$ rpki-client -vvf rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.mft File: C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.mft (raw, json) Hash identifier: B/zblBC6aMe9LIiBL0cab1/qrfxdbf4AyTkuRpHPsG8= Subject key identifier: 18:72:F7:66:01:90:13:F0:80:D7:7F:DF:FD:9B:5D:DD:8B:6D:9C:0C Authority key identifier: C3:29:B9:ED:4E:5F:36:AA:39:0B:AE:0F:D9:C5:41:28:D4:90:DC:4F Certificate issuer: /CN=C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F Certificate serial: 682EF26F3576420DCF614371B98F36D3A6439755 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.cer Subject info access: rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.mft Manifest number: 0173 Signing time: Mon 20 Oct 2025 10:49:28 +0000 Manifest this update: Mon 20 Oct 2025 10:44:28 +0000 Manifest next update: Tue 21 Oct 2025 11:02:28 +0000 Files and hashes: 1: C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.crl (hash: YPmTYjFvgOS+itRBYRIQxoYTPpTDBxTETPjvHbjc/ZE=) 2: 3137302e38332e3139362e302f32322d3234203d3e20323636343736.roa (hash: 2OZaK3XVHDYJW95YQoRuXz+veAnFcZdofQ9N3sdy+d4=) 3: 323830343a333836633a3a2f33322d3336203d3e20323636343736.roa (hash: 2GvlRynMXEvu3A0kCDLQB+Gp55iYyLUR7ENalGcUhBc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.crl rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:2e:f2:6f:35:76:42:0d:cf:61:43:71:b9:8f:36:d3:a6:43:97:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F Validity Not Before: Oct 20 10:44:28 2025 GMT Not After : Oct 21 11:02:28 2025 GMT Subject: CN=1872F766019013F080D77FDFFD9B5DDD8B6D9C0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f7:f1:05:95:4b:54:aa:a4:2d:1d:e5:ee:a6: 3b:55:92:ab:c3:b4:f1:c3:f9:d8:18:37:66:d7:fd: 20:06:75:1b:3c:8f:96:b0:9b:91:fd:2e:60:f0:c1: 99:32:c6:8d:a3:c2:dd:4b:5e:17:18:29:79:c8:80: b1:9b:56:7f:41:cb:ba:95:2a:30:61:6d:16:ea:02: 12:5d:30:64:27:d6:62:d8:2a:1a:a5:a3:91:de:47: 8f:1b:38:44:4d:d6:5a:e8:01:10:4a:21:06:84:8a: 79:39:ff:b6:3a:fa:f4:2d:25:08:e7:0b:dc:08:03: 57:3f:47:e6:ca:41:6f:ad:4d:75:8d:6d:d2:39:98: 27:2f:4d:7d:3a:5c:11:58:9f:35:05:18:96:48:79: 90:14:0c:0a:bd:29:e6:fd:26:64:c9:63:62:16:c3: b2:83:3a:3c:39:39:2c:98:8d:30:ea:1e:51:bf:80: 04:5e:e1:16:66:2f:78:d5:89:4a:a9:ab:76:8e:a2: 3b:aa:31:40:61:f7:e2:7d:62:88:1a:63:d3:8c:41: 48:0d:56:59:6b:0e:a4:c1:6e:dd:0b:bd:b7:e2:9c: 81:a2:d8:49:bf:91:36:77:fc:f9:db:e3:84:a9:87: 9f:d1:b7:f1:c2:b5:b6:f6:2a:4d:9c:ab:e9:d9:80: 33:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:72:F7:66:01:90:13:F0:80:D7:7F:DF:FD:9B:5D:DD:8B:6D:9C:0C X509v3 Authority Key Identifier: keyid:C3:29:B9:ED:4E:5F:36:AA:39:0B:AE:0F:D9:C5:41:28:D4:90:DC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f2:fc:ce:fa:64:46:01:b6:6b:f1:2c:fd:ac:69:08:b6:fc: 1c:aa:57:5e:54:89:c6:17:3b:46:37:f5:3d:af:12:79:94:5f: e0:76:19:c4:1d:45:7b:e1:09:ad:ce:4c:5b:90:03:7e:5a:43: 74:96:0d:fe:e9:34:1f:cd:37:41:37:ac:0a:03:9e:51:13:4b: ac:31:b9:d7:75:db:11:7d:b0:64:a3:8c:5f:63:ae:4f:21:48: e7:a8:96:5f:5f:0f:43:7b:bd:1a:42:e9:a8:1c:fb:94:e0:9d: 41:e0:23:ee:b9:3a:5a:8b:2c:ef:4b:01:8f:36:3b:21:08:92: af:98:f0:4f:1c:0f:17:b5:94:6d:53:a4:10:66:b4:cc:e5:db: f6:0d:c5:e5:2e:86:7d:52:29:8b:df:58:38:38:50:24:9b:2f: b5:5d:a9:f4:b2:18:4e:24:4b:b8:aa:29:46:99:32:2f:bf:08: 12:e3:78:ff:ef:ef:22:74:4b:f6:f7:0d:50:4a:f9:11:c1:08: 0d:28:19:e9:f6:33:60:5e:6c:b3:dc:71:15:87:64:6a:1a:80: 7b:7c:e8:c0:60:71:ef:46:f5:ad:d1:05:96:22:3b:00:66:90: 25:b0:7d:74:27:68:06:22:c4:b3:66:83:f5:bb:41:14:50:85: b4:fb:30:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaC7ybzV2Qg3PYUNxuY8206ZDl1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMyOUI5RUQ0RTVGMzZBQTM5MEJBRTBGRDlDNTQxMjhE NDkwREM0RjAeFw0yNTEwMjAxMDQ0MjhaFw0yNTEwMjExMTAyMjhaMDMxMTAvBgNV BAMTKDE4NzJGNzY2MDE5MDEzRjA4MEQ3N0ZERkZEOUI1REREOEI2RDlDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy9/EFlUtUqqQtHeXupjtVkqvD tPHD+dgYN2bX/SAGdRs8j5awm5H9LmDwwZkyxo2jwt1LXhcYKXnIgLGbVn9By7qV KjBhbRbqAhJdMGQn1mLYKhqlo5HeR48bOERN1lroARBKIQaEink5/7Y6+vQtJQjn C9wIA1c/R+bKQW+tTXWNbdI5mCcvTX06XBFYnzUFGJZIeZAUDAq9Keb9JmTJY2IW w7KDOjw5OSyYjTDqHlG/gARe4RZmL3jViUqpq3aOojuqMUBh9+J9YogaY9OMQUgN VllrDqTBbt0LvbfinIGi2Em/kTZ3/Pnb44Sph5/Rt/HCtbb2Kk2cq+nZgDMbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGHL3ZgGQE/CA13/f/Ztd3YttnAwwHwYDVR0j BBgwFoAUwym57U5fNqo5C64P2cVBKNSQ3E8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQjlRSnk0ckQ3WXNQcnNSUVFOQ1k4c2FBYTJocU5ReXlncVJCM3pGcGRY cnAvMC9DMzI5QjlFRDRFNUYzNkFBMzkwQkFFMEZEOUM1NDEyOEQ0OTBEQzRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzMjlCOUVENEU1RjM2QUEz OTBCQUUwRkQ5QzU0MTI4RDQ5MERDNEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QjlRSnk0ckQ3WXNQcnNSUVFOQ1k4c2FBYTJocU5ReXlncVJCM3pGcGRYcnAvMC9D MzI5QjlFRDRFNUYzNkFBMzkwQkFFMEZEOUM1NDEyOEQ0OTBEQzRGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZfL8zvpkRgG2a/Es/axpCLb8HKpXXlSJxhc7Rjf1Pa8SeZRf4HYZxB1Fe+EJ rc5MW5ADflpDdJYN/uk0H803QTesCgOeURNLrDG513XbEX2wZKOMX2OuTyFI56iW X18PQ3u9GkLpqBz7lOCdQeAj7rk6Woss70sBjzY7IQiSr5jwTxwPF7WUbVOkEGa0 zOXb9g3F5S6GfVIpi99YODhQJJsvtV2p9LIYTiRLuKopRpkyL78IEuN4/+/vInRL 9vcNUEr5EcEIDSgZ6fYzYF5ss9xxFYdkahqAe3zowGBx70b1rdEFliI7AGaQJbB9 dCdoBiLEs2aD9btBFFCFtPswGQ== -----END CERTIFICATE-----Generated at Mon Oct 20 13:35:00 2025 by rpki-client