$ rpki-client -vvf rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.mft File: C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.mft (raw, json) Hash identifier: 9VAEqDX4scgiUDMgQhj27nkGKaYqhFtlcJrjqNe/sZI= Subject key identifier: A6:92:6D:41:BF:5D:45:0F:D5:B4:EA:C5:AA:27:6D:3A:A6:54:A0:AE Authority key identifier: C0:9F:2D:D1:47:DF:1D:28:EA:F5:BF:6B:3D:2C:49:0F:19:AC:6C:42 Certificate issuer: /CN=C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42 Certificate serial: 4B1BCB9F90CD5B904CB197D5246C5F9C0728E6DB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.cer Subject info access: rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.mft Manifest number: 20 Signing time: Tue 04 Nov 2025 07:45:14 +0000 Manifest this update: Tue 04 Nov 2025 07:40:14 +0000 Manifest next update: Wed 05 Nov 2025 11:32:14 +0000 Files and hashes: 1: 323830343a353563383a3a2f33322d3438203d3e20323637393536.roa (hash: gaZhmmhZNsbUCPBR6PnB1XQmG3lBGl8vM/9e3MVZ3mY=) 2: 34352e3136362e3131362e302f32322d3234203d3e20323637393536.roa (hash: AEGM1btJ9oq1wJOsi8BZ246qlaThIyli1mD7QA2qWBw=) 3: C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.crl (hash: E0dV/qU2M9dbB2wv1Q5zZYvK3/DIFsFQu8gJJ2caY+E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.crl rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 11:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1b:cb:9f:90:cd:5b:90:4c:b1:97:d5:24:6c:5f:9c:07:28:e6:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42 Validity Not Before: Nov 4 07:40:14 2025 GMT Not After : Nov 5 11:32:14 2025 GMT Subject: CN=A6926D41BF5D450FD5B4EAC5AA276D3AA654A0AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e5:ac:a8:64:cf:1c:43:22:1f:55:43:9e:d4: ae:9a:5a:10:ff:8b:ff:22:f5:74:9f:5d:58:8b:7d: fc:66:b6:18:94:c3:e4:3f:8c:69:94:3f:ac:28:07: 9b:f8:b6:15:33:47:7f:ae:7b:25:cd:bb:58:69:12: 67:a7:f3:99:d8:4e:10:8f:99:64:3d:e5:63:fb:68: 46:37:56:17:06:9d:38:db:d3:18:a7:35:10:b2:a4: 9f:0d:f0:d7:03:91:45:46:d4:59:78:da:2d:3c:cf: a5:84:08:bf:2e:43:5a:03:32:78:ad:b7:ab:8f:0c: 3d:b9:80:39:c8:01:35:51:93:37:c6:db:55:e8:68: 19:03:f1:e7:d2:5b:fb:04:a6:d3:ea:4a:6f:5f:ac: a7:e3:5c:45:d2:5f:14:2f:ed:3f:b6:6b:7d:95:2e: 62:fb:e7:ea:ab:21:c3:42:98:0f:82:90:a6:e1:02: e8:aa:fe:88:65:a2:a9:80:e2:62:fd:57:d4:d6:54: 9b:73:f0:76:06:23:8b:c8:ec:33:21:80:be:33:e4: 2c:19:8d:33:4b:de:ca:00:7f:38:b1:68:70:2e:ab: 62:82:4d:19:e8:b5:69:56:4d:cd:6d:eb:ef:b5:65: 92:e6:67:23:49:9a:e3:5d:87:bc:20:bf:f9:33:d9: ef:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:92:6D:41:BF:5D:45:0F:D5:B4:EA:C5:AA:27:6D:3A:A6:54:A0:AE X509v3 Authority Key Identifier: keyid:C0:9F:2D:D1:47:DF:1D:28:EA:F5:BF:6B:3D:2C:49:0F:19:AC:6C:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c6:04:94:d9:65:4c:11:c7:08:69:3e:44:fd:e7:47:62:dd: 1d:ff:81:77:27:d8:03:9e:47:db:d4:2e:4d:09:a4:9b:2c:7d: 42:c2:4c:91:ff:58:e5:53:cb:4d:29:03:6e:5f:3b:5b:9e:e7: 9e:10:e1:f2:46:70:3a:82:60:67:f6:3d:30:8e:b4:26:a5:c1: cc:cb:69:a2:1f:b4:65:19:62:f0:7e:12:ed:b4:5f:11:a5:d0: 63:04:0d:54:49:f1:3c:e9:ee:27:c7:69:79:a7:9a:39:0e:51: 69:c5:c0:d2:5d:76:cb:78:8f:ab:8d:0e:58:ee:d9:28:9b:ed: a5:68:46:bd:03:19:b1:73:4c:ec:59:e2:23:8a:e0:ee:63:e6: 1e:43:c0:22:74:c4:d6:ef:d1:92:c5:fc:d8:3a:59:f4:bc:9f: d8:5d:97:ce:74:5a:c8:58:6c:b0:d4:75:36:92:ba:2a:82:64: 4e:b6:83:2f:cf:2d:dd:b6:a4:bd:59:6a:3b:9b:fe:a8:6e:2c: 0c:d0:cb:2b:0e:93:12:de:fc:50:a4:d4:bb:98:2d:ea:e4:d2: bc:7b:9b:80:2a:67:86:e1:f8:39:2d:5c:3c:dd:5a:eb:4b:73: 85:7c:f9:7e:9c:cf:07:e0:3b:3a:50:53:b6:27:6c:03:aa:7f: 2a:b4:ba:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSxvLn5DNW5BMsZfVJGxfnAco5tswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA5RjJERDE0N0RGMUQyOEVBRjVCRjZCM0QyQzQ5MEYx OUFDNkM0MjAeFw0yNTExMDQwNzQwMTRaFw0yNTExMDUxMTMyMTRaMDMxMTAvBgNV BAMTKEE2OTI2RDQxQkY1RDQ1MEZENUI0RUFDNUFBMjc2RDNBQTY1NEEwQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS5ayoZM8cQyIfVUOe1K6aWhD/ i/8i9XSfXViLffxmthiUw+Q/jGmUP6woB5v4thUzR3+ueyXNu1hpEmen85nYThCP mWQ95WP7aEY3VhcGnTjb0xinNRCypJ8N8NcDkUVG1Fl42i08z6WECL8uQ1oDMnit t6uPDD25gDnIATVRkzfG21XoaBkD8efSW/sEptPqSm9frKfjXEXSXxQv7T+2a32V LmL75+qrIcNCmA+CkKbhAuiq/ohloqmA4mL9V9TWVJtz8HYGI4vI7DMhgL4z5CwZ jTNL3soAfzixaHAuq2KCTRnotWlWTc1t6++1ZZLmZyNJmuNdh7wgv/kz2e/vAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUppJtQb9dRQ/VtOrFqidtOqZUoK4wHwYDVR0j BBgwFoAUwJ8t0UffHSjq9b9rPSxJDxmsbEIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2o0M0VyTGNXMnpScUc0Mnp3Q2ZNM2ZFWFZ2MWRjOGJvU3FjakptOG5z VXIvMC9DMDlGMkREMTQ3REYxRDI4RUFGNUJGNkIzRDJDNDkwRjE5QUM2QzQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwOUYyREQxNDdERjFEMjhF QUY1QkY2QjNEMkM0OTBGMTlBQzZDNDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2o0M0VyTGNXMnpScUc0Mnp3Q2ZNM2ZFWFZ2MWRjOGJvU3FjakptOG5zVXIvMC9D MDlGMkREMTQ3REYxRDI4RUFGNUJGNkIzRDJDNDkwRjE5QUM2QzQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASsYElNllTBHHCGk+RP3nR2LdHf+BdyfYA55H29QuTQmkmyx9QsJMkf9Y5VPL TSkDbl87W57nnhDh8kZwOoJgZ/Y9MI60JqXBzMtpoh+0ZRli8H4S7bRfEaXQYwQN VEnxPOnuJ8dpeaeaOQ5RacXA0l12y3iPq40OWO7ZKJvtpWhGvQMZsXNM7FniI4rg 7mPmHkPAInTE1u/RksX82DpZ9Lyf2F2XznRayFhssNR1NpK6KoJkTraDL88t3bak vVlqO5v+qG4sDNDLKw6TEt78UKTUu5gt6uTSvHubgCpnhuH4OS1cPN1a60tzhXz5 fpzPB+A7OlBTtidsA6p/KrS6UQ== -----END CERTIFICATE-----Generated at Wed Nov 5 03:46:54 2025 by rpki-client