$ rpki-client -vvf rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft File: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft (raw, json) Hash identifier: dT0IDNTzcQcIHm1LtOoNTxP5Ua/r3vIkSOvlRvW9QC0= Subject key identifier: AC:28:08:C5:1E:A3:44:E2:96:B2:C9:A3:7D:16:5B:13:48:FB:9C:2F Authority key identifier: 09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0 Certificate issuer: /CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0 Certificate serial: 1078F9109E5E73FD56B601EC042951180C62A25D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer Subject info access: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft Manifest number: 0230 Signing time: Mon 20 Oct 2025 18:41:10 +0000 Manifest this update: Mon 20 Oct 2025 18:36:10 +0000 Manifest next update: Tue 21 Oct 2025 20:03:10 +0000 Files and hashes: 1: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl (hash: N2aW64CUUjo/M+7fXdpd7f3IvNTXwjrZdxIkLHxMnP8=) 2: 34352e3136312e33362e302f32322d3332203d3e20323638353030.roa (hash: i8P9i+svn6eTugjVKIH7LsBAziQNryR6tY4w3i2ypmg=) 3: 323830343a353232633a3a2f33322d313238203d3e20323638353030.roa (hash: VL/snBcA4TQASO1JgrhJJ4GnQSQZ2IO6gxXlLXQGjG8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 20:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:78:f9:10:9e:5e:73:fd:56:b6:01:ec:04:29:51:18:0c:62:a2:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0 Validity Not Before: Oct 20 18:36:10 2025 GMT Not After : Oct 21 20:03:10 2025 GMT Subject: CN=AC2808C51EA344E296B2C9A37D165B1348FB9C2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e9:bf:31:e9:fb:d5:9e:0c:7d:1b:22:1d:c4: 43:f1:f5:d1:9d:86:27:c1:7d:b3:de:0d:0b:b0:c5: 5b:bd:6b:35:3e:67:5d:be:0b:49:a8:0b:c0:6d:fa: e5:3b:db:f5:ae:3e:6f:63:3a:13:83:3e:8b:65:0e: ca:55:71:81:fc:11:99:3b:ae:f8:1c:ea:f4:89:d9: 29:1c:b8:d4:d0:c8:e3:85:4a:10:a0:3f:ec:db:e5: 76:f1:04:54:1f:e4:39:84:e3:78:e6:7b:3e:3d:32: 55:06:30:de:1e:c0:fb:83:1e:2c:57:26:ad:a9:d5: 82:20:fc:fd:8f:3c:bd:61:bf:2c:de:04:6d:d2:9c: 93:0c:8a:a5:73:74:2f:4c:ca:70:41:ab:f7:3e:e4: e5:2e:9b:bb:c9:d1:79:27:ed:21:b1:12:fd:db:08: 9c:20:b4:c0:92:de:60:34:32:d0:28:cb:26:9e:db: dc:cf:58:55:65:c0:7b:d0:b3:16:2f:d1:3c:fb:0d: 6d:21:d5:a8:6a:5c:c0:fe:c5:1d:3f:28:d5:82:31: e6:3a:d6:0e:f2:73:7a:16:39:c6:ae:fe:57:90:66: 5e:34:26:32:9e:a1:de:be:1b:fa:f7:c8:ca:50:d1: a0:2a:05:fc:79:fc:25:65:52:52:75:e3:a5:fb:ff: 84:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:28:08:C5:1E:A3:44:E2:96:B2:C9:A3:7D:16:5B:13:48:FB:9C:2F X509v3 Authority Key Identifier: keyid:09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:30:6a:3d:f1:ce:fe:e2:b6:03:88:d4:df:5c:92:6b:47:f3: 19:3d:d5:63:ef:52:f3:b8:27:c8:90:ba:0c:45:80:18:0e:62: 17:9c:23:17:6b:01:f2:ee:6a:83:08:b0:1b:46:44:ce:62:6e: 08:9a:8e:f2:d3:5a:1f:3e:62:23:c2:12:35:5a:d6:5b:b9:95: d9:22:07:e5:c0:59:d0:31:f3:9a:44:ed:0f:64:14:ca:14:53: 06:1b:b8:2f:12:a8:de:12:13:d6:95:ce:20:37:19:7d:0c:cd: bf:f9:c9:c2:31:d6:85:cb:ef:d4:19:f9:fa:76:57:a9:75:0b: 83:2c:5f:1a:8a:b3:2a:ff:77:05:32:c4:50:3f:19:af:9b:29: 14:fd:c8:18:37:59:65:d4:85:ee:3a:0d:d2:66:b1:c9:56:f0: 98:30:78:cf:34:fc:a8:30:69:36:f8:43:77:5e:fa:96:f3:84: f4:1b:08:3c:dc:c1:be:2c:da:68:e6:fd:86:75:d1:a1:59:d9: 95:47:8f:db:e3:2b:92:f9:b2:1b:96:24:a2:72:84:f5:d8:50: 8a:b5:97:0b:c7:56:40:7b:13:76:75:b9:48:bf:2e:e0:11:7b: 6d:a4:b8:98:8f:0c:5b:e4:85:80:b8:44:e1:ac:c7:36:d1:59: 1f:90:ac:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEHj5EJ5ec/1WtgHsBClRGAxiol0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlEOEQ0QTY3MDY5NTgwRTM0RjE2QUIwNDc0MjBCRDRB MDhENEZGMDAeFw0yNTEwMjAxODM2MTBaFw0yNTEwMjEyMDAzMTBaMDMxMTAvBgNV BAMTKEFDMjgwOEM1MUVBMzQ0RTI5NkIyQzlBMzdEMTY1QjEzNDhGQjlDMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76b8x6fvVngx9GyIdxEPx9dGd hifBfbPeDQuwxVu9azU+Z12+C0moC8Bt+uU72/WuPm9jOhODPotlDspVcYH8EZk7 rvgc6vSJ2SkcuNTQyOOFShCgP+zb5XbxBFQf5DmE43jmez49MlUGMN4ewPuDHixX Jq2p1YIg/P2PPL1hvyzeBG3SnJMMiqVzdC9MynBBq/c+5OUum7vJ0Xkn7SGxEv3b CJwgtMCS3mA0MtAoyyae29zPWFVlwHvQsxYv0Tz7DW0h1ahqXMD+xR0/KNWCMeY6 1g7yc3oWOcau/leQZl40JjKeod6+G/r3yMpQ0aAqBfx5/CVlUlJ146X7/4Q5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrCgIxR6jROKWssmjfRZbE0j7nC8wHwYDVR0j BBgwFoAUCdjUpnBpWA408WqwR0IL1KCNT/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnlMMURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9D UWsvMC8wOUQ4RDRBNjcwNjk1ODBFMzRGMTZBQjA0NzQyMEJENEEwOEQ0RkYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5RDhENEE2NzA2OTU4MEUz NEYxNkFCMDQ3NDIwQkQ0QTA4RDRGRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnlMMURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9DUWsvMC8w OUQ4RDRBNjcwNjk1ODBFMzRGMTZBQjA0NzQyMEJENEEwOEQ0RkYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEDBqPfHO/uK2A4jU31ySa0fzGT3VY+9S87gnyJC6DEWAGA5iF5wjF2sB8u5q gwiwG0ZEzmJuCJqO8tNaHz5iI8ISNVrWW7mV2SIH5cBZ0DHzmkTtD2QUyhRTBhu4 LxKo3hIT1pXOIDcZfQzNv/nJwjHWhcvv1Bn5+nZXqXULgyxfGoqzKv93BTLEUD8Z r5spFP3IGDdZZdSF7joN0maxyVbwmDB4zzT8qDBpNvhDd176lvOE9BsIPNzBviza aOb9hnXRoVnZlUeP2+MrkvmyG5YkonKE9dhQirWXC8dWQHsTdnW5SL8u4BF7baS4 mI8MW+SFgLhE4azHNtFZH5CsRw== -----END CERTIFICATE-----Generated at Mon Oct 20 23:36:47 2025 by rpki-client