$ rpki-client -vvf rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9F2D5768FE59056E586124EFA58C5F96D60C7722.mft File: 9F2D5768FE59056E586124EFA58C5F96D60C7722.mft (raw, json) Hash identifier: HSoL975EBdLHA2jQWecBGmSwhmiGelFp3B0DF6KUEWk= Subject key identifier: 3B:EB:D2:B3:CB:A0:BA:A3:FE:03:CD:5E:8C:54:F6:9E:1C:52:4B:F5 Authority key identifier: 9F:2D:57:68:FE:59:05:6E:58:61:24:EF:A5:8C:5F:96:D6:0C:77:22 Certificate issuer: /CN=9F2D5768FE59056E586124EFA58C5F96D60C7722 Certificate serial: 75B03BE42E667F3A17952AE4BAA1CC98E54B9D59 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F2D5768FE59056E586124EFA58C5F96D60C7722.cer Subject info access: rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9F2D5768FE59056E586124EFA58C5F96D60C7722.mft Manifest number: 0125 Signing time: Tue 04 Nov 2025 20:44:32 +0000 Manifest this update: Tue 04 Nov 2025 20:39:32 +0000 Manifest next update: Wed 05 Nov 2025 22:19:32 +0000 Files and hashes: 1: 9F2D5768FE59056E586124EFA58C5F96D60C7722.crl (hash: sXSmA4CXyM5DUbiCJHW9ae5hgxySF21Us4X9idFZ9DI=) 2: 323830343a6633343a3a2f33322d313238203d3e20323633353730.roa (hash: f2/cwU5CqVs5dtqCKqyiByjXgT3PlogrIOX/QPFvwv4=) 3: 3138362e3234392e3234382e302f32312d3332203d3e20323633353730.roa (hash: em/OiGz9JuiNf1P6tS+Yizeu69SpATqfC8rDqeVxlGs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9F2D5768FE59056E586124EFA58C5F96D60C7722.crl rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9F2D5768FE59056E586124EFA58C5F96D60C7722.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F2D5768FE59056E586124EFA58C5F96D60C7722.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 22:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b0:3b:e4:2e:66:7f:3a:17:95:2a:e4:ba:a1:cc:98:e5:4b:9d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F2D5768FE59056E586124EFA58C5F96D60C7722 Validity Not Before: Nov 4 20:39:32 2025 GMT Not After : Nov 5 22:19:32 2025 GMT Subject: CN=3BEBD2B3CBA0BAA3FE03CD5E8C54F69E1C524BF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5a:43:3e:ee:4d:45:a9:7e:db:99:3c:7b:f6: 82:b5:8e:98:d3:95:99:4b:a6:b4:a0:49:af:86:ad: 3e:47:62:f9:fd:9b:ec:f1:85:5c:6e:f2:c0:d3:ae: 88:d6:ad:59:7c:20:16:bf:79:04:5a:f9:47:65:39: 32:4e:49:ec:77:69:a6:ec:b5:73:73:d2:27:b7:67: 93:15:be:7f:87:38:7a:dc:a1:c5:af:d7:95:e0:7a: a4:be:85:02:be:1d:fd:bf:be:50:a6:81:4d:2d:51: 07:bd:c3:de:a4:20:85:86:b4:69:a4:4a:5d:0a:9a: c7:54:bc:87:fb:2a:74:cd:1c:7b:2f:9b:f3:c3:e8: b0:a0:6f:98:59:2b:71:7e:14:5f:2a:d8:c9:fe:8d: 43:37:5c:75:19:7a:0d:f9:42:f1:03:b1:2e:2a:11: c3:d7:7c:ec:0b:59:16:ac:cb:a1:72:42:f4:ab:29: f7:9d:38:ad:0c:27:f9:41:60:e4:1a:10:71:31:b5: b0:bc:b2:25:1d:84:ef:d5:c9:84:04:c8:4f:ca:99: ca:44:9f:50:12:c1:42:31:17:50:6d:7c:7a:51:f1: d2:fa:a8:ca:dd:df:19:98:af:be:b5:33:7e:34:94: e0:ae:71:84:bf:a9:72:a0:2b:a7:18:64:bd:ae:7d: 45:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EB:D2:B3:CB:A0:BA:A3:FE:03:CD:5E:8C:54:F6:9E:1C:52:4B:F5 X509v3 Authority Key Identifier: keyid:9F:2D:57:68:FE:59:05:6E:58:61:24:EF:A5:8C:5F:96:D6:0C:77:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9F2D5768FE59056E586124EFA58C5F96D60C7722.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F2D5768FE59056E586124EFA58C5F96D60C7722.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9F2D5768FE59056E586124EFA58C5F96D60C7722.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b5:a2:dd:20:11:7f:31:30:8f:04:47:be:b9:2f:26:3a:a4: 76:7b:a3:11:20:30:6c:f2:17:4a:5d:5b:3e:76:7b:0f:cb:a9: 4a:e5:7f:54:ab:b2:5f:4e:09:ea:cb:57:62:2b:be:23:59:48: a6:00:9f:a5:12:12:83:50:be:fb:9c:5a:6f:c0:c2:cf:00:f3: 47:58:cd:57:4c:74:f9:94:c9:26:3e:c8:4e:18:87:e5:e1:e6: 2b:c1:9b:00:42:cf:b3:70:bb:78:48:89:25:ac:28:0f:b5:28: 98:c1:31:0a:26:a3:d0:20:d8:f9:28:27:c3:b4:df:bf:e2:d2: 7f:e4:33:58:e3:a2:af:4d:cd:fe:25:0c:4d:62:fe:ea:0f:c0: ea:2d:78:b0:4e:62:c5:aa:01:66:9d:b2:8b:f2:f3:3a:5c:e0: 1c:ee:84:85:bb:16:8b:36:e5:04:18:70:d8:fc:69:c2:4c:bb: 2c:6e:a2:32:9c:7d:24:61:9f:02:7e:2b:c4:80:39:f2:95:76: b2:0c:f0:76:0d:12:da:2f:88:a9:f4:45:d3:e7:5e:c8:31:8d: 2e:a2:58:6a:a5:5e:a1:de:42:a9:15:d1:e2:94:5f:26:f0:eb: c6:14:e8:26:5b:59:09:e3:22:ce:22:c4:a1:4c:87:de:cc:a4: f2:26:43:4e -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUdbA75C5mfzoXlSrkuqHMmOVLnVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYyRDU3NjhGRTU5MDU2RTU4NjEyNEVGQTU4QzVGOTZE NjBDNzcyMjAeFw0yNTExMDQyMDM5MzJaFw0yNTExMDUyMjE5MzJaMDMxMTAvBgNV BAMTKDNCRUJEMkIzQ0JBMEJBQTNGRTAzQ0Q1RThDNTRGNjlFMUM1MjRCRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaWkM+7k1FqX7bmTx79oK1jpjT lZlLprSgSa+GrT5HYvn9m+zxhVxu8sDTrojWrVl8IBa/eQRa+UdlOTJOSex3aabs tXNz0ie3Z5MVvn+HOHrcocWv15XgeqS+hQK+Hf2/vlCmgU0tUQe9w96kIIWGtGmk Sl0KmsdUvIf7KnTNHHsvm/PD6LCgb5hZK3F+FF8q2Mn+jUM3XHUZeg35QvEDsS4q EcPXfOwLWRasy6FyQvSrKfedOK0MJ/lBYOQaEHExtbC8siUdhO/VyYQEyE/KmcpE n1ASwUIxF1BtfHpR8dL6qMrd3xmYr761M340lOCucYS/qXKgK6cYZL2ufUUlAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUO+vSs8uguqP+A81ejFT2nhxSS/UwHwYDVR0j BBgwFoAUny1XaP5ZBW5YYSTvpYxfltYMdyIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9wNlB2V3Nrd1l4Mlhpdlg3Qkdqd3VyWHp5YnNyR0RCQ1dKYUc5aHcyNmdK LzAvOUYyRDU3NjhGRTU5MDU2RTU4NjEyNEVGQTU4QzVGOTZENjBDNzcyMi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85RjJENTc2OEZFNTkwNTZFNTg2 MTI0RUZBNThDNUY5NkQ2MEM3NzIyLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3A2 UHZXc2t3WXgyWGl2WDdCR2p3dXJYenlic3JHREJDV0phRzlodzI2Z0ovMC85RjJE NTc2OEZFNTkwNTZFNTg2MTI0RUZBNThDNUY5NkQ2MEM3NzIyLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA EbWi3SARfzEwjwRHvrkvJjqkdnujESAwbPIXSl1bPnZ7D8upSuV/VKuyX04J6stX Yiu+I1lIpgCfpRISg1C++5xab8DCzwDzR1jNV0x0+ZTJJj7IThiH5eHmK8GbAELP s3C7eEiJJawoD7UomMExCiaj0CDY+Sgnw7Tfv+LSf+QzWOOir03N/iUMTWL+6g/A 6i14sE5ixaoBZp2yi/LzOlzgHO6EhbsWizblBBhw2Pxpwky7LG6iMpx9JGGfAn4r xIA58pV2sgzwdg0S2i+IqfRF0+deyDGNLqJYaqVeod5CqRXR4pRfJvDrxhToJltZ CeMiziLEoUyH3syk8iZDTg== -----END CERTIFICATE-----Generated at Wed Nov 5 07:51:52 2025 by rpki-client