$ rpki-client -vvf rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft File: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft (raw, json) Hash identifier: JArwAyQWw+VjxIvnUe5Xautwm+f8A557QtRpmHcGsC8= Subject key identifier: C3:CE:64:10:90:F8:B4:D8:1A:DD:E1:6B:D3:C2:52:EE:DF:D5:AA:44 Authority key identifier: 09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0 Certificate issuer: /CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0 Certificate serial: 2BE859766F36EAB11E23196F60923CFD9ED59290 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer Subject info access: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft Manifest number: 0244 Signing time: Tue 04 Nov 2025 22:23:36 +0000 Manifest this update: Tue 04 Nov 2025 22:18:36 +0000 Manifest next update: Thu 06 Nov 2025 00:50:36 +0000 Files and hashes: 1: 323830343a353232633a3a2f33322d313238203d3e20323638353030.roa (hash: VL/snBcA4TQASO1JgrhJJ4GnQSQZ2IO6gxXlLXQGjG8=) 2: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl (hash: SdMxxPgZr12SCnPfcSmE6yK3I203TRbYJ1QMf7KzB+M=) 3: 34352e3136312e33362e302f32322d3332203d3e20323638353030.roa (hash: i8P9i+svn6eTugjVKIH7LsBAziQNryR6tY4w3i2ypmg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 00:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:e8:59:76:6f:36:ea:b1:1e:23:19:6f:60:92:3c:fd:9e:d5:92:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0 Validity Not Before: Nov 4 22:18:36 2025 GMT Not After : Nov 6 00:50:36 2025 GMT Subject: CN=C3CE641090F8B4D81ADDE16BD3C252EEDFD5AA44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b8:32:63:70:ea:fb:66:55:f9:33:d2:20:b2: 3f:41:a9:a1:42:0c:63:2a:08:3e:0f:3a:1c:0a:33: b5:b7:5a:51:55:9f:23:8d:18:60:00:3a:7c:ec:33: 1f:4e:04:05:45:7e:cf:8f:7f:4e:d8:a5:34:bd:2a: a5:c0:1e:7a:a0:97:e3:89:26:9d:1b:af:2a:b5:eb: 4f:47:78:3f:48:2d:ab:23:98:51:5c:6d:a0:f5:91: c8:ab:b8:bf:a7:81:bf:4d:7b:ca:1c:65:78:e0:7a: a3:84:45:98:71:1a:f4:91:19:25:86:a8:90:8b:77: 98:5e:ee:bd:2c:f0:93:f9:08:12:42:94:4e:a9:44: 6d:cd:8a:c9:ba:38:38:38:a9:e0:51:92:30:df:bf: fe:c3:5d:e3:a5:99:09:d4:39:bb:30:4f:09:2a:e3: 8f:e6:a0:e7:7f:be:25:9c:29:0f:66:d0:e3:e5:8e: de:36:57:e1:e0:f2:97:3d:4f:1e:7c:d8:1e:71:c9: 18:57:b0:17:0a:1d:a4:20:e6:15:52:cc:a2:3f:e4: 6d:d4:6f:07:89:35:52:f7:e3:e3:88:36:65:9e:8e: b8:e6:71:dd:a7:d0:fe:ce:7b:10:f2:07:30:9e:7a: ab:4c:f5:db:f1:c8:cb:22:74:62:03:47:93:20:e3: 35:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CE:64:10:90:F8:B4:D8:1A:DD:E1:6B:D3:C2:52:EE:DF:D5:AA:44 X509v3 Authority Key Identifier: keyid:09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:50:3d:d1:a2:0a:34:db:3e:e3:6f:30:a5:43:37:6e:fb:b7: 94:29:4e:70:f3:e9:a4:be:81:f9:17:30:19:b0:b2:cb:0b:3d: ac:bc:1a:8e:fd:22:34:49:00:62:a5:33:ef:73:9d:25:81:40: 99:3f:d3:22:ee:81:5d:d7:11:f3:ec:f3:bd:6c:d0:28:c3:5b: 21:da:aa:3f:08:33:e6:43:14:cb:22:c4:f7:7c:bd:35:a9:dc: 55:5e:b6:20:b8:0e:20:13:e6:68:62:86:90:27:71:e0:d3:83: 0b:89:67:12:64:c2:47:ab:f2:47:f3:d9:af:f8:78:29:bf:22: cd:52:78:78:16:62:97:2e:92:f1:05:99:05:9a:ad:86:a8:5b: 4a:d4:db:e9:8e:a7:53:d6:b0:17:1e:6a:87:e4:03:14:08:27: 50:8c:8b:8f:60:90:45:96:c4:b4:8f:38:f6:18:b1:c3:15:25: 2f:85:be:01:38:71:55:5a:70:12:e0:5d:51:1b:e2:d4:ac:74: fa:90:e5:cb:f6:3f:61:b1:ee:e8:0e:78:32:ad:d9:cc:ba:47: 63:ec:97:df:53:ff:52:79:df:8e:df:e7:d9:b2:96:be:71:2e: 45:20:43:d4:b3:71:99:e4:fb:55:fc:05:97:46:cf:64:7a:c5: fd:17:2c:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUK+hZdm826rEeIxlvYJI8/Z7VkpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlEOEQ0QTY3MDY5NTgwRTM0RjE2QUIwNDc0MjBCRDRB MDhENEZGMDAeFw0yNTExMDQyMjE4MzZaFw0yNTExMDYwMDUwMzZaMDMxMTAvBgNV BAMTKEMzQ0U2NDEwOTBGOEI0RDgxQURERTE2QkQzQzI1MkVFREZENUFBNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbuDJjcOr7ZlX5M9Igsj9BqaFC DGMqCD4POhwKM7W3WlFVnyONGGAAOnzsMx9OBAVFfs+Pf07YpTS9KqXAHnqgl+OJ Jp0bryq1609HeD9ILasjmFFcbaD1kciruL+ngb9Ne8ocZXjgeqOERZhxGvSRGSWG qJCLd5he7r0s8JP5CBJClE6pRG3Nism6ODg4qeBRkjDfv/7DXeOlmQnUObswTwkq 44/moOd/viWcKQ9m0OPljt42V+Hg8pc9Tx582B5xyRhXsBcKHaQg5hVSzKI/5G3U bweJNVL34+OINmWejrjmcd2n0P7OexDyBzCeeqtM9dvxyMsidGIDR5Mg4zWLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUw85kEJD4tNga3eFr08JS7t/VqkQwHwYDVR0j BBgwFoAUCdjUpnBpWA408WqwR0IL1KCNT/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnlMMURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9D UWsvMC8wOUQ4RDRBNjcwNjk1ODBFMzRGMTZBQjA0NzQyMEJENEEwOEQ0RkYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5RDhENEE2NzA2OTU4MEUz NEYxNkFCMDQ3NDIwQkQ0QTA4RDRGRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnlMMURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9DUWsvMC8w OUQ4RDRBNjcwNjk1ODBFMzRGMTZBQjA0NzQyMEJENEEwOEQ0RkYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiVA90aIKNNs+428wpUM3bvu3lClOcPPppL6B+RcwGbCyyws9rLwajv0iNEkA YqUz73OdJYFAmT/TIu6BXdcR8+zzvWzQKMNbIdqqPwgz5kMUyyLE93y9NancVV62 ILgOIBPmaGKGkCdx4NODC4lnEmTCR6vyR/PZr/h4Kb8izVJ4eBZily6S8QWZBZqt hqhbStTb6Y6nU9awFx5qh+QDFAgnUIyLj2CQRZbEtI849hixwxUlL4W+AThxVVpw EuBdURvi1Kx0+pDly/Y/YbHu6A54Mq3ZzLpHY+yX31P/Unnfjt/n2bKWvnEuRSBD 1LNxmeT7VfwFl0bPZHrF/RcsGg== -----END CERTIFICATE-----Generated at Wed Nov 5 10:26:10 2025 by rpki-client