$ rpki-client -vvf rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft File: 864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft (raw, json) Hash identifier: 11z0stcKUKz6XsApSahquqNj+z5naEc0Q7QqBtzGpKM= Subject key identifier: 6C:1D:DC:FE:DC:4A:59:6D:BE:7D:E7:03:49:0B:F5:14:44:D8:33:80 Authority key identifier: 86:4B:CB:11:1F:FB:F7:1A:17:94:80:C7:DD:77:FC:C6:64:D8:AB:59 Certificate issuer: /CN=864BCB111FFBF71A179480C7DD77FCC664D8AB59 Certificate serial: 59D5BFDE253082C7E500802571287A327DDCFD48 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer Subject info access: rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft Manifest number: 0159 Signing time: Mon 20 Oct 2025 03:57:49 +0000 Manifest this update: Mon 20 Oct 2025 03:52:49 +0000 Manifest next update: Tue 21 Oct 2025 05:08:49 +0000 Files and hashes: 1: 323830343a313164343a3a2f33322d3336203d3e20323633343432.roa (hash: ZjHIppO8S58r4UufCCbUgVo3HLt+HFAGV3p8lcKLf5I=) 2: 3137372e31302e39322e302f32322d3234203d3e20323633343432.roa (hash: e1XjvkH2G61dqhOHqc4pF2YHXIhwmms0v4hSF8s9XzI=) 3: 864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl (hash: r1jF8C2CIF70YCrQbD4Gh+I06nLdbWJkzP36i1p75Z4=) 4: 3137372e39312e3134342e302f32302d3234203d3e20323633343432.roa (hash: U2X+DNMG/Bb1Kgy1CKCKBiUdZyIh3tpWZrlBBVlp8/0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 05:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:d5:bf:de:25:30:82:c7:e5:00:80:25:71:28:7a:32:7d:dc:fd:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864BCB111FFBF71A179480C7DD77FCC664D8AB59 Validity Not Before: Oct 20 03:52:49 2025 GMT Not After : Oct 21 05:08:49 2025 GMT Subject: CN=6C1DDCFEDC4A596DBE7DE703490BF51444D83380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f0:5f:9e:32:ac:11:5b:da:1e:ec:60:a5:17: 60:3a:31:2c:34:45:0b:f8:fc:86:a9:d7:cf:c7:00: d3:ef:8f:7d:87:c9:64:e3:a1:a8:aa:a6:89:74:48: 25:46:a8:48:e8:bc:4b:e1:44:28:3d:83:40:ac:07: ab:dd:e0:9d:32:3c:65:f7:2a:91:14:a3:3b:0d:85: 0c:9c:45:84:ce:dc:a1:88:7d:a1:7b:34:b8:b4:ab: fb:b8:de:c2:3c:00:e1:af:ea:4e:14:25:74:67:a0: b2:6e:1f:89:8c:e2:3f:6c:eb:f6:35:22:01:80:8e: 98:71:a5:7c:2b:30:4d:cc:a6:ea:cb:89:3c:e8:9b: f5:17:63:7c:9f:fb:3d:e3:df:99:9b:f9:6b:b7:fd: c0:47:f5:56:c0:d7:93:42:5f:92:f7:c3:5e:68:08: 01:10:b3:a9:64:ce:9f:56:35:19:fd:ad:90:c7:69: 23:cd:5f:8d:72:44:29:5b:d0:34:9b:20:cb:7f:66: 26:fc:44:1d:91:9b:d7:2f:33:65:f2:92:ef:58:93: 03:63:73:c7:02:6c:b5:83:70:73:ea:8f:d9:ab:fb: 6f:a5:b7:10:d3:8b:d8:af:fd:08:34:d7:df:f5:6b: 24:f6:ac:0e:2c:9b:b2:5b:4a:27:8c:0f:c2:75:36: c0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1D:DC:FE:DC:4A:59:6D:BE:7D:E7:03:49:0B:F5:14:44:D8:33:80 X509v3 Authority Key Identifier: keyid:86:4B:CB:11:1F:FB:F7:1A:17:94:80:C7:DD:77:FC:C6:64:D8:AB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:b7:ef:7c:18:8a:2b:84:5e:fe:e7:1d:69:8e:57:d4:ad:d5: c0:88:e6:dc:8a:bc:c5:df:39:1f:6f:1e:88:c0:a6:6b:62:6f: 80:06:13:38:1d:79:22:5c:52:1f:90:2d:d4:67:b0:ce:fb:e9: 98:34:e9:bd:79:d5:9c:37:21:63:66:60:2a:6f:2e:46:bf:89: fc:95:35:f2:01:dc:02:af:3a:d8:2e:fc:3a:ef:a6:69:0c:65: 3b:1e:1e:d7:41:de:11:52:bf:cf:cb:30:d3:52:37:8d:48:70: 6c:cb:da:35:37:39:07:24:05:8c:44:65:4d:14:0b:40:99:99: cf:2e:91:cb:18:18:cd:38:a9:3d:dd:57:88:05:34:cc:81:59: 0d:d4:f0:f7:59:b4:e4:54:72:ef:1e:9a:4a:b6:95:f5:37:fc: af:69:df:60:d7:7b:60:bd:b1:8d:37:0e:0e:94:da:90:93:f9: 8f:1f:f1:52:41:d3:d6:90:a3:41:8e:f5:16:f5:fe:ed:e6:b0: cf:ea:d0:d0:0c:84:01:14:9d:9d:9f:8e:37:b9:b3:32:a3:a6: e8:3a:c0:79:26:06:7d:d3:45:48:9b:8f:dc:70:2b:18:a2:07: a2:0a:31:c1:6c:7e:a6:95:19:87:09:fa:9f:03:09:3f:8e:ce: c2:a9:a7:25 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUWdW/3iUwgsflAIAlcSh6Mn3c/UgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY0QkNCMTExRkZCRjcxQTE3OTQ4MEM3REQ3N0ZDQzY2 NEQ4QUI1OTAeFw0yNTEwMjAwMzUyNDlaFw0yNTEwMjEwNTA4NDlaMDMxMTAvBgNV BAMTKDZDMUREQ0ZFREM0QTU5NkRCRTdERTcwMzQ5MEJGNTE0NDREODMzODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8F+eMqwRW9oe7GClF2A6MSw0 RQv4/Iap18/HANPvj32HyWTjoaiqpol0SCVGqEjovEvhRCg9g0CsB6vd4J0yPGX3 KpEUozsNhQycRYTO3KGIfaF7NLi0q/u43sI8AOGv6k4UJXRnoLJuH4mM4j9s6/Y1 IgGAjphxpXwrME3MpurLiTzom/UXY3yf+z3j35mb+Wu3/cBH9VbA15NCX5L3w15o CAEQs6lkzp9WNRn9rZDHaSPNX41yRClb0DSbIMt/Zib8RB2Rm9cvM2Xyku9YkwNj c8cCbLWDcHPqj9mr+2+ltxDTi9iv/Qg019/1ayT2rA4sm7JbSieMD8J1NsAhAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUbB3c/txKWW2+fecDSQv1FETYM4AwHwYDVR0j BBgwFoAUhkvLER/79xoXlIDH3Xf8xmTYq1kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9xOWc2QVFVVmVVZGhZSlFEVGY4MXFjU2VKam5DTUtvZlgxNDFHUkRFbW8x LzAvODY0QkNCMTExRkZCRjcxQTE3OTQ4MEM3REQ3N0ZDQzY2NEQ4QUI1OS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84NjRCQ0IxMTFGRkJGNzFBMTc5 NDgwQzdERDc3RkNDNjY0RDhBQjU5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3E5 ZzZBUVVWZVVkaFlKUURUZjgxcWNTZUpqbkNNS29mWDE0MUdSREVtbzEvMC84NjRC Q0IxMTFGRkJGNzFBMTc5NDgwQzdERDc3RkNDNjY0RDhBQjU5Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA OLfvfBiKK4Re/ucdaY5X1K3VwIjm3Iq8xd85H28eiMCma2JvgAYTOB15IlxSH5At 1GewzvvpmDTpvXnVnDchY2ZgKm8uRr+J/JU18gHcAq862C78Ou+maQxlOx4e10He EVK/z8sw01I3jUhwbMvaNTc5ByQFjERlTRQLQJmZzy6RyxgYzTipPd1XiAU0zIFZ DdTw91m05FRy7x6aSraV9Tf8r2nfYNd7YL2xjTcODpTakJP5jx/xUkHT1pCjQY71 FvX+7eawz+rQ0AyEARSdnZ+ON7mzMqOm6DrAeSYGfdNFSJuP3HArGKIHogoxwWx+ ppUZhwn6nwMJP47OwqmnJQ== -----END CERTIFICATE-----Generated at Mon Oct 20 16:16:58 2025 by rpki-client