$ rpki-client -vvf rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.mft File: 6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.mft (raw, json) Hash identifier: gRK8zPhL6ZLF3gHVClOZFbetwr/kCG6GLdtvAX/XeoI= Subject key identifier: 05:34:23:DD:2F:25:4B:5E:FE:24:60:60:7B:39:CA:0F:33:D1:1B:F2 Authority key identifier: 6C:D9:54:1D:F1:1D:A4:8F:E6:CE:48:D8:47:1F:71:AA:B1:0E:63:9B Certificate issuer: /CN=6CD9541DF11DA48FE6CE48D8471F71AAB10E639B Certificate serial: 0CB6AA8A3586E6F6B3185DA674C9FC888629F8D3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.cer Subject info access: rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.mft Manifest number: CF Signing time: Mon 20 Oct 2025 12:43:38 +0000 Manifest this update: Mon 20 Oct 2025 12:38:38 +0000 Manifest next update: Tue 21 Oct 2025 13:56:38 +0000 Files and hashes: 1: 3137392e34392e3231322e302f32322d3332203d3e20323731323234.roa (hash: xkLblMY9Ik6ttqwiRd2EviEZ9nwQgInpYvkyQwCtfq0=) 2: 323830343a373832383a3a2f33322d313238203d3e20323731323234.roa (hash: FhYybxbxpSCdbtxzbreownq15YABYtpd5x/lC0pDV6M=) 3: 6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.crl (hash: y4J/KX64kyXf+xaOZOOrkMx2WdY1I9mvPRsLKiX2z00=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.crl rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b6:aa:8a:35:86:e6:f6:b3:18:5d:a6:74:c9:fc:88:86:29:f8:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CD9541DF11DA48FE6CE48D8471F71AAB10E639B Validity Not Before: Oct 20 12:38:38 2025 GMT Not After : Oct 21 13:56:38 2025 GMT Subject: CN=053423DD2F254B5EFE2460607B39CA0F33D11BF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:29:54:63:06:1b:1e:05:50:35:5b:a1:db:ce: d2:c2:8f:4e:d1:ba:49:a1:d7:32:d2:cd:4b:20:4a: 1d:d0:b1:63:e1:79:9e:db:68:f4:47:1a:2d:c0:dc: 93:39:fa:20:36:9d:44:a1:d3:b3:53:ed:af:f8:73: 7e:ab:09:fd:d4:2a:fe:b9:cc:7d:a1:be:aa:6a:1e: 88:45:18:83:ff:3b:18:0d:71:1e:a1:86:7e:c5:d4: 9b:6b:e4:44:ae:6f:42:85:c0:c2:71:e5:f7:09:c4: 99:ae:03:20:14:ff:06:da:c0:67:52:48:d7:72:a3: 4e:fd:3c:87:af:f4:d1:69:28:86:9d:cd:d0:98:77: bf:f8:f3:1c:3e:87:32:d4:1e:75:e4:0b:e9:41:14: df:60:a6:70:33:77:f4:c0:2f:2c:63:c2:d0:6b:51: 28:3d:02:8f:57:18:04:c2:58:1c:c0:40:ff:5f:81: 46:d6:7b:17:34:33:6b:f2:d4:76:95:7d:e5:a2:4e: 81:e0:63:09:0a:a6:b1:c1:53:54:f1:92:52:23:ce: 5d:7a:f0:85:44:cf:22:af:a0:4f:65:fb:a0:f6:3d: 62:33:8a:b5:8b:71:05:e1:9e:cc:c5:42:8c:e0:42: c0:8e:a2:90:90:41:33:1f:01:f7:1d:66:1d:5c:db: 8a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:34:23:DD:2F:25:4B:5E:FE:24:60:60:7B:39:CA:0F:33:D1:1B:F2 X509v3 Authority Key Identifier: keyid:6C:D9:54:1D:F1:1D:A4:8F:E6:CE:48:D8:47:1F:71:AA:B1:0E:63:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CurJLa9K7J9vwYRJNYYpEXdY478dHC6EfQ4gfxx3YTgr/0/6CD9541DF11DA48FE6CE48D8471F71AAB10E639B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:6b:66:1b:76:3d:02:54:65:b8:ac:86:fa:03:ca:c3:5f:43: 05:5f:14:54:43:03:17:b7:55:c5:46:ce:87:3e:af:e4:0f:4e: 47:af:7a:e5:14:0c:44:c2:01:39:f4:55:53:ae:c2:c9:4b:16: c2:4a:78:50:a9:be:4d:cf:d6:e7:62:27:38:b4:e4:4b:b8:99: 80:05:fb:c7:a9:1e:d1:37:a3:40:78:ac:01:1a:06:7a:3b:cc: 34:fa:ad:f5:de:ff:f8:2b:01:51:69:52:79:00:d2:b7:a2:d3: f2:36:ff:44:cb:e4:42:f3:c5:3a:a6:70:f2:82:fc:0a:58:d8: 50:7e:95:e1:51:54:fd:fc:b1:74:df:39:91:80:6b:40:98:76: a4:cc:70:5f:0e:df:0a:92:28:9a:cd:3e:11:fb:20:e6:df:cb: 13:b7:f6:b6:5e:c3:a6:04:f0:7c:a3:7b:1a:18:22:8d:7a:9a: b6:cf:3e:48:4c:4f:f2:2e:6c:7c:f8:7c:6b:2b:9c:a4:31:40: bf:ed:c3:e0:dd:c9:5e:9f:78:94:f7:eb:8a:cf:32:34:b6:c3: 39:81:ff:29:1c:19:34:55:c3:3d:d9:fe:09:60:96:d3:6d:ef: ea:7e:ee:be:52:a7:e8:d9:14:8c:5c:b7:85:b6:2d:bd:c1:26: 9c:56:28:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDLaqijWG5vazGF2mdMn8iIYp+NMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNEOTU0MURGMTFEQTQ4RkU2Q0U0OEQ4NDcxRjcxQUFC MTBFNjM5QjAeFw0yNTEwMjAxMjM4MzhaFw0yNTEwMjExMzU2MzhaMDMxMTAvBgNV BAMTKDA1MzQyM0REMkYyNTRCNUVGRTI0NjA2MDdCMzlDQTBGMzNEMTFCRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxKVRjBhseBVA1W6HbztLCj07R ukmh1zLSzUsgSh3QsWPheZ7baPRHGi3A3JM5+iA2nUSh07NT7a/4c36rCf3UKv65 zH2hvqpqHohFGIP/OxgNcR6hhn7F1Jtr5ESub0KFwMJx5fcJxJmuAyAU/wbawGdS SNdyo079PIev9NFpKIadzdCYd7/48xw+hzLUHnXkC+lBFN9gpnAzd/TALyxjwtBr USg9Ao9XGATCWBzAQP9fgUbWexc0M2vy1HaVfeWiToHgYwkKprHBU1TxklIjzl16 8IVEzyKvoE9l+6D2PWIzirWLcQXhnszFQozgQsCOopCQQTMfAfcdZh1c24rFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBTQj3S8lS17+JGBgeznKDzPRG/IwHwYDVR0j BBgwFoAUbNlUHfEdpI/mzkjYRx9xqrEOY5swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3VySkxhOUs3Sjl2d1lSSk5ZWXBFWGRZNDc4ZEhDNkVmUTRnZnh4M1lU Z3IvMC82Q0Q5NTQxREYxMURBNDhGRTZDRTQ4RDg0NzFGNzFBQUIxMEU2MzlCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDRDk1NDFERjExREE0OEZF NkNFNDhEODQ3MUY3MUFBQjEwRTYzOUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3VySkxhOUs3Sjl2d1lSSk5ZWXBFWGRZNDc4ZEhDNkVmUTRnZnh4M1lUZ3IvMC82 Q0Q5NTQxREYxMURBNDhGRTZDRTQ4RDg0NzFGNzFBQUIxMEU2MzlCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWWtmG3Y9AlRluKyG+gPKw19DBV8UVEMDF7dVxUbOhz6v5A9OR6965RQMRMIB OfRVU67CyUsWwkp4UKm+Tc/W52InOLTkS7iZgAX7x6ke0TejQHisARoGejvMNPqt 9d7/+CsBUWlSeQDSt6LT8jb/RMvkQvPFOqZw8oL8CljYUH6V4VFU/fyxdN85kYBr QJh2pMxwXw7fCpIoms0+Efsg5t/LE7f2tl7DpgTwfKN7GhgijXqats8+SExP8i5s fPh8ayucpDFAv+3D4N3JXp94lPfris8yNLbDOYH/KRwZNFXDPdn+CWCW023v6n7u vlKn6NkUjFy3hbYtvcEmnFYocg== -----END CERTIFICATE-----Generated at Tue Oct 21 00:09:49 2025 by rpki-client