGjijhkZZIHPnndY22GjF/YE+LqswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUc0a2tvakNkdmpORlQzd3RwcWhualR6R2E2TUhTeHdXejExRGppWGh5 enkvMC8xQTM4QTM4NjQ2NTkyMDczRTc5REQ2MzZEODY4QzVGRDgxM0UyRUFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBMzhBMzg2NDY1OTIwNzNF NzlERDYzNkQ4NjhDNUZEODEzRTJFQUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUc0a2tvakNkdmpORlQzd3RwcWhualR6R2E2TUhTeHdXejExRGppWGh5enkvMC8x QTM4QTM4NjQ2NTkyMDczRTc5REQ2MzZEODY4QzVGRDgxM0UyRUFCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAopiKA32y8ABiJ/gT70XihHxrn02+f1xuebjEmFh9MtesCv0+iC7w4n6tFoUE fwu7xdFfd/Gfk2qZveSm0JqWNQZy98PxNXcXh4GkD4kZ5+SrWUaczAA0azr0rEjU amsuoGoe0lN+kXngLXZaQTicDhauSB1erp+uwQfUaf95iH8lNPntIC4P18w98+xw U+Na4hZhgV3rcvUKZkxrw6awcCHV4koRq7zO1BytqCIWcyOZIQh6RMCaYv67fcLj 1DTCLhWz6eGxtIw5mV+KgrJhNy4jUrLNNRShEXQR74KLOs4nrlKyZG8VF3UPeG9S 4TedyU2CGxH7y4hhnAR9cAVewg== -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:51 2025 by rpki-client