$ rpki-client -vvf rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft File: 6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft (raw, json) Hash identifier: /ta+BTBcKFFEHrmPmYe++p7cyxkdtVMJItPc2+2pJEk= Subject key identifier: C0:86:A8:F7:EC:B3:BF:F0:C7:F0:E9:AC:96:75:BD:F2:97:76:9D:37 Authority key identifier: 6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5 Certificate issuer: /CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5 Certificate serial: 4F64771E6085064F7E0A31B81ED81D45ECD3AAF7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer Subject info access: rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft Manifest number: 02CB Signing time: Mon 20 Oct 2025 01:13:15 +0000 Manifest this update: Mon 20 Oct 2025 01:08:15 +0000 Manifest next update: Tue 21 Oct 2025 03:39:15 +0000 Files and hashes: 1: 6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl (hash: /DW4cbLyx/vzI6oQbW9i7UPCqSWfuZCt4LSd+eyk7II=) 2: 323830343a373530383a3a2f33322d3332203d3e20323731303139.roa (hash: vhrmBhdW2/PcMu6NZzpGOaiNcd6anEnxJWx7mtl2EBM=) 3: 3230302e35322e3233322e302f32322d3232203d3e20323731303139.roa (hash: 9ERjD8DpMziib6W0C0kG5iGqYzmf9eF0V4BiiOmtU68=) 4: 3230302e35322e3233322e302f32342d3234203d3e20323731303139.roa (hash: c4PPN6wFHzuq9kaaPGGrSlo93rXbxOjhwQFJSFYiXUw=) 5: 323830343a373530383a383030303a3a2f33332d3333203d3e20323731303139.roa (hash: QvHD+8bnZO2kmruKs7D43+Yv6hI4ZOC1zobZkNm/zBA=) 6: 323830343a373530383a3a2f33332d3333203d3e20323731303139.roa (hash: X1QD84AC4JuUekosPwjzhODK0jzgOmd7exaN/ZNCZdk=) 7: 3230302e35322e3233342e302f32342d3234203d3e20323731303139.roa (hash: mD7GAYq9GGc8WjKImP45gHt1Ft6n/r6hQv5LthbOFb8=) 8: 3230302e35322e3233332e302f32342d3234203d3e20323731303139.roa (hash: NcI9KkqSD4goARlYy1Wv3SSUSOmbTQLuuXWm9DjOEz8=) 9: 3230302e35322e3233352e302f32342d3234203d3e20323731303139.roa (hash: vyUaimHNkZJvKEBS/Qakn9p1h1Rp8WdfUQjYAoVgIj0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 03:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:64:77:1e:60:85:06:4f:7e:0a:31:b8:1e:d8:1d:45:ec:d3:aa:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5 Validity Not Before: Oct 20 01:08:15 2025 GMT Not After : Oct 21 03:39:15 2025 GMT Subject: CN=C086A8F7ECB3BFF0C7F0E9AC9675BDF297769D37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ff:91:e4:af:75:1d:0d:7a:3f:8e:2e:b0:98: ab:a7:2b:b9:97:e4:e2:fd:23:6e:bb:91:76:04:31: 7a:ab:2c:fb:18:5c:fa:13:73:b6:c4:53:c3:b7:d1: f8:04:a8:a8:86:69:ce:b3:54:a5:f5:04:4d:19:26: eb:39:c2:45:1c:f2:34:82:a2:5f:34:43:e2:e3:5d: dc:91:b2:66:c1:65:f7:a0:e9:55:20:ec:05:cf:70: 5e:7a:a7:62:9c:03:db:d0:91:bc:e9:7e:74:60:a0: 77:8c:1b:50:a0:7c:9a:bc:52:76:25:e0:a3:1f:df: 9b:b0:89:e5:55:69:30:38:66:4b:4b:ef:e6:e3:03: 21:79:08:a7:bb:1f:0e:a5:6e:e0:4f:f0:e3:1a:34: 65:97:dd:56:75:6e:a1:0c:9d:65:06:7b:d0:49:31: 87:64:73:cf:bb:5e:e0:d1:22:c4:d2:33:3f:cd:11: 09:b6:55:39:b9:ce:74:a4:38:5f:9a:2b:0b:5e:8c: 26:9e:c8:7c:4d:3d:21:c1:38:f4:b0:14:df:8e:84: 45:5e:f4:9c:f8:c2:69:6f:fe:32:dc:42:f2:e1:59: 5f:0a:58:4e:b9:56:63:65:d7:d8:92:c8:4b:d8:9a: 1b:80:ba:ec:90:9b:49:2c:cd:cb:5f:96:a8:4e:5a: bd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:86:A8:F7:EC:B3:BF:F0:C7:F0:E9:AC:96:75:BD:F2:97:76:9D:37 X509v3 Authority Key Identifier: keyid:6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:5b:d9:a0:68:aa:9c:5f:13:a1:b3:97:c5:19:a9:f5:b4:ef: ff:24:f8:18:a8:18:a5:b9:17:1d:7a:6c:67:28:40:f4:f3:b4: 06:2e:ce:a0:95:01:2e:02:07:02:2c:f7:4f:a2:80:97:0a:6e: 2e:37:7d:02:5d:7b:57:65:90:66:18:19:0f:ba:66:63:d8:1f: 14:aa:1a:c2:25:1f:07:45:3d:5b:99:11:91:75:8a:36:9b:19: 4c:25:ae:04:26:b0:73:bb:0e:7a:a6:6c:7e:61:26:d4:ff:66: 18:8c:5a:81:a4:77:86:92:ed:39:1e:eb:39:74:d0:ee:5b:e3: a8:74:d0:e3:7a:9e:c7:90:ba:de:c6:b5:94:e2:be:23:17:e4: 5d:9d:35:b3:e7:e3:6b:71:4c:a5:9d:bf:c2:81:c0:ef:02:16: 46:92:b0:c2:cf:11:c3:13:94:4e:87:98:cd:86:83:ae:62:59: d3:23:c1:fc:80:b3:7d:4a:8e:71:b4:ae:7a:86:9b:2c:1e:60: 91:11:ee:27:1c:06:d3:5b:4c:6f:9f:06:69:9c:ab:69:c4:fb: 5c:c0:ae:21:dd:5c:d1:eb:6f:12:7d:39:e6:71:3e:de:2f:d2: 5d:5e:d0:73:20:82:d1:cc:a3:33:67:9a:84:67:0b:9e:64:a9: 0c:09:51:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUT2R3HmCFBk9+CjG4HtgdRezTqvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUwRTZBMzk3MjQ3RDQ5NkUzOUMwQTc4REZCMUU1MUE3 MURCQUFCNTAeFw0yNTEwMjAwMTA4MTVaFw0yNTEwMjEwMzM5MTVaMDMxMTAvBgNV BAMTKEMwODZBOEY3RUNCM0JGRjBDN0YwRTlBQzk2NzVCREYyOTc3NjlEMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe/5Hkr3UdDXo/ji6wmKunK7mX 5OL9I267kXYEMXqrLPsYXPoTc7bEU8O30fgEqKiGac6zVKX1BE0ZJus5wkUc8jSC ol80Q+LjXdyRsmbBZfeg6VUg7AXPcF56p2KcA9vQkbzpfnRgoHeMG1CgfJq8UnYl 4KMf35uwieVVaTA4ZktL7+bjAyF5CKe7Hw6lbuBP8OMaNGWX3VZ1bqEMnWUGe9BJ MYdkc8+7XuDRIsTSMz/NEQm2VTm5znSkOF+aKwtejCaeyHxNPSHBOPSwFN+OhEVe 9Jz4wmlv/jLcQvLhWV8KWE65VmNl19iSyEvYmhuAuuyQm0kszctflqhOWr1hAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwIao9+yzv/DH8OmslnW98pd2nTcwHwYDVR0j BBgwFoAUbg5qOXJH1JbjnAp437HlGnHbqrUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1RFdGE5TUFjTE1RWUpDVFJiYjM4Mkx3UXFVbjU3aW9DdG9UcHlxd0di WjUvMC82RTBFNkEzOTcyNDdENDk2RTM5QzBBNzhERkIxRTUxQTcxREJBQUI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFMEU2QTM5NzI0N0Q0OTZF MzlDMEE3OERGQjFFNTFBNzFEQkFBQjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1RFdGE5TUFjTE1RWUpDVFJiYjM4Mkx3UXFVbjU3aW9DdG9UcHlxd0diWjUvMC82 RTBFNkEzOTcyNDdENDk2RTM5QzBBNzhERkIxRTUxQTcxREJBQUI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX1vZoGiqnF8TobOXxRmp9bTv/yT4GKgYpbkXHXpsZyhA9PO0Bi7OoJUBLgIH Aiz3T6KAlwpuLjd9Al17V2WQZhgZD7pmY9gfFKoawiUfB0U9W5kRkXWKNpsZTCWu BCawc7sOeqZsfmEm1P9mGIxagaR3hpLtOR7rOXTQ7lvjqHTQ43qex5C63sa1lOK+ IxfkXZ01s+fja3FMpZ2/woHA7wIWRpKwws8RwxOUToeYzYaDrmJZ0yPB/ICzfUqO cbSueoabLB5gkRHuJxwG01tMb58GaZyracT7XMCuId1c0etvEn055nE+3i/SXV7Q cyCC0cyjM2eahGcLnmSpDAlRDA== -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:57 2025 by rpki-client