$ rpki-client -vvf rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft File: C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft (raw, json) Hash identifier: hLP8amk+nBwc7+rHsGpcK0TsCY6NlTS2VJ2xEO9nXBs= Subject key identifier: CC:10:51:07:EB:7F:DC:D7:19:E9:E8:31:1B:44:B9:DC:56:52:F8:44 Authority key identifier: C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B Certificate issuer: /CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B Certificate serial: 0A999D7C62DF2DA82F28BB1A01B1A0F52D459F13 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer Subject info access: rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft Manifest number: 0268 Signing time: Mon 20 Oct 2025 15:14:29 +0000 Manifest this update: Mon 20 Oct 2025 15:09:29 +0000 Manifest next update: Tue 21 Oct 2025 16:59:29 +0000 Files and hashes: 1: 323830343a373739383a3a2f33342d313238203d3e20323731313838.roa (hash: cQjGN5WENW46/jBuhJA1lT+mTYrjHprWmDjgq2R5zjY=) 2: 323830343a373739383a3a2f33322d313238203d3e20323731313838.roa (hash: Oq8XP3wv/ghsrdwyvbkipNglCVLH6ofbbhpDuh9rzrI=) 3: 3230302e362e34382e302f32342d3332203d3e20323731313838.roa (hash: HXzDFfjvaudy+HCQJ3LevFAJF+IlNvHbKDb7azvjpI4=) 4: C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl (hash: bZuLU8XJBixlELD3ehntxCSPaKlaeaxfmhFThcR4LdI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 16:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:99:9d:7c:62:df:2d:a8:2f:28:bb:1a:01:b1:a0:f5:2d:45:9f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B Validity Not Before: Oct 20 15:09:29 2025 GMT Not After : Oct 21 16:59:29 2025 GMT Subject: CN=CC105107EB7FDCD719E9E8311B44B9DC5652F844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:fc:b5:37:5f:f1:4a:b7:aa:0b:5c:d0:9a:62: 2e:5b:95:50:ea:07:1d:43:24:61:18:e1:bb:08:73: 62:e4:90:fc:dd:e6:c1:4f:18:56:e1:dc:27:f0:4f: 65:e7:71:9d:7a:8a:e0:03:80:49:62:74:20:3f:ad: 00:f8:80:d9:4d:d6:ff:5b:4a:a8:7b:b3:2f:c6:95: 72:5a:5d:d0:d9:94:10:91:b8:93:39:77:df:61:91: 42:59:14:c7:82:8b:2b:46:54:de:74:92:86:43:43: 7f:4c:80:4e:c4:f5:ea:8c:7f:92:8d:43:55:94:2e: 39:52:29:f4:60:63:99:cc:ff:20:5b:b6:8e:ee:7d: b2:1c:d6:2b:8c:84:a2:96:34:d1:7b:67:9d:a9:99: 51:d1:dc:69:c4:45:f3:6b:a7:78:7a:7f:6d:41:9a: c5:2a:f4:0b:15:0b:8a:85:4f:2d:07:c5:f7:68:e1: a9:74:e6:3e:22:26:4c:b9:cd:dd:bb:e3:8c:77:f5: 8b:85:f1:62:a2:2e:63:4d:61:4b:71:42:56:bc:66: ea:7f:ac:f6:38:8b:de:45:7b:c1:9b:4e:3a:0d:bc: be:9d:ba:82:d5:eb:01:a7:eb:05:5f:22:eb:b9:4d: a0:38:26:61:73:52:48:ab:d5:46:68:a3:73:51:10: 1f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:10:51:07:EB:7F:DC:D7:19:E9:E8:31:1B:44:B9:DC:56:52:F8:44 X509v3 Authority Key Identifier: keyid:C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:fb:b0:4f:00:3f:d1:d7:aa:7e:07:1e:2c:f9:31:cb:b7:11: fd:78:de:d0:0c:3e:92:51:3c:84:de:a7:8c:d4:25:11:eb:1f: b8:ee:d9:24:80:8a:b5:65:86:25:bf:e4:08:3a:7e:d8:1e:32: ef:75:75:83:15:2d:bd:e4:75:e3:4d:3f:84:f5:1f:af:30:69: 5d:a6:34:d8:49:8d:4a:e2:5a:45:fd:a6:9a:9e:4d:fc:1e:e7: ae:26:b9:68:1a:02:5b:7a:14:d7:71:72:ca:37:26:84:b2:40: af:c0:40:ec:5d:9d:20:6e:4c:38:b0:69:28:4a:dd:0d:43:42: 4e:dc:e4:a9:2a:45:34:91:75:86:a1:2d:73:f4:7b:17:58:61: e1:a9:4f:88:61:9d:96:f4:d8:3a:55:10:ef:7d:c9:48:f1:41: f9:05:a3:96:5e:a0:75:55:f5:80:bf:4f:79:ca:f9:a4:78:fb: 09:2d:03:e6:14:3d:47:7b:4f:e8:f5:63:e7:48:e6:ad:29:3e: cf:56:0c:41:87:bb:56:04:7e:69:7b:d2:0d:e5:cd:02:fd:e9: 55:0f:f9:0f:75:56:b4:80:6d:8e:31:24:2a:a6:b4:db:84:90: 78:94:ea:57:bf:1d:46:66:21:1c:3b:3d:81:fb:c9:f7:03:a1: c6:50:73:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCpmdfGLfLagvKLsaAbGg9S1FnxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlEQjhFQTExRjZBNUE0ODVBRUMyOTU1NjE0MzgxNURC MjUwN0EzQjAeFw0yNTEwMjAxNTA5MjlaFw0yNTEwMjExNjU5MjlaMDMxMTAvBgNV BAMTKENDMTA1MTA3RUI3RkRDRDcxOUU5RTgzMTFCNDRCOURDNTY1MkY4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5/LU3X/FKt6oLXNCaYi5blVDq Bx1DJGEY4bsIc2LkkPzd5sFPGFbh3CfwT2XncZ16iuADgElidCA/rQD4gNlN1v9b Sqh7sy/GlXJaXdDZlBCRuJM5d99hkUJZFMeCiytGVN50koZDQ39MgE7E9eqMf5KN Q1WULjlSKfRgY5nM/yBbto7ufbIc1iuMhKKWNNF7Z52pmVHR3GnERfNrp3h6f21B msUq9AsVC4qFTy0Hxfdo4al05j4iJky5zd2744x39YuF8WKiLmNNYUtxQla8Zup/ rPY4i95Fe8GbTjoNvL6duoLV6wGn6wVfIuu5TaA4JmFzUkir1UZoo3NREB/hAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzBBRB+t/3NcZ6egxG0S53FZS+EQwHwYDVR0j BBgwFoAUyduOoR9qWkha7ClVYUOBXbJQejswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVRXeFpWUzVMSnpMdlVYdmdrM2RvUjlhRjZoMW9nWEFCMkM1bWtlZ0p2 SzQvMC9DOURCOEVBMTFGNkE1QTQ4NUFFQzI5NTU2MTQzODE1REIyNTA3QTNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5REI4RUExMUY2QTVBNDg1 QUVDMjk1NTYxNDM4MTVEQjI1MDdBM0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVRXeFpWUzVMSnpMdlVYdmdrM2RvUjlhRjZoMW9nWEFCMkM1bWtlZ0p2SzQvMC9D OURCOEVBMTFGNkE1QTQ4NUFFQzI5NTU2MTQzODE1REIyNTA3QTNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkvuwTwA/0deqfgceLPkxy7cR/Xje0Aw+klE8hN6njNQlEesfuO7ZJICKtWWG Jb/kCDp+2B4y73V1gxUtveR1400/hPUfrzBpXaY02EmNSuJaRf2mmp5N/B7nria5 aBoCW3oU13FyyjcmhLJAr8BA7F2dIG5MOLBpKErdDUNCTtzkqSpFNJF1hqEtc/R7 F1hh4alPiGGdlvTYOlUQ733JSPFB+QWjll6gdVX1gL9Pecr5pHj7CS0D5hQ9R3tP 6PVj50jmrSk+z1YMQYe7VgR+aXvSDeXNAv3pVQ/5D3VWtIBtjjEkKqa024SQeJTq V78dRmYhHDs9gfvJ9wOhxlBzqg== -----END CERTIFICATE-----Generated at Mon Oct 20 21:44:05 2025 by rpki-client