$ rpki-client -vvf rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.mft File: F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.mft (raw, json) Hash identifier: mSuMDCjdsLMbN4v0LXRCT2DqIf2E+blozsK9lCoa/vk= Subject key identifier: EC:E9:AE:F4:16:10:69:38:54:0B:2E:CC:6E:41:70:F0:95:C9:5B:77 Authority key identifier: F9:E7:F3:76:E0:D0:EA:F5:21:AC:DD:5B:3B:F0:C8:44:33:FB:3A:5D Certificate issuer: /CN=F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D Certificate serial: 1629294FDB7704D9770AFDC619F5137ABC6F8E9A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.cer Subject info access: rsync://rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.mft Manifest number: E8 Signing time: Tue 04 Nov 2025 22:16:37 +0000 Manifest this update: Tue 04 Nov 2025 22:11:37 +0000 Manifest next update: Wed 05 Nov 2025 23:01:37 +0000 Files and hashes: 1: F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.crl (hash: 58XilIMjATOQANL5jxBG4tE2gceswVMF9NB3O4DI5tc=) 2: 323830343a393430633a3a2f33322d3438203d3e20323734383138.roa (hash: txs4qGVE6CFf1oe0D7Nr3lbJ5NrOYxnIQyBplIdS0Dk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.crl rsync://rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 23:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:29:29:4f:db:77:04:d9:77:0a:fd:c6:19:f5:13:7a:bc:6f:8e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D Validity Not Before: Nov 4 22:11:37 2025 GMT Not After : Nov 5 23:01:37 2025 GMT Subject: CN=ECE9AEF416106938540B2ECC6E4170F095C95B77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:ab:54:5c:20:12:b2:e9:e3:cf:45:42:41: cd:b0:ed:5f:b9:27:43:0f:ed:ca:25:48:58:e6:d8: 0c:ae:d5:ac:48:fd:e0:11:89:19:34:13:70:72:4a: 7e:89:0e:01:76:22:a1:b5:20:b8:da:da:e7:c5:9c: 82:32:0f:15:ac:d6:ef:16:04:39:7a:b8:6b:98:83: fe:7f:03:82:36:3b:20:e9:d4:07:ed:a6:e5:88:76: ed:b0:38:5f:a7:4a:8c:53:28:19:77:ba:cc:af:0b: 2a:a5:41:f8:8d:4c:f1:c5:2b:bc:50:ee:dc:fb:82: a8:4f:50:9f:33:0a:0f:c2:e0:0d:5c:85:fa:51:ea: 27:71:00:4a:00:0d:f2:cb:be:85:f1:d6:04:08:8c: 36:51:32:ec:4d:f5:52:7a:ab:1c:d7:90:cb:20:30: c3:94:f5:49:02:88:f1:8a:b1:30:b7:46:b6:b7:cc: 79:37:16:48:9b:e4:82:6e:46:bd:6e:68:be:e9:c8: c2:d0:c4:2a:7a:8a:b8:d0:1f:65:2c:14:e2:4a:97: 75:ca:30:aa:4a:36:bb:5d:6a:b9:fd:c6:15:88:fb: 9f:ba:9f:c5:ff:1e:1c:ba:08:41:c8:ed:d6:a2:6a: f9:ba:72:7e:e6:4a:b5:eb:f5:54:fe:55:33:4f:5c: bb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E9:AE:F4:16:10:69:38:54:0B:2E:CC:6E:41:70:F0:95:C9:5B:77 X509v3 Authority Key Identifier: keyid:F9:E7:F3:76:E0:D0:EA:F5:21:AC:DD:5B:3B:F0:C8:44:33:FB:3A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:14:04:20:a2:41:ae:41:ab:5a:13:6c:19:f7:48:5a:df:bd: c4:e3:0f:e1:9b:fe:8d:9b:d3:f6:f4:a6:0c:cd:27:9a:c2:d4: 70:d3:be:d6:e8:02:4c:6f:90:c6:d0:61:60:74:be:07:f2:15: 85:e6:78:ae:79:3d:2c:7b:c4:75:57:60:f7:76:a4:e5:58:3e: 25:07:d7:03:cb:53:c7:cf:12:55:bd:db:e1:39:c8:32:9c:a6: 45:a8:2c:72:b5:97:18:e9:f2:36:31:c5:3e:e9:83:b0:16:e8: d2:5a:8a:98:51:7b:52:39:98:e1:b5:f1:26:c6:58:47:af:73: 72:ca:57:27:11:12:6d:d1:4e:0c:1c:46:52:27:84:c1:d2:37: fc:58:45:54:45:32:32:82:6a:0c:83:cd:5a:c6:f3:b3:52:21: 0d:28:57:2e:40:0c:cf:b0:eb:5c:f8:78:c3:15:25:1c:8c:e1: 83:f2:54:4d:dc:5a:06:4b:c9:55:7b:ad:dc:67:8a:3a:f4:1c: c8:2b:e6:c6:5e:51:23:f2:fc:b7:f8:a7:0a:5e:7d:8f:06:fa: af:23:69:5e:d5:32:46:e6:22:5a:86:13:44:ff:24:5c:2d:aa: 7e:34:ca:29:8e:96:77:6d:2a:42:17:89:1f:6c:3f:4f:e5:7c: 28:d5:68:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFikpT9t3BNl3Cv3GGfUTerxvjpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlFN0YzNzZFMEQwRUFGNTIxQUNERDVCM0JGMEM4NDQz M0ZCM0E1RDAeFw0yNTExMDQyMjExMzdaFw0yNTExMDUyMzAxMzdaMDMxMTAvBgNV BAMTKEVDRTlBRUY0MTYxMDY5Mzg1NDBCMkVDQzZFNDE3MEYwOTVDOTVCNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3I6tUXCASsunjz0VCQc2w7V+5 J0MP7colSFjm2Ayu1axI/eARiRk0E3BySn6JDgF2IqG1ILja2ufFnIIyDxWs1u8W BDl6uGuYg/5/A4I2OyDp1AftpuWIdu2wOF+nSoxTKBl3usyvCyqlQfiNTPHFK7xQ 7tz7gqhPUJ8zCg/C4A1chfpR6idxAEoADfLLvoXx1gQIjDZRMuxN9VJ6qxzXkMsg MMOU9UkCiPGKsTC3Rra3zHk3Fkib5IJuRr1uaL7pyMLQxCp6irjQH2UsFOJKl3XK MKpKNrtdarn9xhWI+5+6n8X/Hhy6CEHI7daiavm6cn7mSrXr9VT+VTNPXLtrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7Omu9BYQaThUCy7MbkFw8JXJW3cwHwYDVR0j BBgwFoAU+efzduDQ6vUhrN1bO/DIRDP7Ol0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmhOYWFUZTNzOXJQa2dlb3VrclhpczUyNVRiWFhnRjl3OTF0Y2VFcUZy Z3QvMC9GOUU3RjM3NkUwRDBFQUY1MjFBQ0RENUIzQkYwQzg0NDMzRkIzQTVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5RTdGMzc2RTBEMEVBRjUy MUFDREQ1QjNCRjBDODQ0MzNGQjNBNUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmhOYWFUZTNzOXJQa2dlb3VrclhpczUyNVRiWFhnRjl3OTF0Y2VFcUZyZ3QvMC9G OUU3RjM3NkUwRDBFQUY1MjFBQ0RENUIzQkYwQzg0NDMzRkIzQTVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAohQEIKJBrkGrWhNsGfdIWt+9xOMP4Zv+jZvT9vSmDM0nmsLUcNO+1ugCTG+Q xtBhYHS+B/IVheZ4rnk9LHvEdVdg93ak5Vg+JQfXA8tTx88SVb3b4TnIMpymRags crWXGOnyNjHFPumDsBbo0lqKmFF7UjmY4bXxJsZYR69zcspXJxESbdFODBxGUieE wdI3/FhFVEUyMoJqDIPNWsbzs1IhDShXLkAMz7DrXPh4wxUlHIzhg/JUTdxaBkvJ VXut3GeKOvQcyCvmxl5RI/L8t/inCl59jwb6ryNpXtUyRuYiWoYTRP8kXC2qfjTK KY6Wd20qQheJH2w/T+V8KNVoIw== -----END CERTIFICATE-----Generated at Wed Nov 5 11:46:54 2025 by rpki-client