$ rpki-client -vvf rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/9B0FDA073951168EEB28943672D529AFE023A2B0.mft File: 9B0FDA073951168EEB28943672D529AFE023A2B0.mft (raw, json) Hash identifier: H3QhPDPEVoO1vwMtZQSJbcRoP66IQpfqvcfUMQXDQjk= Subject key identifier: BE:5D:0B:A4:C6:42:23:F3:9E:B0:D5:16:CF:D5:C5:BE:89:F7:B5:C2 Authority key identifier: 9B:0F:DA:07:39:51:16:8E:EB:28:94:36:72:D5:29:AF:E0:23:A2:B0 Certificate issuer: /CN=9B0FDA073951168EEB28943672D529AFE023A2B0 Certificate serial: 0F2A58C0D80D9E178B377B3254B2005EF8C45472 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B0FDA073951168EEB28943672D529AFE023A2B0.cer Subject info access: rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/9B0FDA073951168EEB28943672D529AFE023A2B0.mft Manifest number: 0308 Signing time: Wed 05 Nov 2025 10:16:38 +0000 Manifest this update: Wed 05 Nov 2025 10:11:38 +0000 Manifest next update: Thu 06 Nov 2025 12:35:38 +0000 Files and hashes: 1: 323830343a376638383a3a2f33322d3438203d3e20323731363934.roa (hash: WcZ/807Uaz8PFfrlHolesmdcjsW8HqOsQ0Z1Ktte0HQ=) 2: 9B0FDA073951168EEB28943672D529AFE023A2B0.crl (hash: L/B8UCtjF8LhRJv9+4L810iw87+l/8kRdLXKKIa42/U=) 3: 3138372e3131312e3132342e302f32322d3234203d3e20323731363934.roa (hash: OwpiDmAkJvU1A6vf3TLstepzBeZAR2KPfNSKnKrk9nk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/9B0FDA073951168EEB28943672D529AFE023A2B0.crl rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/9B0FDA073951168EEB28943672D529AFE023A2B0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B0FDA073951168EEB28943672D529AFE023A2B0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 11:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:2a:58:c0:d8:0d:9e:17:8b:37:7b:32:54:b2:00:5e:f8:c4:54:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B0FDA073951168EEB28943672D529AFE023A2B0 Validity Not Before: Nov 5 10:11:38 2025 GMT Not After : Nov 6 12:35:38 2025 GMT Subject: CN=BE5D0BA4C64223F39EB0D516CFD5C5BE89F7B5C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:72:55:e4:fe:f8:14:f7:9d:c6:1f:34:69:d6: 4b:e3:c6:10:2b:71:bc:83:cd:a8:9d:0e:90:4b:f0: de:33:cb:fe:b7:e5:35:a2:61:95:f7:3b:a0:6e:01: cd:4d:86:cc:9b:44:28:83:5e:ef:9e:4a:ce:f9:fc: 6c:79:23:c8:5f:e9:ba:6f:70:b9:79:d8:d4:77:9a: 2f:9b:88:8f:4b:b2:80:2a:0e:36:f5:7b:91:6e:a5: 68:72:7b:63:62:17:79:67:cd:aa:62:6a:2a:ba:af: 28:56:69:b6:f5:a2:b2:4e:0b:27:e0:5a:36:d7:80: d6:b9:7a:de:0b:39:0b:e1:32:92:6f:ec:00:97:b3: 76:2c:00:77:77:5d:84:af:01:27:87:85:d8:e6:d4: 66:e0:05:a0:67:fe:1b:89:9e:5e:17:3c:df:a6:21: 53:38:c2:ee:dc:23:78:93:d2:91:79:7b:a2:62:ef: 5f:08:19:e6:3b:d5:e1:e6:33:e5:b9:78:64:38:41: 75:21:ae:30:3a:24:3b:ab:37:93:27:29:e5:7f:af: 20:11:de:a5:1d:91:bc:5d:23:fd:c5:f0:29:2b:13: 84:f1:9e:3f:ec:fb:39:ae:eb:7c:ee:43:9b:70:b2: f2:67:80:dc:7f:0c:ab:c7:c8:d2:20:de:ef:cb:91: 39:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5D:0B:A4:C6:42:23:F3:9E:B0:D5:16:CF:D5:C5:BE:89:F7:B5:C2 X509v3 Authority Key Identifier: keyid:9B:0F:DA:07:39:51:16:8E:EB:28:94:36:72:D5:29:AF:E0:23:A2:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/9B0FDA073951168EEB28943672D529AFE023A2B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B0FDA073951168EEB28943672D529AFE023A2B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/9B0FDA073951168EEB28943672D529AFE023A2B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:99:05:14:31:81:ed:b8:5f:5c:ad:aa:fe:71:a3:43:e2:d8: 41:d3:8b:f7:8c:7d:2a:2e:aa:45:74:ff:dd:79:f4:94:dd:fc: 4e:f9:9b:19:46:15:ed:c3:c6:7b:e8:d4:be:73:df:73:b4:ed: 9e:b1:a6:20:de:50:32:a5:5d:b4:fb:44:3c:02:67:a7:68:b1: d3:8a:fe:e0:a2:74:6d:5d:c6:6e:43:a8:20:fa:18:6a:df:ad: e9:81:20:a7:35:b8:1d:c4:5b:07:9a:d1:a9:14:eb:13:d1:fa: c0:12:4e:1c:32:9e:51:19:70:83:55:10:5c:71:71:a2:d8:48: 4c:4b:23:a1:f6:c0:0b:f4:a9:5f:18:d7:73:8a:7c:7c:16:e1: 8c:74:6d:f7:17:71:da:2b:2c:85:88:08:67:8c:e2:e2:27:aa: ed:de:42:77:bf:df:e2:c4:6b:b4:10:9e:88:c5:18:42:da:d3: d4:b1:f9:e9:31:92:bc:a5:98:bf:b6:6a:29:2e:d1:02:ad:bc: 56:61:48:90:5d:91:93:49:31:18:54:3a:3e:42:4a:79:ce:7c: c0:af:6f:bf:ce:f5:0c:f2:64:c1:f9:f4:3f:8e:7a:3b:30:64: d9:3d:aa:bd:a7:be:de:51:7b:0b:5d:86:08:5a:d6:d8:6c:23: 5b:1c:e3:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDypYwNgNnheLN3syVLIAXvjEVHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIwRkRBMDczOTUxMTY4RUVCMjg5NDM2NzJENTI5QUZF MDIzQTJCMDAeFw0yNTExMDUxMDExMzhaFw0yNTExMDYxMjM1MzhaMDMxMTAvBgNV BAMTKEJFNUQwQkE0QzY0MjIzRjM5RUIwRDUxNkNGRDVDNUJFODlGN0I1QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClclXk/vgU953GHzRp1kvjxhAr cbyDzaidDpBL8N4zy/635TWiYZX3O6BuAc1NhsybRCiDXu+eSs75/Gx5I8hf6bpv cLl52NR3mi+biI9LsoAqDjb1e5FupWhye2NiF3lnzapiaiq6ryhWabb1orJOCyfg WjbXgNa5et4LOQvhMpJv7ACXs3YsAHd3XYSvASeHhdjm1GbgBaBn/huJnl4XPN+m IVM4wu7cI3iT0pF5e6Ji718IGeY71eHmM+W5eGQ4QXUhrjA6JDurN5MnKeV/ryAR 3qUdkbxdI/3F8CkrE4Txnj/s+zmu63zuQ5twsvJngNx/DKvHyNIg3u/LkTnxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvl0LpMZCI/OesNUWz9XFvon3tcIwHwYDVR0j BBgwFoAUmw/aBzlRFo7rKJQ2ctUpr+AjorAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmtHTTFiTFpUalFGR1ZEMXFIaWFWUDdoeTJ5MXdMdG9wbUNOeGVDc1Jm eTQvMS85QjBGREEwNzM5NTExNjhFRUIyODk0MzY3MkQ1MjlBRkUwMjNBMkIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCMEZEQTA3Mzk1MTE2OEVF QjI4OTQzNjcyRDUyOUFGRTAyM0EyQjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmtHTTFiTFpUalFGR1ZEMXFIaWFWUDdoeTJ5MXdMdG9wbUNOeGVDc1JmeTQvMS85 QjBGREEwNzM5NTExNjhFRUIyODk0MzY3MkQ1MjlBRkUwMjNBMkIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM5kFFDGB7bhfXK2q/nGjQ+LYQdOL94x9Ki6qRXT/3Xn0lN38TvmbGUYV7cPG e+jUvnPfc7TtnrGmIN5QMqVdtPtEPAJnp2ix04r+4KJ0bV3GbkOoIPoYat+t6YEg pzW4HcRbB5rRqRTrE9H6wBJOHDKeURlwg1UQXHFxothITEsjofbAC/SpXxjXc4p8 fBbhjHRt9xdx2isshYgIZ4zi4ieq7d5Cd7/f4sRrtBCeiMUYQtrT1LH56TGSvKWY v7ZqKS7RAq28VmFIkF2Rk0kxGFQ6PkJKec58wK9vv871DPJkwfn0P456OzBk2T2q vae+3lF7C12GCFrW2GwjWxzj9Q== -----END CERTIFICATE-----Generated at Wed Nov 5 13:32:15 2025 by rpki-client