$ rpki-client -vvf rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.mft File: E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.mft (raw, json) Hash identifier: //zgAO2CbcXn2SUNSfiqj2O+pOqH9Gz8yCyU34rQ8JQ= Subject key identifier: CC:36:BF:9E:BB:EA:19:2E:37:AF:13:2A:9D:D5:0E:DF:45:B2:7F:D8 Authority key identifier: E3:23:E2:3C:16:E9:98:B1:FB:AB:1F:A1:C8:5D:27:3E:8D:4F:FE:EE Certificate issuer: /CN=E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE Certificate serial: 5E3232CD39D67A6C4BDA74B936ECB9384B38B56B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.cer Subject info access: rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.mft Manifest number: 02F1 Signing time: Mon 20 Oct 2025 01:57:48 +0000 Manifest this update: Mon 20 Oct 2025 01:52:48 +0000 Manifest next update: Tue 21 Oct 2025 03:22:48 +0000 Files and hashes: 1: E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.crl (hash: dAKJM3kd3WVwJQrISrktKwZIXoD7ZwR2aPJbWW4Oq/o=) 2: 3137372e39312e3133322e302f32322d3234203d3e20323633343433.roa (hash: gYzvr5YFI+HNqr2VzVsFIIyT5cOKj6GHJk9U2jKE010=) 3: 323830343a313164383a3a2f33322d3438203d3e20323633343433.roa (hash: y1MN3k5l5ZhjNF9rR3L8krseRnQAtI0KUHDf9pNUMWQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.crl rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 03:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:32:32:cd:39:d6:7a:6c:4b:da:74:b9:36:ec:b9:38:4b:38:b5:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE Validity Not Before: Oct 20 01:52:48 2025 GMT Not After : Oct 21 03:22:48 2025 GMT Subject: CN=CC36BF9EBBEA192E37AF132A9DD50EDF45B27FD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8d:11:b2:74:b1:a4:f7:8f:9d:6e:88:33:20: be:20:aa:62:9a:ec:96:e7:e2:f6:06:eb:ef:b3:58: 30:6d:5d:4f:3a:75:6f:af:53:12:7a:4a:11:ea:6c: 61:2d:95:e9:f3:32:09:65:df:6b:9f:8f:d0:84:00: b5:ab:ff:f9:75:ff:cc:18:9f:c6:d5:2c:08:8c:03: ea:58:89:e6:8f:2c:2e:c6:1c:3b:32:8b:fa:91:3c: 8a:ae:35:9a:59:12:ff:69:19:63:62:a0:39:26:76: 48:19:1b:e3:ea:d1:b7:20:77:e6:b2:b9:60:5d:26: 47:30:9a:ed:63:c6:08:34:a2:96:2e:52:b3:15:bd: 46:cd:93:52:ac:58:5f:b1:47:09:be:60:80:c7:96: 06:4d:f9:f4:39:65:51:12:d5:d6:d9:9f:16:07:5c: ac:66:8e:db:97:77:37:58:ab:d9:9c:00:3c:e2:44: 50:a3:8b:ed:55:db:2e:ee:05:95:53:91:ec:7d:19: 63:35:e9:c5:97:e3:d7:d0:86:13:07:f1:83:fb:6d: 81:c3:96:70:9d:be:95:0f:fb:26:8a:b0:30:64:4b: 9c:c2:b0:21:77:fb:9d:b3:9d:bf:fe:5a:33:6f:76: 2c:14:2b:d3:81:e9:90:a6:31:3c:68:69:17:4b:87: 03:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:36:BF:9E:BB:EA:19:2E:37:AF:13:2A:9D:D5:0E:DF:45:B2:7F:D8 X509v3 Authority Key Identifier: keyid:E3:23:E2:3C:16:E9:98:B1:FB:AB:1F:A1:C8:5D:27:3E:8D:4F:FE:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:6c:e7:b1:a7:59:f9:63:77:4c:00:d2:7a:16:e0:e4:0d:8b: ae:b9:50:5a:2d:c9:08:e1:16:2d:a1:87:c1:ca:f7:62:a5:96: 23:03:a1:0d:6e:bd:1a:0d:06:2f:9a:3f:46:81:e7:9b:2b:d6: 6b:75:d6:c5:22:fc:1b:e8:bc:c1:a4:44:39:ff:e4:2d:c3:ee: 80:d3:b2:32:27:97:e9:71:02:87:f1:72:7f:d1:29:b6:0c:ef: ff:2f:79:a2:d9:c7:64:e2:85:f0:7c:73:78:ff:89:83:b1:cb: 4d:62:c6:2b:ea:42:1b:2c:55:c7:32:b9:c2:ec:d9:01:ca:24: 68:ab:25:a5:3a:a4:58:dd:57:ee:94:d5:51:bf:f3:a8:ed:2e: 44:bd:39:3b:9f:7f:01:81:3c:e6:40:df:fb:d8:3a:0d:17:ad: f9:06:17:a5:c8:d0:f9:a2:4e:dd:fd:78:5f:c0:ed:dd:eb:e6: 47:b1:dd:d0:b2:41:4a:4d:14:da:4b:a1:07:93:65:82:aa:ca: 91:c9:6d:f1:1d:24:c5:95:cf:a9:aa:3c:a1:1d:82:9f:ac:c4: 17:7f:7f:07:4c:ab:ce:f0:ac:09:7e:9d:83:a7:e0:5e:44:da: 66:3d:82:fc:35:32:37:13:46:97:3c:28:e5:b2:b4:04:f6:6d: e7:25:d6:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXjIyzTnWemxL2nS5Nuy5OEs4tWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMyM0UyM0MxNkU5OThCMUZCQUIxRkExQzg1RDI3M0U4 RDRGRkVFRTAeFw0yNTEwMjAwMTUyNDhaFw0yNTEwMjEwMzIyNDhaMDMxMTAvBgNV BAMTKENDMzZCRjlFQkJFQTE5MkUzN0FGMTMyQTlERDUwRURGNDVCMjdGRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jRGydLGk94+dbogzIL4gqmKa 7Jbn4vYG6++zWDBtXU86dW+vUxJ6ShHqbGEtlenzMgll32ufj9CEALWr//l1/8wY n8bVLAiMA+pYieaPLC7GHDsyi/qRPIquNZpZEv9pGWNioDkmdkgZG+Pq0bcgd+ay uWBdJkcwmu1jxgg0opYuUrMVvUbNk1KsWF+xRwm+YIDHlgZN+fQ5ZVES1dbZnxYH XKxmjtuXdzdYq9mcADziRFCji+1V2y7uBZVTkex9GWM16cWX49fQhhMH8YP7bYHD lnCdvpUP+yaKsDBkS5zCsCF3+52znb/+WjNvdiwUK9OB6ZCmMTxoaRdLhwP/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzDa/nrvqGS43rxMqndUO30Wyf9gwHwYDVR0j BBgwFoAU4yPiPBbpmLH7qx+hyF0nPo1P/u4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVJ0aFRodFp2N3JyUkVWRjVibkJhSzVZenpNUGEyNVdMMXp4eTVxOE5T Y3UvMS9FMzIzRTIzQzE2RTk5OEIxRkJBQjFGQTFDODVEMjczRThENEZGRUVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzMjNFMjNDMTZFOTk4QjFG QkFCMUZBMUM4NUQyNzNFOEQ0RkZFRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVJ0aFRodFp2N3JyUkVWRjVibkJhSzVZenpNUGEyNVdMMXp4eTVxOE5TY3UvMS9F MzIzRTIzQzE2RTk5OEIxRkJBQjFGQTFDODVEMjczRThENEZGRUVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs2znsadZ+WN3TADSehbg5A2LrrlQWi3JCOEWLaGHwcr3YqWWIwOhDW69Gg0G L5o/RoHnmyvWa3XWxSL8G+i8waREOf/kLcPugNOyMieX6XECh/Fyf9Eptgzv/y95 otnHZOKF8HxzeP+Jg7HLTWLGK+pCGyxVxzK5wuzZAcokaKslpTqkWN1X7pTVUb/z qO0uRL05O59/AYE85kDf+9g6DRet+QYXpcjQ+aJO3f14X8Dt3evmR7Hd0LJBSk0U 2kuhB5NlgqrKkclt8R0kxZXPqao8oR2Cn6zEF39/B0yrzvCsCX6dg6fgXkTaZj2C /DUyNxNGlzwo5bK0BPZt5yXW9A== -----END CERTIFICATE-----Generated at Mon Oct 20 13:35:25 2025 by rpki-client