$ rpki-client -vvf rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft File: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft (raw, json) Hash identifier: vCe0Mg98Ikdur4ovLgMObPVySrI78QvqPRyDHusIbi4= Subject key identifier: AC:F5:F4:0F:07:DA:B6:41:92:44:C6:EA:62:5C:11:D2:4C:B4:EE:69 Authority key identifier: 9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC Certificate issuer: /CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Certificate serial: 7FFBD041639E10D187DECDA691C93B2C1550DED3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject info access: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft Manifest number: 0171 Signing time: Mon 03 Nov 2025 03:31:32 +0000 Manifest this update: Mon 03 Nov 2025 03:26:32 +0000 Manifest next update: Tue 04 Nov 2025 06:39:32 +0000 Files and hashes: 1: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl (hash: EbKICj4hgRecvz/ebIlq17iQlGiZUgEG4ctk0AJsm4c=) 2: 3137302e3234362e3138342e302f32322d3234203d3e20323634383830.roa (hash: K2cK3NZIFljKeOpvvpHj0lLcmC4oQ0tB2wi3PEj4Arg=) 3: 323830343a326634303a3a2f33322d3438203d3e20323634383830.roa (hash: 3g8/sjxV8E647/HAZRmu2PV+IP7H3yOgtmHvSu2jRew=) 4: 3136382e3232372e35362e302f32322d3234203d3e20323634383830.roa (hash: cbbKnj2SOZFOPSYnm7IW0oAfYkFG8ZiF0WmU5IaJh4A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 06:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:fb:d0:41:63:9e:10:d1:87:de:cd:a6:91:c9:3b:2c:15:50:de:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Validity Not Before: Nov 3 03:26:32 2025 GMT Not After : Nov 4 06:39:32 2025 GMT Subject: CN=ACF5F40F07DAB6419244C6EA625C11D24CB4EE69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:13:0e:20:df:66:c9:ad:5c:9d:24:e9:95: 4b:3f:85:fe:4e:e6:09:19:39:b5:15:6f:4e:59:08: ee:cc:a5:cf:9e:57:55:aa:00:70:76:a7:bf:84:fc: 89:0b:01:0c:a1:ae:12:89:d5:5f:0e:1b:c3:21:40: fd:69:db:d9:20:81:74:0a:71:96:f8:40:3a:38:b3: d0:69:d1:67:f0:05:10:3c:7c:4c:79:34:9e:83:34: 00:f3:7b:5d:e1:07:99:34:d2:cc:3a:fd:40:e0:66: 1a:48:ca:c0:3d:50:7b:70:90:a9:6c:7d:c6:f2:b3: b0:a2:85:cc:27:3d:df:66:20:65:6c:5e:8c:ba:9f: 91:3e:9b:77:35:75:12:df:f4:a6:4d:cf:39:bc:1b: 7e:5f:e3:3b:67:40:ed:be:c0:25:07:70:33:3d:25: 9b:b9:67:db:60:9d:26:96:f6:fd:68:62:9b:4c:56: 55:6c:9c:b0:85:52:b8:5f:3d:f6:92:49:97:6e:d5: 8b:46:ab:02:9a:ed:43:b1:b8:ca:5d:79:00:73:04: 9b:37:b2:8d:e2:00:ed:1d:db:cd:fd:58:5d:95:3c: cf:aa:17:76:58:7f:2b:0c:6e:08:c5:03:30:6a:ae: 8e:20:71:69:a7:22:00:6f:65:5d:d7:cb:00:f6:2f: 32:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F5:F4:0F:07:DA:B6:41:92:44:C6:EA:62:5C:11:D2:4C:B4:EE:69 X509v3 Authority Key Identifier: keyid:9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:59:08:a0:5e:9a:bc:db:94:15:b6:5b:b4:88:79:6f:ea:dc: a1:e0:ba:6f:55:83:ea:21:a1:ee:b1:2b:cb:99:9c:cf:27:29: 6a:71:17:c2:60:3a:90:dd:64:3b:66:2f:b4:37:86:0f:54:18: 6e:ec:29:4d:b4:3b:77:c9:59:5b:e8:52:78:02:ad:b3:7e:29: 41:d4:7c:16:a7:64:2c:08:75:3c:0f:6f:76:e1:eb:c1:c7:0d: 5d:85:13:47:75:1e:5c:a4:73:3d:ea:79:68:30:d6:f3:53:a9: d4:2f:d6:15:c1:5f:8f:5f:43:62:29:40:37:65:ee:7b:8f:3f: f0:7b:c8:b7:79:69:48:88:5f:84:47:33:a5:f0:6c:8d:80:c0: 6a:07:a9:c2:4c:55:55:18:5a:a8:fc:42:72:77:18:83:8e:d9: 6e:23:3f:29:a7:d2:e6:34:b3:89:40:a9:e7:14:05:83:b1:a8: 56:81:86:4d:18:2a:09:ed:28:97:06:ac:5a:93:c8:95:a6:58: ba:0b:39:a3:d1:c2:52:76:d4:3a:7e:c1:ea:b9:66:e2:db:7a: da:5e:9f:cc:02:e9:c7:e6:21:ab:c3:6d:b6:f9:92:0f:e3:d5: 77:05:1b:36:e6:86:bf:e7:6a:d0:19:1e:38:6f:82:bc:64:17: 14:02:b2:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUf/vQQWOeENGH3s2mkck7LBVQ3tMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEzMkNEOTFGQ0U5Q0FEQkYyOEJFREY0QzcyMEU2N0I3 OUFGQjlDQzAeFw0yNTExMDMwMzI2MzJaFw0yNTExMDQwNjM5MzJaMDMxMTAvBgNV BAMTKEFDRjVGNDBGMDdEQUI2NDE5MjQ0QzZFQTYyNUMxMUQyNENCNEVFNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzaxMOIN9mya1cnSTplUs/hf5O 5gkZObUVb05ZCO7Mpc+eV1WqAHB2p7+E/IkLAQyhrhKJ1V8OG8MhQP1p29kggXQK cZb4QDo4s9Bp0WfwBRA8fEx5NJ6DNADze13hB5k00sw6/UDgZhpIysA9UHtwkKls fcbys7CihcwnPd9mIGVsXoy6n5E+m3c1dRLf9KZNzzm8G35f4ztnQO2+wCUHcDM9 JZu5Z9tgnSaW9v1oYptMVlVsnLCFUrhfPfaSSZdu1YtGqwKa7UOxuMpdeQBzBJs3 so3iAO0d2839WF2VPM+qF3ZYfysMbgjFAzBqro4gcWmnIgBvZV3XywD2LzJdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrPX0DwfatkGSRMbqYlwR0ky07mkwHwYDVR0j BBgwFoAUmjLNkfzpytvyi+30xyDme3mvucwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1 Q2gvMC85QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBMzJDRDkxRkNFOUNBREJG MjhCRURGNEM3MjBFNjdCNzlBRkI5Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1Q2gvMC85 QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANlkIoF6avNuUFbZbtIh5b+rcoeC6b1WD6iGh7rEry5mczycpanEXwmA6kN1k O2YvtDeGD1QYbuwpTbQ7d8lZW+hSeAKts34pQdR8FqdkLAh1PA9vduHrwccNXYUT R3UeXKRzPep5aDDW81Op1C/WFcFfj19DYilAN2Xue48/8HvIt3lpSIhfhEczpfBs jYDAagepwkxVVRhaqPxCcncYg47ZbiM/KafS5jSziUCp5xQFg7GoVoGGTRgqCe0o lwasWpPIlaZYugs5o9HCUnbUOn7B6rlm4tt62l6fzALpx+Yhq8NttvmSD+PVdwUb NuaGv+dq0BkeOG+CvGQXFAKyrA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:31:25 2025 by rpki-client