$ rpki-client -vvf rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.mft File: D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.mft (raw, json) Hash identifier: iW4seSEMH2CcQgIzZ7dfALrL2s/WA+nxbmu8fKzI28k= Subject key identifier: E9:62:60:D0:D7:81:7E:94:8B:15:FF:0A:AF:F5:AF:F7:2D:53:6F:40 Authority key identifier: D9:ED:07:85:52:BA:C2:79:66:2C:7A:C0:E3:D7:F6:EA:67:DF:56:94 Certificate issuer: /CN=D9ED078552BAC279662C7AC0E3D7F6EA67DF5694 Certificate serial: 2E53DDE6261A7D98A6631A6CB0DBFF796B66D39C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.cer Subject info access: rsync://rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.mft Manifest number: AA Signing time: Tue 04 Nov 2025 11:15:16 +0000 Manifest this update: Tue 04 Nov 2025 11:10:16 +0000 Manifest next update: Wed 05 Nov 2025 14:58:16 +0000 Files and hashes: 1: D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.crl (hash: CkR0GIRgQV17Gk+mspse/sSWduZiAwHw9WAOPv1M3LM=) 2: 323830343a346563633a3a2f33322d3438203d3e20323638323833.roa (hash: 4zMsykUh7NgtSQYcLAQ5SQLWj08ze+POoqFzYTmhZDY=) 3: 34352e3233372e3138302e302f32322d3234203d3e20323638323833.roa (hash: YFN+AEs5n1Eig3C/gtA8yy0FSgyDExbV1tDtPXxZf6A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.crl rsync://rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 14:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:53:dd:e6:26:1a:7d:98:a6:63:1a:6c:b0:db:ff:79:6b:66:d3:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9ED078552BAC279662C7AC0E3D7F6EA67DF5694 Validity Not Before: Nov 4 11:10:16 2025 GMT Not After : Nov 5 14:58:16 2025 GMT Subject: CN=E96260D0D7817E948B15FF0AAFF5AFF72D536F40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:aa:e9:2a:3e:4a:c3:70:56:ba:ad:32:0a: c2:ef:d4:3b:d2:b2:81:71:73:be:8a:b8:35:e3:1b: 51:07:7c:3d:5c:cf:60:42:d2:cc:b3:73:78:1a:52: c1:cb:58:37:16:ed:35:d5:a8:a4:03:aa:61:45:f8: 0f:10:d3:59:c1:a6:97:53:e2:00:8d:61:34:77:e0: 1e:3d:5c:0c:73:dd:7d:fb:bb:bb:39:f3:5e:13:a3: cc:87:7c:7b:77:89:76:80:9e:1c:0e:30:b8:a9:dc: 44:04:f4:d0:ca:e3:0f:e6:af:51:55:5d:98:c0:41: d1:ad:bb:e3:53:8e:8b:c7:be:66:d6:00:39:46:d6: bd:93:24:c3:bf:4b:6a:8d:0b:bc:dc:20:3b:19:f5: fc:32:d6:62:97:28:d8:70:e1:9c:50:3a:6a:8e:cd: 88:20:cc:33:a5:54:9e:6c:db:c5:b9:24:60:12:4d: 5f:8d:c2:d5:5e:40:0b:3e:10:24:d9:4a:26:5d:5e: e5:05:da:6a:e5:fc:dc:32:dd:36:96:3f:b6:f9:66: 28:95:db:9f:8b:cb:7b:e1:6c:eb:fe:59:7f:93:82: fe:c5:16:2b:92:3b:13:ba:65:9d:2c:38:2c:67:0e: 82:0f:65:48:a7:28:74:b6:48:b1:4c:6e:27:53:8c: 34:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:62:60:D0:D7:81:7E:94:8B:15:FF:0A:AF:F5:AF:F7:2D:53:6F:40 X509v3 Authority Key Identifier: keyid:D9:ED:07:85:52:BA:C2:79:66:2C:7A:C0:E3:D7:F6:EA:67:DF:56:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3U7tgDixHkFD5EH9yzXWuSfE1DAW7shAf3SSoKwvt722/0/D9ED078552BAC279662C7AC0E3D7F6EA67DF5694.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:3a:74:6b:3d:86:ff:f4:c2:10:a1:69:b4:3f:5a:a0:1e:d5: 37:c9:64:4c:01:8f:06:d7:90:e5:2e:3c:54:50:4a:c5:2e:0c: 9b:12:85:a1:ef:21:c0:bb:48:87:8c:2b:03:bf:9d:83:b4:ac: 43:49:19:2e:30:1b:86:dd:7e:27:5d:88:9b:0c:4e:6b:66:b5: 98:98:e5:48:04:7a:49:8a:4d:46:5e:fb:cc:3e:84:49:a3:f4: 12:ef:71:fb:d9:48:a2:b9:f7:f8:b3:23:79:f5:89:37:b9:da: bd:fa:be:68:90:bc:54:ad:dc:32:47:f5:91:04:73:9d:95:c9: 72:bc:e6:f6:1a:12:f6:cd:2c:1d:51:0c:b6:ba:40:4c:37:16: 3b:86:74:90:92:9d:22:78:50:6a:7b:ca:5b:40:c9:08:ec:ab: 6f:fd:23:96:12:40:10:86:2f:58:05:ef:87:1d:29:f3:57:c2: e3:bb:e0:d7:96:30:c7:10:a3:91:03:50:9c:6b:92:0d:93:85: d8:ae:6c:d6:0e:e5:be:14:13:53:61:91:9d:ac:fc:ae:15:0b: 5e:ae:44:c8:97:9d:72:7d:5e:67:93:00:52:01:1f:b9:9a:77: bf:c9:d6:e7:d3:be:8c:5a:14:8c:b1:8d:22:e1:14:50:19:d7: c8:91:55:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULlPd5iYafZimYxpssNv/eWtm05wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFRDA3ODU1MkJBQzI3OTY2MkM3QUMwRTNEN0Y2RUE2 N0RGNTY5NDAeFw0yNTExMDQxMTEwMTZaFw0yNTExMDUxNDU4MTZaMDMxMTAvBgNV BAMTKEU5NjI2MEQwRDc4MTdFOTQ4QjE1RkYwQUFGRjVBRkY3MkQ1MzZGNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtqrpKj5Kw3BWuq0yCsLv1DvS soFxc76KuDXjG1EHfD1cz2BC0syzc3gaUsHLWDcW7TXVqKQDqmFF+A8Q01nBppdT 4gCNYTR34B49XAxz3X37u7s5814To8yHfHt3iXaAnhwOMLip3EQE9NDK4w/mr1FV XZjAQdGtu+NTjovHvmbWADlG1r2TJMO/S2qNC7zcIDsZ9fwy1mKXKNhw4ZxQOmqO zYggzDOlVJ5s28W5JGASTV+NwtVeQAs+ECTZSiZdXuUF2mrl/Nwy3TaWP7b5ZiiV 25+Ly3vhbOv+WX+Tgv7FFiuSOxO6ZZ0sOCxnDoIPZUinKHS2SLFMbidTjDQpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6WJg0NeBfpSLFf8Kr/Wv9y1Tb0AwHwYDVR0j BBgwFoAU2e0HhVK6wnlmLHrA49f26mffVpQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1U3dGdEaXhIa0ZENUVIOXl6WFd1U2ZFMURBVzdzaEFmM1NTb0t3dnQ3 MjIvMC9EOUVEMDc4NTUyQkFDMjc5NjYyQzdBQzBFM0Q3RjZFQTY3REY1Njk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5RUQwNzg1NTJCQUMyNzk2 NjJDN0FDMEUzRDdGNkVBNjdERjU2OTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1U3dGdEaXhIa0ZENUVIOXl6WFd1U2ZFMURBVzdzaEFmM1NTb0t3dnQ3MjIvMC9E OUVEMDc4NTUyQkFDMjc5NjYyQzdBQzBFM0Q3RjZFQTY3REY1Njk0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANTp0az2G//TCEKFptD9aoB7VN8lkTAGPBteQ5S48VFBKxS4MmxKFoe8hwLtI h4wrA7+dg7SsQ0kZLjAbht1+J12ImwxOa2a1mJjlSAR6SYpNRl77zD6ESaP0Eu9x +9lIorn3+LMjefWJN7navfq+aJC8VK3cMkf1kQRznZXJcrzm9hoS9s0sHVEMtrpA TDcWO4Z0kJKdInhQanvKW0DJCOyrb/0jlhJAEIYvWAXvhx0p81fC47vg15YwxxCj kQNQnGuSDZOF2K5s1g7lvhQTU2GRnaz8rhULXq5EyJedcn1eZ5MAUgEfuZp3v8nW 59O+jFoUjLGNIuEUUBnXyJFVow== -----END CERTIFICATE-----Generated at Wed Nov 5 04:28:04 2025 by rpki-client