$ rpki-client -vvf rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/9675F8853862F77109315A71203F65D7C66AD7D3.mft File: 9675F8853862F77109315A71203F65D7C66AD7D3.mft (raw, json) Hash identifier: 9+4yrh3AbwbjvECPoewvU/ITX8uvVbNRNV1/mAcPpMs= Subject key identifier: DA:90:19:E2:05:5D:56:DF:13:F6:1B:12:E6:24:D5:78:7B:C6:F9:CE Authority key identifier: 96:75:F8:85:38:62:F7:71:09:31:5A:71:20:3F:65:D7:C6:6A:D7:D3 Certificate issuer: /CN=9675F8853862F77109315A71203F65D7C66AD7D3 Certificate serial: 2081FCFDF7844606012DD74D0499E20B5B6A158E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9675F8853862F77109315A71203F65D7C66AD7D3.cer Subject info access: rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/9675F8853862F77109315A71203F65D7C66AD7D3.mft Manifest number: 5A Signing time: Fri 19 Sep 2025 07:24:37 +0000 Manifest this update: Fri 19 Sep 2025 07:19:37 +0000 Manifest next update: Sat 20 Sep 2025 08:51:37 +0000 Files and hashes: 1: 9675F8853862F77109315A71203F65D7C66AD7D3.crl (hash: 4/6gEDD0TiS6SVWEVW9xa+6X/TK8k1hdi+I7GTD4Sfw=) 2: 3136382e3139372e3232382e302f32322d3332203d3e20323633323532.roa (hash: IxJ+aaIE5s/TSGvp5UxzlcUSrmgGWCPiJKRwmgAtlgw=) 3: 323830343a313763633a3a2f33322d313238203d3e20323633323532.roa (hash: TIrXa4sZ9J01+ogoc0KZjktzJcYNOQ05yKle75N5dOE=) 4: 3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa (hash: 4rw4Uail/JnVkUqBw1XhL5zOOCFkwqiFSWQ2yKJ8vLc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/9675F8853862F77109315A71203F65D7C66AD7D3.crl rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/9675F8853862F77109315A71203F65D7C66AD7D3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9675F8853862F77109315A71203F65D7C66AD7D3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Sep 2025 08:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:81:fc:fd:f7:84:46:06:01:2d:d7:4d:04:99:e2:0b:5b:6a:15:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9675F8853862F77109315A71203F65D7C66AD7D3 Validity Not Before: Sep 19 07:19:37 2025 GMT Not After : Sep 20 08:51:37 2025 GMT Subject: CN=DA9019E2055D56DF13F61B12E624D5787BC6F9CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:65:3f:7b:e0:fb:8c:7d:12:c6:c8:8e:d9:62: a9:f1:09:02:5f:54:b2:83:7b:5b:c3:74:9d:ff:75: 91:4d:54:25:ad:ce:99:5a:8a:ff:5d:07:87:2f:a9: 3c:01:be:71:d4:e6:a5:f1:f2:d8:f3:32:f9:9f:a0: 5e:cf:28:c8:84:5f:b3:82:be:00:22:61:79:87:00: 00:6c:92:a6:a7:6f:15:ff:ae:22:05:04:6c:72:d9: 27:ca:0e:c1:64:91:17:c8:f1:8f:2c:d5:45:80:94: 09:2d:b0:90:23:06:83:67:14:29:4a:dd:83:60:50: f2:9f:9e:ff:c3:54:09:7f:96:4f:09:63:63:6f:c5: 2e:f7:33:4c:7a:58:5f:cc:25:14:68:d0:d9:d1:5f: 42:d7:f5:33:08:5d:0a:a7:39:65:e3:10:2b:da:17: 15:99:2a:be:55:9b:17:7a:e5:79:ff:e4:ee:05:39: bc:99:d0:8e:5d:ed:9a:0f:ca:c8:4a:38:30:64:66: c3:60:54:9b:11:4a:ec:7e:2a:9e:a5:09:9c:29:af: f4:dc:a6:10:e8:8a:2e:4b:4d:13:0a:9e:5c:40:b3: c4:8b:7c:57:0e:21:a2:25:2a:7d:69:6f:7f:3c:79: bf:3e:b5:ca:89:db:da:6e:83:2d:1a:6f:be:56:ab: 13:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:90:19:E2:05:5D:56:DF:13:F6:1B:12:E6:24:D5:78:7B:C6:F9:CE X509v3 Authority Key Identifier: keyid:96:75:F8:85:38:62:F7:71:09:31:5A:71:20:3F:65:D7:C6:6A:D7:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/9675F8853862F77109315A71203F65D7C66AD7D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9675F8853862F77109315A71203F65D7C66AD7D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/9675F8853862F77109315A71203F65D7C66AD7D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:07:71:40:98:17:18:0b:ec:13:1a:08:b3:a0:7c:2b:bb:30: 79:89:08:fb:b1:ab:98:c6:45:28:f6:8c:09:46:e5:96:1a:cd: dc:ac:cb:d5:74:0e:42:ed:30:64:22:1c:cc:5b:d2:54:3a:52: 13:66:50:c0:7b:47:08:0c:f5:40:dc:7b:e4:6a:dc:2c:80:81: 93:f8:8f:8b:90:cb:e3:5d:83:ae:c7:3b:5e:eb:ad:01:62:52: ff:f7:b6:d9:99:87:ee:cc:0a:2b:53:8b:95:fe:73:56:5d:7a: e9:a9:c4:2a:6c:f6:7c:aa:42:ca:82:a3:af:f2:24:61:24:d2: d3:f7:56:33:92:2d:56:12:c9:60:e8:e5:77:ba:a0:3e:62:6d: 6d:da:74:9a:ea:62:1d:82:b9:02:eb:f6:eb:3a:02:17:9f:a9: 22:57:16:e2:09:49:08:9f:5f:24:6c:d4:be:46:cf:a3:57:88: 07:e2:9f:a5:a2:e3:37:c0:16:4a:ea:81:80:be:eb:98:06:2d: de:ea:2b:bf:65:1c:7f:98:69:c0:d4:ba:e0:11:e2:8d:eb:d0: 0f:fd:56:e1:f8:b1:e3:26:7c:6e:83:9a:76:06:0d:ce:31:8a: 11:a2:17:74:4b:c1:34:ad:fc:9f:3a:b0:73:1e:dd:15:ee:99: c5:32:a5:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIIH8/feERgYBLddNBJniC1tqFY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY3NUY4ODUzODYyRjc3MTA5MzE1QTcxMjAzRjY1RDdD NjZBRDdEMzAeFw0yNTA5MTkwNzE5MzdaFw0yNTA5MjAwODUxMzdaMDMxMTAvBgNV BAMTKERBOTAxOUUyMDU1RDU2REYxM0Y2MUIxMkU2MjRENTc4N0JDNkY5Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsZT974PuMfRLGyI7ZYqnxCQJf VLKDe1vDdJ3/dZFNVCWtzplaiv9dB4cvqTwBvnHU5qXx8tjzMvmfoF7PKMiEX7OC vgAiYXmHAABskqanbxX/riIFBGxy2SfKDsFkkRfI8Y8s1UWAlAktsJAjBoNnFClK 3YNgUPKfnv/DVAl/lk8JY2NvxS73M0x6WF/MJRRo0NnRX0LX9TMIXQqnOWXjECva FxWZKr5Vmxd65Xn/5O4FObyZ0I5d7ZoPyshKODBkZsNgVJsRSux+Kp6lCZwpr/Tc phDoii5LTRMKnlxAs8SLfFcOIaIlKn1pb388eb8+tcqJ29pugy0ab75WqxNjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2pAZ4gVdVt8T9hsS5iTVeHvG+c4wHwYDVR0j BBgwFoAUlnX4hThi93EJMVpxID9l18Zq19MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnFvc0VGSFZRYmVRdnk4aWt0ZE56cFdOSEtjQjF6ZVY0bVNkNkYxZWEx V04vMC85Njc1Rjg4NTM4NjJGNzcxMDkzMTVBNzEyMDNGNjVEN0M2NkFEN0QzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2NzVGODg1Mzg2MkY3NzEw OTMxNUE3MTIwM0Y2NUQ3QzY2QUQ3RDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnFvc0VGSFZRYmVRdnk4aWt0ZE56cFdOSEtjQjF6ZVY0bVNkNkYxZWExV04vMC85 Njc1Rjg4NTM4NjJGNzcxMDkzMTVBNzEyMDNGNjVEN0M2NkFEN0QzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMwdxQJgXGAvsExoIs6B8K7sweYkI+7GrmMZFKPaMCUbllhrN3KzL1XQOQu0w ZCIczFvSVDpSE2ZQwHtHCAz1QNx75GrcLICBk/iPi5DL412Drsc7XuutAWJS//e2 2ZmH7swKK1OLlf5zVl166anEKmz2fKpCyoKjr/IkYSTS0/dWM5ItVhLJYOjld7qg PmJtbdp0mupiHYK5Auv26zoCF5+pIlcW4glJCJ9fJGzUvkbPo1eIB+KfpaLjN8AW SuqBgL7rmAYt3uorv2Ucf5hpwNS64BHijevQD/1W4fix4yZ8boOadgYNzjGKEaIX dEvBNK38nzqwcx7dFe6ZxTKlvg== -----END CERTIFICATE-----Generated at Fri Sep 19 11:29:38 2025 by rpki-client