$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.mft File: 9BAD7480D68EE59406D3FBBE7F30557285587474.mft (raw, json) Hash identifier: lBz+A+W1Grs26kcN9Irkgedu0+gfTp+wFz0Jf34Wdek= Subject key identifier: 70:FF:A7:1D:60:5B:BA:CA:58:20:C9:1D:F4:92:D9:4F:18:BD:57:17 Authority key identifier: 9B:AD:74:80:D6:8E:E5:94:06:D3:FB:BE:7F:30:55:72:85:58:74:74 Certificate issuer: /CN=9BAD7480D68EE59406D3FBBE7F30557285587474 Certificate serial: 5CB4743D6001BD378904C958211E769D68FC1353 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.mft Manifest number: 02F3 Signing time: Mon 20 Oct 2025 08:38:34 +0000 Manifest this update: Mon 20 Oct 2025 08:33:34 +0000 Manifest next update: Tue 21 Oct 2025 10:12:34 +0000 Files and hashes: 1: 3133382e3132312e3133322e302f32322d3232203d3e20323634333030.roa (hash: nePLrI7joRrgQbt2fVsGs3GZCbneiBCFymjlsXZNuSI=) 2: 323830343a323563303a3a2f33322d3332203d3e20323634333030.roa (hash: L06efUO1+vC2w7zP0ypGVVsEcp/3D2fU1pOY4umhEf4=) 3: 3137302e3234342e3131322e302f32322d3232203d3e20323634333030.roa (hash: 3Bhf53UxlegeRmPK19xaYrMRnKpA/2NUddq4Nia28JA=) 4: 9BAD7480D68EE59406D3FBBE7F30557285587474.crl (hash: cQjFBhSuk97q4yaKmnez4/lk25SKzX9esXBvJayVLGI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.crl rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 10:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b4:74:3d:60:01:bd:37:89:04:c9:58:21:1e:76:9d:68:fc:13:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BAD7480D68EE59406D3FBBE7F30557285587474 Validity Not Before: Oct 20 08:33:34 2025 GMT Not After : Oct 21 10:12:34 2025 GMT Subject: CN=70FFA71D605BBACA5820C91DF492D94F18BD5717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dd:d2:50:48:90:2f:2b:cc:91:25:18:89:be: c4:05:1c:32:f0:d3:50:bf:06:a0:79:bf:c1:4c:d0: 38:d0:65:82:fe:61:2b:91:5e:5e:f6:3a:6e:81:22: be:a4:65:3e:78:9c:7e:e4:49:46:3a:a4:61:17:bf: 6f:77:ae:5d:ce:f5:7f:7a:22:a1:12:7d:fe:38:13: 4d:b0:78:6e:cb:34:30:d7:3f:6b:48:1d:c1:a4:48: 14:8d:86:90:cc:3c:7c:0e:85:f2:88:cb:ba:18:96: cd:1d:7d:e1:3b:3d:e2:20:fc:e9:28:24:ad:a0:55: 3f:eb:1f:84:47:39:12:5d:11:17:5b:91:99:6b:e4: df:ba:2e:1c:18:c9:f7:a8:8e:42:c7:9d:4e:ad:97: 7b:29:03:51:42:31:20:d5:19:08:fe:c6:75:05:dc: ec:e0:53:17:b4:b4:69:26:ec:0c:4d:d6:70:52:ec: b3:73:22:53:81:84:5e:64:0a:b6:fc:20:98:56:19: d7:c8:7e:2f:7f:a5:4a:62:d0:d8:15:d4:03:26:8d: 39:79:e1:3f:ff:7e:ff:90:e0:6f:07:50:37:e5:5e: 92:18:ac:a5:86:35:6d:0e:42:93:9a:aa:db:61:a0: 0e:9a:85:c8:c8:ba:4a:e8:70:fa:81:c7:fd:95:79: fe:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FF:A7:1D:60:5B:BA:CA:58:20:C9:1D:F4:92:D9:4F:18:BD:57:17 X509v3 Authority Key Identifier: keyid:9B:AD:74:80:D6:8E:E5:94:06:D3:FB:BE:7F:30:55:72:85:58:74:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:20:d3:26:ea:1e:de:23:f3:e6:fa:88:f8:b6:ea:f1:54:8b: 24:92:13:7b:d0:03:85:0a:44:a6:43:32:07:14:7a:6d:02:7e: 42:e5:2c:1e:c1:17:43:f0:9c:3b:fb:8b:82:10:1d:95:92:9e: c9:da:1a:5a:c0:b3:50:61:08:d1:c8:20:52:59:a8:dc:73:8c: e3:8c:84:a6:16:9b:77:75:bf:97:52:04:22:f7:24:46:37:e0: f3:99:e3:8f:eb:02:c3:0b:98:55:31:77:48:9d:37:30:87:4a: a9:17:23:28:37:6a:23:a0:c7:96:f1:13:f2:5f:77:a3:58:c7: db:b3:e6:95:e8:1a:c9:71:56:d1:02:82:73:1e:31:6f:6d:1a: b6:b3:e7:a5:34:06:37:7d:db:87:ff:4b:ac:4f:d5:6e:19:9b: 68:0c:b4:1d:c8:db:46:63:15:41:75:c6:ff:52:5f:69:20:28: 8e:f6:6e:8b:41:83:06:44:5c:bd:3f:2d:36:13:c7:36:0a:3e: 6d:d8:43:cf:5e:0a:d2:f7:14:17:19:73:c7:82:91:7c:4e:0d: 1a:b9:7f:3e:3e:20:dc:4b:6d:80:3a:08:15:79:a8:79:33:39: 59:1c:b5:e0:91:2e:eb:b2:b8:f4:6a:fb:6e:8c:c4:3d:57:d1: 6e:92:36:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXLR0PWABvTeJBMlYIR52nWj8E1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJBRDc0ODBENjhFRTU5NDA2RDNGQkJFN0YzMDU1NzI4 NTU4NzQ3NDAeFw0yNTEwMjAwODMzMzRaFw0yNTEwMjExMDEyMzRaMDMxMTAvBgNV BAMTKDcwRkZBNzFENjA1QkJBQ0E1ODIwQzkxREY0OTJEOTRGMThCRDU3MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg3dJQSJAvK8yRJRiJvsQFHDLw 01C/BqB5v8FM0DjQZYL+YSuRXl72Om6BIr6kZT54nH7kSUY6pGEXv293rl3O9X96 IqESff44E02weG7LNDDXP2tIHcGkSBSNhpDMPHwOhfKIy7oYls0dfeE7PeIg/Oko JK2gVT/rH4RHORJdERdbkZlr5N+6LhwYyfeojkLHnU6tl3spA1FCMSDVGQj+xnUF 3OzgUxe0tGkm7AxN1nBS7LNzIlOBhF5kCrb8IJhWGdfIfi9/pUpi0NgV1AMmjTl5 4T//fv+Q4G8HUDflXpIYrKWGNW0OQpOaqtthoA6ahcjIukrocPqBx/2Vef4JAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcP+nHWBbuspYIMkd9JLZTxi9VxcwHwYDVR0j BBgwFoAUm610gNaO5ZQG0/u+fzBVcoVYdHQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmIyMzV2eVhVN2ZEaVJRaVh4YldQTUpMUmFpczVmWEJrOEZKemRUZ0Rt eVQvMS85QkFENzQ4MEQ2OEVFNTk0MDZEM0ZCQkU3RjMwNTU3Mjg1NTg3NDc0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCQUQ3NDgwRDY4RUU1OTQw NkQzRkJCRTdGMzA1NTcyODU1ODc0NzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmIyMzV2eVhVN2ZEaVJRaVh4YldQTUpMUmFpczVmWEJrOEZKemRUZ0RteVQvMS85 QkFENzQ4MEQ2OEVFNTk0MDZEM0ZCQkU3RjMwNTU3Mjg1NTg3NDc0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoyDTJuoe3iPz5vqI+Lbq8VSLJJITe9ADhQpEpkMyBxR6bQJ+QuUsHsEXQ/Cc O/uLghAdlZKeydoaWsCzUGEI0cggUlmo3HOM44yEphabd3W/l1IEIvckRjfg85nj j+sCwwuYVTF3SJ03MIdKqRcjKDdqI6DHlvET8l93o1jH27PmlegayXFW0QKCcx4x b20atrPnpTQGN33bh/9LrE/VbhmbaAy0HcjbRmMVQXXG/1JfaSAojvZui0GDBkRc vT8tNhPHNgo+bdhDz14K0vcUFxlzx4KRfE4NGrl/Pj4g3EttgDoIFXmoeTM5WRy1 4JEu67K49Gr7bozEPVfRbpI2zg== -----END CERTIFICATE-----Generated at Tue Oct 21 02:02:02 2025 by rpki-client