$ rpki-client -vvf rpki-repo.registro.br/repo/B4iUdeeuhT2A3tGv5XbWFcVv9yZjN4f9hr9dcA7dZ3pA/0/968BC20DD88FCE9320FB1B78DEABAE723650B19A.mft File: 968BC20DD88FCE9320FB1B78DEABAE723650B19A.mft (raw, json) Hash identifier: V7bpaZ3s2wDLzZOZN7fWOXuNbjuSsleUthG0UkjZNPo= Subject key identifier: 3E:9C:93:E0:D1:5B:2B:AC:09:0D:18:2B:B3:04:D6:97:0B:BB:D9:21 Authority key identifier: 96:8B:C2:0D:D8:8F:CE:93:20:FB:1B:78:DE:AB:AE:72:36:50:B1:9A Certificate issuer: /CN=968BC20DD88FCE9320FB1B78DEABAE723650B19A Certificate serial: 2C218985679CDD051D7B50A7E57A0313CEAD971D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968BC20DD88FCE9320FB1B78DEABAE723650B19A.cer Subject info access: rsync://rpki-repo.registro.br/repo/B4iUdeeuhT2A3tGv5XbWFcVv9yZjN4f9hr9dcA7dZ3pA/0/968BC20DD88FCE9320FB1B78DEABAE723650B19A.mft Manifest number: 39 Signing time: Mon 20 Oct 2025 13:07:28 +0000 Manifest this update: Mon 20 Oct 2025 13:02:28 +0000 Manifest next update: Tue 21 Oct 2025 14:58:28 +0000 Files and hashes: 1: 323830343a386437303a3a2f33322d3438203d3e20323733333537.roa (hash: 4CEQBt4BmzbIPE+E6qeam70iefvvydOSZTgaOLcmxe4=) 2: 968BC20DD88FCE9320FB1B78DEABAE723650B19A.crl (hash: avLhJUEin+zegGl/p4OuEVgm87idQf5jjrHi2Xb+Dig=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/B4iUdeeuhT2A3tGv5XbWFcVv9yZjN4f9hr9dcA7dZ3pA/0/968BC20DD88FCE9320FB1B78DEABAE723650B19A.crl rsync://rpki-repo.registro.br/repo/B4iUdeeuhT2A3tGv5XbWFcVv9yZjN4f9hr9dcA7dZ3pA/0/968BC20DD88FCE9320FB1B78DEABAE723650B19A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968BC20DD88FCE9320FB1B78DEABAE723650B19A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:21:89:85:67:9c:dd:05:1d:7b:50:a7:e5:7a:03:13:ce:ad:97:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968BC20DD88FCE9320FB1B78DEABAE723650B19A Validity Not Before: Oct 20 13:02:28 2025 GMT Not After : Oct 21 14:58:28 2025 GMT Subject: CN=3E9C93E0D15B2BAC090D182BB304D6970BBBD921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2c:12:01:03:2a:d3:74:c3:45:0f:00:bd:74: 58:7e:35:67:86:ae:ff:13:a4:39:eb:b3:07:d7:d8: e1:a2:af:10:c6:d9:e4:b3:02:5e:bd:44:d8:1b:0c: 33:1e:73:ee:bf:be:8e:ca:f8:59:b3:9b:76:ac:00: 58:0a:b6:43:78:39:d7:21:8c:57:98:66:4e:b8:10: 1f:ca:4d:a1:09:77:26:2f:4a:69:94:14:30:d6:77: 3a:53:0a:4a:d2:e4:57:6d:78:17:a5:49:8f:f6:69: b6:a0:28:7c:bd:86:59:eb:02:c3:e6:72:84:64:58: 65:df:78:bb:f3:f2:8b:c9:87:b3:d6:72:2a:42:36: 4c:61:c2:87:a1:17:99:21:5e:22:51:32:75:fb:83: 22:c5:44:94:fb:93:68:06:13:00:b0:d3:95:83:d1: a4:2d:98:4c:ac:36:2d:9c:c5:4a:47:40:24:27:d8: 46:5e:8b:4e:ab:51:72:a0:3d:31:10:f6:31:72:52: d7:44:8d:bb:09:da:a6:15:d4:54:25:16:d5:5b:9c: 4b:db:6c:8f:6e:87:5f:6e:8b:f9:00:76:08:ff:95: f9:11:ee:7c:8d:19:e5:96:ba:01:f6:dc:07:e6:08: 27:04:fb:96:6d:39:9c:e0:72:4c:6d:23:61:b6:4f: 12:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9C:93:E0:D1:5B:2B:AC:09:0D:18:2B:B3:04:D6:97:0B:BB:D9:21 X509v3 Authority Key Identifier: keyid:96:8B:C2:0D:D8:8F:CE:93:20:FB:1B:78:DE:AB:AE:72:36:50:B1:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/B4iUdeeuhT2A3tGv5XbWFcVv9yZjN4f9hr9dcA7dZ3pA/0/968BC20DD88FCE9320FB1B78DEABAE723650B19A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968BC20DD88FCE9320FB1B78DEABAE723650B19A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4iUdeeuhT2A3tGv5XbWFcVv9yZjN4f9hr9dcA7dZ3pA/0/968BC20DD88FCE9320FB1B78DEABAE723650B19A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0c:68:36:f6:97:85:40:0e:f9:97:90:40:cb:5f:12:d6:73: b4:00:ef:b8:b9:de:8d:00:d4:17:f7:3f:77:17:28:2a:ea:76: 7f:ac:1b:9a:5f:f7:a2:d7:1b:69:01:24:45:03:05:cc:8a:66: 57:f0:d6:fa:19:f5:7b:33:37:be:9c:cb:3c:d0:dd:93:7a:fe: 82:b6:76:96:b8:14:96:95:d8:bd:58:54:8f:60:7b:0f:49:ee: 05:bf:48:5d:c6:54:6d:30:ff:6b:bc:3a:9d:44:b0:7e:e0:98: c3:ab:28:29:43:7b:c3:55:17:ff:ab:d7:fb:b7:7e:f3:3c:99: b5:6f:bc:b4:9e:1c:d0:fb:d1:a9:45:a4:4a:ae:e1:00:51:2d: e0:6a:cf:a8:a3:86:28:a2:e0:be:90:3e:54:ec:af:bd:9c:98: e9:74:53:b3:b1:84:d6:d7:6b:04:56:c6:09:7c:b1:5b:1c:26: b6:ae:55:a7:10:0c:d3:d5:c9:a6:22:5d:82:65:0b:2a:13:a1: 8a:46:8d:93:ab:75:1d:48:77:6d:49:8b:35:6c:c1:ae:98:52: 52:92:cc:8e:76:3e:e4:95:17:e5:ed:6c:3e:59:48:03:53:94: fc:85:27:ed:f2:a8:a8:35:15:24:6a:62:8f:79:75:ad:86:fa: 60:f5:4d:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULCGJhWec3QUde1Cn5XoDE86tlx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4QkMyMEREODhGQ0U5MzIwRkIxQjc4REVBQkFFNzIz NjUwQjE5QTAeFw0yNTEwMjAxMzAyMjhaFw0yNTEwMjExNDU4MjhaMDMxMTAvBgNV BAMTKDNFOUM5M0UwRDE1QjJCQUMwOTBEMTgyQkIzMDRENjk3MEJCQkQ5MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnLBIBAyrTdMNFDwC9dFh+NWeG rv8TpDnrswfX2OGirxDG2eSzAl69RNgbDDMec+6/vo7K+Fmzm3asAFgKtkN4Odch jFeYZk64EB/KTaEJdyYvSmmUFDDWdzpTCkrS5FdteBelSY/2abagKHy9hlnrAsPm coRkWGXfeLvz8ovJh7PWcipCNkxhwoehF5khXiJRMnX7gyLFRJT7k2gGEwCw05WD 0aQtmEysNi2cxUpHQCQn2EZei06rUXKgPTEQ9jFyUtdEjbsJ2qYV1FQlFtVbnEvb bI9uh19ui/kAdgj/lfkR7nyNGeWWugH23AfmCCcE+5ZtOZzgckxtI2G2TxIZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPpyT4NFbK6wJDRgrswTWlwu72SEwHwYDVR0j BBgwFoAUlovCDdiPzpMg+xt43quucjZQsZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQjRpVWRlZXVoVDJBM3RHdjVYYldGY1Z2OXlaak40ZjlocjlkY0E3ZFoz cEEvMC85NjhCQzIwREQ4OEZDRTkzMjBGQjFCNzhERUFCQUU3MjM2NTBCMTlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2OEJDMjBERDg4RkNFOTMy MEZCMUI3OERFQUJBRTcyMzY1MEIxOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QjRpVWRlZXVoVDJBM3RHdjVYYldGY1Z2OXlaak40ZjlocjlkY0E3ZFozcEEvMC85 NjhCQzIwREQ4OEZDRTkzMjBGQjFCNzhERUFCQUU3MjM2NTBCMTlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACgxoNvaXhUAO+ZeQQMtfEtZztADvuLnejQDUF/c/dxcoKup2f6wbml/3otcb aQEkRQMFzIpmV/DW+hn1ezM3vpzLPNDdk3r+grZ2lrgUlpXYvVhUj2B7D0nuBb9I XcZUbTD/a7w6nUSwfuCYw6soKUN7w1UX/6vX+7d+8zyZtW+8tJ4c0PvRqUWkSq7h AFEt4GrPqKOGKKLgvpA+VOyvvZyY6XRTs7GE1tdrBFbGCXyxWxwmtq5VpxAM09XJ piJdgmULKhOhikaNk6t1HUh3bUmLNWzBrphSUpLMjnY+5JUX5e1sPllIA1OU/IUn 7fKoqDUVJGpij3l1rYb6YPVNKg== -----END CERTIFICATE-----Generated at Mon Oct 20 16:08:37 2025 by rpki-client