$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft File: 1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft (raw, json) Hash identifier: da4zFa6oFn/KbV8UcKKjaGXW0nTVwxLwQGfV00eg3No= Subject key identifier: D3:58:1A:BE:64:A7:FD:BD:11:5D:E4:5C:12:AF:B5:0E:E8:48:27:02 Authority key identifier: 1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22 Certificate issuer: /CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822 Certificate serial: 66D57A59F56807A7B6FB2E862A0459F6838BE388 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer Subject info access: rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft Manifest number: 0253 Signing time: Mon 20 Oct 2025 05:51:28 +0000 Manifest this update: Mon 20 Oct 2025 05:46:28 +0000 Manifest next update: Tue 21 Oct 2025 06:15:28 +0000 Files and hashes: 1: 323830343a3936633a363430303a3a2f34302d3430203d3e20323633303835.roa (hash: 52huXuVGIt+pjgM9LTH0dEdhFFUOrYBxuDBGKi6kYYk=) 2: 323830343a3936633a3a2f33322d3332203d3e20323633303835.roa (hash: yfYQFGEPfpIaz9q6MsF2wbPrq5WbyG9gA+FrZE8hhOE=) 3: 323830343a3936633a383930303a3a2f34302d3430203d3e20323633303835.roa (hash: fAXn6GA+/V91XTLCQkUNO9fS3hjHpQ6K9P+U0GoI5Uw=) 4: 1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl (hash: 5zw6OavGhphTY1/8ST/GHjHoPSv1i0H9ku7qJwHjvz4=) 5: 3138362e3233332e3231362e302f32322d3332203d3e20323633303835.roa (hash: PmbAUkUTs5Q/iqhBLo3baohkXrtjqFpyLdaX9yDXwCU=) 6: 3134332e3230322e3138382e302f32322d3332203d3e20323633303835.roa (hash: qVNRJ2a+cClLtMLaZjQAdZ5dHXHXN/VmcqEwBxCBPig=) 7: 323830343a3936633a363330303a3a2f34302d3430203d3e20323633303835.roa (hash: cy03UHaQfqom7bstU3w2b656/ZgUkji+2LkvIZylFA0=) 8: 3230302e3233332e33362e302f32322d3332203d3e20323633303835.roa (hash: BGbb/zOEduZEwJ5taF3w2NYPUpXFQ6mSEafjuDNKgOU=) 9: 323830343a3936633a383830303a3a2f34302d3430203d3e20323633303835.roa (hash: m3ls13XwMMeaUU0wgwEDdQpbhiGR1d07fgmlhjZjmcs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 06:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d5:7a:59:f5:68:07:a7:b6:fb:2e:86:2a:04:59:f6:83:8b:e3:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822 Validity Not Before: Oct 20 05:46:28 2025 GMT Not After : Oct 21 06:15:28 2025 GMT Subject: CN=D3581ABE64A7FDBD115DE45C12AFB50EE8482702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9e:45:e2:62:18:ec:f1:cb:ec:d4:48:75:6f: 21:38:c5:61:14:55:0d:07:c6:5e:ef:1d:ff:3b:b8: 71:65:d6:5b:37:ce:61:40:52:60:df:5b:2c:d9:c4: 23:bd:bb:c2:a1:39:1f:32:e2:02:c0:0f:58:c3:60: 39:0b:5b:79:92:13:ce:b9:75:c8:7b:d9:1c:bc:7f: 52:5c:cf:3a:f3:a2:fd:36:ac:8b:47:4e:7f:31:04: c3:36:a7:f6:f5:9b:2a:d4:7b:30:f3:7e:dc:ef:a9: 1c:85:60:b9:5a:27:8e:e9:bb:85:12:c4:b4:f5:d2: 70:64:e8:cd:89:17:8a:7a:66:29:3f:e4:c6:97:42: ab:12:00:e4:ce:37:53:4b:e9:7c:9d:e6:c8:c7:7b: c9:32:de:4d:5d:a3:97:ca:ed:03:10:a6:ef:10:7d: 3e:66:c5:20:e0:33:0d:2d:35:30:8b:77:f8:03:35: b7:4e:2e:b8:1d:3c:b4:d9:7f:70:48:58:16:fa:30: ee:5e:6f:84:62:c9:ce:ec:27:34:80:b2:e3:88:b7: 7f:bb:5a:c8:9a:16:95:56:27:c8:21:4d:99:3a:7b: 22:41:d2:96:40:e8:f1:5a:61:91:32:58:24:45:a7: 5e:40:59:73:54:51:8e:f4:cf:6b:5f:cc:55:fe:65: 7d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:58:1A:BE:64:A7:FD:BD:11:5D:E4:5C:12:AF:B5:0E:E8:48:27:02 X509v3 Authority Key Identifier: keyid:1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a8:76:e2:b3:83:2f:af:9c:c4:da:f2:2e:54:81:77:45:0b: 58:f1:1d:cb:7d:2a:42:00:d6:84:f6:5a:c0:5f:d5:76:58:d3: 84:ec:84:f1:80:9f:d4:74:d2:2e:05:85:0b:6e:22:d4:45:7e: 6e:4a:0b:3a:ed:b2:dc:47:e2:26:c9:92:98:e0:e8:13:ec:b6: 17:12:03:f3:92:a4:1f:1a:79:40:f6:67:e3:d5:eb:b2:e7:f6: 63:17:ff:59:01:fe:8c:e4:4c:af:bd:5a:b2:b9:10:b0:68:c5: 76:46:35:83:92:56:37:0c:3d:86:ac:f5:7f:7e:9f:5a:e5:0a: 94:50:da:93:f8:a2:98:e4:16:9d:7a:45:b9:a9:30:06:dd:a6: 97:39:a8:67:de:61:12:e0:98:09:72:09:d4:ff:3d:d4:9c:55: ff:cc:fd:3b:07:90:6d:17:ce:e5:d8:6a:98:f3:61:df:5f:b4: f6:79:f3:82:de:38:46:88:61:fa:c2:dd:67:4a:b6:1d:3e:9c: 7f:33:b5:bd:f6:51:9a:a3:ff:4c:f9:eb:cf:ab:c3:11:3d:05: 12:23:8d:d9:da:fe:21:b9:60:e6:2c:3b:6e:6c:e1:9a:3f:14: 3e:09:4c:98:c6:2a:58:2c:31:db:29:9b:45:1a:13:da:38:ae: b2:52:51:65 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUZtV6WfVoB6e2+y6GKgRZ9oOL44gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5RkEzN0YzOUFFMUZGNTU0MjJDRDFFQTREREMyMkM3 QkQzQTgyMjAeFw0yNTEwMjAwNTQ2MjhaFw0yNTEwMjEwNjE1MjhaMDMxMTAvBgNV BAMTKEQzNTgxQUJFNjRBN0ZEQkQxMTVERTQ1QzEyQUZCNTBFRTg0ODI3MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9nkXiYhjs8cvs1Eh1byE4xWEU VQ0Hxl7vHf87uHFl1ls3zmFAUmDfWyzZxCO9u8KhOR8y4gLAD1jDYDkLW3mSE865 dch72Ry8f1Jczzrzov02rItHTn8xBMM2p/b1myrUezDzftzvqRyFYLlaJ47pu4US xLT10nBk6M2JF4p6Zik/5MaXQqsSAOTON1NL6Xyd5sjHe8ky3k1do5fK7QMQpu8Q fT5mxSDgMw0tNTCLd/gDNbdOLrgdPLTZf3BIWBb6MO5eb4Riyc7sJzSAsuOIt3+7 WsiaFpVWJ8ghTZk6eyJB0pZA6PFaYZEyWCRFp15AWXNUUY70z2tfzFX+ZX1LAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU01gavmSn/b0RXeRcEq+1DuhIJwIwHwYDVR0j BBgwFoAUGp+jfzmuH/VUIs0epN3CLHvTqCIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9mU3VkTTRFTXdLSEV3OXc1aXVwcHlhbmlFNFVFZVRlM3pBaVByR3N4TENZ LzAvMUE5RkEzN0YzOUFFMUZGNTU0MjJDRDFFQTREREMyMkM3QkQzQTgyMi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xQTlGQTM3RjM5QUUxRkY1NTQy MkNEMUVBNEREQzIyQzdCRDNBODIyLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2ZT dWRNNEVNd0tIRXc5dzVpdXBweWFuaUU0VUVlVGUzekFpUHJHc3hMQ1kvMC8xQTlG QTM3RjM5QUUxRkY1NTQyMkNEMUVBNEREQzIyQzdCRDNBODIyLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA Rqh24rODL6+cxNryLlSBd0ULWPEdy30qQgDWhPZawF/VdljThOyE8YCf1HTSLgWF C24i1EV+bkoLOu2y3EfiJsmSmODoE+y2FxID85KkHxp5QPZn49Xrsuf2Yxf/WQH+ jORMr71asrkQsGjFdkY1g5JWNww9hqz1f36fWuUKlFDak/iimOQWnXpFuakwBt2m lzmoZ95hEuCYCXIJ1P891JxV/8z9OweQbRfO5dhqmPNh31+09nnzgt44Rohh+sLd Z0q2HT6cfzO1vfZRmqP/TPnrz6vDET0FEiON2dr+Iblg5iw7bmzhmj8UPglMmMYq WCwx2ymbRRoT2jiuslJRZQ== -----END CERTIFICATE-----Generated at Mon Oct 20 07:46:34 2025 by rpki-client