$ rpki-client -vvf rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/9A0F3F8F96F763E503AA1695E46721EED45714D7.mft File: 9A0F3F8F96F763E503AA1695E46721EED45714D7.mft (raw, json) Hash identifier: zi8Lg2lbyduDFxhjFZdMka+ZGveYTGC5nNViF2vhvbw= Subject key identifier: DB:52:3D:7F:A1:00:AE:9B:06:5A:41:AA:8B:0F:66:6E:02:F8:10:0A Authority key identifier: 9A:0F:3F:8F:96:F7:63:E5:03:AA:16:95:E4:67:21:EE:D4:57:14:D7 Certificate issuer: /CN=9A0F3F8F96F763E503AA1695E46721EED45714D7 Certificate serial: 664D74963AC387CD7D80AA931BD6FD3F59399C0E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A0F3F8F96F763E503AA1695E46721EED45714D7.cer Subject info access: rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/9A0F3F8F96F763E503AA1695E46721EED45714D7.mft Manifest number: A2 Signing time: Wed 05 Nov 2025 07:17:42 +0000 Manifest this update: Wed 05 Nov 2025 07:12:42 +0000 Manifest next update: Thu 06 Nov 2025 08:28:42 +0000 Files and hashes: 1: 9A0F3F8F96F763E503AA1695E46721EED45714D7.crl (hash: lQuyTJ319iHt8E/4c053tyLucr5hfYjNF6autZs1Sco=) 2: 323830343a383331303a3a2f33322d313238203d3e20323732313734.roa (hash: gY8DEVjBzvPz7spBGxxGuDN6TdzH048FCCv/sMByRtc=) 3: 34352e3136342e3230322e302f32332d3332203d3e20323732313734.roa (hash: V7ee/ZIyjG1csvf3721aEFPJJ+X8O/x+M2dogK6V9Vg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/9A0F3F8F96F763E503AA1695E46721EED45714D7.crl rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/9A0F3F8F96F763E503AA1695E46721EED45714D7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A0F3F8F96F763E503AA1695E46721EED45714D7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 08:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:4d:74:96:3a:c3:87:cd:7d:80:aa:93:1b:d6:fd:3f:59:39:9c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A0F3F8F96F763E503AA1695E46721EED45714D7 Validity Not Before: Nov 5 07:12:42 2025 GMT Not After : Nov 6 08:28:42 2025 GMT Subject: CN=DB523D7FA100AE9B065A41AA8B0F666E02F8100A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0d:b4:4b:89:ee:d1:cc:28:1c:d6:51:73:ee: 6b:68:8f:3b:39:68:76:d2:b4:81:41:5c:3d:d5:68: d6:ef:a1:bf:97:37:87:08:5f:66:c7:ff:a2:b6:ed: 09:0e:cd:82:da:47:0e:cb:aa:f6:8a:7a:3a:cf:3f: b2:a7:a1:c6:a9:17:a1:dc:75:41:ff:61:1f:87:48: fa:c7:3f:c8:14:85:22:bf:ef:60:10:88:0d:38:dc: 2f:c4:a2:a7:88:74:a7:f1:07:c3:12:84:b6:e0:d2: 03:f8:27:f2:5d:23:dc:c5:dd:2e:b8:72:8d:99:81: 54:42:01:33:f1:a8:0a:4a:13:db:b3:d5:1e:7d:db: e9:66:92:af:88:8b:d1:ab:1f:e5:f9:7c:09:c3:f0: 61:50:f4:b5:9f:76:e9:c8:36:d9:28:9d:7a:0d:a1: fd:37:b1:2e:70:2e:04:b3:b3:dd:59:a3:70:f3:c6: 10:2b:3c:c3:31:fe:98:63:86:c6:dc:a2:3e:71:94: e2:96:d1:73:74:c0:08:03:f7:99:88:1f:ed:95:4d: 77:b2:8e:76:bf:c9:b7:69:40:22:d9:fe:d0:1e:7b: 96:ab:37:dd:ed:ed:48:8f:d7:54:9c:84:fc:37:ed: d6:24:ab:dc:35:99:da:49:57:aa:0d:75:23:b3:a0: 91:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:52:3D:7F:A1:00:AE:9B:06:5A:41:AA:8B:0F:66:6E:02:F8:10:0A X509v3 Authority Key Identifier: keyid:9A:0F:3F:8F:96:F7:63:E5:03:AA:16:95:E4:67:21:EE:D4:57:14:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/9A0F3F8F96F763E503AA1695E46721EED45714D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A0F3F8F96F763E503AA1695E46721EED45714D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5D5iyCnhMjqMMkW3TZd3yyVhBwy6Gz32D1E6HppaHa1/0/9A0F3F8F96F763E503AA1695E46721EED45714D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:05:52:83:58:ea:a6:1d:4a:2f:b2:67:7c:ea:15:12:9c:e0: 30:1f:ba:8b:0c:ea:26:3d:b1:9c:f8:30:f5:f0:d2:44:f0:c7: 2a:10:24:20:fb:56:2f:17:d7:99:8e:80:4d:fe:b8:56:f7:15: d0:f7:11:d2:eb:22:76:01:c8:48:f1:dd:39:cf:3c:70:61:33: 8e:4a:e0:da:c1:82:f8:9f:21:1a:61:93:90:83:0b:8e:38:02: 5d:48:78:47:45:b1:14:04:1e:31:f4:d5:ca:0e:c1:02:9a:95: c9:62:6e:4e:50:aa:be:09:70:eb:b2:a8:cc:87:4e:16:3d:6d: 82:04:82:8f:9b:d4:ff:7e:91:ec:0a:da:ee:89:a6:2d:e4:1a: 8d:de:24:c6:fa:f9:b2:43:0c:9c:4b:f3:fa:9b:a2:5c:45:bd: 23:d6:a5:ff:26:21:ad:07:d1:70:7e:d9:4e:71:18:ad:e3:f7: 71:fd:cb:94:36:b1:e2:fd:fd:04:d3:da:82:61:40:11:0c:95: 21:a9:dd:5a:98:da:6a:95:fd:60:e5:0e:aa:5a:69:d9:f4:c5: c8:cd:df:90:de:9d:02:3d:cc:8e:68:de:b0:36:86:6a:dc:09: 89:4a:4c:d7:7f:e0:de:2f:5e:87:5e:75:ba:b6:fd:42:a7:4c: f6:16:97:cd -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUZk10ljrDh819gKqTG9b9P1k5nA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEwRjNGOEY5NkY3NjNFNTAzQUExNjk1RTQ2NzIxRUVE NDU3MTRENzAeFw0yNTExMDUwNzEyNDJaFw0yNTExMDYwODI4NDJaMDMxMTAvBgNV BAMTKERCNTIzRDdGQTEwMEFFOUIwNjVBNDFBQThCMEY2NjZFMDJGODEwMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNDbRLie7RzCgc1lFz7mtojzs5 aHbStIFBXD3VaNbvob+XN4cIX2bH/6K27QkOzYLaRw7LqvaKejrPP7KnocapF6Hc dUH/YR+HSPrHP8gUhSK/72AQiA043C/EoqeIdKfxB8MShLbg0gP4J/JdI9zF3S64 co2ZgVRCATPxqApKE9uz1R592+lmkq+Ii9GrH+X5fAnD8GFQ9LWfdunINtkonXoN of03sS5wLgSzs91Zo3DzxhArPMMx/phjhsbcoj5xlOKW0XN0wAgD95mIH+2VTXey jna/ybdpQCLZ/tAee5arN93t7UiP11SchPw37dYkq9w1mdpJV6oNdSOzoJEbAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU21I9f6EArpsGWkGqiw9mbgL4EAowHwYDVR0j BBgwFoAUmg8/j5b3Y+UDqhaV5Gch7tRXFNcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby81RDVpeUNuaE1qcU1Na1czVFpkM3l5VmhCd3k2R3ozMkQxRTZIcHBhSGEx LzAvOUEwRjNGOEY5NkY3NjNFNTAzQUExNjk1RTQ2NzIxRUVENDU3MTRENy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85QTBGM0Y4Rjk2Rjc2M0U1MDNB QTE2OTVFNDY3MjFFRUQ0NTcxNEQ3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVE NWl5Q25oTWpxTU1rVzNUWmQzeXlWaEJ3eTZHejMyRDFFNkhwcGFIYTEvMC85QTBG M0Y4Rjk2Rjc2M0U1MDNBQTE2OTVFNDY3MjFFRUQ0NTcxNEQ3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA VwVSg1jqph1KL7JnfOoVEpzgMB+6iwzqJj2xnPgw9fDSRPDHKhAkIPtWLxfXmY6A Tf64VvcV0PcR0usidgHISPHdOc88cGEzjkrg2sGC+J8hGmGTkIMLjjgCXUh4R0Wx FAQeMfTVyg7BApqVyWJuTlCqvglw67KozIdOFj1tggSCj5vU/36R7Ara7ommLeQa jd4kxvr5skMMnEvz+puiXEW9I9al/yYhrQfRcH7ZTnEYreP3cf3LlDax4v39BNPa gmFAEQyVIandWpjaapX9YOUOqlpp2fTFyM3fkN6dAj3MjmjesDaGatwJiUpM13/g 3i9eh151urb9QqdM9haXzQ== -----END CERTIFICATE-----Generated at Wed Nov 5 21:27:27 2025 by rpki-client