$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft File: 9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft (raw, json) Hash identifier: jSIZC/9fMBqsX3ccbKsP9zsWzQuNMtjLijPWE4tzREI= Subject key identifier: C3:E5:92:48:B9:E2:20:4D:C3:35:BC:A6:DA:2F:9E:AE:F8:78:DB:89 Authority key identifier: 9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC Certificate issuer: /CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC Certificate serial: 3595ABEDF435BAFA460DFF4D89012F3BB4BA7C77 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft Manifest number: 0207 Signing time: Wed 05 Nov 2025 18:18:25 +0000 Manifest this update: Wed 05 Nov 2025 18:13:25 +0000 Manifest next update: Thu 06 Nov 2025 21:20:25 +0000 Files and hashes: 1: 323830343a326437303a38303a3a2f34312d3431203d3e20323635323832.roa (hash: 65z3zCSd2/jwqzGKfTXv4UDfHlO6ai3IoFHH1XPAIFs=) 2: 9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl (hash: 0Q1shkF4J0E3r4n0KjR52UyQJG9b+u383T4pNybPjbA=) 3: 323830343a326437303a3238303a3a2f34312d3431203d3e20323635323832.roa (hash: kiSTfvoksKt5U+wMpQSC4vpXNSNXpFxgMP37xxtIWxg=) 4: 323830343a326437303a3338303a3a2f34312d3431203d3e20323635323832.roa (hash: s2h6vUq4CrhJGp/OmYzcSio/QEhp40NZBlS/DTJvQuk=) 5: 323830343a326437303a3330303a3a2f34312d3431203d3e20323635323832.roa (hash: PiW5duALHil8KLibp8tUS/Vk3EcvZD5ZMKNYP5RAazU=) 6: 323830343a326437303a3a2f33322d3332203d3e20323635323832.roa (hash: ahOVRiIgF91mmSeGHRbzjnkWmOsV1n5gdpPQK4xS5i0=) 7: 3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa (hash: nDza4jqziVmKHzwQVPEwkj3cfLuvclXjEookf3Nu5wA=) 8: 323830343a326437303a3130303a3a2f34312d3431203d3e20323635323832.roa (hash: PZ3dk2NnSu1iyy9Jup4MW5BVhNkg+prBIiOzpQwR4A0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 17:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:95:ab:ed:f4:35:ba:fa:46:0d:ff:4d:89:01:2f:3b:b4:ba:7c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC Validity Not Before: Nov 5 18:13:25 2025 GMT Not After : Nov 6 21:20:25 2025 GMT Subject: CN=C3E59248B9E2204DC335BCA6DA2F9EAEF878DB89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:e8:4d:17:3a:86:77:77:5c:66:9b:bd:c9: 04:32:97:18:1f:e6:67:2a:39:bd:c0:1e:fc:0f:94: 5d:ff:fd:91:c9:95:59:52:b1:d2:db:b1:13:95:b6: ad:f0:c6:a1:b5:ad:d5:a5:de:e1:aa:e6:5e:75:22: 28:bd:8a:29:26:6d:90:55:de:31:92:78:02:94:6f: 2b:ba:b4:b5:28:ad:0d:52:08:be:5a:38:82:bd:9f: e1:52:6d:0f:97:94:58:0a:e4:08:ef:c7:5a:b0:ae: 8b:98:81:2e:92:4f:22:23:82:0f:1e:8d:6b:2a:81: 7f:e0:64:dd:1b:f9:64:8f:4b:76:7d:8c:67:9e:c7: 61:b1:76:0f:94:7c:15:3d:d7:be:ab:40:c1:60:4b: e9:95:c0:f4:61:07:16:df:33:fe:af:bd:a7:a4:cb: f8:c7:e9:1b:75:6b:e7:58:ec:0c:8f:7f:6f:3a:16: 33:8f:2c:a9:68:1f:0f:df:f6:bf:3f:21:39:4a:35: 00:e2:cf:36:25:ec:9f:c2:ea:55:99:26:17:5f:c2: 1b:43:46:26:27:a8:59:0e:18:15:7e:fc:4c:a3:34: 24:ea:62:1d:92:9d:a1:ea:cc:f6:e4:de:84:92:8c: 1b:93:fe:f2:34:93:28:a1:d0:f2:e0:52:73:36:83: 2b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E5:92:48:B9:E2:20:4D:C3:35:BC:A6:DA:2F:9E:AE:F8:78:DB:89 X509v3 Authority Key Identifier: keyid:9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:41:8c:c4:2a:7f:bb:fc:9a:ed:d6:88:5c:1a:96:44:44:cb: 12:9b:34:4b:89:ee:31:31:1e:e5:dc:15:8e:36:c3:73:a4:84: 39:ac:6f:c1:0b:8f:13:62:55:b1:27:ef:cb:6c:a4:ca:d9:d6: 18:84:ea:dc:38:a5:44:ec:8c:7e:b4:72:fa:38:b4:7b:0d:4d: 63:8d:6c:27:8a:8f:51:ac:b8:d3:51:12:5b:14:4a:2e:05:7f: 13:af:67:0f:8d:ee:1d:a5:0e:e4:1c:6a:c0:5b:96:f0:fe:8c: 9a:9f:fc:0f:9c:09:a7:3d:c4:64:f8:e8:92:d7:99:15:1f:16: 32:bb:f1:42:60:c1:17:2c:71:71:21:a5:d9:e3:cb:6c:0f:12: 13:f0:fc:73:ef:6e:9a:1f:96:32:da:0f:69:5b:46:f5:d2:d4: 6c:50:7c:e0:8a:73:5c:26:aa:27:33:60:23:b3:a4:e8:dd:d3: 96:4b:e3:86:45:e0:12:b3:c5:48:77:bc:db:fb:0a:06:41:d8: d3:ca:bc:89:9e:08:d3:d1:2f:08:81:2b:e6:b8:66:a4:ee:64: 55:e6:de:80:83:9a:99:58:31:f7:f4:6a:fa:5b:75:de:b7:4f: 8a:8f:12:02:e6:a4:03:95:41:85:bb:b9:8d:b9:c6:44:84:0b: 9d:d2:84:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNZWr7fQ1uvpGDf9NiQEvO7S6fHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNCNkQ1RUM1MzAwRDFBMzZGRjg5M0M2MEYzOTBENjRC RjAwRjFFQzAeFw0yNTExMDUxODEzMjVaFw0yNTExMDYyMTIwMjVaMDMxMTAvBgNV BAMTKEMzRTU5MjQ4QjlFMjIwNERDMzM1QkNBNkRBMkY5RUFFRjg3OERCODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGWuhNFzqGd3dcZpu9yQQylxgf 5mcqOb3AHvwPlF3//ZHJlVlSsdLbsROVtq3wxqG1rdWl3uGq5l51Iii9iikmbZBV 3jGSeAKUbyu6tLUorQ1SCL5aOIK9n+FSbQ+XlFgK5Ajvx1qwrouYgS6STyIjgg8e jWsqgX/gZN0b+WSPS3Z9jGeex2Gxdg+UfBU9176rQMFgS+mVwPRhBxbfM/6vvaek y/jH6Rt1a+dY7AyPf286FjOPLKloHw/f9r8/ITlKNQDizzYl7J/C6lWZJhdfwhtD RiYnqFkOGBV+/EyjNCTqYh2SnaHqzPbk3oSSjBuT/vI0kyih0PLgUnM2gyshAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUw+WSSLniIE3DNbym2i+ervh424kwHwYDVR0j BBgwFoAUnLbV7FMA0aNv+JPGDzkNZL8A8ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHZ4ZjNlSjV4MkNMeGsyTkZhVUZhUnhoR21XeFIxR28zdFdZdHREOGRF Tk4vMC85Q0I2RDVFQzUzMDBEMUEzNkZGODkzQzYwRjM5MEQ2NEJGMDBGMUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQjZENUVDNTMwMEQxQTM2 RkY4OTNDNjBGMzkwRDY0QkYwMEYxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHZ4ZjNlSjV4MkNMeGsyTkZhVUZhUnhoR21XeFIxR28zdFdZdHREOGRFTk4vMC85 Q0I2RDVFQzUzMDBEMUEzNkZGODkzQzYwRjM5MEQ2NEJGMDBGMUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoUGMxCp/u/ya7daIXBqWRETLEps0S4nuMTEe5dwVjjbDc6SEOaxvwQuPE2JV sSfvy2ykytnWGITq3DilROyMfrRy+ji0ew1NY41sJ4qPUay401ESWxRKLgV/E69n D43uHaUO5BxqwFuW8P6Mmp/8D5wJpz3EZPjokteZFR8WMrvxQmDBFyxxcSGl2ePL bA8SE/D8c+9umh+WMtoPaVtG9dLUbFB84IpzXCaqJzNgI7Ok6N3TlkvjhkXgErPF SHe82/sKBkHY08q8iZ4I09EvCIEr5rhmpO5kVebegIOamVgx9/Rq+lt13rdPio8S AuakA5VBhbu5jbnGRIQLndKEQA== -----END CERTIFICATE-----Generated at Wed Nov 5 19:47:53 2025 by rpki-client