$ rpki-client -vvf rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.mft File: 939B31761D811EC12BDF8456C574E6874A3AAD78.mft (raw, json) Hash identifier: /jJX1tG4NlFf3PyMLjiQ075mwghgjQ1ejc9T3bbc6Qs= Subject key identifier: 9F:A2:6E:87:93:93:65:C3:F6:5C:01:29:0A:B6:20:6A:2A:E7:03:44 Authority key identifier: 93:9B:31:76:1D:81:1E:C1:2B:DF:84:56:C5:74:E6:87:4A:3A:AD:78 Certificate issuer: /CN=939B31761D811EC12BDF8456C574E6874A3AAD78 Certificate serial: 7AE239ABE80767315F14FCDB28792C36ED6375A3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/939B31761D811EC12BDF8456C574E6874A3AAD78.cer Subject info access: rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.mft Manifest number: 0171 Signing time: Tue 04 Nov 2025 22:02:26 +0000 Manifest this update: Tue 04 Nov 2025 21:57:26 +0000 Manifest next update: Wed 05 Nov 2025 22:05:26 +0000 Files and hashes: 1: 323830343a363036303a3a2f33322d3332203d3e20323639313633.roa (hash: XdvzsjrTVduK7gKFmmN86hpBolyGt02sb5cx99ef1zA=) 2: 34352e3138312e32372e302f32342d3234203d3e20323639313633.roa (hash: s71CdDpUcZ4A30shJW5mOVFgvP++dX5FAxSaWex9Ssg=) 3: 34352e3138312e32342e302f32342d3234203d3e20323639313633.roa (hash: gi8pqk0YG8xuI770HmRS/Gm8wi1gMlrR0AnPzNvnq5o=) 4: 939B31761D811EC12BDF8456C574E6874A3AAD78.crl (hash: WGj5jy2MqmehwB52mWOsAzPpF3qOpjF/NqsgJ5of56w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.crl rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/939B31761D811EC12BDF8456C574E6874A3AAD78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 22:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e2:39:ab:e8:07:67:31:5f:14:fc:db:28:79:2c:36:ed:63:75:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=939B31761D811EC12BDF8456C574E6874A3AAD78 Validity Not Before: Nov 4 21:57:26 2025 GMT Not After : Nov 5 22:05:26 2025 GMT Subject: CN=9FA26E87939365C3F65C01290AB6206A2AE70344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:c0:e0:0f:f5:6b:f2:04:27:29:8f:8d:44: d6:7a:e4:fd:cc:71:79:a5:e9:a0:8b:68:92:65:b9: 05:97:c0:92:d7:85:8f:3b:b5:02:fd:58:58:5d:c9: 0c:38:d3:28:de:ef:d7:61:23:44:98:ef:78:7c:f0: c7:a5:04:11:32:c0:a7:6e:b9:34:eb:4f:eb:5b:e1: 55:c2:24:6b:bc:64:19:70:01:9e:6e:3e:43:a4:91: 4f:e1:5e:38:36:ca:b9:2d:29:bf:b1:e9:85:ac:21: a7:96:61:c9:d1:b6:35:9f:80:f5:9e:35:72:73:2d: 81:b6:78:7c:88:b4:d7:76:32:51:44:fc:f2:cf:84: d4:cb:69:08:4e:0d:b9:b7:33:80:bc:36:5a:e2:07: 69:49:cc:50:50:31:31:26:bc:8c:37:96:e6:a2:f4: 9f:6a:f0:44:a0:30:4e:bc:30:b3:f0:d7:fd:c7:d3: 16:63:c2:20:44:1e:3c:47:9c:61:46:05:f1:2a:44: a7:60:11:3e:61:93:b4:e0:ab:f4:08:ff:53:6c:e2: 91:f4:d8:3c:bc:29:9b:bf:9c:93:c3:2b:bd:3c:6e: 9f:b4:be:d3:43:18:6e:2d:47:14:8d:b9:ee:d4:df: 0b:2b:40:ca:2e:d0:ff:14:1b:d2:14:ef:eb:60:67: b7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A2:6E:87:93:93:65:C3:F6:5C:01:29:0A:B6:20:6A:2A:E7:03:44 X509v3 Authority Key Identifier: keyid:93:9B:31:76:1D:81:1E:C1:2B:DF:84:56:C5:74:E6:87:4A:3A:AD:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/939B31761D811EC12BDF8456C574E6874A3AAD78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:10:ca:3b:8e:5b:c8:97:7b:f6:8e:af:d1:65:c9:17:dd:48: 70:1e:b5:35:57:5c:ca:ce:2d:67:d4:7d:54:d0:86:f9:79:01: 62:5c:fd:1f:d3:6d:ce:c5:a3:e6:8f:8f:c4:12:31:7e:61:11: 64:49:37:82:15:5f:2e:4f:f1:0d:78:e6:c3:fe:a8:d7:7c:0e: 07:c4:1b:cb:af:9b:91:2a:00:74:d7:e2:6b:db:7f:8f:d3:d1: e5:19:e5:35:1b:43:1d:61:d2:fb:f2:76:d2:ab:02:9c:66:7a: f4:ba:f0:7e:d0:b2:7c:e0:d8:b2:ba:5b:6f:d7:53:df:41:7e: b1:15:3d:0c:8b:2d:26:bf:89:00:2f:a1:53:59:1e:b9:fc:19: 6b:b7:74:d5:d7:fe:1e:d2:e9:dd:ff:d2:20:f4:6e:da:3a:e9: 75:5c:cd:7b:c9:61:b5:bb:32:26:52:45:cf:af:30:97:a6:ee: d7:31:a0:0c:52:02:00:40:19:50:7c:de:5d:cb:76:41:cf:72: 82:d0:c2:01:dc:07:2d:06:44:1e:74:6c:e0:f9:d2:cc:de:a5: b2:58:bd:8a:bb:d7:2a:2a:f5:3f:33:9b:fa:c7:f8:c7:ec:e3: 1a:24:35:cc:38:bd:95:f9:23:73:0a:6b:5d:55:9c:19:3c:b0: 29:6c:9c:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeuI5q+gHZzFfFPzbKHksNu1jdaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM5QjMxNzYxRDgxMUVDMTJCREY4NDU2QzU3NEU2ODc0 QTNBQUQ3ODAeFw0yNTExMDQyMTU3MjZaFw0yNTExMDUyMjA1MjZaMDMxMTAvBgNV BAMTKDlGQTI2RTg3OTM5MzY1QzNGNjVDMDEyOTBBQjYyMDZBMkFFNzAzNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm1MDgD/Vr8gQnKY+NRNZ65P3M cXml6aCLaJJluQWXwJLXhY87tQL9WFhdyQw40yje79dhI0SY73h88MelBBEywKdu uTTrT+tb4VXCJGu8ZBlwAZ5uPkOkkU/hXjg2yrktKb+x6YWsIaeWYcnRtjWfgPWe NXJzLYG2eHyItNd2MlFE/PLPhNTLaQhODbm3M4C8NlriB2lJzFBQMTEmvIw3luai 9J9q8ESgME68MLPw1/3H0xZjwiBEHjxHnGFGBfEqRKdgET5hk7Tgq/QI/1Ns4pH0 2Dy8KZu/nJPDK708bp+0vtNDGG4tRxSNue7U3wsrQMou0P8UG9IU7+tgZ7dPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUn6Juh5OTZcP2XAEpCrYgairnA0QwHwYDVR0j BBgwFoAUk5sxdh2BHsEr34RWxXTmh0o6rXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE43TmlRQU1WMWd5eHJ5emt5TDE3OTRYb1d4SHFoWmljVmd6VDdtYjhx M3ovMC85MzlCMzE3NjFEODExRUMxMkJERjg0NTZDNTc0RTY4NzRBM0FBRDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzOUIzMTc2MUQ4MTFFQzEy QkRGODQ1NkM1NzRFNjg3NEEzQUFENzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE43TmlRQU1WMWd5eHJ5emt5TDE3OTRYb1d4SHFoWmljVmd6VDdtYjhxM3ovMC85 MzlCMzE3NjFEODExRUMxMkJERjg0NTZDNTc0RTY4NzRBM0FBRDc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbRDKO45byJd79o6v0WXJF91IcB61NVdcys4tZ9R9VNCG+XkBYlz9H9NtzsWj 5o+PxBIxfmERZEk3ghVfLk/xDXjmw/6o13wOB8Qby6+bkSoAdNfia9t/j9PR5Rnl NRtDHWHS+/J20qsCnGZ69LrwftCyfODYsrpbb9dT30F+sRU9DIstJr+JAC+hU1ke ufwZa7d01df+HtLp3f/SIPRu2jrpdVzNe8lhtbsyJlJFz68wl6bu1zGgDFICAEAZ UHzeXct2Qc9ygtDCAdwHLQZEHnRs4PnSzN6lsli9irvXKir1PzOb+sf4x+zjGiQ1 zDi9lfkjcwprXVWcGTywKWycVA== -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:44 2025 by rpki-client