$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft File: 9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft (raw, json) Hash identifier: mbBZ1AFKXo9mS1zkqmg7s8n1t1KS5yTbhqnUpfbdR5U= Subject key identifier: 18:47:20:B7:A2:BE:97:E4:35:DA:27:F4:45:D9:F8:6F:AE:B6:0A:19 Authority key identifier: 9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41 Certificate issuer: /CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41 Certificate serial: 4531CE1717F9DF760167A84EBF5741959D2DB168 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer Subject info access: rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft Manifest number: 02E7 Signing time: Thu 18 Sep 2025 21:45:00 +0000 Manifest this update: Thu 18 Sep 2025 21:40:00 +0000 Manifest next update: Sat 20 Sep 2025 00:12:00 +0000 Files and hashes: 1: 3133322e3235352e3232302e302f32322d3234203d3e20323632393738.roa (hash: afiDgNmjYoTHl9tBgKdwse060m18ExwL0lIq/AJdzls=) 2: 323830343a346434343a6164613a3a2f34382d3438203d3e20323632393738.roa (hash: 8her+PoAT9avPWWQK9qhm9DUMHGf0Ur31Z2fvvlEG+w=) 3: 3134332e302e3132302e302f32322d3234203d3e20323632393738.roa (hash: gLs1P9X81n1VFfuY9I9DWXvqDOQ8Y2hZzFOcfoQ0ohc=) 4: 323830343a346434343a3a2f33322d3332203d3e20323632393738.roa (hash: VizvqRIuYKfkI4s8BEKfvxZE9y5806w4B0z2gcdiGkE=) 5: 3138362e3235302e3138342e302f32322d3234203d3e20323632393738.roa (hash: fjUq+2OEZ2tApMzj288/NKrvwEiH+6RX3sAnPykGFRs=) 6: 323830343a346434343a633a3a2f34382d3438203d3e20323632393738.roa (hash: Op1QUlbs1kMgDUhfRTkD0khQVu8yE34ODvSUQUBmo3Q=) 7: 323830343a346434343a31303a3a2f34382d3438203d3e20323632393738.roa (hash: qeJpzQeOLKkwOi3JlBWrssz8TP7xi7dkX2rBNdr0I2c=) 8: 9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl (hash: Dqk+W3dgrG19G78J4R2y+m+PogNjt9hk2MPeYyRcoQU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 22:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:31:ce:17:17:f9:df:76:01:67:a8:4e:bf:57:41:95:9d:2d:b1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41 Validity Not Before: Sep 18 21:40:00 2025 GMT Not After : Sep 20 00:12:00 2025 GMT Subject: CN=184720B7A2BE97E435DA27F445D9F86FAEB60A19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8a:64:e0:e0:4b:b7:6c:d5:5e:e0:ee:d4:c9: bd:69:1a:e6:ee:f2:ed:d9:3f:74:0d:8b:d5:e3:89: 01:10:19:4b:41:d1:36:34:69:3a:9c:fa:e7:f5:ca: ba:b2:fb:71:cf:56:83:fe:40:f0:e8:d9:eb:3e:94: 64:42:cb:39:c9:d1:fc:2d:a0:25:e3:0d:24:dd:ab: 57:bd:59:6e:b0:5b:46:82:0b:b6:01:6e:6d:22:63: d1:69:20:a0:82:f7:7c:e6:6b:55:63:9a:c2:67:12: 67:70:16:86:ad:ea:a1:48:b8:2c:3a:a4:58:52:42: 69:b7:88:f1:c2:39:8a:f4:a8:cf:ea:9e:fe:3d:a4: 15:2f:2d:ee:e9:fb:9a:e2:c2:fc:a2:7c:4a:b1:9c: 79:e1:b9:4c:7e:44:89:4a:89:43:5c:87:d3:90:74: 62:58:b2:19:ec:13:0f:4f:46:31:51:bd:d9:8b:04: 8a:ca:45:ec:f8:2e:9e:d4:d9:bf:d6:e2:49:2d:3e: 97:c7:7c:d8:82:18:ed:0f:c4:f1:ed:31:69:5c:f7: 27:bc:36:4f:26:a5:df:9a:05:b3:c0:43:70:d6:7e: 33:fa:44:3b:7f:e7:f7:4d:84:fb:75:8d:75:77:fa: c2:cd:d8:de:a0:a1:31:f8:ba:b8:c2:77:64:91:61: a4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:47:20:B7:A2:BE:97:E4:35:DA:27:F4:45:D9:F8:6F:AE:B6:0A:19 X509v3 Authority Key Identifier: keyid:9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:50:57:65:af:17:75:48:ab:cd:0a:e2:ce:9c:4a:d9:cf:22: ef:64:cf:3e:15:15:49:94:70:33:fa:15:fe:4c:31:a5:b1:8d: f2:49:ec:d2:f0:90:33:50:80:3d:1a:50:54:76:6e:db:2d:73: 9c:82:09:49:eb:3f:45:67:64:2b:80:2a:14:c7:41:6f:3f:57: 64:52:61:56:7e:06:6a:73:1c:8b:c7:c2:e3:fb:d3:02:f8:fb: ea:e2:23:40:d4:87:8d:41:73:7f:86:af:ce:2f:a5:17:29:e5: 32:c2:eb:83:1f:05:2a:d1:d9:c9:97:f9:cd:a9:72:23:eb:74: a9:fc:20:5e:33:f7:82:c0:e6:48:8b:ae:ac:82:b0:09:62:2f: be:db:85:0b:73:a0:29:d4:ba:b4:86:f7:38:14:26:34:e3:0f: 48:a2:8c:d1:5b:02:af:66:1d:b5:ff:d3:09:0d:30:dc:1a:b7: 36:41:73:e7:7e:57:a0:70:e9:3b:ae:b2:66:10:0d:d7:3a:24: 1b:9b:f2:a1:88:2f:89:7b:9b:e6:9d:c8:ac:6e:14:26:f4:73: 6c:3e:1f:bf:62:2a:74:5d:3e:73:ee:03:a0:b1:2f:3e:68:fe: 6f:83:10:c8:cc:9c:e0:b1:0e:46:89:19:cf:9a:96:43:a0:84: 07:b4:10:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURTHOFxf533YBZ6hOv1dBlZ0tsWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4MzI4MTg5QTBDRkY1M0U5RUQzQTJGMjA3RkZCQjlD QUU2MUE0MTAeFw0yNTA5MTgyMTQwMDBaFw0yNTA5MjAwMDEyMDBaMDMxMTAvBgNV BAMTKDE4NDcyMEI3QTJCRTk3RTQzNURBMjdGNDQ1RDlGODZGQUVCNjBBMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbimTg4Eu3bNVe4O7Uyb1pGubu 8u3ZP3QNi9XjiQEQGUtB0TY0aTqc+uf1yrqy+3HPVoP+QPDo2es+lGRCyznJ0fwt oCXjDSTdq1e9WW6wW0aCC7YBbm0iY9FpIKCC93zma1VjmsJnEmdwFoat6qFIuCw6 pFhSQmm3iPHCOYr0qM/qnv49pBUvLe7p+5riwvyifEqxnHnhuUx+RIlKiUNch9OQ dGJYshnsEw9PRjFRvdmLBIrKRez4Lp7U2b/W4kktPpfHfNiCGO0PxPHtMWlc9ye8 Nk8mpd+aBbPAQ3DWfjP6RDt/5/dNhPt1jXV3+sLN2N6goTH4urjCd2SRYaQbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGEcgt6K+l+Q12if0Rdn4b662ChkwHwYDVR0j BBgwFoAUm4MoGJoM/1Pp7TovIH/7ucrmGkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMloxSmVOY2NvbjdkcVNxVlFSdkpGb3pHN21EQlVlM0RvUk1GWTFNM1F4 WlcvMS85QjgzMjgxODlBMENGRjUzRTlFRDNBMkYyMDdGRkJCOUNBRTYxQTQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCODMyODE4OUEwQ0ZGNTNF OUVEM0EyRjIwN0ZGQkI5Q0FFNjFBNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MloxSmVOY2NvbjdkcVNxVlFSdkpGb3pHN21EQlVlM0RvUk1GWTFNM1F4WlcvMS85 QjgzMjgxODlBMENGRjUzRTlFRDNBMkYyMDdGRkJCOUNBRTYxQTQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWlBXZa8XdUirzQrizpxK2c8i72TPPhUVSZRwM/oV/kwxpbGN8kns0vCQM1CA PRpQVHZu2y1znIIJSes/RWdkK4AqFMdBbz9XZFJhVn4GanMci8fC4/vTAvj76uIj QNSHjUFzf4avzi+lFynlMsLrgx8FKtHZyZf5zalyI+t0qfwgXjP3gsDmSIuurIKw CWIvvtuFC3OgKdS6tIb3OBQmNOMPSKKM0VsCr2Ydtf/TCQ0w3Bq3NkFz535XoHDp O66yZhAN1zokG5vyoYgviXub5p3IrG4UJvRzbD4fv2IqdF0+c+4DoLEvPmj+b4MQ yMyc4LEORokZz5qWQ6CEB7QQ5g== -----END CERTIFICATE-----Generated at Thu Sep 18 23:26:35 2025 by rpki-client