$ rpki-client -vvf rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/2/96E772C2DA56252E8F7A2456BC003F8849C694E0.mft File: 96E772C2DA56252E8F7A2456BC003F8849C694E0.mft (raw, json) Hash identifier: b6baUvoc3dLJb6YM5miBDoV0o0FH3xR/TVG8kUNCePU= Subject key identifier: 0E:AF:3D:A9:03:2C:86:CD:EF:C5:93:5D:B8:E6:D9:DA:22:7F:D7:F5 Authority key identifier: 96:E7:72:C2:DA:56:25:2E:8F:7A:24:56:BC:00:3F:88:49:C6:94:E0 Certificate issuer: /CN=96E772C2DA56252E8F7A2456BC003F8849C694E0 Certificate serial: 1E9AEBCF9D8E6AB1AF844CE0665245311F2601 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E772C2DA56252E8F7A2456BC003F8849C694E0.cer Subject info access: rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/2/96E772C2DA56252E8F7A2456BC003F8849C694E0.mft Manifest number: 6A Signing time: Tue 04 Nov 2025 20:52:09 +0000 Manifest this update: Tue 04 Nov 2025 20:47:09 +0000 Manifest next update: Wed 05 Nov 2025 22:44:09 +0000 Files and hashes: 1: 96E772C2DA56252E8F7A2456BC003F8849C694E0.crl (hash: U3S+ve3Qu/qLBJIVwLQcTXF4rA+mOKdwQX+o4ekXlH0=) 2: 3139312e3234312e32342e302f32312d3332203d3e20323633363634.roa (hash: YUmrLN8WiUbSoxhbGjQtm9TlFGJFRg/BBFpduAub1AM=) 3: 323830343a313133303a3a2f33322d313238203d3e20323633363634.roa (hash: hsCWM7TvPtaU5Mosj8LqoHJXcHdBKLjR/JmG2C3EMCc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/2/96E772C2DA56252E8F7A2456BC003F8849C694E0.crl rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/2/96E772C2DA56252E8F7A2456BC003F8849C694E0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E772C2DA56252E8F7A2456BC003F8849C694E0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 22:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:9a:eb:cf:9d:8e:6a:b1:af:84:4c:e0:66:52:45:31:1f:26:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96E772C2DA56252E8F7A2456BC003F8849C694E0 Validity Not Before: Nov 4 20:47:09 2025 GMT Not After : Nov 5 22:44:09 2025 GMT Subject: CN=0EAF3DA9032C86CDEFC5935DB8E6D9DA227FD7F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:be:52:80:03:c6:c3:a3:d7:63:48:5e:80: d3:f7:3f:c6:a9:5b:ba:32:70:2c:84:08:06:88:e6: e4:11:01:40:44:fc:2a:0b:c9:74:d3:93:33:e1:6a: ed:3b:29:d7:38:22:4e:aa:1e:63:eb:89:af:99:9a: 90:9d:0b:a3:55:13:9b:46:ab:d6:38:6d:d1:6c:d9: c1:fe:9b:42:b2:11:2d:22:21:f4:95:a9:e9:a7:9c: 26:00:d8:91:ca:78:61:70:7a:ae:a2:00:f9:90:d3: ee:1b:1f:46:b3:5d:70:33:aa:be:aa:cd:49:e2:1a: e9:92:f9:cd:81:24:bb:22:d1:29:cb:99:99:ae:c3: ec:0b:1d:52:57:e4:c3:71:e0:26:31:12:70:38:19: d9:d2:ac:ac:cf:72:26:93:98:59:b3:97:c7:51:a2: 21:44:5a:86:fd:88:db:7b:a9:86:88:45:7a:63:b5: 48:b2:9e:a0:b6:90:3a:18:fc:b2:30:50:57:f9:b4: eb:17:34:b0:20:3f:61:0e:1f:40:d1:67:91:05:98: aa:f4:67:d1:66:47:2f:13:a1:99:41:92:25:61:0d: 74:18:dc:76:1d:aa:be:08:05:08:8f:fb:ee:05:4d: bc:49:7b:62:5b:8a:ec:88:3e:b1:c2:f4:fb:3a:f2: 0c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AF:3D:A9:03:2C:86:CD:EF:C5:93:5D:B8:E6:D9:DA:22:7F:D7:F5 X509v3 Authority Key Identifier: keyid:96:E7:72:C2:DA:56:25:2E:8F:7A:24:56:BC:00:3F:88:49:C6:94:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/2/96E772C2DA56252E8F7A2456BC003F8849C694E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E772C2DA56252E8F7A2456BC003F8849C694E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/2/96E772C2DA56252E8F7A2456BC003F8849C694E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:30:94:9c:ac:81:d7:ed:bf:24:95:83:95:35:ec:6a:e6:77: 94:4c:0f:3b:a4:08:fa:fb:2b:03:52:1f:7e:9b:2d:f3:c2:09: a6:8b:6e:21:6a:74:66:3d:e0:ed:2c:25:55:41:77:1e:66:ab: b5:a7:cb:29:02:d1:38:1c:81:6a:bc:8e:9f:5b:25:32:25:ed: 3a:2b:00:9b:81:f5:38:95:79:e6:ee:00:50:dd:55:34:ef:3b: ab:40:ef:06:c3:63:65:e5:91:cd:0f:99:21:21:23:64:86:d6: 78:3e:e8:20:77:01:7b:01:17:68:b3:d2:60:14:b5:80:2a:92: ea:8a:83:be:4d:31:d5:30:c6:cd:7d:12:cf:cb:6f:fc:d2:0a: 47:43:03:0e:84:a6:78:47:c5:66:d1:5f:51:3c:9c:c0:c7:4e: be:7c:f3:0a:f6:88:cb:c6:aa:79:0a:b1:2c:71:77:b6:dc:bf: 14:0b:97:a5:7c:a3:70:6d:ae:9f:d6:7b:c8:0c:26:4d:d8:1b: fd:0d:3f:fe:df:15:34:a6:c4:b0:1e:ab:15:5a:a3:42:d4:c7: 31:e4:4e:7c:69:56:c7:d0:b5:dd:c3:51:92:12:74:39:43:f3: f7:3a:f4:9a:bf:77:9e:8d:5c:18:be:6c:74:56:dd:24:f9:61: 63:ae:23:e8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgITHprrz52OarGvhEzgZlJFMR8mATANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg5NkU3NzJDMkRBNTYyNTJFOEY3QTI0NTZCQzAwM0Y4ODQ5 QzY5NEUwMB4XDTI1MTEwNDIwNDcwOVoXDTI1MTEwNTIyNDQwOVowMzExMC8GA1UE AxMoMEVBRjNEQTkwMzJDODZDREVGQzU5MzVEQjhFNkQ5REEyMjdGRDdGNTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALapvlKAA8bDo9djSF6A0/c/xqlb ujJwLIQIBojm5BEBQET8KgvJdNOTM+Fq7Tsp1zgiTqoeY+uJr5makJ0Lo1UTm0ar 1jht0WzZwf6bQrIRLSIh9JWp6aecJgDYkcp4YXB6rqIA+ZDT7hsfRrNdcDOqvqrN SeIa6ZL5zYEkuyLRKcuZma7D7AsdUlfkw3HgJjEScDgZ2dKsrM9yJpOYWbOXx1Gi IURahv2I23uphohFemO1SLKeoLaQOhj8sjBQV/m06xc0sCA/YQ4fQNFnkQWYqvRn 0WZHLxOhmUGSJWENdBjcdh2qvggFCI/77gVNvEl7YluK7Ig+scL0+zryDE0CAwEA AaOCAlkwggJVMB0GA1UdDgQWBBQOrz2pAyyGze/Fk1245tnaIn/X9TAfBgNVHSME GDAWgBSW53LC2lYlLo96JFa8AD+IScaU4DAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9EQ1lnNDM0clF2Y3pVNjg0SFh5Mnl3eUVwc1Q3bzJDc3Rhckp3SFYxS3ZC TS8yLzk2RTc3MkMyREE1NjI1MkU4RjdBMjQ1NkJDMDAzRjg4NDlDNjk0RTAuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvOTZFNzcyQzJEQTU2MjUyRThG N0EyNDU2QkMwMDNGODg0OUM2OTRFMC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGK BggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9E Q1lnNDM0clF2Y3pVNjg0SFh5Mnl3eUVwc1Q3bzJDc3Rhckp3SFYxS3ZCTS8yLzk2 RTc3MkMyREE1NjI1MkU4RjdBMjQ1NkJDMDAzRjg4NDlDNjk0RTAubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQApMJScrIHX7b8klYOVNexq5neUTA87pAj6+ysDUh9+my3zwgmmi24hanRmPeDt LCVVQXceZqu1p8spAtE4HIFqvI6fWyUyJe06KwCbgfU4lXnm7gBQ3VU07zurQO8G w2Nl5ZHND5khISNkhtZ4PuggdwF7ARdos9JgFLWAKpLqioO+TTHVMMbNfRLPy2/8 0gpHQwMOhKZ4R8Vm0V9RPJzAx06+fPMK9ojLxqp5CrEscXe23L8UC5elfKNwba6f 1nvIDCZN2Bv9DT/+3xU0psSwHqsVWqNC1Mcx5E58aVbH0LXdw1GSEnQ5Q/P3OvSa v3eejVwYvmx0Vt0k+WFjriPo -----END CERTIFICATE-----Generated at Wed Nov 5 05:00:28 2025 by rpki-client