$ rpki-client -vvf rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/9DE32C9C96D6323358BE054E570FF9A96BD5E071.mft File: 9DE32C9C96D6323358BE054E570FF9A96BD5E071.mft (raw, json) Hash identifier: 9NSfrSi/FpwGwecQtMM6sGcgXEyRTZ9PKJnV4iqf0O8= Subject key identifier: A2:A8:C6:42:8A:E4:59:49:2A:95:E7:6B:79:4F:8C:3E:B6:9C:FD:C8 Authority key identifier: 9D:E3:2C:9C:96:D6:32:33:58:BE:05:4E:57:0F:F9:A9:6B:D5:E0:71 Certificate issuer: /CN=9DE32C9C96D6323358BE054E570FF9A96BD5E071 Certificate serial: 5274F021494211C0FF2360C8E99EC1F5F936FF52 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE32C9C96D6323358BE054E570FF9A96BD5E071.cer Subject info access: rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/9DE32C9C96D6323358BE054E570FF9A96BD5E071.mft Manifest number: 03 Signing time: Tue 04 Nov 2025 12:18:34 +0000 Manifest this update: Tue 04 Nov 2025 12:13:34 +0000 Manifest next update: Wed 05 Nov 2025 13:12:34 +0000 Files and hashes: 1: 323830343a393636343a3a2f33322d3334203d3e20323734333334.roa (hash: BON1vMPP4y5ygRUwN4IewX4Z2RB3UA2Bse05ZUhz+8I=) 2: 9DE32C9C96D6323358BE054E570FF9A96BD5E071.crl (hash: khreJeQ1j7xd9bmOpdz8PfErfc+U0XBilfbWwvAs5Yg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/9DE32C9C96D6323358BE054E570FF9A96BD5E071.crl rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/9DE32C9C96D6323358BE054E570FF9A96BD5E071.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE32C9C96D6323358BE054E570FF9A96BD5E071.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 13:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:74:f0:21:49:42:11:c0:ff:23:60:c8:e9:9e:c1:f5:f9:36:ff:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DE32C9C96D6323358BE054E570FF9A96BD5E071 Validity Not Before: Nov 4 12:13:34 2025 GMT Not After : Nov 5 13:12:34 2025 GMT Subject: CN=A2A8C6428AE459492A95E76B794F8C3EB69CFDC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:38:2c:8c:49:ae:be:cd:da:15:f9:50:fb:9e: 61:bc:88:81:18:d1:88:ad:56:24:32:cb:34:44:95: 05:fe:df:8e:f3:d9:bb:92:92:b7:5f:45:b8:c6:63: 87:f6:32:c4:26:61:fe:2c:01:a6:52:0d:a4:d4:78: 72:37:5a:cb:4e:01:cb:bf:b5:bc:41:bb:49:a5:de: 11:20:06:45:ae:7a:c8:96:6c:1b:bf:24:8a:ac:2d: 30:eb:c7:43:82:91:a5:d6:4a:2b:b9:d7:b8:c0:46: 55:2f:d7:ad:d2:fc:4f:6d:db:db:45:49:49:b3:30: c4:c4:2c:81:b5:58:88:f5:a6:0a:da:e1:61:26:f7: 4c:fd:2a:99:9d:66:b6:be:88:82:f9:1a:57:0e:82: 43:63:b1:75:45:7e:13:e3:ee:7a:eb:75:50:73:4d: 42:0d:d8:23:d7:e9:f2:73:54:01:0a:61:6b:2a:9b: b9:55:90:36:b4:90:21:02:f5:01:29:47:76:a4:5b: 12:f8:4b:05:68:8e:95:71:2a:74:48:3e:85:f2:02: 5c:6e:d4:4c:6d:c1:d1:8b:bb:b4:a7:30:5e:e0:63: 62:2a:e3:87:98:15:65:83:a4:56:9b:f3:ec:7e:59: 54:7e:fa:76:34:46:96:d3:5e:e8:91:ed:5a:c3:9a: 4f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A8:C6:42:8A:E4:59:49:2A:95:E7:6B:79:4F:8C:3E:B6:9C:FD:C8 X509v3 Authority Key Identifier: keyid:9D:E3:2C:9C:96:D6:32:33:58:BE:05:4E:57:0F:F9:A9:6B:D5:E0:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/9DE32C9C96D6323358BE054E570FF9A96BD5E071.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE32C9C96D6323358BE054E570FF9A96BD5E071.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/9DE32C9C96D6323358BE054E570FF9A96BD5E071.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:e5:13:e1:c4:f5:d2:47:3c:a7:0e:72:63:5c:ed:3b:c8:94: 09:04:81:79:45:02:f5:90:d0:43:4f:a3:d2:6c:ea:e5:a5:06: 0f:64:e8:64:fb:87:34:06:47:f0:ff:8b:37:f2:6b:6a:49:32: ef:d3:1d:93:ed:ac:0d:d9:32:db:de:a5:71:53:79:b3:29:2d: 03:c4:29:c6:51:04:2f:f8:b7:43:4b:15:52:46:3a:25:d1:1f: b7:09:51:06:29:f8:9e:23:44:64:19:72:19:f1:1a:5a:4e:e8: ee:ec:7a:96:24:d0:f0:05:8e:1f:32:9c:95:cb:72:c8:7f:a2: 61:8d:df:c6:d4:99:43:98:56:cd:8b:68:db:62:52:1b:5e:0d: a1:39:4d:67:64:b1:32:4a:85:c0:64:a0:9d:45:79:27:bd:30: 98:29:7d:e1:bc:cf:ea:a1:90:3d:1c:f9:26:56:af:d9:92:cc: e0:51:15:eb:60:d0:43:13:fc:65:d5:ee:0f:03:23:5a:a4:5b: a1:ff:35:2e:f7:c3:70:cf:99:d2:e5:3b:79:96:78:e9:bf:e9: 90:c6:ae:df:72:bf:66:c8:76:45:d4:9e:40:6f:53:7b:b2:84: 78:84:a9:8c:f9:98:86:70:c2:bb:d4:0e:c4:6d:b3:ff:b5:67: 66:62:ea:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUnTwIUlCEcD/I2DI6Z7B9fk2/1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURFMzJDOUM5NkQ2MzIzMzU4QkUwNTRFNTcwRkY5QTk2 QkQ1RTA3MTAeFw0yNTExMDQxMjEzMzRaFw0yNTExMDUxMzEyMzRaMDMxMTAvBgNV BAMTKEEyQThDNjQyOEFFNDU5NDkyQTk1RTc2Qjc5NEY4QzNFQjY5Q0ZEQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWOCyMSa6+zdoV+VD7nmG8iIEY 0YitViQyyzRElQX+347z2buSkrdfRbjGY4f2MsQmYf4sAaZSDaTUeHI3WstOAcu/ tbxBu0ml3hEgBkWuesiWbBu/JIqsLTDrx0OCkaXWSiu517jARlUv163S/E9t29tF SUmzMMTELIG1WIj1pgra4WEm90z9KpmdZra+iIL5GlcOgkNjsXVFfhPj7nrrdVBz TUIN2CPX6fJzVAEKYWsqm7lVkDa0kCEC9QEpR3akWxL4SwVojpVxKnRIPoXyAlxu 1ExtwdGLu7SnMF7gY2Iq44eYFWWDpFab8+x+WVR++nY0RpbTXuiR7VrDmk89AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoqjGQorkWUkqledreU+MPrac/cgwHwYDVR0j BBgwFoAUneMsnJbWMjNYvgVOVw/5qWvV4HEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkRNU3M5SGRKZzNmOWp0SFNURGt2ZWVDOGlkcmg4UGo4aWVpNlhSNHFq SzcvMC85REUzMkM5Qzk2RDYzMjMzNThCRTA1NEU1NzBGRjlBOTZCRDVFMDcxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlERTMyQzlDOTZENjMyMzM1 OEJFMDU0RTU3MEZGOUE5NkJENUUwNzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkRNU3M5SGRKZzNmOWp0SFNURGt2ZWVDOGlkcmg4UGo4aWVpNlhSNHFqSzcvMC85 REUzMkM5Qzk2RDYzMjMzNThCRTA1NEU1NzBGRjlBOTZCRDVFMDcxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWOUT4cT10kc8pw5yY1ztO8iUCQSBeUUC9ZDQQ0+j0mzq5aUGD2ToZPuHNAZH 8P+LN/Jrakky79Mdk+2sDdky296lcVN5syktA8QpxlEEL/i3Q0sVUkY6JdEftwlR Bin4niNEZBlyGfEaWk7o7ux6liTQ8AWOHzKclctyyH+iYY3fxtSZQ5hWzYto22JS G14NoTlNZ2SxMkqFwGSgnUV5J70wmCl94bzP6qGQPRz5Jlav2ZLM4FEV62DQQxP8 ZdXuDwMjWqRbof81LvfDcM+Z0uU7eZZ46b/pkMau33K/Zsh2RdSeQG9Te7KEeISp jPmYhnDCu9QOxG2z/7VnZmLqfQ== -----END CERTIFICATE-----Generated at Wed Nov 5 03:37:38 2025 by rpki-client