$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft File: D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft (raw, json) Hash identifier: SIY6vRoAgW6Gre8qo7Hx4t1Ip7ahAO7NPWOj1+dFWu8= Subject key identifier: D7:C9:B2:55:89:AC:47:08:19:B1:33:43:3C:A2:DC:94:E7:12:AA:E6 Authority key identifier: D7:96:87:8B:38:80:1E:1B:A9:BC:F0:FF:2E:29:FB:87:A5:CC:72:AB Certificate issuer: /CN=D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB Certificate serial: 37C959EA95C1D2073C5CF8DE960C1FACF90331BF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.cer Subject info access: rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft Manifest number: D4 Signing time: Mon 20 Oct 2025 08:00:32 +0000 Manifest this update: Mon 20 Oct 2025 07:55:32 +0000 Manifest next update: Tue 21 Oct 2025 09:54:32 +0000 Files and hashes: 1: D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.crl (hash: rpY4d/RJ5ftCO70WQD/0i1c1gLXp8ijHBfxvR1C9SDM=) 2: AS28343.roa (hash: 38oCwk7agpN74oJb3YDJeiQoYXWYFqwuFuOq7AnXNJI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.crl rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c9:59:ea:95:c1:d2:07:3c:5c:f8:de:96:0c:1f:ac:f9:03:31:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB Validity Not Before: Oct 20 07:55:32 2025 GMT Not After : Oct 21 09:54:32 2025 GMT Subject: CN=D7C9B25589AC470819B133433CA2DC94E712AAE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:eb:7e:ed:f5:c4:6d:7b:47:fe:ed:0a:4a:29: c2:7a:5a:4d:51:d2:f6:14:e1:b9:d1:a8:bd:54:b2: ee:b3:f8:2b:1d:32:6c:1a:6b:1f:87:1e:7a:68:ce: 71:c4:23:58:4c:14:05:38:a4:a2:01:72:37:a1:01: 56:fc:44:a2:a7:0f:b1:a9:aa:d8:0d:c3:85:d2:f0: 7c:30:5c:59:dd:62:19:fd:ec:5e:48:90:39:02:c7: d4:ee:b0:fd:a7:6f:cf:ff:17:81:89:12:73:61:f9: 87:5f:f2:2a:cd:57:a9:7b:18:6a:47:f7:00:9a:03: 5b:9d:2d:3c:07:8a:10:23:b9:a1:c7:87:56:ba:06: 16:f3:8b:1d:ae:07:61:3f:66:2a:4f:db:70:73:54: 90:9a:23:9a:31:33:d7:73:a1:37:be:1c:9c:ad:25: ae:cf:af:df:26:43:1e:16:96:8a:a4:8d:7c:b9:8d: 19:e7:9e:e6:53:9c:a0:ab:6c:04:e0:ae:93:bc:49: 75:b1:d9:d6:25:8e:c9:3d:d2:d5:e4:3a:b0:bc:0b: e7:41:e0:20:aa:dd:f6:0d:98:2f:8a:85:6c:81:9e: fe:98:b7:b7:a6:14:ca:17:c4:e4:92:3f:62:82:2f: 99:6b:f5:08:41:68:1e:70:d5:d1:ba:76:94:84:fb: 7a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C9:B2:55:89:AC:47:08:19:B1:33:43:3C:A2:DC:94:E7:12:AA:E6 X509v3 Authority Key Identifier: keyid:D7:96:87:8B:38:80:1E:1B:A9:BC:F0:FF:2E:29:FB:87:A5:CC:72:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:34:48:05:88:7f:68:e6:a9:6b:cb:27:35:62:25:43:f1:d5: d2:d0:74:25:84:6b:1c:05:ab:28:65:5e:d8:9a:0a:f1:f9:2c: 70:b1:56:c7:a4:f2:ae:6d:63:ad:b6:9e:50:03:00:e5:27:97: 24:67:8b:2e:d4:68:11:bd:a6:e7:a0:c0:0c:fc:91:e5:97:6b: fc:ca:75:ed:08:76:62:f9:eb:0b:c3:c1:63:d3:f6:89:3c:ee: ad:a7:35:b5:f5:02:c8:6f:15:4d:5d:5b:8e:ec:c7:88:0a:52: 68:e2:2b:85:50:3c:fe:e9:67:32:14:90:b4:21:22:42:ed:2c: 1e:96:fc:6d:e1:0d:77:80:68:42:f5:92:19:9a:17:8c:53:2a: e0:1b:64:e7:c4:50:5d:1f:ad:ff:dc:cc:8b:c6:ce:a9:bf:e8: 9c:bf:f5:ba:eb:a4:f3:4e:c7:43:52:6a:26:61:17:51:38:11: f5:91:4f:f7:8c:45:6d:6a:6a:7a:c4:38:bb:ff:88:36:cf:79: 5a:f0:5d:75:4d:cc:0d:7d:90:42:b1:27:99:d9:00:ae:0c:b7: 44:73:a2:0a:10:3e:75:7a:da:23:b3:a9:1b:64:ee:a6:de:45: 61:19:43:b5:6d:4f:84:41:e1:1a:93:91:cf:42:c7:a9:3d:b0: b1:4c:e0:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN8lZ6pXB0gc8XPjelgwfrPkDMb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc5Njg3OEIzODgwMUUxQkE5QkNGMEZGMkUyOUZCODdB NUNDNzJBQjAeFw0yNTEwMjAwNzU1MzJaFw0yNTEwMjEwOTU0MzJaMDMxMTAvBgNV BAMTKEQ3QzlCMjU1ODlBQzQ3MDgxOUIxMzM0MzNDQTJEQzk0RTcxMkFBRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV637t9cRte0f+7QpKKcJ6Wk1R 0vYU4bnRqL1Usu6z+CsdMmwaax+HHnpoznHEI1hMFAU4pKIBcjehAVb8RKKnD7Gp qtgNw4XS8HwwXFndYhn97F5IkDkCx9TusP2nb8//F4GJEnNh+Ydf8irNV6l7GGpH 9wCaA1udLTwHihAjuaHHh1a6Bhbzix2uB2E/ZipP23BzVJCaI5oxM9dzoTe+HJyt Ja7Pr98mQx4WloqkjXy5jRnnnuZTnKCrbATgrpO8SXWx2dYljsk90tXkOrC8C+dB 4CCq3fYNmC+KhWyBnv6Yt7emFMoXxOSSP2KCL5lr9QhBaB5w1dG6dpSE+3plAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU18myVYmsRwgZsTNDPKLclOcSquYwHwYDVR0j BBgwFoAU15aHiziAHhupvPD/Lin7h6XMcqswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWlyZEwzOFJ1ZDlGZTQzbnJ3Q1RoNkxQZ1JlcmFWc3pIUzZ2MUp5SDZZ U3cvMC9ENzk2ODc4QjM4ODAxRTFCQTlCQ0YwRkYyRTI5RkI4N0E1Q0M3MkFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OTY4NzhCMzg4MDFFMUJB OUJDRjBGRjJFMjlGQjg3QTVDQzcyQUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWlyZEwzOFJ1ZDlGZTQzbnJ3Q1RoNkxQZ1JlcmFWc3pIUzZ2MUp5SDZZU3cvMC9E Nzk2ODc4QjM4ODAxRTFCQTlCQ0YwRkYyRTI5RkI4N0E1Q0M3MkFCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtDRIBYh/aOapa8snNWIlQ/HV0tB0JYRrHAWrKGVe2JoK8fkscLFWx6Tyrm1j rbaeUAMA5SeXJGeLLtRoEb2m56DADPyR5Zdr/Mp17Qh2YvnrC8PBY9P2iTzurac1 tfUCyG8VTV1bjuzHiApSaOIrhVA8/ulnMhSQtCEiQu0sHpb8beENd4BoQvWSGZoX jFMq4Btk58RQXR+t/9zMi8bOqb/onL/1uuuk807HQ1JqJmEXUTgR9ZFP94xFbWpq esQ4u/+INs95WvBddU3MDX2QQrEnmdkArgy3RHOiChA+dXraI7OpG2Tupt5FYRlD tW1PhEHhGpORz0LHqT2wsUzgjA== -----END CERTIFICATE-----Generated at Mon Oct 20 12:45:11 2025 by rpki-client