$ rpki-client -vvf rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft File: D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft (raw, json) Hash identifier: tINZpMuWWP6k4BaQSQgZXuvf+YNX7hrxOxq+NBVxfpg= Subject key identifier: C8:7B:6C:C4:05:82:24:E6:F1:BE:3D:58:70:79:25:91:DE:A4:F9:9F Authority key identifier: D9:18:92:54:B7:5B:9D:BB:CA:84:EA:D7:98:65:C5:C5:F7:F1:0E:5D Certificate issuer: /CN=D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D Certificate serial: 42993A1EA04ECFB9A217F6F5FFFC411DFA42F0B1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft Manifest number: A2 Signing time: Sun 19 Oct 2025 14:10:53 +0000 Manifest this update: Sun 19 Oct 2025 14:05:53 +0000 Manifest next update: Mon 20 Oct 2025 17:57:53 +0000 Files and hashes: 1: 323830343a346237343a3a2f33322d313238203d3e20323637333037.roa (hash: dUZNvF/89BKD0mmyDTVw/iy7hWhShcuVbo/kVaXn0wc=) 2: 34352e3233332e3130342e302f32322d3332203d3e20323637333037.roa (hash: 9GALASwvDqxvBvCAHp51gmtuAoBU3cDGHtT6KouQUqs=) 3: D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.crl (hash: 6iJFfmEExZCBVBLygiQqAZg/Uvvzts8PJ4X3p8nvIFw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.crl rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 17:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:99:3a:1e:a0:4e:cf:b9:a2:17:f6:f5:ff:fc:41:1d:fa:42:f0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D Validity Not Before: Oct 19 14:05:53 2025 GMT Not After : Oct 20 17:57:53 2025 GMT Subject: CN=C87B6CC4058224E6F1BE3D5870792591DEA4F99F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b7:2d:3f:bd:18:0f:1a:0d:b1:11:36:26:66: 59:c1:3f:f9:f7:1d:a4:6a:16:69:e8:74:3d:ab:13: 4b:10:c6:14:54:bc:81:89:01:b3:7d:d8:83:8c:68: da:c1:30:e9:ba:3d:a2:5b:3b:21:2c:e2:33:ba:58: 92:08:9b:54:4b:33:e7:d6:43:89:fb:e8:d0:28:14: 55:97:29:5e:9b:69:bd:3a:4e:48:e7:d8:7c:b9:54: dd:a7:1c:d4:d9:0f:cb:bf:90:0e:fc:47:5c:bc:90: 16:5f:4a:65:ee:dc:03:f1:0d:50:35:ad:fe:82:16: 84:1c:15:f2:3f:5d:e5:68:b2:4e:37:08:87:e5:22: 56:8a:29:08:88:bb:0a:d2:b6:ad:bf:ea:84:ca:16: 42:ad:59:53:9f:6f:75:94:b3:e1:b1:5f:5b:ed:f8: 5e:25:85:e6:47:fc:77:ba:34:f3:9b:9f:c2:88:47: e2:4e:e7:ea:12:02:f4:84:0d:ca:c1:7c:2a:66:a9: 82:9f:18:3d:da:4b:e8:fd:21:b1:10:dd:e9:3d:53: 25:ec:a9:3f:f4:c5:f0:7f:e6:37:01:86:f2:77:f7: dd:c1:6a:91:ee:fa:3c:d8:86:9f:af:c2:c5:d2:1d: 35:7a:36:eb:68:60:bb:24:4a:35:99:11:12:f3:48: 01:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7B:6C:C4:05:82:24:E6:F1:BE:3D:58:70:79:25:91:DE:A4:F9:9F X509v3 Authority Key Identifier: keyid:D9:18:92:54:B7:5B:9D:BB:CA:84:EA:D7:98:65:C5:C5:F7:F1:0E:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b0:cf:6b:ad:48:ca:2f:ab:d3:d2:c5:89:21:6b:bf:2e:d2: f6:f6:0a:87:f4:22:e1:bb:f4:b4:92:0c:b0:0b:d1:ec:8b:b8: 29:95:2e:df:a6:66:20:1c:cb:88:a0:08:94:a5:d4:35:af:25: 7a:88:a3:07:6e:ed:7a:19:fb:cf:36:fb:43:ab:44:17:92:fc: 78:38:37:cd:09:8e:19:44:15:5e:77:59:d8:c1:15:68:0c:8f: 0e:f6:9d:eb:f2:ad:3b:0f:bb:7a:2a:53:b4:05:53:a9:19:cd: 2b:0a:11:29:69:37:a7:7d:d9:47:a0:bc:ea:c1:39:17:92:11: 69:68:37:eb:01:e0:f8:19:42:38:9f:ec:43:65:93:7e:56:67: 35:f7:72:62:85:3e:b9:54:87:cf:b9:8d:b4:1f:59:f5:2b:dd: 19:d7:3f:de:b5:5e:47:a0:64:0f:78:f3:5b:d1:45:1e:1a:49: 43:9c:00:6d:31:1c:43:29:e7:d7:66:b6:ac:6f:fb:1f:05:7a: 0c:d7:86:2f:c7:26:da:1e:8c:1b:07:dd:1d:14:d0:b7:b6:20: 31:cc:7f:cd:d2:0a:02:9c:44:81:81:7e:b4:5f:a3:6b:de:54: 92:55:e1:70:0b:77:e3:39:ca:d9:ca:07:90:30:3b:24:2e:7f: 26:34:e3:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQpk6HqBOz7miF/b1//xBHfpC8LEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkxODkyNTRCNzVCOURCQkNBODRFQUQ3OTg2NUM1QzVG N0YxMEU1RDAeFw0yNTEwMTkxNDA1NTNaFw0yNTEwMjAxNzU3NTNaMDMxMTAvBgNV BAMTKEM4N0I2Q0M0MDU4MjI0RTZGMUJFM0Q1ODcwNzkyNTkxREVBNEY5OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgty0/vRgPGg2xETYmZlnBP/n3 HaRqFmnodD2rE0sQxhRUvIGJAbN92IOMaNrBMOm6PaJbOyEs4jO6WJIIm1RLM+fW Q4n76NAoFFWXKV6bab06Tkjn2Hy5VN2nHNTZD8u/kA78R1y8kBZfSmXu3APxDVA1 rf6CFoQcFfI/XeVosk43CIflIlaKKQiIuwrStq2/6oTKFkKtWVOfb3WUs+GxX1vt +F4lheZH/He6NPObn8KIR+JO5+oSAvSEDcrBfCpmqYKfGD3aS+j9IbEQ3ek9UyXs qT/0xfB/5jcBhvJ3993BapHu+jzYhp+vwsXSHTV6NutoYLskSjWZERLzSAGfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyHtsxAWCJObxvj1YcHklkd6k+Z8wHwYDVR0j BBgwFoAU2RiSVLdbnbvKhOrXmGXFxffxDl0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUhBdnhnMjhGQ0tkRDk2SGdZcnltYXNUb3VyQ3lrS3VrOGhhNXpNNkh0 cXMvMC9EOTE4OTI1NEI3NUI5REJCQ0E4NEVBRDc5ODY1QzVDNUY3RjEwRTVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5MTg5MjU0Qjc1QjlEQkJD QTg0RUFENzk4NjVDNUM1RjdGMTBFNUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUhBdnhnMjhGQ0tkRDk2SGdZcnltYXNUb3VyQ3lrS3VrOGhhNXpNNkh0cXMvMC9E OTE4OTI1NEI3NUI5REJCQ0E4NEVBRDc5ODY1QzVDNUY3RjEwRTVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALrDPa61Iyi+r09LFiSFrvy7S9vYKh/Qi4bv0tJIMsAvR7Iu4KZUu36ZmIBzL iKAIlKXUNa8leoijB27tehn7zzb7Q6tEF5L8eDg3zQmOGUQVXndZ2MEVaAyPDvad 6/KtOw+7eipTtAVTqRnNKwoRKWk3p33ZR6C86sE5F5IRaWg36wHg+BlCOJ/sQ2WT flZnNfdyYoU+uVSHz7mNtB9Z9SvdGdc/3rVeR6BkD3jzW9FFHhpJQ5wAbTEcQynn 12a2rG/7HwV6DNeGL8cm2h6MGwfdHRTQt7YgMcx/zdIKApxEgYF+tF+ja95UklXh cAt34znK2coHkDA7JC5/JjTjEQ== -----END CERTIFICATE-----Generated at Mon Oct 20 06:29:40 2025 by rpki-client