$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/9206B911EB707B51B01C514E2075DE8549D4A1EE.mft File: 9206B911EB707B51B01C514E2075DE8549D4A1EE.mft (raw, json) Hash identifier: z8H7MXzuxuHRTe7k/unQHjva1vArMBMFYFb07XfZWQg= Subject key identifier: 61:84:86:48:B9:BD:E7:84:5B:E3:09:71:99:1C:32:66:26:D6:FA:63 Authority key identifier: 92:06:B9:11:EB:70:7B:51:B0:1C:51:4E:20:75:DE:85:49:D4:A1:EE Certificate issuer: /CN=9206B911EB707B51B01C514E2075DE8549D4A1EE Certificate serial: 03F78A4161AEA15108F9D8486A7F29EE0EDF9C10 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9206B911EB707B51B01C514E2075DE8549D4A1EE.cer Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/9206B911EB707B51B01C514E2075DE8549D4A1EE.mft Manifest number: 22 Signing time: Tue 04 Nov 2025 21:45:14 +0000 Manifest this update: Tue 04 Nov 2025 21:40:14 +0000 Manifest next update: Thu 06 Nov 2025 01:42:14 +0000 Files and hashes: 1: 3139382e35382e382e302f32322d3332203d3e20323633323536.roa (hash: D9B2OUKSdM0EaN2edFkvVLcGZKIAlQrNBvTsq4yVj8c=) 2: 9206B911EB707B51B01C514E2075DE8549D4A1EE.crl (hash: yzKU6fLgeoL0t6qGSFaam7pGR7nR5f7REdSFwux8b4s=) 3: 3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa (hash: bLqJJkasthqOaqT8gpz8G1kBlRUmvgNUOS+ABxSh4FM=) 4: 323830343a313765303a3a2f33322d313238203d3e20323633323536.roa (hash: WZa5RIJVI7ulRy7XNmHGGmkharWYBsvMqdMOQ2YXxvI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/9206B911EB707B51B01C514E2075DE8549D4A1EE.crl rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/9206B911EB707B51B01C514E2075DE8549D4A1EE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9206B911EB707B51B01C514E2075DE8549D4A1EE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f7:8a:41:61:ae:a1:51:08:f9:d8:48:6a:7f:29:ee:0e:df:9c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9206B911EB707B51B01C514E2075DE8549D4A1EE Validity Not Before: Nov 4 21:40:14 2025 GMT Not After : Nov 6 01:42:14 2025 GMT Subject: CN=61848648B9BDE7845BE30971991C326626D6FA63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0d:85:37:c6:a5:22:14:8b:08:a2:49:e5:b6: 07:0d:f7:9f:91:18:78:f8:e4:19:3b:45:1c:86:b0: 8e:d0:89:03:d3:63:f3:e6:43:65:dc:d5:ef:4e:a0: 83:b9:14:00:e2:69:e4:8b:33:fc:7e:96:2d:1f:06: 58:40:74:9e:0a:0d:79:a4:be:6f:11:3b:cf:c7:b1: ba:a2:e7:b7:d5:76:59:89:4e:4c:69:34:d5:66:41: 96:ae:ec:3c:ed:93:4b:8e:15:d0:33:e2:b0:1a:3d: 95:7f:2f:7a:88:fa:70:ff:e7:5d:35:53:4e:d3:1a: 41:6b:a6:6d:24:ef:93:66:75:92:59:b2:54:71:f9: 62:6b:0a:64:6e:76:e1:37:b0:77:d1:45:58:11:44: d6:a4:db:4e:c0:b2:27:7c:c2:d4:b0:d1:37:c2:f8: 87:28:cd:a4:63:00:f7:a7:4e:6d:cd:af:c0:d5:3d: 35:44:e2:e9:eb:d9:39:05:00:77:28:5b:6f:dd:e7: 4f:8b:8b:0f:01:b4:b7:79:6e:86:eb:00:86:1d:41: a6:1b:ed:a9:45:17:d5:c8:5a:62:23:2c:72:2d:10: 3b:63:69:f4:3a:fd:c6:96:7b:1a:c5:90:b0:09:9a: a1:31:93:78:9b:43:05:a7:1b:a5:9f:fd:fe:86:65: c5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:84:86:48:B9:BD:E7:84:5B:E3:09:71:99:1C:32:66:26:D6:FA:63 X509v3 Authority Key Identifier: keyid:92:06:B9:11:EB:70:7B:51:B0:1C:51:4E:20:75:DE:85:49:D4:A1:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/9206B911EB707B51B01C514E2075DE8549D4A1EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9206B911EB707B51B01C514E2075DE8549D4A1EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/9206B911EB707B51B01C514E2075DE8549D4A1EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:9d:9b:75:63:22:4b:8b:0c:cc:02:96:ce:06:f2:77:cf:ba: ca:5d:a8:0a:73:cc:38:01:33:79:41:03:c2:57:98:41:ed:c4: 04:58:76:41:6e:32:ef:ea:5a:4e:e1:3b:d0:90:e3:39:33:5a: aa:54:d3:13:26:e3:a5:7a:67:44:45:fb:88:47:7f:ca:5d:ac: c5:c7:5e:23:fe:76:6d:22:f6:16:1b:e1:ff:23:dd:d3:5c:73: 46:40:b5:7a:e4:56:04:1e:f7:ab:5c:3e:54:bc:67:49:12:a6: 19:0d:8a:82:cd:89:1c:28:0b:ac:c4:6c:0c:3a:63:7a:29:ef: d6:66:bd:fd:27:fc:80:47:fb:7b:67:84:a6:66:8a:71:f3:26: 17:1a:05:eb:31:7c:c2:d3:21:03:90:e0:90:07:f7:4f:dd:5a: d2:50:70:72:53:3f:ba:6c:ef:01:a8:00:0b:c8:81:3d:03:c2: cd:b0:fd:3a:62:1f:d4:1f:0e:00:14:fb:d5:d4:18:50:57:03: 17:e4:41:58:87:6a:a1:a5:bd:b9:41:5a:80:0e:ed:73:9a:78: 33:14:82:0e:0f:c1:6b:3a:04:96:e9:00:84:ed:c9:6d:92:08: 2f:0d:22:7f:00:10:db:3b:f3:15:cd:68:a4:84:09:da:ad:81: e5:91:c2:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA/eKQWGuoVEI+dhIan8p7g7fnBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIwNkI5MTFFQjcwN0I1MUIwMUM1MTRFMjA3NURFODU0 OUQ0QTFFRTAeFw0yNTExMDQyMTQwMTRaFw0yNTExMDYwMTQyMTRaMDMxMTAvBgNV BAMTKDYxODQ4NjQ4QjlCREU3ODQ1QkUzMDk3MTk5MUMzMjY2MjZENkZBNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8DYU3xqUiFIsIoknltgcN95+R GHj45Bk7RRyGsI7QiQPTY/PmQ2Xc1e9OoIO5FADiaeSLM/x+li0fBlhAdJ4KDXmk vm8RO8/Hsbqi57fVdlmJTkxpNNVmQZau7Dztk0uOFdAz4rAaPZV/L3qI+nD/5101 U07TGkFrpm0k75NmdZJZslRx+WJrCmRuduE3sHfRRVgRRNak207Asid8wtSw0TfC +IcozaRjAPenTm3Nr8DVPTVE4unr2TkFAHcoW2/d50+Liw8BtLd5bobrAIYdQaYb 7alFF9XIWmIjLHItEDtjafQ6/caWexrFkLAJmqExk3ibQwWnG6Wf/f6GZcWxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYYSGSLm954Rb4wlxmRwyZibW+mMwHwYDVR0j BBgwFoAUkga5Eetwe1GwHFFOIHXehUnUoe4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXB3UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJk U2QvMC85MjA2QjkxMUVCNzA3QjUxQjAxQzUxNEUyMDc1REU4NTQ5RDRBMUVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyMDZCOTExRUI3MDdCNTFC MDFDNTE0RTIwNzVERTg1NDlENEExRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXB3UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJkU2QvMC85 MjA2QjkxMUVCNzA3QjUxQjAxQzUxNEUyMDc1REU4NTQ5RDRBMUVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIZ2bdWMiS4sMzAKWzgbyd8+6yl2oCnPMOAEzeUEDwleYQe3EBFh2QW4y7+pa TuE70JDjOTNaqlTTEybjpXpnREX7iEd/yl2sxcdeI/52bSL2Fhvh/yPd01xzRkC1 euRWBB73q1w+VLxnSRKmGQ2Kgs2JHCgLrMRsDDpjeinv1ma9/Sf8gEf7e2eEpmaK cfMmFxoF6zF8wtMhA5DgkAf3T91a0lBwclM/umzvAagAC8iBPQPCzbD9OmIf1B8O ABT71dQYUFcDF+RBWIdqoaW9uUFagA7tc5p4MxSCDg/BazoElukAhO3JbZIILw0i fwAQ2zvzFc1opIQJ2q2B5ZHCCw== -----END CERTIFICATE-----Generated at Wed Nov 5 16:05:25 2025 by rpki-client