$ rpki-client -vvf rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft File: C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft (raw, json) Hash identifier: JypaEoDKe+XLJ6ldYSmbw22XzNqu8khhP1zHYMKR790= Subject key identifier: 97:BD:D3:A4:D2:50:25:69:17:8E:67:02:28:03:A2:8B:F4:C0:2E:27 Authority key identifier: C9:B4:4C:42:CE:21:94:CF:2A:ED:5F:3F:1C:5F:9E:7D:28:D2:2E:AC Certificate issuer: /CN=C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC Certificate serial: 5EFF0D8DFE0473803B2BDAE4F693A36854D270C2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer Subject info access: rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft Manifest number: 4B Signing time: Sun 19 Oct 2025 17:56:37 +0000 Manifest this update: Sun 19 Oct 2025 17:51:37 +0000 Manifest next update: Mon 20 Oct 2025 19:28:37 +0000 Files and hashes: 1: 323830343a326130343a3a2f33322d313238203d3e20323634303531.roa (hash: RSDuNCVU1VTlfLD/mOTkHE5pcS11RZ6Pk8iJjzVZgVU=) 2: 3134332e3133372e3136302e302f32322d3332203d3e20323634303531.roa (hash: 6odTTXV/YEt0Dl4aWNPP6L1GAoNrXc5ZxFO+rO0cG3A=) 3: C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl (hash: CR/j/UMcevYXWmlR6UjRvfPGIWt4+XZ28aKvk58tSTI=) 4: 3137302e3234362e3232342e302f32322d3332203d3e20323634303531.roa (hash: ai1fq1d0v27iy15z6wZaaZtUTWGC9NDlAklm01QMFAU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 19:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ff:0d:8d:fe:04:73:80:3b:2b:da:e4:f6:93:a3:68:54:d2:70:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC Validity Not Before: Oct 19 17:51:37 2025 GMT Not After : Oct 20 19:28:37 2025 GMT Subject: CN=97BDD3A4D2502569178E67022803A28BF4C02E27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:89:92:01:ae:ed:c4:4d:74:b7:49:df:13:f9: 3b:d7:cc:fa:3b:54:1b:20:02:b1:a5:7b:ca:54:b7: 21:48:82:52:49:4b:37:9b:15:86:29:c3:81:dc:52: 8f:7d:7e:99:08:23:1a:2d:dc:f1:dc:4f:d1:dd:57: e5:33:f4:a0:db:a4:d4:a3:f4:4a:f9:52:d6:33:dc: 93:5b:94:9d:51:c2:a0:bf:74:10:c6:dc:a0:3c:cf: d2:93:ef:95:a8:d4:15:5d:56:ca:94:dc:5c:19:38: 59:94:d0:0b:b7:6d:3d:0b:d8:2e:5c:2e:60:2e:81: a8:aa:5e:5e:2f:4e:45:f2:db:ab:be:45:20:85:73: 91:1e:24:4c:d9:d7:49:27:01:aa:2c:8d:4f:a2:2f: 76:c4:4a:33:96:25:07:e1:42:68:72:40:31:f6:77: dd:1a:dc:cd:d4:a6:19:53:b2:46:a0:5e:61:ab:02: 2b:a5:21:f5:c9:02:92:3d:95:30:00:93:6d:35:a5: a5:d1:e6:90:a4:85:51:ad:e3:3c:37:7d:3e:a8:b8: dc:a8:ef:24:45:39:a3:5d:85:ee:c3:a5:a5:cc:8b: 91:9f:7f:52:fe:37:1a:d8:a0:85:b0:77:03:8e:40: dc:5b:d5:d5:01:20:6e:1e:f3:bd:d7:c9:50:6c:20: fa:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BD:D3:A4:D2:50:25:69:17:8E:67:02:28:03:A2:8B:F4:C0:2E:27 X509v3 Authority Key Identifier: keyid:C9:B4:4C:42:CE:21:94:CF:2A:ED:5F:3F:1C:5F:9E:7D:28:D2:2E:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:9c:7f:c5:af:73:96:aa:ab:90:88:15:fe:b5:6b:28:2c:07: 5e:65:66:43:d2:b2:8c:87:1b:de:67:ed:cb:b0:36:a1:58:1b: 88:93:a3:a1:04:44:17:d3:99:18:a5:64:92:d7:a1:53:0f:e9: 16:2a:df:8e:e2:95:96:8c:d9:e2:40:a1:37:44:23:fa:29:7d: 59:f3:42:6c:e7:e8:fe:b0:e1:db:84:5d:de:d0:50:74:15:41: b7:b9:a6:76:ed:c4:ba:c0:81:c8:04:9d:ab:15:3a:35:2c:cf: 23:7f:eb:3f:16:c6:b1:4f:04:26:13:54:5e:aa:87:71:96:ca: ae:9b:75:00:27:71:cf:0f:fd:d2:42:17:1c:9c:3e:4f:ba:6d: d8:e0:33:29:f1:08:4e:f5:0a:9c:5c:71:60:56:62:9d:06:42: 5a:d2:3b:da:b6:0b:8c:2e:2e:7c:b2:67:37:60:71:db:5f:39: 3c:1d:ba:05:aa:29:e9:4e:35:6b:2c:50:6c:3f:c2:8e:b7:f8: da:72:0d:7a:f8:10:66:02:e5:f7:7a:18:e7:a8:ab:0a:92:a1: 8d:80:fa:5d:88:fb:c9:d0:8a:26:27:cf:09:10:dd:c9:1f:da: 44:c1:a3:25:08:c9:a6:49:49:17:3d:92:9b:35:ec:f4:9b:59: c8:c4:73:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXv8Njf4Ec4A7K9rk9pOjaFTScMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCNDRDNDJDRTIxOTRDRjJBRUQ1RjNGMUM1RjlFN0Qy OEQyMkVBQzAeFw0yNTEwMTkxNzUxMzdaFw0yNTEwMjAxOTI4MzdaMDMxMTAvBgNV BAMTKDk3QkREM0E0RDI1MDI1NjkxNzhFNjcwMjI4MDNBMjhCRjRDMDJFMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIiZIBru3ETXS3Sd8T+TvXzPo7 VBsgArGle8pUtyFIglJJSzebFYYpw4HcUo99fpkIIxot3PHcT9HdV+Uz9KDbpNSj 9Er5UtYz3JNblJ1RwqC/dBDG3KA8z9KT75Wo1BVdVsqU3FwZOFmU0Au3bT0L2C5c LmAugaiqXl4vTkXy26u+RSCFc5EeJEzZ10knAaosjU+iL3bESjOWJQfhQmhyQDH2 d90a3M3UphlTskagXmGrAiulIfXJApI9lTAAk201paXR5pCkhVGt4zw3fT6ouNyo 7yRFOaNdhe7DpaXMi5Gff1L+NxrYoIWwdwOOQNxb1dUBIG4e873XyVBsIPqzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUl73TpNJQJWkXjmcCKAOii/TALicwHwYDVR0j BBgwFoAUybRMQs4hlM8q7V8/HF+efSjSLqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHh5VUtKSFhBWTNKQ3gyVEZ3V0VhR05uZFdCbTNkZUZidWZuQmlQcmE4 VHEvMC9DOUI0NEM0MkNFMjE5NENGMkFFRDVGM0YxQzVGOUU3RDI4RDIyRUFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5QjQ0QzQyQ0UyMTk0Q0Yy QUVENUYzRjFDNUY5RTdEMjhEMjJFQUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHh5VUtKSFhBWTNKQ3gyVEZ3V0VhR05uZFdCbTNkZUZidWZuQmlQcmE4VHEvMC9D OUI0NEM0MkNFMjE5NENGMkFFRDVGM0YxQzVGOUU3RDI4RDIyRUFDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT5x/xa9zlqqrkIgV/rVrKCwHXmVmQ9KyjIcb3mfty7A2oVgbiJOjoQREF9OZ GKVkktehUw/pFirfjuKVlozZ4kChN0Qj+il9WfNCbOfo/rDh24Rd3tBQdBVBt7mm du3EusCByASdqxU6NSzPI3/rPxbGsU8EJhNUXqqHcZbKrpt1ACdxzw/90kIXHJw+ T7pt2OAzKfEITvUKnFxxYFZinQZCWtI72rYLjC4ufLJnN2Bx2185PB26Baop6U41 ayxQbD/Cjrf42nINevgQZgLl93oY56irCpKhjYD6XYj7ydCKJifPCRDdyR/aRMGj JQjJpklJFz2SmzXs9JtZyMRzrw== -----END CERTIFICATE-----Generated at Mon Oct 20 08:28:24 2025 by rpki-client