$ rpki-client -vvf rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft File: C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft (raw, json) Hash identifier: CmDsdiP8cSR52cDEH45yvXGPe847moDKAoeRSwKAv28= Subject key identifier: D4:32:5E:39:89:E8:AC:75:7A:0B:AD:4F:0E:7D:E5:69:6D:99:5B:BB Authority key identifier: C9:B4:4C:42:CE:21:94:CF:2A:ED:5F:3F:1C:5F:9E:7D:28:D2:2E:AC Certificate issuer: /CN=C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC Certificate serial: 62DC094A96CC71220A5608DF2DF1B1D7FF9A2619 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer Subject info access: rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft Manifest number: 60 Signing time: Tue 04 Nov 2025 21:16:44 +0000 Manifest this update: Tue 04 Nov 2025 21:11:44 +0000 Manifest next update: Wed 05 Nov 2025 21:28:44 +0000 Files and hashes: 1: C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl (hash: /jm+u9FYgqaHoFlfaZPjzMICwLmRXv7p2zF6gVBPAtI=) 2: 3137302e3234362e3232342e302f32322d3332203d3e20323634303531.roa (hash: ai1fq1d0v27iy15z6wZaaZtUTWGC9NDlAklm01QMFAU=) 3: 3134332e3133372e3136302e302f32322d3332203d3e20323634303531.roa (hash: 6odTTXV/YEt0Dl4aWNPP6L1GAoNrXc5ZxFO+rO0cG3A=) 4: 323830343a326130343a3a2f33322d313238203d3e20323634303531.roa (hash: RSDuNCVU1VTlfLD/mOTkHE5pcS11RZ6Pk8iJjzVZgVU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 21:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:dc:09:4a:96:cc:71:22:0a:56:08:df:2d:f1:b1:d7:ff:9a:26:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC Validity Not Before: Nov 4 21:11:44 2025 GMT Not After : Nov 5 21:28:44 2025 GMT Subject: CN=D4325E3989E8AC757A0BAD4F0E7DE5696D995BBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0b:7c:98:98:60:31:a3:a8:fe:3d:42:e4:74: a2:03:fd:ea:19:7b:11:c9:83:e2:2b:a3:8f:68:ea: c2:32:d9:16:5b:65:c3:63:97:67:99:79:5b:47:10: e0:da:4a:fb:eb:73:ad:35:1b:67:4a:e5:5a:9a:95: 4f:18:0f:b0:9d:3a:a3:96:89:57:66:fc:87:fe:55: 7d:74:87:06:70:f8:80:ec:93:fd:2f:4a:10:7d:7a: 00:c6:4a:75:67:55:22:57:0a:a6:eb:25:2f:af:22: 4b:b3:37:20:4d:58:14:df:87:10:c1:4f:aa:e7:3a: cb:4e:90:3e:b2:60:6c:24:b9:8f:b5:cb:01:6c:6a: 53:d2:1b:8a:2c:b8:d1:ea:a4:bd:7e:dc:d9:4d:e5: a1:89:7c:21:77:af:46:95:a0:47:f7:84:8c:20:3e: 49:06:8f:d0:44:98:0d:95:a9:13:b8:c6:7d:44:5a: 22:a2:7a:fb:b3:34:19:31:7a:7a:9c:c7:22:0b:7e: a6:de:6f:42:5e:06:3e:c7:73:01:87:98:7f:74:21: 2e:5c:aa:57:af:72:7b:e9:fd:27:5b:cd:6c:65:81: f0:81:0e:05:ad:1f:59:0d:7b:53:1d:d0:91:d4:98: 30:be:6d:d3:ff:bc:50:72:b3:89:ba:b7:5a:ad:b5: 28:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:32:5E:39:89:E8:AC:75:7A:0B:AD:4F:0E:7D:E5:69:6D:99:5B:BB X509v3 Authority Key Identifier: keyid:C9:B4:4C:42:CE:21:94:CF:2A:ED:5F:3F:1C:5F:9E:7D:28:D2:2E:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:7b:c9:82:19:da:68:e5:71:04:17:95:f2:26:fb:ce:5a:2f: 28:8e:67:c4:5c:b8:4f:89:12:21:58:3b:ce:f0:87:5c:b0:c9: 18:ab:d2:98:fd:8c:38:df:0d:f3:48:c3:a7:e5:f7:c6:c5:6a: c5:bf:b8:c0:c5:01:dc:0c:36:ac:13:61:f8:68:06:14:21:55: dc:e2:aa:04:3a:39:97:25:12:d2:7e:29:53:63:cd:d4:79:b4: 30:fa:88:76:7c:40:77:04:e0:4f:1a:4c:35:0a:2f:89:d4:e4: 20:bb:5a:6b:d0:93:ed:72:fe:1c:ed:01:97:a3:16:37:c8:b0: 5d:7d:d3:50:ec:69:6f:99:28:bb:5c:e3:a5:1c:39:03:1f:49: 92:46:d5:f4:36:1c:e1:dd:5f:6d:e6:7a:83:08:0f:36:47:67: a0:db:90:da:6f:0a:be:23:0c:be:4a:a7:54:59:bb:0b:41:e1: d2:6e:f8:86:a3:42:ee:3a:ee:5b:f4:13:43:e4:74:39:ae:e3: 9f:b7:98:3d:ce:3a:6d:05:b0:f9:f1:a4:dc:e8:4a:17:14:6c: 9c:47:3d:93:7d:31:9c:ae:75:0d:43:24:af:3a:4a:aa:af:4b: 32:89:9a:03:4a:27:db:0b:12:72:bc:5d:81:ad:d6:8f:06:ab: a7:86:a8:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYtwJSpbMcSIKVgjfLfGx1/+aJhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCNDRDNDJDRTIxOTRDRjJBRUQ1RjNGMUM1RjlFN0Qy OEQyMkVBQzAeFw0yNTExMDQyMTExNDRaFw0yNTExMDUyMTI4NDRaMDMxMTAvBgNV BAMTKEQ0MzI1RTM5ODlFOEFDNzU3QTBCQUQ0RjBFN0RFNTY5NkQ5OTVCQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjC3yYmGAxo6j+PULkdKID/eoZ exHJg+Iro49o6sIy2RZbZcNjl2eZeVtHEODaSvvrc601G2dK5VqalU8YD7CdOqOW iVdm/If+VX10hwZw+IDsk/0vShB9egDGSnVnVSJXCqbrJS+vIkuzNyBNWBTfhxDB T6rnOstOkD6yYGwkuY+1ywFsalPSG4osuNHqpL1+3NlN5aGJfCF3r0aVoEf3hIwg PkkGj9BEmA2VqRO4xn1EWiKievuzNBkxenqcxyILfqbeb0JeBj7HcwGHmH90IS5c qlevcnvp/SdbzWxlgfCBDgWtH1kNe1Md0JHUmDC+bdP/vFBys4m6t1qttSiJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1DJeOYnorHV6C61PDn3laW2ZW7swHwYDVR0j BBgwFoAUybRMQs4hlM8q7V8/HF+efSjSLqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHh5VUtKSFhBWTNKQ3gyVEZ3V0VhR05uZFdCbTNkZUZidWZuQmlQcmE4 VHEvMC9DOUI0NEM0MkNFMjE5NENGMkFFRDVGM0YxQzVGOUU3RDI4RDIyRUFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5QjQ0QzQyQ0UyMTk0Q0Yy QUVENUYzRjFDNUY5RTdEMjhEMjJFQUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHh5VUtKSFhBWTNKQ3gyVEZ3V0VhR05uZFdCbTNkZUZidWZuQmlQcmE4VHEvMC9D OUI0NEM0MkNFMjE5NENGMkFFRDVGM0YxQzVGOUU3RDI4RDIyRUFDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmHvJghnaaOVxBBeV8ib7zlovKI5nxFy4T4kSIVg7zvCHXLDJGKvSmP2MON8N 80jDp+X3xsVqxb+4wMUB3Aw2rBNh+GgGFCFV3OKqBDo5lyUS0n4pU2PN1Hm0MPqI dnxAdwTgTxpMNQovidTkILtaa9CT7XL+HO0Bl6MWN8iwXX3TUOxpb5kou1zjpRw5 Ax9JkkbV9DYc4d1fbeZ6gwgPNkdnoNuQ2m8KviMMvkqnVFm7C0Hh0m74hqNC7jru W/QTQ+R0Oa7jn7eYPc46bQWw+fGk3OhKFxRsnEc9k30xnK51DUMkrzpKqq9LMoma A0on2wsScrxdga3Wjwarp4ao5A== -----END CERTIFICATE-----Generated at Wed Nov 5 04:07:27 2025 by rpki-client