$ rpki-client -vvf rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft File: C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft (raw, json) Hash identifier: jfEEibB8li0vpAYHKX30ceFIOOvXrvqlx2kkebzkOBE= Subject key identifier: A0:C5:16:CF:2A:94:6B:3F:5B:77:7A:79:CE:D8:66:81:8D:A4:B1:36 Authority key identifier: C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B Certificate issuer: /CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B Certificate serial: 0F2C438261491F619C114CCB9C3DECB0318C847C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer Subject info access: rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft Manifest number: 027D Signing time: Wed 05 Nov 2025 12:30:30 +0000 Manifest this update: Wed 05 Nov 2025 12:25:30 +0000 Manifest next update: Thu 06 Nov 2025 14:56:30 +0000 Files and hashes: 1: C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl (hash: xKyb02jNEdyhA9fQtgatUt/2TWEPExu8FSiIxlc94+c=) 2: 323830343a373739383a3a2f33322d313238203d3e20323731313838.roa (hash: Oq8XP3wv/ghsrdwyvbkipNglCVLH6ofbbhpDuh9rzrI=) 3: 3230302e362e34382e302f32342d3332203d3e20323731313838.roa (hash: HXzDFfjvaudy+HCQJ3LevFAJF+IlNvHbKDb7azvjpI4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 14:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:2c:43:82:61:49:1f:61:9c:11:4c:cb:9c:3d:ec:b0:31:8c:84:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B Validity Not Before: Nov 5 12:25:30 2025 GMT Not After : Nov 6 14:56:30 2025 GMT Subject: CN=A0C516CF2A946B3F5B777A79CED866818DA4B136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:a5:f7:d7:fd:a9:ed:f5:9f:b2:6b:ce:3d: be:14:e7:87:e5:33:f4:c3:2e:9f:42:d7:3e:e7:20: 9a:d8:66:67:99:e5:fc:16:38:df:21:f9:37:3a:9e: c2:3e:8e:22:a8:e1:35:1e:2c:2f:1d:a2:fe:38:5d: 5f:96:28:43:22:0a:a1:4f:83:29:1d:a5:59:91:b0: 6e:81:20:e4:dd:4a:6b:62:e3:4f:7b:b3:95:e4:3a: 01:fe:50:43:9a:43:63:e6:0f:9b:3c:ad:d3:04:ca: 06:55:31:f9:7e:53:e2:53:dc:f3:1a:18:b8:a1:84: 26:03:f5:67:b0:ed:a4:20:95:fe:ac:86:8a:07:b1: 42:f2:1f:6d:e8:bf:35:fe:51:d0:c1:b2:62:75:b2: fa:c9:fb:ed:3d:ff:23:6b:ea:56:fc:89:15:28:0e: 7d:b1:44:69:6f:40:fd:1e:b6:76:3b:e1:0a:c1:bd: 84:9e:5c:78:1a:5f:aa:7d:b8:38:b9:30:4c:d8:0f: 92:95:4a:f5:15:83:30:1a:08:2a:ab:d4:5d:f0:bc: 42:87:06:96:7b:7b:1e:a5:cf:0d:8c:de:90:b4:80: 8f:9b:ac:72:71:62:b1:34:d9:0d:d1:20:ba:3a:9e: 1b:2b:1e:71:0e:51:01:a6:05:38:87:60:f2:6a:24: be:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C5:16:CF:2A:94:6B:3F:5B:77:7A:79:CE:D8:66:81:8D:A4:B1:36 X509v3 Authority Key Identifier: keyid:C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:e7:8a:db:9a:03:83:81:a2:f5:09:86:15:cd:86:ff:70:f5: f0:7d:c2:b8:2e:70:c3:69:5a:a1:e7:57:05:36:ec:6c:2b:f8: 1b:d3:c6:1c:80:0a:dc:8e:02:e5:0c:31:5e:12:84:0a:0a:74: 66:2c:0a:ef:6d:18:1f:22:43:73:a3:a9:a3:85:d0:86:6f:a5: 98:1e:d5:16:57:98:3c:f7:96:5b:90:ae:98:18:c3:ce:0e:e7: 16:9f:91:73:b2:01:32:11:06:88:f0:4f:24:f0:f8:2c:e9:d1: 89:d7:52:ce:99:79:b3:65:e3:0a:2a:ac:8f:0d:7a:25:24:51: f4:fa:58:b6:e7:de:a2:24:1e:84:2d:65:d2:88:e6:2b:02:d1: 9c:d6:79:59:f9:ca:fe:3c:29:24:aa:da:1e:7e:3e:84:7c:76: 75:bc:c4:f6:4d:b6:a1:cf:6b:e7:7e:7e:0d:cc:cb:b6:a5:93: 12:56:c1:88:6a:1d:d1:b0:6e:f4:be:f6:d5:e9:df:ef:a1:c8: 9d:ea:93:23:b5:c3:85:29:2a:1f:53:05:b3:0b:1c:6c:03:6e: 2f:c1:4f:19:83:35:e6:9a:df:58:6e:13:e3:42:90:d7:24:79: 25:26:9f:5f:bc:d2:4a:78:b8:54:8d:5d:32:c0:9d:4d:90:e2: a3:e9:18:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDyxDgmFJH2GcEUzLnD3ssDGMhHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlEQjhFQTExRjZBNUE0ODVBRUMyOTU1NjE0MzgxNURC MjUwN0EzQjAeFw0yNTExMDUxMjI1MzBaFw0yNTExMDYxNDU2MzBaMDMxMTAvBgNV BAMTKEEwQzUxNkNGMkE5NDZCM0Y1Qjc3N0E3OUNFRDg2NjgxOERBNEIxMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz4aX31/2p7fWfsmvOPb4U54fl M/TDLp9C1z7nIJrYZmeZ5fwWON8h+Tc6nsI+jiKo4TUeLC8dov44XV+WKEMiCqFP gykdpVmRsG6BIOTdSmti4097s5XkOgH+UEOaQ2PmD5s8rdMEygZVMfl+U+JT3PMa GLihhCYD9Wew7aQglf6shooHsULyH23ovzX+UdDBsmJ1svrJ++09/yNr6lb8iRUo Dn2xRGlvQP0etnY74QrBvYSeXHgaX6p9uDi5MEzYD5KVSvUVgzAaCCqr1F3wvEKH BpZ7ex6lzw2M3pC0gI+brHJxYrE02Q3RILo6nhsrHnEOUQGmBTiHYPJqJL7HAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoMUWzyqUaz9bd3p5zthmgY2ksTYwHwYDVR0j BBgwFoAUyduOoR9qWkha7ClVYUOBXbJQejswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVRXeFpWUzVMSnpMdlVYdmdrM2RvUjlhRjZoMW9nWEFCMkM1bWtlZ0p2 SzQvMC9DOURCOEVBMTFGNkE1QTQ4NUFFQzI5NTU2MTQzODE1REIyNTA3QTNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5REI4RUExMUY2QTVBNDg1 QUVDMjk1NTYxNDM4MTVEQjI1MDdBM0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVRXeFpWUzVMSnpMdlVYdmdrM2RvUjlhRjZoMW9nWEFCMkM1bWtlZ0p2SzQvMC9D OURCOEVBMTFGNkE1QTQ4NUFFQzI5NTU2MTQzODE1REIyNTA3QTNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkOeK25oDg4Gi9QmGFc2G/3D18H3CuC5ww2laoedXBTbsbCv4G9PGHIAK3I4C 5QwxXhKECgp0ZiwK720YHyJDc6Opo4XQhm+lmB7VFleYPPeWW5CumBjDzg7nFp+R c7IBMhEGiPBPJPD4LOnRiddSzpl5s2XjCiqsjw16JSRR9PpYtufeoiQehC1l0ojm KwLRnNZ5WfnK/jwpJKraHn4+hHx2dbzE9k22oc9r535+DczLtqWTElbBiGod0bBu 9L721enf76HIneqTI7XDhSkqH1MFswscbANuL8FPGYM15prfWG4T40KQ1yR5JSaf X7zSSni4VI1dMsCdTZDio+kYjA== -----END CERTIFICATE-----Generated at Wed Nov 5 15:39:37 2025 by rpki-client