$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft File: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft (raw, json) Hash identifier: 5vHO88iwU9xQNyxA9NQXay4ZZ3RS6aid6ZT4Lqg/k8A= Subject key identifier: BA:FE:9B:A8:42:1B:C2:F3:AD:0E:06:0A:09:42:A8:4C:42:59:45:AA Authority key identifier: 9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D Certificate issuer: /CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D Certificate serial: 12C0833AD102A61D4D0DCE8D1184805313055960 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer Subject info access: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft Manifest number: 01AA Signing time: Sun 02 Nov 2025 18:09:56 +0000 Manifest this update: Sun 02 Nov 2025 18:04:56 +0000 Manifest next update: Mon 03 Nov 2025 20:17:56 +0000 Files and hashes: 1: 34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa (hash: zwE7+BkACCSkaLuprz1tnvVDwiMXOKL8M0S4eDl2SuI=) 2: 323830343a363861383a3a2f33322d313238203d3e20323639373037.roa (hash: z8KvPm2mQOim4DJBvpBUShLU77s/9n6vTftmZoh8lWE=) 3: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl (hash: yuXjEWGOU8aKbx5eSSGZITU4f6TQDHDtGGY9KNqWmG8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 20:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c0:83:3a:d1:02:a6:1d:4d:0d:ce:8d:11:84:80:53:13:05:59:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D Validity Not Before: Nov 2 18:04:56 2025 GMT Not After : Nov 3 20:17:56 2025 GMT Subject: CN=BAFE9BA8421BC2F3AD0E060A0942A84C425945AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6c:8f:ff:dc:ee:e3:86:b7:d8:ed:f0:bd:24: 20:ca:ec:37:06:22:05:a6:9c:a5:56:97:03:f6:87: 67:c5:01:06:ea:07:e3:12:75:17:07:0b:7e:ed:94: 1f:f5:e2:8e:94:6e:fa:4e:2d:92:13:f9:55:ef:fa: e8:6e:3f:80:35:d0:2d:51:67:c9:50:cc:f0:28:8b: a5:25:e8:e6:2c:a8:87:57:e9:a1:f4:b6:22:6e:c8: 8b:57:8b:f8:e1:ff:a5:46:a4:ec:05:18:1b:61:56: ba:b1:f7:b5:ce:cb:4d:02:1e:65:f1:2c:14:41:9d: e8:bf:de:03:08:1b:89:1b:ae:4e:53:30:cb:57:e4: c6:e3:c0:82:50:24:69:62:d6:17:ce:96:f5:54:fa: d8:2e:8b:1a:00:bd:d9:a0:dd:ea:27:44:a6:a0:49: 48:89:9f:80:d8:e6:d5:63:cd:0f:22:f5:73:14:a7: 8e:b0:d1:b0:a0:d7:42:55:d4:91:29:85:7f:26:25: 73:ff:05:55:18:26:69:4a:21:c0:75:22:23:59:74: ac:8b:ec:58:39:02:a7:ec:25:44:27:2b:17:a1:11: 53:77:17:85:11:f3:da:55:7d:16:39:a2:cc:24:48: d0:98:a4:1d:2d:db:c3:05:cf:30:c7:a1:60:b4:30: 9a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FE:9B:A8:42:1B:C2:F3:AD:0E:06:0A:09:42:A8:4C:42:59:45:AA X509v3 Authority Key Identifier: keyid:9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:53:e1:00:05:79:c8:6e:80:70:62:3f:ea:61:f0:4e:0b:3b: 07:98:44:d0:05:9e:47:27:2f:50:58:cc:52:5b:df:09:3c:47: 83:5c:4b:92:c4:43:91:4e:dd:37:00:69:14:91:34:d5:b7:75: cf:e3:15:23:e7:ac:5a:e9:1f:3b:5c:7b:ea:fd:1e:fc:18:10: ad:c2:df:52:7a:e2:da:ba:8a:26:01:6b:74:06:4f:e5:ec:48: b8:37:e6:a8:51:c1:5c:cd:31:e4:a2:ab:9d:5f:8d:56:eb:a4: 29:01:c5:1b:e0:00:53:04:fd:dd:67:3d:ba:75:77:a3:60:24: e5:24:e4:cd:6d:44:49:84:79:23:03:e3:21:7f:4a:c8:53:a3: fd:23:36:80:cd:76:70:5d:3d:24:6a:ba:8d:e8:79:93:0f:ae: 7f:17:3d:42:ca:ad:f3:33:ef:81:d9:13:83:6e:09:10:ea:3d: 42:23:a1:09:43:7d:ea:61:de:02:cd:1d:11:9e:d5:d1:be:a4: 58:8b:da:a2:23:3e:88:75:e1:65:85:b3:4b:e2:90:ad:0c:4e: de:17:50:8e:7a:15:f4:32:ce:e5:66:7d:c7:c3:67:f7:9d:06: 71:1c:46:94:3c:a9:42:fb:04:6e:af:53:4a:9a:53:c5:55:d8: 42:a6:27:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEsCDOtECph1NDc6NEYSAUxMFWWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ0Rjk5QzUwQkNFNjIyQzI1RjZDRjQwODNCM0NCRTM2 NEM4QkExRDAeFw0yNTExMDIxODA0NTZaFw0yNTExMDMyMDE3NTZaMDMxMTAvBgNV BAMTKEJBRkU5QkE4NDIxQkMyRjNBRDBFMDYwQTA5NDJBODRDNDI1OTQ1QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDabI//3O7jhrfY7fC9JCDK7DcG IgWmnKVWlwP2h2fFAQbqB+MSdRcHC37tlB/14o6UbvpOLZIT+VXv+uhuP4A10C1R Z8lQzPAoi6Ul6OYsqIdX6aH0tiJuyItXi/jh/6VGpOwFGBthVrqx97XOy00CHmXx LBRBnei/3gMIG4kbrk5TMMtX5MbjwIJQJGli1hfOlvVU+tguixoAvdmg3eonRKag SUiJn4DY5tVjzQ8i9XMUp46w0bCg10JV1JEphX8mJXP/BVUYJmlKIcB1IiNZdKyL 7Fg5AqfsJUQnKxehEVN3F4UR89pVfRY5oswkSNCYpB0t28MFzzDHoWC0MJpdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuv6bqEIbwvOtDgYKCUKoTEJZRaowHwYDVR0j BBgwFoAUnU+ZxQvOYiwl9s9Ag7PL42TIuh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmFQQ25nTGtjTG9ja3JBTnNLWHV1dFVvTnJkNE5vNURWeDYzQmZoQ0w2 TUcvMC85RDRGOTlDNTBCQ0U2MjJDMjVGNkNGNDA4M0IzQ0JFMzY0QzhCQTFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlENEY5OUM1MEJDRTYyMkMy NUY2Q0Y0MDgzQjNDQkUzNjRDOEJBMUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmFQQ25nTGtjTG9ja3JBTnNLWHV1dFVvTnJkNE5vNURWeDYzQmZoQ0w2TUcvMC85 RDRGOTlDNTBCQ0U2MjJDMjVGNkNGNDA4M0IzQ0JFMzY0QzhCQTFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAalPhAAV5yG6AcGI/6mHwTgs7B5hE0AWeRycvUFjMUlvfCTxHg1xLksRDkU7d NwBpFJE01bd1z+MVI+esWukfO1x76v0e/BgQrcLfUnri2rqKJgFrdAZP5exIuDfm qFHBXM0x5KKrnV+NVuukKQHFG+AAUwT93Wc9unV3o2Ak5STkzW1ESYR5IwPjIX9K yFOj/SM2gM12cF09JGq6jeh5kw+ufxc9Qsqt8zPvgdkTg24JEOo9QiOhCUN96mHe As0dEZ7V0b6kWIvaoiM+iHXhZYWzS+KQrQxO3hdQjnoV9DLO5WZ9x8Nn950GcRxG lDypQvsEbq9TSppTxVXYQqYnXw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:35:56 2025 by rpki-client