$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.mft File: E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.mft (raw, json) Hash identifier: 3aksj6drHO3tsCzMWXzeo00n4yI9LG9PWboVJaXHoSM= Subject key identifier: 4E:45:FF:A5:6A:CC:19:CA:F1:B9:88:6A:B2:40:9E:ED:4E:64:77:1F Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A Certificate issuer: /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A Certificate serial: 6574B2BDDCB61640603FC0443CBBBC7B7416768D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer Subject info access: rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.mft Manifest number: 0387 Signing time: Mon 20 Oct 2025 15:10:00 +0000 Manifest this update: Mon 20 Oct 2025 15:05:00 +0000 Manifest next update: Tue 21 Oct 2025 15:10:00 +0000 Files and hashes: 1: AS262691.roa (hash: knYIuqjXlYPgjIs61RFNY3rkTcBYk4470FfCr/44W/o=) 2: E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl (hash: GdFlAeBW4MkjNyxu/5DtvZtGfJPSiHJ7F8XqzBgMHSM=) 3: AS53170.roa (hash: D+3LsbWKIOXLyf7qG2sUWvzBHPAvO4uj4lpV+dhD3BA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 15:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:74:b2:bd:dc:b6:16:40:60:3f:c0:44:3c:bb:bc:7b:74:16:76:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A Validity Not Before: Oct 20 15:05:00 2025 GMT Not After : Oct 21 15:10:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e5:2a:a4:4c:9a:21:d9:b9:88:91:3d:ab:79: eb:37:2f:4b:42:da:1d:73:15:02:e5:cd:d7:8f:d8: 02:71:c3:b1:32:ef:c7:79:49:bb:80:a7:b0:72:3b: 2d:c9:90:fb:9f:a8:6c:8a:da:53:dc:d9:78:4f:17: eb:6e:57:1e:0c:33:ef:72:ac:e4:bb:5e:98:e3:ae: e4:62:4b:82:54:38:a0:02:73:3a:ea:57:99:95:18: 93:b6:44:14:1e:7e:68:af:fd:48:e4:26:4b:14:c7: 63:28:c8:2b:99:87:ed:36:0a:08:12:c7:f8:f7:f9: 9c:83:1e:cf:a0:36:d4:4b:ae:d4:26:cb:16:22:7d: 6e:21:0c:88:a6:31:14:74:97:e1:71:2a:19:da:98: 42:66:d8:8d:0b:86:66:db:63:e5:8b:53:92:4b:ac: ae:7f:eb:12:bd:3d:57:81:6b:c1:86:e3:a1:2c:dc: 1d:9e:64:b0:ab:1b:4e:84:3b:5b:ff:a5:85:07:3b: 70:a9:03:d7:31:4e:26:71:15:68:fd:37:2f:f8:8d: e3:53:ba:27:4d:8d:10:5e:74:12:b7:0b:1e:9d:cd: ef:d0:3a:d3:f2:8d:1a:82:07:ec:66:b8:48:9c:9e: ee:eb:04:42:5f:82:7a:ba:0b:72:50:de:4e:69:09: 2c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:45:FF:A5:6A:CC:19:CA:F1:B9:88:6A:B2:40:9E:ED:4E:64:77:1F X509v3 Authority Key Identifier: keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e0:01:ef:ba:ca:dd:d8:6b:59:ba:8c:7d:ab:bb:c4:1e:2b: 61:2b:a9:30:89:36:a8:8d:e3:ee:d3:9f:ed:af:3e:88:f3:8d: ad:85:72:58:92:2d:c8:5e:31:d9:f8:14:2a:f2:12:d7:ec:53: d2:13:99:c3:51:e9:ac:af:ea:77:0b:dc:05:7b:a9:3a:33:82: ed:0d:4f:8c:c1:63:ad:dd:36:13:38:8d:5a:82:ad:a0:a7:ea: 4d:35:c7:2a:54:d6:07:87:78:c0:ce:1a:24:82:18:ce:8a:0e: b0:50:03:ab:cf:62:8d:cd:19:cb:12:ea:b4:47:ca:ab:1e:05: 90:03:b1:2e:fb:bf:db:ca:b6:a7:89:12:21:98:d4:f2:cc:07: 0a:42:eb:6b:a5:fe:7a:dd:66:67:07:ed:2c:72:bd:11:8a:b5: 74:e9:65:64:e8:53:71:58:15:ba:eb:83:41:4d:69:f2:c3:fe: fc:6e:04:d3:92:7d:0c:10:1f:92:ed:ec:04:04:82:29:43:e9: 52:c1:c7:23:71:d1:9a:7f:4f:55:e0:36:1a:e2:28:6c:55:d2: f5:c4:fa:76:fc:bd:5e:8c:f4:7d:69:da:25:c1:36:d1:96:61: b8:cb:3f:f2:41:e5:fe:15:86:7f:63:94:8f:18:0e:a0:1e:6f: 53:c3:cd:51 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUZXSyvdy2FkBgP8BEPLu8e3QWdo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz Q0E2MEI0QTAeFw0yNTEwMjAxNTA1MDBaFw0yNTEwMjExNTEwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTJFNTJBQTQ0QzlBMjFEOUI5 ODg5MTNEQUI3OUVCMzcyRjRCNDJEQTFENzMxNTAyRTVDREQ3OEZEODAyNzFDM0Ix MzJFRkM3Nzk0OUJCODBBN0IwNzIzQjJEQzk5MEZCOUZBODZDOEFEQTUzRENEOTc4 NEYxN0VCNkU1NzFFMEMzM0VGNzJBQ0U0QkI1RTk4RTNBRUU0NjI0QjgyNTQzOEEw MDI3MzNBRUE1Nzk5OTUxODkzQjY0NDE0MUU3RTY4QUZGRDQ4RTQyNjRCMTRDNzYz MjhDODJCOTk4N0VEMzYwQTA4MTJDN0Y4RjdGOTlDODMxRUNGQTAzNkQ0NEJBRUQ0 MjZDQjE2MjI3RDZFMjEwQzg4QTYzMTE0NzQ5N0UxNzEyQTE5REE5ODQyNjZEODhE MEI4NjY2REI2M0U1OEI1MzkyNEJBQ0FFN0ZFQjEyQkQzRDU3ODE2QkMxODZFM0Ex MkNEQzFEOUU2NEIwQUIxQjRFODQzQjVCRkZBNTg1MDczQjcwQTkwM0Q3MzE0RTI2 NzExNTY4RkQzNzJGRjg4REUzNTNCQTI3NEQ4RDEwNUU3NDEyQjcwQjFFOURDREVG RDAzQUQzRjI4RDFBODIwN0VDNjZCODQ4OUM5RUVFRUIwNDQyNUY4MjdBQkEwQjcy NTBERTRFNjkwOTJDMEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA4uUqpEyaIdm5iJE9q3nrNy9LQtodcxUC5c3Xj9gCccOxMu/HeUm7 gKewcjstyZD7n6hsitpT3Nl4TxfrblceDDPvcqzku16Y467kYkuCVDigAnM66leZ lRiTtkQUHn5or/1I5CZLFMdjKMgrmYftNgoIEsf49/mcgx7PoDbUS67UJssWIn1u IQyIpjEUdJfhcSoZ2phCZtiNC4Zm22Pli1OSS6yuf+sSvT1XgWvBhuOhLNwdnmSw qxtOhDtb/6WFBztwqQPXMU4mcRVo/Tcv+I3jU7onTY0QXnQStwsenc3v0DrT8o0a ggfsZrhInJ7u6wRCX4J6ugtyUN5OaQksDwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FE5F/6VqzBnK8bmIarJAnu1OZHcfMB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1 OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw QjRBLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdrZ2ZDaDlK ajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1OTVCRTMz QjRBMEQyMUI2REEzQ0E2MEI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGzgAe+6yt3Ya1m6jH2ru8Qe K2ErqTCJNqiN4+7Tn+2vPojzja2FcliSLcheMdn4FCryEtfsU9ITmcNR6ayv6ncL 3AV7qTozgu0NT4zBY63dNhM4jVqCraCn6k01xypU1geHeMDOGiSCGM6KDrBQA6vP Yo3NGcsS6rRHyqseBZADsS77v9vKtqeJEiGY1PLMBwpC62ul/nrdZmcH7SxyvRGK tXTpZWToU3FYFbrrg0FNafLD/vxuBNOSfQwQH5Lt7AQEgilD6VLBxyNx0Zp/T1Xg NhriKGxV0vXE+nb8vV6M9H1p2iXBNtGWYbjLP/JB5f4Vhn9jlI8YDqAeb1PDzVE= -----END CERTIFICATE-----Generated at Tue Oct 21 00:09:34 2025 by rpki-client