$ rpki-client -vvf rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft File: 964DA9AAC4C916D348B028DBC19BD5C08E437560.mft (raw, json) Hash identifier: m9uvo8rBVFHTENH0cKU8reg+TRYoEH2XyCAbNLr4H80= Subject key identifier: 16:89:54:4E:62:7E:0F:1F:5E:F8:EF:43:14:21:8E:FC:06:27:C3:A2 Authority key identifier: 96:4D:A9:AA:C4:C9:16:D3:48:B0:28:DB:C1:9B:D5:C0:8E:43:75:60 Certificate issuer: /CN=964DA9AAC4C916D348B028DBC19BD5C08E437560 Certificate serial: 7E666FE16D39D4A2FB21C9FD046879C757999678 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964DA9AAC4C916D348B028DBC19BD5C08E437560.cer Subject info access: rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft Manifest number: 12 Signing time: Mon 20 Oct 2025 10:57:05 +0000 Manifest this update: Mon 20 Oct 2025 10:52:05 +0000 Manifest next update: Tue 21 Oct 2025 10:59:05 +0000 Files and hashes: 1: 964DA9AAC4C916D348B028DBC19BD5C08E437560.crl (hash: WVi5GgmSRPD/q80GHaHh/FUChx410CyQMZCo7w0duSU=) 2: 34352e3138342e3230342e302f32322d3234203d3e20323732343539.roa (hash: mA2x0qV3KIplcTlRhrF70yJUuAie/XmNs1/bE1FVb5M=) 3: 323830343a383138343a3a2f33322d3438203d3e20323732343539.roa (hash: nV+YnLkMXJ7NLvIA4eiIiwEhwUO0vMdc2CE6F8m39Pw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.crl rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964DA9AAC4C916D348B028DBC19BD5C08E437560.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 10:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:66:6f:e1:6d:39:d4:a2:fb:21:c9:fd:04:68:79:c7:57:99:96:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964DA9AAC4C916D348B028DBC19BD5C08E437560 Validity Not Before: Oct 20 10:52:05 2025 GMT Not After : Oct 21 10:59:05 2025 GMT Subject: CN=1689544E627E0F1F5EF8EF4314218EFC0627C3A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4c:4f:c2:53:fb:a4:11:dc:a2:08:2f:33:84: cf:27:c6:bc:89:9b:6f:3a:d2:97:be:a9:17:f0:78: 92:32:07:1c:d1:38:b4:e9:82:37:59:0d:5e:ea:90: 7e:31:31:4d:2a:02:02:51:5f:b6:fa:1b:3b:cf:2a: 42:cd:04:72:c0:02:69:c4:f5:de:95:c0:6e:75:ea: d7:d9:7b:5f:19:22:0e:7b:84:9a:07:ba:58:d6:b3: 04:5a:8c:9e:9b:5f:dd:50:ff:5d:bc:07:68:e1:30: 3e:01:b5:22:cf:f0:73:46:26:7d:51:28:79:66:75: 39:ee:d5:5f:3b:33:aa:10:51:dc:e7:ad:21:9a:5a: 8e:aa:f4:30:9d:f7:a3:04:a0:be:d2:c8:d9:c7:56: c3:33:71:48:26:33:11:ae:50:43:d3:57:03:ad:d9: 06:e1:d7:2b:e9:2d:e8:af:62:dd:6b:a0:23:b2:a7: db:78:e2:e6:59:41:62:de:c3:5e:9a:e6:82:4c:48: d7:88:5c:76:79:45:27:d0:a3:1c:1e:5a:97:66:58: e4:88:0f:39:35:a3:e3:c1:0b:df:97:13:c9:db:7d: 7d:0d:9d:a8:cd:69:3a:3e:b1:d8:e2:bd:5f:e5:c8: 82:13:5b:ff:49:86:3a:7b:39:ce:a7:2e:ad:e0:bb: fe:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:89:54:4E:62:7E:0F:1F:5E:F8:EF:43:14:21:8E:FC:06:27:C3:A2 X509v3 Authority Key Identifier: keyid:96:4D:A9:AA:C4:C9:16:D3:48:B0:28:DB:C1:9B:D5:C0:8E:43:75:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964DA9AAC4C916D348B028DBC19BD5C08E437560.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:14:3a:a9:e2:61:03:b2:7f:56:04:fc:bf:ab:d9:d1:84:76: a1:a7:22:c3:f7:b4:5a:28:af:f3:cb:77:df:4d:3b:30:d3:49: 7e:c9:42:6b:cb:6b:71:7b:03:b3:3d:6d:e1:40:6c:e4:42:b5: 54:81:e1:8d:b1:c0:29:89:70:b6:39:81:eb:24:b5:5e:1a:64: 47:23:b2:8e:44:e6:07:1a:96:ed:b5:4a:a4:07:63:46:ab:b7: 0d:59:32:ea:9a:52:de:56:7e:35:60:2c:45:01:95:5e:8e:54: 87:cf:fe:84:65:34:96:4e:d8:d4:62:43:3d:da:04:47:92:98: 09:f7:b5:40:a7:62:59:ca:97:b1:fc:ad:51:5a:29:76:1f:b7: 29:47:b7:c5:07:63:c3:69:f6:4a:19:44:06:6d:85:f4:b6:4a: df:e3:5e:71:e6:7e:d6:aa:45:98:4c:c3:22:2b:45:60:f1:88: d7:10:6f:f8:c5:c8:85:a6:d4:ed:2f:55:08:4b:fb:a8:c8:2a: 88:43:a8:59:56:1d:75:ff:64:b4:68:75:5e:54:1b:40:17:fc: 69:d3:25:e9:26:f2:24:9e:7d:bc:ee:39:a0:85:ab:64:e4:74: d3:a9:e7:c7:b1:e1:f6:04:82:1b:11:7e:dd:c2:05:7c:f8:56: ed:77:55:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfmZv4W051KL7Icn9BGh5x1eZlngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY0REE5QUFDNEM5MTZEMzQ4QjAyOERCQzE5QkQ1QzA4 RTQzNzU2MDAeFw0yNTEwMjAxMDUyMDVaFw0yNTEwMjExMDU5MDVaMDMxMTAvBgNV BAMTKDE2ODk1NDRFNjI3RTBGMUY1RUY4RUY0MzE0MjE4RUZDMDYyN0MzQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPTE/CU/ukEdyiCC8zhM8nxryJ m2860pe+qRfweJIyBxzROLTpgjdZDV7qkH4xMU0qAgJRX7b6GzvPKkLNBHLAAmnE 9d6VwG516tfZe18ZIg57hJoHuljWswRajJ6bX91Q/128B2jhMD4BtSLP8HNGJn1R KHlmdTnu1V87M6oQUdznrSGaWo6q9DCd96MEoL7SyNnHVsMzcUgmMxGuUEPTVwOt 2Qbh1yvpLeivYt1roCOyp9t44uZZQWLew16a5oJMSNeIXHZ5RSfQoxweWpdmWOSI Dzk1o+PBC9+XE8nbfX0NnajNaTo+sdjivV/lyIITW/9Jhjp7Oc6nLq3gu/49AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFolUTmJ+Dx9e+O9DFCGO/AYnw6IwHwYDVR0j BBgwFoAUlk2pqsTJFtNIsCjbwZvVwI5DdWAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0NYaXZnSGhyYm5UM0xaRXltTGhKR2tLY0ZnS2J3TkhEaVgydWp5TnhB TEQvMC85NjREQTlBQUM0QzkxNkQzNDhCMDI4REJDMTlCRDVDMDhFNDM3NTYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2NERBOUFBQzRDOTE2RDM0 OEIwMjhEQkMxOUJENUMwOEU0Mzc1NjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0NYaXZnSGhyYm5UM0xaRXltTGhKR2tLY0ZnS2J3TkhEaVgydWp5TnhBTEQvMC85 NjREQTlBQUM0QzkxNkQzNDhCMDI4REJDMTlCRDVDMDhFNDM3NTYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIBQ6qeJhA7J/VgT8v6vZ0YR2oaciw/e0Wiiv88t33007MNNJfslCa8trcXsD sz1t4UBs5EK1VIHhjbHAKYlwtjmB6yS1XhpkRyOyjkTmBxqW7bVKpAdjRqu3DVky 6ppS3lZ+NWAsRQGVXo5Uh8/+hGU0lk7Y1GJDPdoER5KYCfe1QKdiWcqXsfytUVop dh+3KUe3xQdjw2n2ShlEBm2F9LZK3+NeceZ+1qpFmEzDIitFYPGI1xBv+MXIhabU 7S9VCEv7qMgqiEOoWVYddf9ktGh1XlQbQBf8adMl6SbyJJ59vO45oIWrZOR006nn x7Hh9gSCGxF+3cIFfPhW7XdVKA== -----END CERTIFICATE-----Generated at Mon Oct 20 19:53:32 2025 by rpki-client