$ rpki-client -vvf rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.mft File: 59F73133C9108C206FE9409E22591FE97847518A.mft (raw, json) Hash identifier: 3AQnyuNBJy85AlawjGE0RJGaOder0aJuZfmqh6qje0I= Subject key identifier: 35:72:14:6B:C9:BA:A0:4A:11:21:18:66:10:96:92:5E:DD:B9:49:12 Authority key identifier: 59:F7:31:33:C9:10:8C:20:6F:E9:40:9E:22:59:1F:E9:78:47:51:8A Certificate issuer: /CN=59F73133C9108C206FE9409E22591FE97847518A Certificate serial: 66F3BAFB4BD1A4A2C017C142BE6DFBF5FF1CD72A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59F73133C9108C206FE9409E22591FE97847518A.cer Subject info access: rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.mft Manifest number: 02EE Signing time: Mon 20 Oct 2025 01:07:04 +0000 Manifest this update: Mon 20 Oct 2025 01:02:04 +0000 Manifest next update: Tue 21 Oct 2025 02:09:04 +0000 Files and hashes: 1: 3137372e3133372e3131322e302f32312d3234203d3e203532363030.roa (hash: tj+Nk5YIFtNNAnbCVCfNRDb7J/dOF5OGaMHrBVoGDB4=) 2: 323830343a6431633a3a2f33322d313238203d3e203532363030.roa (hash: KALs4Bg1TQfELrRE+85zSdFG7MESCGOAh2u6gZmU89k=) 3: 59F73133C9108C206FE9409E22591FE97847518A.crl (hash: SDct9QWgfvJHM4Ek4Nu3JkDNI/RNG6Cavqw7VSBlD94=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.crl rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59F73133C9108C206FE9409E22591FE97847518A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:f3:ba:fb:4b:d1:a4:a2:c0:17:c1:42:be:6d:fb:f5:ff:1c:d7:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59F73133C9108C206FE9409E22591FE97847518A Validity Not Before: Oct 20 01:02:04 2025 GMT Not After : Oct 21 02:09:04 2025 GMT Subject: CN=3572146BC9BAA04A112118661096925EDDB94912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d7:c1:3f:dc:3e:91:97:1a:a4:de:e3:27:0f: 30:65:50:79:d3:f1:4a:34:28:65:38:61:89:f8:2e: 3c:74:3e:87:84:be:6e:f8:b4:75:65:42:a7:02:c7: e1:75:d1:83:60:bf:86:d5:e4:cc:6d:a9:c2:2f:62: d1:1c:44:8b:8d:83:ed:c3:34:9a:8f:44:ef:f1:ef: 42:af:e9:05:75:e7:cb:04:aa:ba:19:87:34:14:6b: d3:60:00:04:42:05:19:ac:5c:a6:42:36:b7:ba:95: 52:60:3c:ae:78:0b:4a:dd:48:a8:6b:ac:1f:3f:a3: d8:c2:3c:30:55:f2:d5:f9:8a:c1:82:29:cb:ca:71: 6d:54:33:30:bd:99:ca:dd:a8:3c:2a:ef:9f:37:45: 10:29:fd:ca:e5:38:15:da:90:26:f5:4f:fa:06:9d: 41:a6:13:85:5b:db:72:db:d2:62:4b:4f:64:57:c8: fb:bd:70:6f:af:37:62:c8:e6:f2:92:d6:4d:ac:37: 49:51:dd:7f:1e:5f:03:2a:33:bd:c8:01:fe:09:bd: 48:62:98:25:f5:97:3d:b2:96:7a:a2:46:84:c9:56: b9:ec:64:2c:7d:6e:10:1a:51:ad:ad:a5:08:98:10: 49:36:b4:89:22:52:7c:5f:f5:d7:a5:3c:77:a0:f8: 1e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:72:14:6B:C9:BA:A0:4A:11:21:18:66:10:96:92:5E:DD:B9:49:12 X509v3 Authority Key Identifier: keyid:59:F7:31:33:C9:10:8C:20:6F:E9:40:9E:22:59:1F:E9:78:47:51:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59F73133C9108C206FE9409E22591FE97847518A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ed:65:db:18:64:42:7a:06:d9:ba:43:78:23:c7:b1:b2:eb: c9:17:cf:e8:49:5a:a7:7a:de:6f:be:ce:4d:78:7c:dc:18:17: 1b:53:51:2d:b4:a7:4a:56:fd:da:a8:17:68:7c:bc:45:c9:5b: 03:95:1f:35:45:5f:2a:1c:ae:d0:ef:fa:ae:37:33:5c:58:c8: 96:a3:8d:cd:fd:08:4a:50:6f:b8:13:79:a7:08:17:ba:71:36: a0:1d:02:59:77:02:5e:1d:86:e9:ab:d5:d4:c7:8a:d8:2b:04: c5:a8:77:93:cb:88:6c:65:1c:d7:62:f9:f8:04:73:77:2e:20: ae:85:87:1b:de:4e:66:90:97:70:6a:7f:60:04:65:f9:ec:2f: d8:19:48:bd:ac:60:58:b1:a7:ac:2f:56:52:75:da:59:67:0a: c5:86:f9:4a:a9:d8:4b:c0:8a:c5:48:a0:65:da:7d:22:6d:ff: ab:3f:68:4e:0a:33:aa:f9:8b:af:05:de:13:a2:db:26:17:06: 13:8b:45:b3:0a:3c:29:e1:cd:62:47:b3:6e:01:f0:00:11:ab: e4:21:4b:2d:11:23:d8:23:56:40:b9:1a:fe:76:56:57:7b:a2: 20:18:df:5f:03:0b:e0:37:8d:1e:e0:b7:4b:c6:79:79:0c:89: 4a:84:44:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZvO6+0vRpKLAF8FCvm379f8c1yowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlGNzMxMzNDOTEwOEMyMDZGRTk0MDlFMjI1OTFGRTk3 ODQ3NTE4QTAeFw0yNTEwMjAwMTAyMDRaFw0yNTEwMjEwMjA5MDRaMDMxMTAvBgNV BAMTKDM1NzIxNDZCQzlCQUEwNEExMTIxMTg2NjEwOTY5MjVFRERCOTQ5MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm18E/3D6Rlxqk3uMnDzBlUHnT 8Uo0KGU4YYn4Ljx0PoeEvm74tHVlQqcCx+F10YNgv4bV5MxtqcIvYtEcRIuNg+3D NJqPRO/x70Kv6QV158sEqroZhzQUa9NgAARCBRmsXKZCNre6lVJgPK54C0rdSKhr rB8/o9jCPDBV8tX5isGCKcvKcW1UMzC9mcrdqDwq7583RRAp/crlOBXakCb1T/oG nUGmE4Vb23Lb0mJLT2RXyPu9cG+vN2LI5vKS1k2sN0lR3X8eXwMqM73IAf4JvUhi mCX1lz2ylnqiRoTJVrnsZCx9bhAaUa2tpQiYEEk2tIkiUnxf9delPHeg+B5FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNXIUa8m6oEoRIRhmEJaSXt25SRIwHwYDVR0j BBgwFoAUWfcxM8kQjCBv6UCeIlkf6XhHUYowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXhORVdqaGNpdnIzdUM1NGtaNUdva3hpWGNyV0w0Ync4alM5WERQR2o1 Mm4vMS81OUY3MzEzM0M5MTA4QzIwNkZFOTQwOUUyMjU5MUZFOTc4NDc1MThBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU5RjczMTMzQzkxMDhDMjA2 RkU5NDA5RTIyNTkxRkU5Nzg0NzUxOEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OXhORVdqaGNpdnIzdUM1NGtaNUdva3hpWGNyV0w0Ync4alM5WERQR2o1Mm4vMS81 OUY3MzEzM0M5MTA4QzIwNkZFOTQwOUUyMjU5MUZFOTc4NDc1MThBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjO1l2xhkQnoG2bpDeCPHsbLryRfP6Elap3reb77OTXh83BgXG1NRLbSnSlb9 2qgXaHy8RclbA5UfNUVfKhyu0O/6rjczXFjIlqONzf0ISlBvuBN5pwgXunE2oB0C WXcCXh2G6avV1MeK2CsExah3k8uIbGUc12L5+ARzdy4groWHG95OZpCXcGp/YARl +ewv2BlIvaxgWLGnrC9WUnXaWWcKxYb5SqnYS8CKxUigZdp9Im3/qz9oTgozqvmL rwXeE6LbJhcGE4tFswo8KeHNYkezbgHwABGr5CFLLREj2CNWQLka/nZWV3uiIBjf XwML4DeNHuC3S8Z5eQyJSoREig== -----END CERTIFICATE-----Generated at Mon Oct 20 16:32:52 2025 by rpki-client