$ rpki-client -vvf rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft File: 9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft (raw, json) Hash identifier: 0LtKanHeeCyj+mJY1rmcFxIyzzjeNE5TLhhPnPhvRaU= Subject key identifier: CA:1E:10:33:DC:2E:3E:64:0A:73:86:CA:B7:55:BC:DF:B4:00:7F:0F Authority key identifier: 9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2 Certificate issuer: /CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2 Certificate serial: 4AF77D99C2055C0B4D310FEECA50F3FE29CBE4DD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft Manifest number: 0303 Signing time: Wed 05 Nov 2025 06:26:31 +0000 Manifest this update: Wed 05 Nov 2025 06:21:31 +0000 Manifest next update: Thu 06 Nov 2025 08:45:31 +0000 Files and hashes: 1: 34352e362e3136342e302f32322d3332203d3e20323636313430.roa (hash: qMvBmq1pgzlHrJKNsO9NjVqPj2Gyp6zALArUCGJqi18=) 2: 9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl (hash: mwWy932qs3XHCuyLtlC6f33NBQgWINQgNlCIF85ymOs=) 3: 323830343a336234633a3a2f33322d313238203d3e20323636313430.roa (hash: wtL9IYalkHyva3LZqTtTEMQ7BxCRTX/aVoPlnkJnyRE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 08:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f7:7d:99:c2:05:5c:0b:4d:31:0f:ee:ca:50:f3:fe:29:cb:e4:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2 Validity Not Before: Nov 5 06:21:31 2025 GMT Not After : Nov 6 08:45:31 2025 GMT Subject: CN=CA1E1033DC2E3E640A7386CAB755BCDFB4007F0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9f:42:90:43:51:92:32:dd:26:6e:b8:8c:b5: d3:69:d3:46:33:f7:e5:b0:17:51:6b:9c:79:5b:58: 3f:a8:ca:80:61:e2:7d:e9:ed:71:18:b1:08:c1:59: 24:d0:57:66:b1:d7:1d:19:e8:59:a8:b2:cd:65:1b: 2d:d5:3a:df:83:a2:ff:7e:00:92:6e:c2:40:01:a1: 2d:82:86:68:c5:ff:ed:f8:5f:56:c7:1b:9c:2d:0e: 5c:d1:50:f8:99:9b:60:7a:dd:8c:46:69:c2:84:dc: 16:60:6c:4a:dc:f3:34:a0:40:f2:8e:4a:60:c8:50: e1:6f:0d:fc:35:4b:b6:f0:d4:dc:77:f5:35:d3:a2: aa:8b:af:ed:c4:dc:47:99:c9:5f:ce:13:21:7f:41: 55:75:36:dd:f3:56:cf:59:0d:85:dc:44:26:b2:3f: 7c:36:39:d3:31:d6:f2:cc:0a:88:7b:f5:ad:a9:55: db:0d:a8:5a:e5:8e:70:94:4f:c9:bd:a2:cd:4a:f2: 8a:83:2f:3c:64:33:57:f3:b8:74:d3:13:13:1f:a1: d5:f6:0c:dd:e0:1a:4f:23:40:9a:00:b3:fb:61:25: 79:58:b5:b8:fc:96:84:f8:8d:68:00:ae:5d:b9:e6: 58:a6:3a:37:fc:5f:5a:2d:09:e8:03:f9:3b:69:98: 31:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1E:10:33:DC:2E:3E:64:0A:73:86:CA:B7:55:BC:DF:B4:00:7F:0F X509v3 Authority Key Identifier: keyid:9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:d5:87:13:9b:ef:5b:ab:ac:af:29:98:cb:97:17:34:fe:68: b9:09:1b:4a:4d:1e:94:16:89:35:61:51:50:7a:e5:7c:99:53: 8b:07:db:03:c5:c3:22:cb:ab:18:f4:da:58:e2:67:5c:87:ef: 9a:fd:29:b8:a9:ae:67:d2:e6:8d:26:2c:d6:ce:70:92:2f:c2: ba:5d:9e:e9:d6:15:2b:dc:94:7f:33:c3:96:3c:18:69:96:d6: 5e:a0:0f:75:54:19:f9:96:3b:37:75:5a:d1:77:b3:85:d0:f9: 90:c4:2b:54:b7:cf:b2:11:db:27:7c:d1:86:4d:d8:29:63:2b: ac:d7:84:ac:64:b5:b9:43:33:da:67:23:6a:35:a5:da:2b:56: 48:b1:fa:0d:69:38:c0:2d:f8:2a:c5:c7:0f:e7:fa:55:04:59: e1:55:85:97:31:71:87:2a:54:c5:86:cf:95:ff:34:7a:b4:1e: 23:10:e8:b1:1f:91:5c:80:72:5d:9b:f1:4a:6f:b1:04:0e:18: 0e:99:c2:24:be:c9:30:42:4a:34:50:05:08:07:99:a2:0f:46: fb:5a:8c:72:e6:30:51:5c:36:db:89:ab:62:ab:c9:ee:84:a7: 18:8d:ea:68:e9:d0:04:5f:e6:2e:3c:89:17:2f:12:b2:e5:35: 40:0d:bd:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSvd9mcIFXAtNMQ/uylDz/inL5N0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNDRTkxMzUyQkFBQzBFQTMzNzFGQjQyQ0FDMTAzMEFB OTFCOEJFMjAeFw0yNTExMDUwNjIxMzFaFw0yNTExMDYwODQ1MzFaMDMxMTAvBgNV BAMTKENBMUUxMDMzREMyRTNFNjQwQTczODZDQUI3NTVCQ0RGQjQwMDdGMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8n0KQQ1GSMt0mbriMtdNp00Yz 9+WwF1FrnHlbWD+oyoBh4n3p7XEYsQjBWSTQV2ax1x0Z6Fmoss1lGy3VOt+Dov9+ AJJuwkABoS2ChmjF/+34X1bHG5wtDlzRUPiZm2B63YxGacKE3BZgbErc8zSgQPKO SmDIUOFvDfw1S7bw1Nx39TXToqqLr+3E3EeZyV/OEyF/QVV1Nt3zVs9ZDYXcRCay P3w2OdMx1vLMCoh79a2pVdsNqFrljnCUT8m9os1K8oqDLzxkM1fzuHTTExMfodX2 DN3gGk8jQJoAs/thJXlYtbj8loT4jWgArl255limOjf8X1otCegD+TtpmDHHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyh4QM9wuPmQKc4bKt1W837QAfw8wHwYDVR0j BBgwFoAUnM6RNSuqwOozcftCysEDCqkbi+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2VQaXNzWVU5RWNUNksyWHVxTjE3N1RuQnNvSjRreUtRNkJrZDVuM1Ey UGEvMS85Q0NFOTEzNTJCQUFDMEVBMzM3MUZCNDJDQUMxMDMwQUE5MUI4QkUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQ0U5MTM1MkJBQUMwRUEz MzcxRkI0MkNBQzEwMzBBQTkxQjhCRTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2VQaXNzWVU5RWNUNksyWHVxTjE3N1RuQnNvSjRreUtRNkJrZDVuM1EyUGEvMS85 Q0NFOTEzNTJCQUFDMEVBMzM3MUZCNDJDQUMxMDMwQUE5MUI4QkUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmdWHE5vvW6usrymYy5cXNP5ouQkbSk0elBaJNWFRUHrlfJlTiwfbA8XDIsur GPTaWOJnXIfvmv0puKmuZ9LmjSYs1s5wki/Cul2e6dYVK9yUfzPDljwYaZbWXqAP dVQZ+ZY7N3Va0XezhdD5kMQrVLfPshHbJ3zRhk3YKWMrrNeErGS1uUMz2mcjajWl 2itWSLH6DWk4wC34KsXHD+f6VQRZ4VWFlzFxhypUxYbPlf80erQeIxDosR+RXIBy XZvxSm+xBA4YDpnCJL7JMEJKNFAFCAeZog9G+1qMcuYwUVw224mrYqvJ7oSnGI3q aOnQBF/mLjyJFy8SsuU1QA294w== -----END CERTIFICATE-----Generated at Wed Nov 5 14:43:56 2025 by rpki-client