$ rpki-client -vvf rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft File: C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft (raw, json) Hash identifier: a6mW0BxEIlXs/UBskEy0UHVtgoxkaborJ0zpJ/wbdvA= Subject key identifier: C6:26:4B:08:16:C8:72:66:3B:5A:84:1C:50:20:E4:9F:2C:88:E7:14 Authority key identifier: C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B Certificate issuer: /CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B Certificate serial: 37DCEB8293083F537DA79B44907160294FD27BF0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer Subject info access: rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft Manifest number: 0209 Signing time: Sun 10 Aug 2025 14:36:50 +0000 Manifest this update: Sun 10 Aug 2025 14:31:50 +0000 Manifest next update: Mon 11 Aug 2025 17:08:50 +0000 Files and hashes: 1: 323830343a373739383a3a2f33322d313238203d3e20323731313838.roa (hash: Oq8XP3wv/ghsrdwyvbkipNglCVLH6ofbbhpDuh9rzrI=) 2: 3230302e362e34382e302f32342d3332203d3e20323731313838.roa (hash: HXzDFfjvaudy+HCQJ3LevFAJF+IlNvHbKDb7azvjpI4=) 3: C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl (hash: f2y/g/TxXQn+nTvCeeUOGHJ86qj09JYGmjugetWa22I=) 4: 323830343a373739383a3a2f33342d313238203d3e20323731313838.roa (hash: cQjGN5WENW46/jBuhJA1lT+mTYrjHprWmDjgq2R5zjY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 17:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:dc:eb:82:93:08:3f:53:7d:a7:9b:44:90:71:60:29:4f:d2:7b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B Validity Not Before: Aug 10 14:31:50 2025 GMT Not After : Aug 11 17:08:50 2025 GMT Subject: CN=C6264B0816C872663B5A841C5020E49F2C88E714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b7:2b:22:7b:d6:eb:68:84:d5:ac:6f:9b:8f: b7:8e:15:0a:30:b0:aa:9e:8c:1d:11:c5:e2:9e:8c: fa:58:53:59:e0:fe:9d:56:69:28:7f:83:78:19:21: cb:ea:17:e4:f3:e7:02:11:77:6f:60:1e:9b:c6:a3: 6d:6a:9f:02:06:1e:45:61:ae:42:9c:64:24:ca:c3: a4:95:9e:1f:0d:ac:39:4c:4c:94:25:e1:3a:db:f5: 7b:23:bb:d5:d2:f4:22:2b:b5:66:0c:ac:cf:fa:1b: 99:ff:b6:eb:37:18:8e:c5:bb:23:36:12:88:c2:27: 70:d8:b5:0a:e7:86:fd:ef:d6:14:1a:b8:d4:b2:c7: c3:c2:d4:50:7f:37:95:cb:9d:02:eb:09:0e:54:e5: df:89:da:0e:d7:95:1b:b5:de:fd:a8:35:7b:b1:30: 08:6f:8f:24:d1:6d:07:83:60:17:51:97:73:a3:4c: 33:12:62:c8:5c:88:bb:0b:07:62:3c:bf:15:39:49: 0a:c2:57:dd:cc:d8:10:40:c3:f3:34:15:ca:b2:32: 1e:bb:c7:aa:29:1e:6b:45:88:f1:cc:74:ea:ff:1c: 8b:c1:f3:6f:8f:60:5d:fb:7c:a3:3e:df:cd:5e:33: 37:c1:22:01:91:7e:cc:d8:91:6c:be:91:b5:9b:9c: fc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:26:4B:08:16:C8:72:66:3B:5A:84:1C:50:20:E4:9F:2C:88:E7:14 X509v3 Authority Key Identifier: keyid:C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:47:97:2e:f5:7c:e5:a7:14:36:92:2c:af:ed:a2:8a:f9:a1: 92:a5:a4:f3:08:8d:53:48:96:68:e0:b3:58:59:1b:a7:d3:0a: a7:9e:1a:31:6e:1a:8e:87:82:97:6e:21:ee:50:56:3f:08:da: ed:9b:05:ef:c0:bf:a8:53:00:c6:38:bb:13:10:4d:97:23:d2: 2d:5a:f4:00:79:50:74:d7:81:be:b3:40:a6:9f:43:c6:fb:92: 5d:a4:bc:5f:88:16:85:09:54:19:9b:9b:10:fa:22:f0:30:bf: b7:b0:44:55:44:95:6a:79:d2:d1:a4:bd:31:66:de:1d:86:be: b0:d6:96:77:f4:ac:d3:1b:44:17:e5:88:c2:13:f6:00:f3:f4: 11:14:d8:f0:da:9b:cd:f5:99:13:b3:5b:2d:6a:08:0f:97:ce: bf:06:73:a9:7f:e9:4c:62:af:7e:5f:1e:7d:00:e0:08:77:c4: 78:a1:13:cd:6a:f0:f9:64:0f:69:b5:c4:63:73:bb:97:48:8b: 35:9b:49:98:b1:06:5d:e4:88:b5:45:44:cf:9d:5a:7d:ca:14: 5f:4a:0b:b7:23:75:4d:2c:ac:bb:4e:0a:90:2d:27:48:06:9d: ff:90:b8:aa:a8:f2:46:41:74:ae:6a:51:96:5d:7c:1d:b8:45: b0:ee:60:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN9zrgpMIP1N9p5tEkHFgKU/Se/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlEQjhFQTExRjZBNUE0ODVBRUMyOTU1NjE0MzgxNURC MjUwN0EzQjAeFw0yNTA4MTAxNDMxNTBaFw0yNTA4MTExNzA4NTBaMDMxMTAvBgNV BAMTKEM2MjY0QjA4MTZDODcyNjYzQjVBODQxQzUwMjBFNDlGMkM4OEU3MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCltysie9braITVrG+bj7eOFQow sKqejB0RxeKejPpYU1ng/p1WaSh/g3gZIcvqF+Tz5wIRd29gHpvGo21qnwIGHkVh rkKcZCTKw6SVnh8NrDlMTJQl4Trb9Xsju9XS9CIrtWYMrM/6G5n/tus3GI7FuyM2 EojCJ3DYtQrnhv3v1hQauNSyx8PC1FB/N5XLnQLrCQ5U5d+J2g7XlRu13v2oNXux MAhvjyTRbQeDYBdRl3OjTDMSYshciLsLB2I8vxU5SQrCV93M2BBAw/M0FcqyMh67 x6opHmtFiPHMdOr/HIvB82+PYF37fKM+381eMzfBIgGRfszYkWy+kbWbnPz3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxiZLCBbIcmY7WoQcUCDknyyI5xQwHwYDVR0j BBgwFoAUyduOoR9qWkha7ClVYUOBXbJQejswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVRXeFpWUzVMSnpMdlVYdmdrM2RvUjlhRjZoMW9nWEFCMkM1bWtlZ0p2 SzQvMC9DOURCOEVBMTFGNkE1QTQ4NUFFQzI5NTU2MTQzODE1REIyNTA3QTNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5REI4RUExMUY2QTVBNDg1 QUVDMjk1NTYxNDM4MTVEQjI1MDdBM0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVRXeFpWUzVMSnpMdlVYdmdrM2RvUjlhRjZoMW9nWEFCMkM1bWtlZ0p2SzQvMC9D OURCOEVBMTFGNkE1QTQ4NUFFQzI5NTU2MTQzODE1REIyNTA3QTNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhUeXLvV85acUNpIsr+2iivmhkqWk8wiNU0iWaOCzWFkbp9MKp54aMW4ajoeC l24h7lBWPwja7ZsF78C/qFMAxji7ExBNlyPSLVr0AHlQdNeBvrNApp9DxvuSXaS8 X4gWhQlUGZubEPoi8DC/t7BEVUSVannS0aS9MWbeHYa+sNaWd/Ss0xtEF+WIwhP2 APP0ERTY8NqbzfWZE7NbLWoID5fOvwZzqX/pTGKvfl8efQDgCHfEeKETzWrw+WQP abXEY3O7l0iLNZtJmLEGXeSItUVEz51afcoUX0oLtyN1TSysu04KkC0nSAad/5C4 qqjyRkF0rmpRll18HbhFsO5gAw== -----END CERTIFICATE-----Generated at Mon Aug 11 02:05:16 2025 by rpki-client