$ rpki-client -vvf rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.mft File: 9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.mft (raw, json) Hash identifier: P0msh7cK7wujcoCIa/NMXi8wOhOMFarq6r4RMJX/wNI= Subject key identifier: 86:45:A1:57:52:5C:C7:22:E5:D7:58:BB:96:61:4C:75:5E:C6:A1:0E Authority key identifier: 9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3 Certificate issuer: /CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3 Certificate serial: 6581E4E9547D249A64A238A36849800D5EE68E37 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer Subject info access: rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.mft Manifest number: 030C Signing time: Wed 05 Nov 2025 16:22:08 +0000 Manifest this update: Wed 05 Nov 2025 16:17:08 +0000 Manifest next update: Thu 06 Nov 2025 16:32:08 +0000 Files and hashes: 1: 9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.crl (hash: eBeYEMmqInOc5svTU3gmUoe4s8a3vdGRz7bqB4qGOAU=) 2: 34352e3138352e3233312e302f32342d3234203d3e20323639343333.roa (hash: DhbuDBjSw+bH+rZVadj8aCkbZzWdRDJFijEX4lmHA40=) 3: 34352e3138352e3233302e302f32332d3233203d3e20323639343333.roa (hash: 4C0jNU08j2gebVFpUGPF/moqFtZQpyvRJNizHVESTjo=) 4: 34352e3138352e3232382e302f32342d3234203d3e20323639343333.roa (hash: dEF3V3UoF2L8N3I4o+SbEBWDv8w83I90UJn4HALV0os=) 5: 323830343a363438383a3a2f33322d3332203d3e20323639343333.roa (hash: /ANJl7ZCG3yKhoW8sR/EppW6nvOLBKX41VyhsvgbhvE=) 6: 34352e3138352e3233302e302f32342d3234203d3e20323639343333.roa (hash: ek/LtB+Hg9YY/4nZCqPU8PTQ4tfsQSM5dRGcTtV2DcE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.crl rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 16:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:81:e4:e9:54:7d:24:9a:64:a2:38:a3:68:49:80:0d:5e:e6:8e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3 Validity Not Before: Nov 5 16:17:08 2025 GMT Not After : Nov 6 16:32:08 2025 GMT Subject: CN=8645A157525CC722E5D758BB96614C755EC6A10E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:53:6f:10:b5:89:a1:f4:6e:5c:e5:f2:34:2f: ff:be:62:7e:d6:90:00:b1:65:52:ff:37:ec:68:20: 6f:fc:98:3d:7e:ed:2e:41:c9:20:8a:b8:0e:a9:a5: d2:22:e0:41:0d:7f:dc:a6:be:6b:ef:9d:02:ea:84: 37:d7:5a:95:a3:e5:c8:70:0f:77:0b:bc:7b:9c:a1: 21:21:97:ef:92:25:e6:1e:37:d8:2f:0e:22:62:a3: f9:5c:57:fa:15:f4:2d:ea:63:40:ac:29:93:6a:7a: d2:35:59:4f:ad:52:84:6a:a4:00:cc:8e:7f:d4:e1: ff:bc:21:6d:6e:0f:66:eb:dd:7e:9e:7a:c1:eb:6d: e2:5e:0b:61:29:7a:3f:78:d5:be:2c:c0:dc:bb:71: b1:26:76:d9:bf:fc:00:47:3b:ed:b7:df:9a:fd:49: b4:26:92:c1:e5:41:d1:44:be:1d:de:98:66:3e:75: b9:d4:6c:27:08:5b:75:b0:05:24:bf:2c:00:b4:4e: 23:87:4f:01:ee:e2:bd:23:4d:1e:77:66:ac:cd:83: 4f:b8:e4:d9:1a:e6:12:98:1f:f4:bb:b5:db:09:06: 95:9e:4a:62:b7:17:32:f3:ce:6c:87:63:eb:76:78: d7:1d:1b:0a:c1:fd:77:23:55:42:06:46:b2:55:38: 59:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:45:A1:57:52:5C:C7:22:E5:D7:58:BB:96:61:4C:75:5E:C6:A1:0E X509v3 Authority Key Identifier: keyid:9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e5:04:cd:4a:14:3d:0b:0a:71:bb:f2:de:96:d7:fd:76:b5: 9f:82:03:6a:0b:3c:16:61:41:d9:47:12:99:5c:46:a0:b2:fa: c3:52:12:67:ae:5a:b8:f9:24:e4:b2:5d:6d:cd:4b:66:8a:b7: 79:db:ed:0c:59:4b:53:ca:39:91:c4:67:65:d5:4b:15:b4:c7: b7:95:ce:bd:3b:9a:9a:a3:b9:54:a3:d2:7b:d6:77:ce:2c:a7: 5c:a1:c4:c6:05:c2:c7:3c:48:2f:e5:84:1a:b9:21:a2:9e:68: ff:39:16:de:31:af:89:79:2b:19:4b:00:45:a6:b3:15:84:d5: d1:fd:f6:fa:80:29:b1:68:3d:14:24:9a:38:59:38:b5:dd:10: 88:ef:70:43:d6:22:78:29:37:49:7e:cf:5b:44:e8:ba:9e:5f: 8e:fd:df:76:3a:86:71:cd:4e:27:e2:82:3b:fd:6f:ce:e9:b2: 9f:c3:c5:e6:fe:7a:ae:e2:64:dc:9e:d9:2a:a2:e4:f4:ee:88: c5:1c:bb:b2:75:9e:32:50:61:32:31:2e:93:8d:a9:fe:a1:13: 45:21:3b:2c:eb:6a:6e:d4:f0:ab:28:47:78:b0:98:0b:73:d6: 88:2d:11:06:13:66:a4:4a:67:c7:41:20:4d:29:86:36:1e:fb: 52:9b:a1:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZYHk6VR9JJpkojijaEmADV7mjjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY0NzJFMDdCQjdFRDcxRTg0NzMxQzBCMkU4RjY4QkY3 QTZGMDJEMzAeFw0yNTExMDUxNjE3MDhaFw0yNTExMDYxNjMyMDhaMDMxMTAvBgNV BAMTKDg2NDVBMTU3NTI1Q0M3MjJFNUQ3NThCQjk2NjE0Qzc1NUVDNkExMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyU28QtYmh9G5c5fI0L/++Yn7W kACxZVL/N+xoIG/8mD1+7S5BySCKuA6ppdIi4EENf9ymvmvvnQLqhDfXWpWj5chw D3cLvHucoSEhl++SJeYeN9gvDiJio/lcV/oV9C3qY0CsKZNqetI1WU+tUoRqpADM jn/U4f+8IW1uD2br3X6eesHrbeJeC2Epej941b4swNy7cbEmdtm//ABHO+2335r9 SbQmksHlQdFEvh3emGY+dbnUbCcIW3WwBSS/LAC0TiOHTwHu4r0jTR53ZqzNg0+4 5Nka5hKYH/S7tdsJBpWeSmK3FzLzzmyHY+t2eNcdGwrB/XcjVUIGRrJVOFnZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhkWhV1JcxyLl11i7lmFMdV7GoQ4wHwYDVR0j BBgwFoAUn0cuB7t+1x6EcxwLLo9ov3pvAtMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmk2Umg0clUyeTY2MWdoYzloZVpRUVVlQXBlUHg2Mk5QZGRjN3E1eEZB RGgvMS85RjQ3MkUwN0JCN0VENzFFODQ3MzFDMEIyRThGNjhCRjdBNkYwMkQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGNDcyRTA3QkI3RUQ3MUU4 NDczMUMwQjJFOEY2OEJGN0E2RjAyRDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Nmk2Umg0clUyeTY2MWdoYzloZVpRUVVlQXBlUHg2Mk5QZGRjN3E1eEZBRGgvMS85 RjQ3MkUwN0JCN0VENzFFODQ3MzFDMEIyRThGNjhCRjdBNkYwMkQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOuUEzUoUPQsKcbvy3pbX/Xa1n4IDags8FmFB2UcSmVxGoLL6w1ISZ65auPkk 5LJdbc1LZoq3edvtDFlLU8o5kcRnZdVLFbTHt5XOvTuamqO5VKPSe9Z3ziynXKHE xgXCxzxIL+WEGrkhop5o/zkW3jGviXkrGUsARaazFYTV0f32+oApsWg9FCSaOFk4 td0QiO9wQ9YieCk3SX7PW0Toup5fjv3fdjqGcc1OJ+KCO/1vzumyn8PF5v56ruJk 3J7ZKqLk9O6IxRy7snWeMlBhMjEuk42p/qETRSE7LOtqbtTwqyhHeLCYC3PWiC0R BhNmpEpnx0EgTSmGNh77UpuhkQ== -----END CERTIFICATE-----Generated at Wed Nov 5 21:15:42 2025 by rpki-client