$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft File: 9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft (raw, json) Hash identifier: l357Vjl6RcmLggJIea1Pny+hyhb2mqZJlodZtscscQQ= Subject key identifier: 1B:41:67:60:7B:6A:A4:08:46:F4:0C:86:23:CA:5B:51:65:F8:97:5F Authority key identifier: 9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41 Certificate issuer: /CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41 Certificate serial: 3CA6C6476BC277FEBAABBBB9F608F8ABC856255F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer Subject info access: rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft Manifest number: 0324 Signing time: Mon 03 Nov 2025 07:17:29 +0000 Manifest this update: Mon 03 Nov 2025 07:12:29 +0000 Manifest next update: Tue 04 Nov 2025 10:46:29 +0000 Files and hashes: 1: 323830343a346434343a3a2f33322d3332203d3e20323632393738.roa (hash: VizvqRIuYKfkI4s8BEKfvxZE9y5806w4B0z2gcdiGkE=) 2: 3133322e3235352e3232302e302f32322d3234203d3e20323632393738.roa (hash: afiDgNmjYoTHl9tBgKdwse060m18ExwL0lIq/AJdzls=) 3: 323830343a346434343a31303a3a2f34382d3438203d3e20323632393738.roa (hash: qeJpzQeOLKkwOi3JlBWrssz8TP7xi7dkX2rBNdr0I2c=) 4: 323830343a346434343a6164613a3a2f34382d3438203d3e20323632393738.roa (hash: 8her+PoAT9avPWWQK9qhm9DUMHGf0Ur31Z2fvvlEG+w=) 5: 3134332e302e3132302e302f32322d3234203d3e20323632393738.roa (hash: gLs1P9X81n1VFfuY9I9DWXvqDOQ8Y2hZzFOcfoQ0ohc=) 6: 323830343a346434343a633a3a2f34382d3438203d3e20323632393738.roa (hash: Op1QUlbs1kMgDUhfRTkD0khQVu8yE34ODvSUQUBmo3Q=) 7: 3138362e3235302e3138342e302f32322d3234203d3e20323632393738.roa (hash: fjUq+2OEZ2tApMzj288/NKrvwEiH+6RX3sAnPykGFRs=) 8: 9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl (hash: wKfR4QgAFlPjcTGHchQaabQMAAaG3CT92sMfmRKJOgs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 10:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a6:c6:47:6b:c2:77:fe:ba:ab:bb:b9:f6:08:f8:ab:c8:56:25:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41 Validity Not Before: Nov 3 07:12:29 2025 GMT Not After : Nov 4 10:46:29 2025 GMT Subject: CN=1B4167607B6AA40846F40C8623CA5B5165F8975F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:44:a0:74:fc:fa:8c:f8:53:97:72:7a:36:6a: 63:3c:df:90:98:d3:d7:52:7d:3a:cc:70:ee:2e:27: aa:ba:b5:ff:14:fc:e5:36:db:ef:4e:ab:44:49:e7: 55:d2:0e:31:6f:69:0c:01:82:75:cc:67:71:8b:0d: f8:13:0e:05:73:b1:f5:a4:92:e1:7d:4a:ae:d0:16: 4e:b1:57:92:e2:6b:4d:12:ac:8d:aa:50:e7:bb:03: e4:7e:1a:0f:b4:0e:7a:ed:fe:10:1e:49:c1:32:f8: 0b:96:04:01:85:17:4f:8f:e3:c0:66:42:50:ff:2f: a0:a2:55:f7:45:d8:d6:f0:bc:c7:d2:f2:27:3d:c2: ab:8d:6f:ca:e3:64:4a:05:bf:68:f7:d5:f4:7e:f0: 1f:65:c0:0d:02:04:4f:c5:87:43:a9:de:1c:1e:e8: 6e:4d:c3:86:00:5f:c8:4e:fb:d8:64:59:3b:7f:f4: 9e:e6:f0:43:c3:ee:5d:d2:0b:44:d1:dc:7f:ba:47: 45:e2:89:1b:37:6d:f5:8d:5b:83:e3:80:e7:18:cf: 17:00:90:97:da:91:38:b8:27:78:14:25:9b:73:da: b8:74:3a:88:06:0f:56:ae:09:9d:b6:19:16:3e:29: 34:90:fa:20:14:e6:e2:ec:cc:b8:b3:4c:eb:e3:10: d4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:41:67:60:7B:6A:A4:08:46:F4:0C:86:23:CA:5B:51:65:F8:97:5F X509v3 Authority Key Identifier: keyid:9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:01:00:78:5f:81:bb:2a:c0:14:1c:f6:b5:ac:80:b0:02:3f: eb:dc:f1:23:88:75:a1:12:0d:22:fc:5b:eb:aa:a8:ce:11:e3: ef:19:97:cd:7b:ef:87:1f:81:17:21:e4:a7:6e:69:81:f0:71: 17:59:cc:aa:1c:17:8a:77:50:16:7b:92:22:89:9e:84:b8:3a: 6e:8b:ca:62:13:23:bc:ef:71:5e:4b:00:62:b9:9f:40:36:fd: b1:e1:f5:85:c8:92:5d:1d:fc:92:2f:56:79:63:97:f2:e0:bb: 7f:23:ab:d2:15:f5:c1:61:0f:ed:7e:38:44:0e:a7:c7:aa:99: 8d:e1:d7:73:b1:e4:e7:f6:93:ed:fd:3b:17:75:df:e7:f1:9d: 42:6c:d3:66:a9:68:5a:1e:06:64:12:ea:67:f0:60:78:2d:4a: b6:f1:11:76:12:24:13:f2:60:f7:5b:2d:2d:3a:38:19:27:d7: d3:70:54:bb:dc:68:d7:cc:ec:ec:70:7b:b7:bc:2c:8e:17:d5: fe:80:7c:37:6c:e2:61:91:16:f7:3f:1d:48:88:fb:75:94:22: 88:e5:bc:bc:0d:26:2a:af:7d:c7:8e:ae:d0:f9:f2:4a:96:b8: 07:a3:e4:84:7c:35:67:6c:a6:1b:83:6b:2b:1b:bb:58:38:d9: 16:f1:c2:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPKbGR2vCd/66q7u59gj4q8hWJV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4MzI4MTg5QTBDRkY1M0U5RUQzQTJGMjA3RkZCQjlD QUU2MUE0MTAeFw0yNTExMDMwNzEyMjlaFw0yNTExMDQxMDQ2MjlaMDMxMTAvBgNV BAMTKDFCNDE2NzYwN0I2QUE0MDg0NkY0MEM4NjIzQ0E1QjUxNjVGODk3NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaRKB0/PqM+FOXcno2amM835CY 09dSfTrMcO4uJ6q6tf8U/OU22+9Oq0RJ51XSDjFvaQwBgnXMZ3GLDfgTDgVzsfWk kuF9Sq7QFk6xV5Lia00SrI2qUOe7A+R+Gg+0Dnrt/hAeScEy+AuWBAGFF0+P48Bm QlD/L6CiVfdF2NbwvMfS8ic9wquNb8rjZEoFv2j31fR+8B9lwA0CBE/Fh0Op3hwe 6G5Nw4YAX8hO+9hkWTt/9J7m8EPD7l3SC0TR3H+6R0XiiRs3bfWNW4PjgOcYzxcA kJfakTi4J3gUJZtz2rh0OogGD1auCZ22GRY+KTSQ+iAU5uLszLizTOvjENRJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUG0FnYHtqpAhG9AyGI8pbUWX4l18wHwYDVR0j BBgwFoAUm4MoGJoM/1Pp7TovIH/7ucrmGkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMloxSmVOY2NvbjdkcVNxVlFSdkpGb3pHN21EQlVlM0RvUk1GWTFNM1F4 WlcvMS85QjgzMjgxODlBMENGRjUzRTlFRDNBMkYyMDdGRkJCOUNBRTYxQTQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCODMyODE4OUEwQ0ZGNTNF OUVEM0EyRjIwN0ZGQkI5Q0FFNjFBNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MloxSmVOY2NvbjdkcVNxVlFSdkpGb3pHN21EQlVlM0RvUk1GWTFNM1F4WlcvMS85 QjgzMjgxODlBMENGRjUzRTlFRDNBMkYyMDdGRkJCOUNBRTYxQTQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApgEAeF+BuyrAFBz2tayAsAI/69zxI4h1oRINIvxb66qozhHj7xmXzXvvhx+B FyHkp25pgfBxF1nMqhwXindQFnuSIomehLg6bovKYhMjvO9xXksAYrmfQDb9seH1 hciSXR38ki9WeWOX8uC7fyOr0hX1wWEP7X44RA6nx6qZjeHXc7Hk5/aT7f07F3Xf 5/GdQmzTZqloWh4GZBLqZ/BgeC1KtvERdhIkE/Jg91stLTo4GSfX03BUu9xo18zs 7HB7t7wsjhfV/oB8N2ziYZEW9z8dSIj7dZQiiOW8vA0mKq99x46u0PnySpa4B6Pk hHw1Z2ymG4NrKxu7WDjZFvHCXA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:08:25 2025 by rpki-client