$ rpki-client -vvf rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft File: C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft (raw, json) Hash identifier: acEzjdkynAkQ3OTQF37Svp+QJ2j0q/PMCYi/meOGv6I= Subject key identifier: 06:A7:35:EA:C6:C1:24:71:97:86:46:82:6A:B3:55:9E:81:18:DE:06 Authority key identifier: C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B Certificate issuer: /CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B Certificate serial: 6C416C81EC4E64BA08808F522495E40E56774A37 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer Subject info access: rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft Manifest number: 0219 Signing time: Fri 22 Aug 2025 15:03:50 +0000 Manifest this update: Fri 22 Aug 2025 14:58:50 +0000 Manifest next update: Sat 23 Aug 2025 18:38:50 +0000 Files and hashes: 1: 323830343a373739383a3a2f33322d313238203d3e20323731313838.roa (hash: Oq8XP3wv/ghsrdwyvbkipNglCVLH6ofbbhpDuh9rzrI=) 2: 3230302e362e34382e302f32342d3332203d3e20323731313838.roa (hash: HXzDFfjvaudy+HCQJ3LevFAJF+IlNvHbKDb7azvjpI4=) 3: C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl (hash: Bvh5BIvdKsNSJIBepPbBQ8Z150lbDVlUxzZIBBlHfgA=) 4: 323830343a373739383a3a2f33342d313238203d3e20323731313838.roa (hash: cQjGN5WENW46/jBuhJA1lT+mTYrjHprWmDjgq2R5zjY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 18:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:41:6c:81:ec:4e:64:ba:08:80:8f:52:24:95:e4:0e:56:77:4a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B Validity Not Before: Aug 22 14:58:50 2025 GMT Not After : Aug 23 18:38:50 2025 GMT Subject: CN=06A735EAC6C12471978646826AB3559E8118DE06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:19:c5:7a:69:e1:19:9c:19:67:26:d2:e3: 60:b3:3d:a4:9a:9d:95:fe:b6:75:24:6b:4b:9a:2d: 11:96:f7:f2:a1:e9:15:e0:32:84:02:d1:44:ac:6e: 1f:d4:d3:e9:7b:37:a2:9d:c6:01:e8:c3:cd:5b:59: 97:da:49:04:43:61:2e:04:f4:54:2d:07:87:aa:0f: a5:e0:3d:f2:98:cf:63:c1:3b:b9:f5:4c:34:73:a4: 8a:c3:bd:59:97:c8:6c:82:d5:69:5a:5c:fd:cb:0a: 63:1e:0b:0e:93:40:ea:80:bb:e1:b9:e7:54:0a:7a: 05:43:44:40:13:12:17:47:7e:d1:6d:4d:1b:b8:5b: 7f:43:92:99:e0:54:ae:3a:f0:e2:6f:f6:7c:ef:ad: 6c:7a:5e:01:97:02:5d:7a:ca:ad:8d:da:da:6a:4b: 0d:47:39:e8:74:1d:61:07:17:68:d5:65:33:21:48: 28:5b:dc:cb:60:7d:dc:6f:ff:9c:c2:2f:c9:72:00: 6b:fc:9b:d6:4b:5a:fb:06:dc:72:c4:87:39:bf:fe: f2:e8:eb:c1:01:dd:b9:d1:4e:c3:8d:b3:e7:1a:ba: 0d:f3:a6:ac:21:6b:54:8c:36:5d:48:66:62:2c:8f: 6b:85:36:f9:c8:28:8b:59:4a:b3:4c:53:75:68:44: da:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A7:35:EA:C6:C1:24:71:97:86:46:82:6A:B3:55:9E:81:18:DE:06 X509v3 Authority Key Identifier: keyid:C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:7a:06:a8:6b:97:3c:e4:e6:34:d0:ff:88:d3:0d:34:8a:dc: a1:da:21:79:65:7c:fe:7c:c9:3f:87:56:74:97:f4:3f:a5:ff: 04:9c:cd:6e:e4:b2:f2:9c:71:9a:01:8e:4a:ea:37:c8:8a:28: 95:4d:c0:c8:36:34:48:57:08:d2:69:2d:a4:3d:91:a6:78:e1: 67:dc:f5:7e:9f:af:20:ec:bb:b5:b0:8c:7b:e4:f5:3a:12:47: 6e:b1:c6:16:e9:c4:71:f2:32:d2:f2:d9:cd:50:b2:f7:df:4a: bc:19:38:fd:42:c1:3c:26:01:8a:71:5c:11:3f:19:08:88:8f: e7:20:da:72:d1:44:94:9e:57:67:81:37:66:f9:80:fa:ed:3c: 48:0e:2b:d0:36:21:c7:b2:0e:e0:78:61:20:2b:c9:21:00:c3: 32:b2:13:0e:c8:0c:be:d2:09:86:68:4f:4c:10:27:3c:bf:b3: e7:52:c9:87:35:29:b8:f8:c0:a7:90:23:3c:84:fa:05:6f:80: 7a:89:e9:ac:8e:68:c0:38:84:30:c2:bc:63:f9:58:ea:7f:56: d3:b9:e3:eb:42:1d:08:d9:86:41:c9:00:7d:d5:90:f4:aa:23: 92:1c:96:81:50:fd:97:f6:fd:65:7b:be:b0:19:a3:d5:80:38: 9d:79:8c:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbEFsgexOZLoIgI9SJJXkDlZ3SjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlEQjhFQTExRjZBNUE0ODVBRUMyOTU1NjE0MzgxNURC MjUwN0EzQjAeFw0yNTA4MjIxNDU4NTBaFw0yNTA4MjMxODM4NTBaMDMxMTAvBgNV BAMTKDA2QTczNUVBQzZDMTI0NzE5Nzg2NDY4MjZBQjM1NTlFODExOERFMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbpBnFemnhGZwZZybS42CzPaSa nZX+tnUka0uaLRGW9/Kh6RXgMoQC0USsbh/U0+l7N6KdxgHow81bWZfaSQRDYS4E 9FQtB4eqD6XgPfKYz2PBO7n1TDRzpIrDvVmXyGyC1WlaXP3LCmMeCw6TQOqAu+G5 51QKegVDREATEhdHftFtTRu4W39DkpngVK468OJv9nzvrWx6XgGXAl16yq2N2tpq Sw1HOeh0HWEHF2jVZTMhSChb3Mtgfdxv/5zCL8lyAGv8m9ZLWvsG3HLEhzm//vLo 68EB3bnRTsONs+caug3zpqwha1SMNl1IZmIsj2uFNvnIKItZSrNMU3VoRNpJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBqc16sbBJHGXhkaCarNVnoEY3gYwHwYDVR0j BBgwFoAUyduOoR9qWkha7ClVYUOBXbJQejswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVRXeFpWUzVMSnpMdlVYdmdrM2RvUjlhRjZoMW9nWEFCMkM1bWtlZ0p2 SzQvMC9DOURCOEVBMTFGNkE1QTQ4NUFFQzI5NTU2MTQzODE1REIyNTA3QTNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5REI4RUExMUY2QTVBNDg1 QUVDMjk1NTYxNDM4MTVEQjI1MDdBM0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVRXeFpWUzVMSnpMdlVYdmdrM2RvUjlhRjZoMW9nWEFCMkM1bWtlZ0p2SzQvMC9D OURCOEVBMTFGNkE1QTQ4NUFFQzI5NTU2MTQzODE1REIyNTA3QTNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQHoGqGuXPOTmNND/iNMNNIrcodoheWV8/nzJP4dWdJf0P6X/BJzNbuSy8pxx mgGOSuo3yIoolU3AyDY0SFcI0mktpD2RpnjhZ9z1fp+vIOy7tbCMe+T1OhJHbrHG FunEcfIy0vLZzVCy999KvBk4/ULBPCYBinFcET8ZCIiP5yDactFElJ5XZ4E3ZvmA +u08SA4r0DYhx7IO4HhhICvJIQDDMrITDsgMvtIJhmhPTBAnPL+z51LJhzUpuPjA p5AjPIT6BW+AeonprI5owDiEMMK8Y/lY6n9W07nj60IdCNmGQckAfdWQ9KojkhyW gVD9l/b9ZXu+sBmj1YA4nXmM1w== -----END CERTIFICATE-----Generated at Sat Aug 23 12:49:48 2025 by rpki-client