$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft File: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft (raw, json) Hash identifier: InUFR4QnPqxLw2eOXUePOUDsX7o9jv2BUJNZ/0Zq7Nk= Subject key identifier: C3:6C:45:CD:DA:62:76:79:31:98:AF:D6:3E:D6:11:ED:16:A2:43:65 Authority key identifier: 9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D Certificate issuer: /CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D Certificate serial: 3EE49BDF703307D79A5C6766C901F84C2043D2E6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer Subject info access: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft Manifest number: 01AD Signing time: Wed 05 Nov 2025 00:54:58 +0000 Manifest this update: Wed 05 Nov 2025 00:49:58 +0000 Manifest next update: Thu 06 Nov 2025 03:53:58 +0000 Files and hashes: 1: 34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa (hash: zwE7+BkACCSkaLuprz1tnvVDwiMXOKL8M0S4eDl2SuI=) 2: 323830343a363861383a3a2f33322d313238203d3e20323639373037.roa (hash: z8KvPm2mQOim4DJBvpBUShLU77s/9n6vTftmZoh8lWE=) 3: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl (hash: UqE0bwmstkpp1mW5TSg03vh5dhuqT095S7wOgtMdDxU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e4:9b:df:70:33:07:d7:9a:5c:67:66:c9:01:f8:4c:20:43:d2:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D Validity Not Before: Nov 5 00:49:58 2025 GMT Not After : Nov 6 03:53:58 2025 GMT Subject: CN=C36C45CDDA6276793198AFD63ED611ED16A24365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f0:3b:a8:90:f3:92:39:6a:5a:40:11:b7:27: 10:21:38:6d:cd:60:69:bb:5a:1c:12:d4:94:b6:ce: 66:a9:55:e5:86:05:21:56:58:59:f6:84:15:e8:b6: b4:fb:f4:64:37:07:8b:40:3a:10:43:94:1f:02:69: f5:ee:f2:23:1b:bd:55:2b:01:49:90:29:24:63:32: 2e:8c:c4:99:d4:f5:c9:fc:1e:36:d1:9e:46:86:5d: 9b:c5:44:42:ab:2a:e8:e4:ca:7b:15:07:79:cf:c3: 73:43:eb:b1:14:a0:19:9d:d2:47:e6:31:46:c4:48: fc:4a:dc:4c:4c:87:ae:d6:df:92:bb:df:16:6e:cd: c0:d6:f2:51:5e:b2:09:22:8f:f0:58:60:33:20:d3: 5a:aa:0d:ca:c8:82:26:a3:23:a7:fe:12:fe:04:3a: e3:00:eb:34:53:d6:49:2d:f2:b4:d8:03:65:35:6d: 6f:f0:c6:68:6f:19:90:55:77:ce:72:34:8d:8c:bb: cc:8f:50:a2:2c:93:62:f8:37:5f:67:91:c8:8d:64: 22:74:7a:a4:5f:c9:dd:a8:7b:c3:f3:75:7e:3d:2f: 8b:93:8c:18:4e:3c:9a:d5:ef:a3:06:57:3c:3d:51: 9e:4c:92:08:82:b9:45:45:03:08:d5:4c:a9:ca:a0: 16:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:6C:45:CD:DA:62:76:79:31:98:AF:D6:3E:D6:11:ED:16:A2:43:65 X509v3 Authority Key Identifier: keyid:9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:34:f7:b5:fc:32:2b:34:bd:2d:16:04:62:51:f7:d7:59:09: 18:cf:b7:9c:21:c7:8b:28:b3:ea:aa:25:6c:e8:aa:ef:35:c7: fb:bb:99:f4:34:7e:35:77:70:df:be:82:c1:44:b0:1a:38:fd: 67:6c:bb:01:54:32:91:cb:ea:18:0e:0f:1a:96:1b:8e:27:a0: 0e:34:05:32:f0:b1:1b:bf:9c:33:d6:09:58:d4:9a:e0:d8:72: c8:78:6a:21:55:a7:f4:1c:a0:1c:08:a0:88:79:a1:b8:cb:ec: c7:18:42:5a:e0:b7:77:08:c2:82:0c:c0:e6:d6:e7:ce:2d:6f: 8c:50:37:57:3d:0e:bd:46:1b:35:e6:1e:4f:2c:18:67:41:8f: 79:c0:88:f1:85:22:9f:2a:be:f0:56:5b:e5:8a:c5:1e:1f:68: 6d:aa:28:ba:5d:0a:b7:3a:2b:22:d4:63:67:4f:f2:80:f5:fe: a8:2b:79:69:94:e1:00:ad:de:3f:6b:47:1e:06:20:12:34:a2: 68:8c:44:f9:c9:b3:1d:0f:b9:83:f3:4a:f8:85:35:ac:09:c8: 31:84:74:a6:a6:f3:4a:21:bc:46:c2:41:fd:60:59:77:64:66: 0a:11:23:92:94:67:16:f5:95:cd:2d:e8:ec:4f:a9:cb:91:34: d6:ab:d5:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPuSb33AzB9eaXGdmyQH4TCBD0uYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ0Rjk5QzUwQkNFNjIyQzI1RjZDRjQwODNCM0NCRTM2 NEM4QkExRDAeFw0yNTExMDUwMDQ5NThaFw0yNTExMDYwMzUzNThaMDMxMTAvBgNV BAMTKEMzNkM0NUNEREE2Mjc2NzkzMTk4QUZENjNFRDYxMUVEMTZBMjQzNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG8DuokPOSOWpaQBG3JxAhOG3N YGm7WhwS1JS2zmapVeWGBSFWWFn2hBXotrT79GQ3B4tAOhBDlB8CafXu8iMbvVUr AUmQKSRjMi6MxJnU9cn8HjbRnkaGXZvFREKrKujkynsVB3nPw3ND67EUoBmd0kfm MUbESPxK3ExMh67W35K73xZuzcDW8lFesgkij/BYYDMg01qqDcrIgiajI6f+Ev4E OuMA6zRT1kkt8rTYA2U1bW/wxmhvGZBVd85yNI2Mu8yPUKIsk2L4N19nkciNZCJ0 eqRfyd2oe8PzdX49L4uTjBhOPJrV76MGVzw9UZ5MkgiCuUVFAwjVTKnKoBYVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUw2xFzdpidnkxmK/WPtYR7RaiQ2UwHwYDVR0j BBgwFoAUnU+ZxQvOYiwl9s9Ag7PL42TIuh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmFQQ25nTGtjTG9ja3JBTnNLWHV1dFVvTnJkNE5vNURWeDYzQmZoQ0w2 TUcvMC85RDRGOTlDNTBCQ0U2MjJDMjVGNkNGNDA4M0IzQ0JFMzY0QzhCQTFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlENEY5OUM1MEJDRTYyMkMy NUY2Q0Y0MDgzQjNDQkUzNjRDOEJBMUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmFQQ25nTGtjTG9ja3JBTnNLWHV1dFVvTnJkNE5vNURWeDYzQmZoQ0w2TUcvMC85 RDRGOTlDNTBCQ0U2MjJDMjVGNkNGNDA4M0IzQ0JFMzY0QzhCQTFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADzT3tfwyKzS9LRYEYlH311kJGM+3nCHHiyiz6qolbOiq7zXH+7uZ9DR+NXdw 376CwUSwGjj9Z2y7AVQykcvqGA4PGpYbjiegDjQFMvCxG7+cM9YJWNSa4NhyyHhq IVWn9BygHAigiHmhuMvsxxhCWuC3dwjCggzA5tbnzi1vjFA3Vz0OvUYbNeYeTywY Z0GPecCI8YUinyq+8FZb5YrFHh9obaooul0KtzorItRjZ0/ygPX+qCt5aZThAK3e P2tHHgYgEjSiaIxE+cmzHQ+5g/NK+IU1rAnIMYR0pqbzSiG8RsJB/WBZd2RmChEj kpRnFvWVzS3o7E+py5E01qvVBw== -----END CERTIFICATE-----Generated at Wed Nov 5 09:14:28 2025 by rpki-client