$ rpki-client -vvf rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft File: 9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft (raw, json) Hash identifier: MPR8FTd4JLoxTtwSHEjdsmniHqjsdSVTR6bG7in5C2Y= Subject key identifier: 9B:C0:44:AE:AF:18:7C:2F:B5:9D:B0:17:9A:1C:A9:DA:8C:E6:C0:57 Authority key identifier: 93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9 Certificate issuer: /CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9 Certificate serial: 7A0F841E7BC44ED8EA133ED9CA001B6BDAF640AC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer Subject info access: rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft Manifest number: 023D Signing time: Wed 05 Nov 2025 02:44:32 +0000 Manifest this update: Wed 05 Nov 2025 02:39:32 +0000 Manifest next update: Thu 06 Nov 2025 05:33:32 +0000 Files and hashes: 1: 9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl (hash: Ii8tqWw6Lfn5MJItkkSMTfK/Y6XBvnSmXCGt8RZtFhc=) 2: 323830343a6634633a3a2f33322d313238203d3e20323633353738.roa (hash: tnjJpaX42qhrNEfwxFNIHRMECda6natWe4mEIY7HkLY=) 3: 3137392e3130392e36342e302f32302d3332203d3e20323633353738.roa (hash: Q1uNYyBjGbyIhtDBLHYu22N+qGJlESCPootyri/UJWg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 04:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:0f:84:1e:7b:c4:4e:d8:ea:13:3e:d9:ca:00:1b:6b:da:f6:40:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9 Validity Not Before: Nov 5 02:39:32 2025 GMT Not After : Nov 6 05:33:32 2025 GMT Subject: CN=9BC044AEAF187C2FB59DB0179A1CA9DA8CE6C057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:81:72:1e:81:2a:a5:22:4b:d1:be:54:3c:bc: 3d:b0:66:d0:32:7b:7e:7d:dd:71:7c:b5:5f:d8:c7: 4b:92:61:f2:1a:80:f5:41:f3:f6:5c:3f:0e:9b:5c: 42:28:bf:bb:47:bf:d2:2d:25:64:ed:3e:6a:92:99: af:ad:38:bf:8c:92:f4:28:9d:86:a1:4e:fb:18:a8: f9:97:ce:f6:4c:3f:41:07:cd:63:7a:8d:4b:69:bb: d4:71:fe:32:68:91:b1:9a:28:ba:05:19:0b:09:2e: d1:4f:a9:59:b6:9d:c1:b1:e1:2a:93:60:1e:63:ea: 0a:de:17:e2:d5:72:1a:7c:6c:5c:c5:9e:e2:c7:f2: a2:47:46:93:2e:a4:ca:46:87:a1:5a:e6:63:06:c1: b5:21:02:30:d0:f6:29:0f:e8:a7:f1:04:57:6a:19: f2:14:6e:60:86:45:58:ca:6d:57:43:d6:30:a6:1f: cc:c0:f3:5c:5f:6a:59:03:0f:1a:42:e1:ad:75:79: 53:90:a5:f0:bb:9a:47:f6:35:49:e0:7c:01:ad:1c: 48:d3:2b:bc:48:1c:3b:0f:83:14:c1:ce:bf:8b:96: 61:33:b5:68:ff:79:05:c6:7a:33:ec:6e:83:f5:3f: 45:cb:da:eb:4d:9f:ab:56:c6:ab:dd:17:07:46:99: 78:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C0:44:AE:AF:18:7C:2F:B5:9D:B0:17:9A:1C:A9:DA:8C:E6:C0:57 X509v3 Authority Key Identifier: keyid:93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:06:0e:81:66:06:93:e4:92:f9:4a:0d:41:f8:2e:b7:65:ee: d3:8b:92:6d:85:46:2c:e0:42:28:71:0d:5b:39:25:ca:2f:62: 29:42:90:a7:4e:44:97:cb:6d:be:0e:13:e3:d7:6c:75:d0:d3: 41:73:76:f5:90:b6:96:f7:93:40:ba:aa:04:55:a1:63:8c:c3: a8:fd:01:f5:2e:44:a3:a4:60:11:20:2a:e7:30:54:00:f8:0f: 33:82:ed:ee:f6:fd:12:37:cd:f2:20:28:a9:45:a0:a4:df:e8: c6:6f:83:4b:23:08:9f:b1:03:e9:47:eb:d5:ab:2c:8b:cb:c3: db:8e:d0:79:77:0a:4f:86:b1:ef:73:fc:07:99:53:d1:9c:e2: 0b:03:2c:73:96:aa:b3:47:65:a1:74:b9:a9:e6:fc:f3:af:0c: a2:46:b2:54:e6:ad:57:45:f5:68:ac:0b:45:46:8b:f1:98:b9: 60:0c:1e:76:e6:13:88:02:fa:0d:17:59:de:0f:df:3e:9f:a4: d4:c2:d1:3a:97:64:f2:4e:22:27:e6:a6:2e:e5:b5:51:91:96: a4:26:3b:19:4e:a1:00:14:d8:6f:1e:cc:85:b1:a2:62:a9:ca: f7:aa:9a:a7:4e:58:f7:1f:13:10:85:30:c5:8e:d7:4e:08:f8: 12:4d:fe:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeg+EHnvETtjqEz7ZygAba9r2QKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM5N0MyOEUzMDY1RkJFNDgxMjU0QUE4QzBDRUY2OTA2 RjY2QUJFOTAeFw0yNTExMDUwMjM5MzJaFw0yNTExMDYwNTMzMzJaMDMxMTAvBgNV BAMTKDlCQzA0NEFFQUYxODdDMkZCNTlEQjAxNzlBMUNBOURBOENFNkMwNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9gXIegSqlIkvRvlQ8vD2wZtAy e3593XF8tV/Yx0uSYfIagPVB8/ZcPw6bXEIov7tHv9ItJWTtPmqSma+tOL+MkvQo nYahTvsYqPmXzvZMP0EHzWN6jUtpu9Rx/jJokbGaKLoFGQsJLtFPqVm2ncGx4SqT YB5j6greF+LVchp8bFzFnuLH8qJHRpMupMpGh6Fa5mMGwbUhAjDQ9ikP6KfxBFdq GfIUbmCGRVjKbVdD1jCmH8zA81xfalkDDxpC4a11eVOQpfC7mkf2NUngfAGtHEjT K7xIHDsPgxTBzr+LlmEztWj/eQXGejPsboP1P0XL2utNn6tWxqvdFwdGmXj5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUm8BErq8YfC+1nbAXmhyp2ozmwFcwHwYDVR0j BBgwFoAUk5fCjjBl++SBJUqowM72kG9mq+kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXNoalRieHhpa2N3dk4yS0V4d0NGaGREaEJ0VjdEV0pKTGM2NUMxMUFU aHUvMC85Mzk3QzI4RTMwNjVGQkU0ODEyNTRBQThDMENFRjY5MDZGNjZBQkU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzOTdDMjhFMzA2NUZCRTQ4 MTI1NEFBOEMwQ0VGNjkwNkY2NkFCRTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXNoalRieHhpa2N3dk4yS0V4d0NGaGREaEJ0VjdEV0pKTGM2NUMxMUFUaHUvMC85 Mzk3QzI4RTMwNjVGQkU0ODEyNTRBQThDMENFRjY5MDZGNjZBQkU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmAYOgWYGk+SS+UoNQfgut2Xu04uSbYVGLOBCKHENWzklyi9iKUKQp05El8tt vg4T49dsddDTQXN29ZC2lveTQLqqBFWhY4zDqP0B9S5Eo6RgESAq5zBUAPgPM4Lt 7vb9EjfN8iAoqUWgpN/oxm+DSyMIn7ED6Ufr1assi8vD247QeXcKT4ax73P8B5lT 0ZziCwMsc5aqs0dloXS5qeb8868MokayVOatV0X1aKwLRUaL8Zi5YAweduYTiAL6 DRdZ3g/fPp+k1MLROpdk8k4iJ+amLuW1UZGWpCY7GU6hABTYbx7MhbGiYqnK96qa p05Y9x8TEIUwxY7XTgj4Ek3+Sg== -----END CERTIFICATE-----Generated at Wed Nov 5 05:10:38 2025 by rpki-client