$ rpki-client -vvf rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft File: 9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft (raw, json) Hash identifier: DjtddF+5FFh+5rzXDQdtmQEd8KzFTIxp0UhSZE4kxjM= Subject key identifier: 5A:16:1E:8C:C7:28:2C:35:7C:49:55:AF:CC:E9:06:84:87:5E:4D:9C Authority key identifier: 9A:88:28:7F:0D:A6:7C:74:CC:24:30:13:8C:9E:69:9A:8D:9B:C3:0C Certificate issuer: /CN=9A88287F0DA67C74CC2430138C9E699A8D9BC30C Certificate serial: 718FE7422378580619E82D6193A29AFBD3DB584D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer Subject info access: rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft Manifest number: 0305 Signing time: Tue 04 Nov 2025 11:34:47 +0000 Manifest this update: Tue 04 Nov 2025 11:29:47 +0000 Manifest next update: Wed 05 Nov 2025 13:15:47 +0000 Files and hashes: 1: 9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl (hash: f4TDqLUSoiXDLOCGPtxan/c3TaDUfK3pjFFp5YOn+xA=) 2: 3137372e3135342e32302e302f32322d3332203d3e20323632343734.roa (hash: H4KK/IfCeQYkBhQvfas6h5MTpKMxJTrKibFC05W8fuY=) 3: 323830343a3464633a3a2f33322d313238203d3e20323632343734.roa (hash: tLinHUpDx5XtKM/wXIJIMXEa7cIJplW8c1o8b2SFJ1U=) 4: 3137372e35332e3136382e302f32312d3332203d3e20323632343734.roa (hash: aGKmgf4Q37YTxb2naQ2Aw7TO+rtm4/O1Gt+ec54VYCM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 13:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:8f:e7:42:23:78:58:06:19:e8:2d:61:93:a2:9a:fb:d3:db:58:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A88287F0DA67C74CC2430138C9E699A8D9BC30C Validity Not Before: Nov 4 11:29:47 2025 GMT Not After : Nov 5 13:15:47 2025 GMT Subject: CN=5A161E8CC7282C357C4955AFCCE90684875E4D9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2e:0d:df:40:18:f1:4a:15:ab:ee:95:23:a2: 42:bb:5e:c6:d1:0a:61:fa:5b:ff:3b:f1:40:34:27: a2:a4:50:77:24:81:96:01:ab:d7:e3:b9:2a:4e:59: 66:ea:46:77:16:a4:2d:fb:7d:e1:fe:01:de:e3:0e: 9d:a9:4e:06:dd:91:41:94:39:d4:6f:4a:c3:5b:d6: 79:d7:ce:70:85:70:07:7b:7d:df:f8:e5:e9:4a:ca: 98:a3:a1:2b:61:ea:df:6b:70:c4:3e:4d:0d:3f:45: 06:bb:9a:a1:ea:1e:ba:27:02:c0:2f:28:fc:84:ed: 93:84:0c:23:92:d3:cc:2f:a6:75:03:40:50:03:51: 94:84:46:3f:fc:17:34:ca:f2:9b:22:ae:45:c7:29: 18:71:7a:f6:7a:3b:6d:74:c3:7a:f2:ad:cc:10:98: ae:81:62:a0:9f:cd:6d:9d:5c:13:3b:ea:17:e3:2f: ac:ea:81:3a:3f:fe:cf:69:25:37:9f:f5:b4:9c:c4: 57:35:4e:76:2b:12:43:c4:89:20:b8:bb:af:cf:c9: e5:0d:29:5d:7a:c9:b0:5c:7d:12:b1:47:61:a1:93: 08:22:c3:ed:c0:dc:6a:de:3b:3d:df:54:54:d7:b7: 9f:26:00:82:5f:71:57:7a:fb:b1:d0:a7:66:12:ef: 8f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:16:1E:8C:C7:28:2C:35:7C:49:55:AF:CC:E9:06:84:87:5E:4D:9C X509v3 Authority Key Identifier: keyid:9A:88:28:7F:0D:A6:7C:74:CC:24:30:13:8C:9E:69:9A:8D:9B:C3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:54:83:79:17:83:80:dd:cc:7c:2e:c5:79:e9:b0:af:35:82: 86:e7:df:e9:78:87:a0:d8:0a:8d:61:d0:14:7f:52:b7:6c:a1: 37:28:91:35:d5:9d:69:eb:f0:30:55:1f:9c:f0:58:41:36:43: bb:40:1c:1a:7d:81:18:16:f2:8a:48:c0:89:99:dc:1d:23:2b: e5:1f:be:5a:9b:e4:fb:c2:fb:8a:bf:e9:52:dc:5c:07:25:7c: 14:57:e7:1d:49:f8:58:9b:df:98:e6:38:c3:b7:f8:bd:f8:a3: 75:78:49:e7:92:6e:38:32:5c:08:ab:b5:3a:2a:cb:7e:66:73: ff:9a:07:39:95:d1:99:96:84:9a:73:3b:8b:06:a0:f8:2c:b4: 77:27:c0:e3:5c:ee:12:59:89:b7:3e:82:27:72:50:1e:71:dc: aa:b7:73:6e:0c:86:03:bd:30:b1:a7:af:46:d5:d4:b8:c9:8a: 12:26:a3:34:3b:7f:8b:d0:1f:63:df:ce:86:b5:8c:7d:bb:a0: be:97:c2:59:b7:2d:be:67:0b:20:51:c0:e9:ba:a7:07:0a:d0: 23:ce:8c:dc:44:80:58:95:55:e8:9f:45:85:b0:5d:f8:d0:e7: 6c:c1:44:0a:eb:f3:bc:f8:78:b4:c2:3e:9e:1f:93:8d:a1:43: aa:ab:77:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcY/nQiN4WAYZ6C1hk6Ka+9PbWE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4ODI4N0YwREE2N0M3NENDMjQzMDEzOEM5RTY5OUE4 RDlCQzMwQzAeFw0yNTExMDQxMTI5NDdaFw0yNTExMDUxMzE1NDdaMDMxMTAvBgNV BAMTKDVBMTYxRThDQzcyODJDMzU3QzQ5NTVBRkNDRTkwNjg0ODc1RTREOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDELg3fQBjxShWr7pUjokK7XsbR CmH6W/878UA0J6KkUHckgZYBq9fjuSpOWWbqRncWpC37feH+Ad7jDp2pTgbdkUGU OdRvSsNb1nnXznCFcAd7fd/45elKypijoSth6t9rcMQ+TQ0/RQa7mqHqHronAsAv KPyE7ZOEDCOS08wvpnUDQFADUZSERj/8FzTK8psirkXHKRhxevZ6O210w3ryrcwQ mK6BYqCfzW2dXBM76hfjL6zqgTo//s9pJTef9bScxFc1TnYrEkPEiSC4u6/PyeUN KV16ybBcfRKxR2Ghkwgiw+3A3GreOz3fVFTXt58mAIJfcVd6+7HQp2YS749RAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWhYejMcoLDV8SVWvzOkGhIdeTZwwHwYDVR0j BBgwFoAUmogofw2mfHTMJDATjJ5pmo2bwwwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMld3dkRHYkdUQWlUZFFwdUoyVXNoNDh6SEJDNXdXOUtvUnM4a3RDOGtD eFQvMS85QTg4Mjg3RjBEQTY3Qzc0Q0MyNDMwMTM4QzlFNjk5QThEOUJDMzBDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBODgyODdGMERBNjdDNzRD QzI0MzAxMzhDOUU2OTlBOEQ5QkMzMEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mld3dkRHYkdUQWlUZFFwdUoyVXNoNDh6SEJDNXdXOUtvUnM4a3RDOGtDeFQvMS85 QTg4Mjg3RjBEQTY3Qzc0Q0MyNDMwMTM4QzlFNjk5QThEOUJDMzBDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgVSDeReDgN3MfC7FeemwrzWChuff6XiHoNgKjWHQFH9St2yhNyiRNdWdaevw MFUfnPBYQTZDu0AcGn2BGBbyikjAiZncHSMr5R++Wpvk+8L7ir/pUtxcByV8FFfn HUn4WJvfmOY4w7f4vfijdXhJ55JuODJcCKu1OirLfmZz/5oHOZXRmZaEmnM7iwag +Cy0dyfA41zuElmJtz6CJ3JQHnHcqrdzbgyGA70wsaevRtXUuMmKEiajNDt/i9Af Y9/OhrWMfbugvpfCWbctvmcLIFHA6bqnBwrQI86M3ESAWJVV6J9FhbBd+NDnbMFE CuvzvPh4tMI+nh+TjaFDqqt3VA== -----END CERTIFICATE-----Generated at Wed Nov 5 05:13:06 2025 by rpki-client