$ rpki-client -vvf rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft File: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft (raw, json) Hash identifier: 5F3C3BsgT2KJWjYVnTDbCyTYYG+a4ihQf+ftRAs9U3s= Subject key identifier: 88:94:EB:D6:7B:7D:4F:56:E0:65:F0:27:2B:E7:8B:08:7A:96:EB:35 Authority key identifier: D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0 Certificate issuer: /CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0 Certificate serial: 719B42596B2161140EFAB1673E0CDF44AD8AFA61 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer Subject info access: rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft Manifest number: 0270 Signing time: Mon 20 Oct 2025 12:21:15 +0000 Manifest this update: Mon 20 Oct 2025 12:16:15 +0000 Manifest next update: Tue 21 Oct 2025 12:46:15 +0000 Files and hashes: 1: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl (hash: YGTFGkHF2Ndy9BdfSru/Ek+8ToXOO/X4fCyKHX/h5Jw=) 2: 3139302e3132332e3139322e302f32322d3234203d3e20323636323533.roa (hash: lEGRwhg9phXl2q/TNnF7j2kv/C2pVxAJLq4sIptatEQ=) 3: 323830343a336431383a3a2f33322d3438203d3e20323636323533.roa (hash: q5JF9UY+MTB4Mlfj2lWL8AvBvbFDkXWD3ksggtStp3k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:9b:42:59:6b:21:61:14:0e:fa:b1:67:3e:0c:df:44:ad:8a:fa:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0 Validity Not Before: Oct 20 12:16:15 2025 GMT Not After : Oct 21 12:46:15 2025 GMT Subject: CN=8894EBD67B7D4F56E065F0272BE78B087A96EB35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dc:3f:32:d3:54:0d:50:6c:bb:a9:d3:63:71: 32:1e:a7:a4:43:13:cd:33:cc:84:51:b9:f3:dc:d5: 7b:89:f7:4f:98:51:1f:59:0d:a3:70:67:59:4f:e9: 79:18:b4:9a:6b:c9:ca:23:34:2f:01:f9:ca:83:cd: b9:0b:fb:d6:fe:5a:3e:a2:b5:b9:47:e4:8d:30:6c: 53:da:fa:5f:cc:3f:32:c2:f6:65:4a:d7:5f:95:cd: 0e:43:f6:89:40:c4:45:4e:43:ae:97:fc:dc:e5:7e: 17:f5:60:39:21:da:7a:3e:1f:ba:85:e5:6d:10:d8: a3:ac:09:5c:b0:26:a5:0e:5e:97:96:79:ed:86:05: 10:83:84:fa:c3:0e:ab:18:1c:10:66:cf:13:ca:a1: db:12:84:6a:68:1d:f2:17:75:a2:df:30:c4:e9:8c: 11:82:67:8a:18:2c:c3:0a:6a:f6:38:a6:39:2d:3e: 57:c4:2c:83:2e:6f:33:bc:18:4f:8d:e4:bd:be:4f: d5:d7:e2:9f:45:80:bd:40:12:8c:b4:fd:02:53:35: 40:9e:e9:bc:36:8e:66:78:b7:ab:75:0d:46:07:f0: 8a:f9:01:90:0a:db:ed:1c:8e:68:15:67:d3:92:f2: 8a:f7:64:70:1e:12:a4:0e:ac:92:3c:6a:de:99:34: 09:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:94:EB:D6:7B:7D:4F:56:E0:65:F0:27:2B:E7:8B:08:7A:96:EB:35 X509v3 Authority Key Identifier: keyid:D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:9c:cd:2d:89:d2:e8:76:3e:02:99:12:1d:8b:6d:32:78:a7: 3c:59:a9:87:5a:17:ab:f4:67:64:98:76:17:35:bd:0a:15:ce: 8d:7b:4e:da:27:0c:12:8d:34:28:56:d5:96:3a:5f:76:e1:12: 1d:4d:7b:35:8c:e6:ee:59:fc:d0:af:4c:aa:4c:a3:a5:6a:11: c9:65:4d:1a:bd:f9:80:20:07:22:04:e2:ce:41:34:bd:0c:bd: b9:75:c5:92:04:ed:33:91:dc:22:10:80:f0:27:c7:f5:e4:d8: 5d:7f:ab:82:70:28:d8:40:c0:29:03:1e:07:45:6f:a8:02:80: f3:62:fc:d1:31:46:77:4e:97:50:fe:fd:28:df:87:56:03:f6: e1:75:6c:9f:42:41:d5:8c:fa:0a:15:77:5b:f7:79:9b:0c:e8: dc:c6:55:08:bc:01:74:69:34:d2:37:cd:97:12:fb:31:0c:5e: 09:90:8b:97:1e:93:b1:35:f4:4d:5f:62:b9:39:8a:78:cb:e0: 41:15:98:e5:69:10:09:77:c1:2c:6d:a5:d0:df:83:78:6a:a7: 3a:a5:19:45:4d:3e:65:c1:b7:c4:b2:dd:27:bb:87:ca:89:fc: 85:cb:29:1d:d7:4b:49:f9:39:1c:9f:4b:d6:4b:77:56:42:1a: 6b:24:73:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcZtCWWshYRQO+rFnPgzfRK2K+mEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJCRTQwQzY2QTBCMEVGOTc0N0FDQzlEMkMzQTBGNDVC Q0JEODhEMDAeFw0yNTEwMjAxMjE2MTVaFw0yNTEwMjExMjQ2MTVaMDMxMTAvBgNV BAMTKDg4OTRFQkQ2N0I3RDRGNTZFMDY1RjAyNzJCRTc4QjA4N0E5NkVCMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB3D8y01QNUGy7qdNjcTIep6RD E80zzIRRufPc1XuJ90+YUR9ZDaNwZ1lP6XkYtJprycojNC8B+cqDzbkL+9b+Wj6i tblH5I0wbFPa+l/MPzLC9mVK11+VzQ5D9olAxEVOQ66X/Nzlfhf1YDkh2no+H7qF 5W0Q2KOsCVywJqUOXpeWee2GBRCDhPrDDqsYHBBmzxPKodsShGpoHfIXdaLfMMTp jBGCZ4oYLMMKavY4pjktPlfELIMubzO8GE+N5L2+T9XX4p9FgL1AEoy0/QJTNUCe 6bw2jmZ4t6t1DUYH8Ir5AZAK2+0cjmgVZ9OS8or3ZHAeEqQOrJI8at6ZNAlTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiJTr1nt9T1bgZfAnK+eLCHqW6zUwHwYDVR0j BBgwFoAU0r5AxmoLDvl0esydLDoPRby9iNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUxoYTZyNmR6TFRiRzZqWDRUSHBIRjV3dk12bllxU0FWTnM3cXJqdk5l NnIvMC9EMkJFNDBDNjZBMEIwRUY5NzQ3QUNDOUQyQzNBMEY0NUJDQkQ4OEQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyQkU0MEM2NkEwQjBFRjk3 NDdBQ0M5RDJDM0EwRjQ1QkNCRDg4RDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUxoYTZyNmR6TFRiRzZqWDRUSHBIRjV3dk12bllxU0FWTnM3cXJqdk5lNnIvMC9E MkJFNDBDNjZBMEIwRUY5NzQ3QUNDOUQyQzNBMEY0NUJDQkQ4OEQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw5zNLYnS6HY+ApkSHYttMninPFmph1oXq/RnZJh2FzW9ChXOjXtO2icMEo00 KFbVljpfduESHU17NYzm7ln80K9MqkyjpWoRyWVNGr35gCAHIgTizkE0vQy9uXXF kgTtM5HcIhCA8CfH9eTYXX+rgnAo2EDAKQMeB0VvqAKA82L80TFGd06XUP79KN+H VgP24XVsn0JB1Yz6ChV3W/d5mwzo3MZVCLwBdGk00jfNlxL7MQxeCZCLlx6TsTX0 TV9iuTmKeMvgQRWY5WkQCXfBLG2l0N+DeGqnOqUZRU0+ZcG3xLLdJ7uHyon8hcsp HddLSfk5HJ9L1kt3VkIaayRz0Q== -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:58 2025 by rpki-client