$ rpki-client -vvf rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft File: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft (raw, json) Hash identifier: 6m3T7juFeS37fcRyaClksRQ92clVl+6iFEkn5tDfA4U= Subject key identifier: 90:B4:81:6D:B2:5C:08:3F:1D:B1:F4:45:56:40:4C:80:DB:6D:91:34 Authority key identifier: 9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC Certificate issuer: /CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Certificate serial: 03F313B6F16EA7A2E91AAA9004A3EE90BE7CA93D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject info access: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft Manifest number: 0130 Signing time: Thu 18 Sep 2025 00:23:50 +0000 Manifest this update: Thu 18 Sep 2025 00:18:50 +0000 Manifest next update: Fri 19 Sep 2025 00:52:50 +0000 Files and hashes: 1: 3136382e3232372e35362e302f32322d3234203d3e20323634383830.roa (hash: ZIjfSo+Y8U8r36JCVeoF2b5UMYHuJK9csANlSvslsHk=) 2: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl (hash: H/l23L/Ekz60hb6PTsDnndxe+dZ/nZxK0cL0JT6Q264=) 3: 323830343a326634303a3a2f33322d3438203d3e20323634383830.roa (hash: 3g8/sjxV8E647/HAZRmu2PV+IP7H3yOgtmHvSu2jRew=) 4: 3137302e3234362e3138342e302f32322d3234203d3e20323634383830.roa (hash: vIm2Zj8tyzVDc+8CKc8N8ILHLVLvBtHG21RZkNA4OZE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 00:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f3:13:b6:f1:6e:a7:a2:e9:1a:aa:90:04:a3:ee:90:be:7c:a9:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Validity Not Before: Sep 18 00:18:50 2025 GMT Not After : Sep 19 00:52:50 2025 GMT Subject: CN=90B4816DB25C083F1DB1F44556404C80DB6D9134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f8:ec:09:9c:cb:33:35:1a:c0:ce:31:00:fb: f4:22:d3:12:4b:c4:ae:c4:69:08:3f:25:81:96:79: 74:5c:02:69:f8:5a:3f:34:5e:0d:36:9c:f8:19:7c: 16:ee:29:99:cb:dc:a6:7e:8c:b3:e2:5b:29:f8:ed: 5e:2c:2a:0d:56:25:8f:8c:e8:6f:66:25:1f:84:ac: 91:e3:a4:e7:04:03:51:03:ca:76:7e:d1:c9:35:9f: f2:97:0e:1e:a6:5f:46:36:02:77:da:ba:d6:c1:d2: a6:bf:5e:f5:7f:fa:7c:0e:5c:87:e0:1b:82:17:15: e0:07:88:81:18:39:4c:15:1a:e3:c4:c3:af:43:a6: e3:85:dd:5d:01:e3:53:eb:f2:0a:5e:b1:4e:e8:fd: 02:db:3d:62:22:c6:e7:bc:f5:27:e1:bb:5c:27:d5: e6:8c:c2:6f:69:fb:72:09:75:95:25:06:ee:d1:7f: a1:06:48:bb:fb:50:bd:4e:02:a3:8c:fd:0b:6d:3d: 3b:6c:33:aa:eb:0c:15:82:18:0a:8e:9f:44:c5:5b: 1b:67:f3:c5:52:8a:b3:c1:eb:0c:03:bd:35:fd:ce: 0d:52:00:c2:d3:15:e2:47:db:66:49:c7:f2:84:c0: a3:26:21:17:6a:6e:60:98:18:91:b7:6a:58:96:ee: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B4:81:6D:B2:5C:08:3F:1D:B1:F4:45:56:40:4C:80:DB:6D:91:34 X509v3 Authority Key Identifier: keyid:9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:86:53:fd:93:c9:5d:01:c8:24:54:cf:67:1f:e4:71:c0:9d: 69:87:98:11:1d:9e:ef:e3:ef:6c:e6:de:52:d0:8c:bd:7f:d0: 67:f7:7b:39:e7:21:3d:75:18:f5:5e:1e:ae:26:00:b1:c9:94: 0e:62:63:85:4f:17:23:21:b4:af:d2:a7:54:3b:2c:34:2c:34: 1e:d0:9a:d9:5e:5f:29:87:ec:3f:01:45:42:12:01:56:cd:5b: 76:f3:db:08:a2:a2:1c:c1:ef:bf:e1:68:df:ee:6b:e4:65:83: 3a:56:09:c4:b0:44:d5:89:c9:0d:21:f7:54:f7:b3:b1:17:93: de:3a:1f:dc:3c:89:d0:21:40:14:80:86:8e:0f:7d:76:a4:4e: a8:52:b0:e3:c3:6a:15:0e:81:b1:27:bb:07:74:2d:7e:a3:4a: 0a:c4:f0:0a:ce:66:1b:7f:fb:c3:c2:50:7b:99:aa:7e:8d:58: 28:f7:06:6c:59:c4:d8:cf:7f:4b:6e:48:c9:d0:a7:59:47:2d: 80:97:e4:0b:ee:7f:42:0d:1d:85:60:0e:dd:d9:bd:6d:f1:29: 3e:a1:8b:71:a5:be:c2:9a:b9:af:95:ac:31:ff:76:d6:b4:dd: 52:29:24:66:e8:58:e5:83:a9:c9:92:34:0f:93:2c:6c:63:e7: 52:9d:e9:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA/MTtvFup6LpGqqQBKPukL58qT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEzMkNEOTFGQ0U5Q0FEQkYyOEJFREY0QzcyMEU2N0I3 OUFGQjlDQzAeFw0yNTA5MTgwMDE4NTBaFw0yNTA5MTkwMDUyNTBaMDMxMTAvBgNV BAMTKDkwQjQ4MTZEQjI1QzA4M0YxREIxRjQ0NTU2NDA0QzgwREI2RDkxMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW+OwJnMszNRrAzjEA+/Qi0xJL xK7EaQg/JYGWeXRcAmn4Wj80Xg02nPgZfBbuKZnL3KZ+jLPiWyn47V4sKg1WJY+M 6G9mJR+ErJHjpOcEA1EDynZ+0ck1n/KXDh6mX0Y2AnfautbB0qa/XvV/+nwOXIfg G4IXFeAHiIEYOUwVGuPEw69DpuOF3V0B41Pr8gpesU7o/QLbPWIixue89Sfhu1wn 1eaMwm9p+3IJdZUlBu7Rf6EGSLv7UL1OAqOM/QttPTtsM6rrDBWCGAqOn0TFWxtn 88VSirPB6wwDvTX9zg1SAMLTFeJH22ZJx/KEwKMmIRdqbmCYGJG3aliW7kxFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkLSBbbJcCD8dsfRFVkBMgNttkTQwHwYDVR0j BBgwFoAUmjLNkfzpytvyi+30xyDme3mvucwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1 Q2gvMC85QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBMzJDRDkxRkNFOUNBREJG MjhCRURGNEM3MjBFNjdCNzlBRkI5Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1Q2gvMC85 QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUYZT/ZPJXQHIJFTPZx/kccCdaYeYER2e7+PvbObeUtCMvX/QZ/d7OechPXUY 9V4eriYAscmUDmJjhU8XIyG0r9KnVDssNCw0HtCa2V5fKYfsPwFFQhIBVs1bdvPb CKKiHMHvv+Fo3+5r5GWDOlYJxLBE1YnJDSH3VPezsReT3jof3DyJ0CFAFICGjg99 dqROqFKw48NqFQ6BsSe7B3QtfqNKCsTwCs5mG3/7w8JQe5mqfo1YKPcGbFnE2M9/ S25IydCnWUctgJfkC+5/Qg0dhWAO3dm9bfEpPqGLcaW+wpq5r5WsMf921rTdUikk ZuhY5YOpyZI0D5MsbGPnUp3plg== -----END CERTIFICATE-----Generated at Thu Sep 18 17:44:30 2025 by rpki-client