$ rpki-client -vvf rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft File: 9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft (raw, json) Hash identifier: o2NCARevQNTMv9ZPyusrkZvQ/02ToJ52ncdNJIQtc98= Subject key identifier: E3:E2:37:70:16:92:D9:FE:4E:32:7E:F2:3D:3B:D0:C8:FA:2A:6D:AE Authority key identifier: 9A:88:28:7F:0D:A6:7C:74:CC:24:30:13:8C:9E:69:9A:8D:9B:C3:0C Certificate issuer: /CN=9A88287F0DA67C74CC2430138C9E699A8D9BC30C Certificate serial: 3878A4F619E64A7C0DCD6580D8CEDA5C69D1FAA1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer Subject info access: rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft Manifest number: 0304 Signing time: Mon 03 Nov 2025 16:20:45 +0000 Manifest this update: Mon 03 Nov 2025 16:15:45 +0000 Manifest next update: Tue 04 Nov 2025 19:34:45 +0000 Files and hashes: 1: 9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl (hash: 3yJsvN3QGgx6oV/+acmP4HzJCQ6oyZBmNCwBeJGE9Uk=) 2: 3137372e3135342e32302e302f32322d3332203d3e20323632343734.roa (hash: H4KK/IfCeQYkBhQvfas6h5MTpKMxJTrKibFC05W8fuY=) 3: 323830343a3464633a3a2f33322d313238203d3e20323632343734.roa (hash: tLinHUpDx5XtKM/wXIJIMXEa7cIJplW8c1o8b2SFJ1U=) 4: 3137372e35332e3136382e302f32312d3332203d3e20323632343734.roa (hash: aGKmgf4Q37YTxb2naQ2Aw7TO+rtm4/O1Gt+ec54VYCM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 18:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:78:a4:f6:19:e6:4a:7c:0d:cd:65:80:d8:ce:da:5c:69:d1:fa:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A88287F0DA67C74CC2430138C9E699A8D9BC30C Validity Not Before: Nov 3 16:15:45 2025 GMT Not After : Nov 4 19:34:45 2025 GMT Subject: CN=E3E237701692D9FE4E327EF23D3BD0C8FA2A6DAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d0:bb:f0:2d:23:71:ae:be:b2:1b:06:e3:94: 2b:a0:56:48:4d:41:9b:ab:d2:b9:23:d1:cc:d0:9c: 13:78:c9:f9:a3:aa:71:ab:71:84:90:46:67:97:91: 32:6a:20:aa:c7:02:22:24:58:9f:7b:1b:e0:ce:8d: 5c:37:43:39:f6:23:d1:f6:11:84:3c:6b:8e:f3:68: d2:82:aa:84:c0:03:fc:5e:5e:7d:69:a2:7b:2f:29: 9e:e7:fe:32:b8:c8:f7:c1:8f:32:79:33:cb:ef:a2: 74:a0:3d:25:e9:43:19:e6:16:8d:70:10:36:ba:ce: 3c:e2:a6:19:f5:fe:de:1a:d9:49:ab:9f:8c:56:8d: c2:9e:6c:9f:94:50:31:13:1d:c7:6d:33:14:2a:03: dd:11:96:32:a3:dc:1e:07:eb:00:35:a9:8e:cb:69: 74:3c:48:ad:54:50:de:6e:ce:ac:54:99:de:8d:d9: 1c:fc:67:f9:7e:88:71:e3:9a:97:ce:8b:bc:3a:b9: 7d:d4:fa:9f:1a:2f:07:3e:66:ef:05:35:22:9a:8e: 82:dc:f5:66:d9:81:2f:8a:6d:8a:4f:32:ad:9c:be: e7:20:66:5e:36:b6:63:27:bf:7d:45:50:8c:8f:6d: 26:31:a1:40:17:80:0d:7e:a1:fa:f6:35:7f:91:f3: dc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E2:37:70:16:92:D9:FE:4E:32:7E:F2:3D:3B:D0:C8:FA:2A:6D:AE X509v3 Authority Key Identifier: keyid:9A:88:28:7F:0D:A6:7C:74:CC:24:30:13:8C:9E:69:9A:8D:9B:C3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:d7:2e:4d:44:56:3a:e0:d9:d2:f6:6d:7e:a2:c0:1c:bc:15: d5:11:9c:17:09:c9:8e:49:aa:03:47:c4:7d:36:41:b6:1f:f9: c0:72:d4:8f:9c:6c:0a:9e:19:6b:53:50:03:43:5c:4a:22:48: db:1f:37:7d:a1:45:6f:23:16:29:c9:62:c5:cf:49:dd:8d:d9: 66:7f:7b:e4:f1:23:97:b0:8e:3d:49:b9:75:d5:30:71:ef:ca: ab:ec:5b:57:47:96:07:f5:80:17:1d:53:13:52:36:85:30:e1: f8:33:43:79:88:5c:d8:f3:d6:0e:fb:9c:ef:72:65:7c:78:10: 5f:b2:67:7e:23:59:61:36:b6:ad:f6:1f:74:7f:6c:7a:a4:e3: da:69:b9:4f:0b:92:20:0d:e1:ad:e5:b5:23:22:a0:16:ba:f9: c4:86:5d:0c:6f:f5:0f:78:cb:e2:47:21:d9:62:a2:ba:97:52: 42:b7:cb:e7:4d:db:50:44:ed:6f:fc:41:9c:6f:e6:91:f1:ac: de:ff:28:43:7f:a4:e9:9f:89:db:ed:93:1b:5b:ed:45:08:df: 31:86:5d:47:36:df:5a:43:99:98:c2:3f:cb:5f:b8:85:2e:63: 5f:29:37:b4:ad:fc:e0:bc:aa:c3:2e:61:4a:2a:d2:4c:48:18: 69:f9:0f:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOHik9hnmSnwNzWWA2M7aXGnR+qEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4ODI4N0YwREE2N0M3NENDMjQzMDEzOEM5RTY5OUE4 RDlCQzMwQzAeFw0yNTExMDMxNjE1NDVaFw0yNTExMDQxOTM0NDVaMDMxMTAvBgNV BAMTKEUzRTIzNzcwMTY5MkQ5RkU0RTMyN0VGMjNEM0JEMEM4RkEyQTZEQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC20LvwLSNxrr6yGwbjlCugVkhN QZur0rkj0czQnBN4yfmjqnGrcYSQRmeXkTJqIKrHAiIkWJ97G+DOjVw3Qzn2I9H2 EYQ8a47zaNKCqoTAA/xeXn1ponsvKZ7n/jK4yPfBjzJ5M8vvonSgPSXpQxnmFo1w EDa6zjziphn1/t4a2Umrn4xWjcKebJ+UUDETHcdtMxQqA90RljKj3B4H6wA1qY7L aXQ8SK1UUN5uzqxUmd6N2Rz8Z/l+iHHjmpfOi7w6uX3U+p8aLwc+Zu8FNSKajoLc 9WbZgS+KbYpPMq2cvucgZl42tmMnv31FUIyPbSYxoUAXgA1+ofr2NX+R89ypAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4+I3cBaS2f5OMn7yPTvQyPoqba4wHwYDVR0j BBgwFoAUmogofw2mfHTMJDATjJ5pmo2bwwwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMld3dkRHYkdUQWlUZFFwdUoyVXNoNDh6SEJDNXdXOUtvUnM4a3RDOGtD eFQvMS85QTg4Mjg3RjBEQTY3Qzc0Q0MyNDMwMTM4QzlFNjk5QThEOUJDMzBDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBODgyODdGMERBNjdDNzRD QzI0MzAxMzhDOUU2OTlBOEQ5QkMzMEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mld3dkRHYkdUQWlUZFFwdUoyVXNoNDh6SEJDNXdXOUtvUnM4a3RDOGtDeFQvMS85 QTg4Mjg3RjBEQTY3Qzc0Q0MyNDMwMTM4QzlFNjk5QThEOUJDMzBDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlNcuTURWOuDZ0vZtfqLAHLwV1RGcFwnJjkmqA0fEfTZBth/5wHLUj5xsCp4Z a1NQA0NcSiJI2x83faFFbyMWKclixc9J3Y3ZZn975PEjl7COPUm5ddUwce/Kq+xb V0eWB/WAFx1TE1I2hTDh+DNDeYhc2PPWDvuc73JlfHgQX7JnfiNZYTa2rfYfdH9s eqTj2mm5TwuSIA3hreW1IyKgFrr5xIZdDG/1D3jL4kch2WKiupdSQrfL503bUETt b/xBnG/mkfGs3v8oQ3+k6Z+J2+2TG1vtRQjfMYZdRzbfWkOZmMI/y1+4hS5jXyk3 tK384Lyqwy5hSirSTEgYafkPmA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:06:51 2025 by rpki-client