$ rpki-client -vvf rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.mft File: 939B31761D811EC12BDF8456C574E6874A3AAD78.mft (raw, json) Hash identifier: kJ2bw8cFdK7d4S32E5VNzWJlXjYi53q0UUVJV2SKM4g= Subject key identifier: C2:A8:F3:52:31:60:43:FA:FF:1F:6E:1B:A1:7C:5D:5D:9B:41:7E:89 Authority key identifier: 93:9B:31:76:1D:81:1E:C1:2B:DF:84:56:C5:74:E6:87:4A:3A:AD:78 Certificate issuer: /CN=939B31761D811EC12BDF8456C574E6874A3AAD78 Certificate serial: 61E2E1C0D2FD997FF962387EC0D463B219B10CA2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/939B31761D811EC12BDF8456C574E6874A3AAD78.cer Subject info access: rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.mft Manifest number: 0172 Signing time: Wed 05 Nov 2025 14:07:30 +0000 Manifest this update: Wed 05 Nov 2025 14:02:30 +0000 Manifest next update: Thu 06 Nov 2025 14:52:30 +0000 Files and hashes: 1: 323830343a363036303a3a2f33322d3332203d3e20323639313633.roa (hash: XdvzsjrTVduK7gKFmmN86hpBolyGt02sb5cx99ef1zA=) 2: 34352e3138312e32342e302f32342d3234203d3e20323639313633.roa (hash: gi8pqk0YG8xuI770HmRS/Gm8wi1gMlrR0AnPzNvnq5o=) 3: 939B31761D811EC12BDF8456C574E6874A3AAD78.crl (hash: oWM5lNKYx5AlGPfy2nrDrG49oZFNIcCDt8u70Jzce2M=) 4: 34352e3138312e32372e302f32342d3234203d3e20323639313633.roa (hash: s71CdDpUcZ4A30shJW5mOVFgvP++dX5FAxSaWex9Ssg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.crl rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/939B31761D811EC12BDF8456C574E6874A3AAD78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 14:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:e2:e1:c0:d2:fd:99:7f:f9:62:38:7e:c0:d4:63:b2:19:b1:0c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=939B31761D811EC12BDF8456C574E6874A3AAD78 Validity Not Before: Nov 5 14:02:30 2025 GMT Not After : Nov 6 14:52:30 2025 GMT Subject: CN=C2A8F352316043FAFF1F6E1BA17C5D5D9B417E89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9d:e0:11:60:31:56:5b:bd:af:76:7c:86:5d: 51:d2:46:4f:04:fd:28:e2:a7:2f:75:29:28:5d:bf: 1d:8c:e6:2d:90:cf:67:db:f6:95:1a:ea:17:5d:cc: c4:34:4c:1f:29:30:92:88:94:cd:f2:f6:1b:1b:11: 1e:70:99:95:88:66:bc:06:41:b4:49:6a:ff:cb:40: 33:80:93:20:74:f3:87:59:2e:67:cd:21:54:c1:a9: c2:6a:4c:87:66:83:9a:2d:ed:1b:3b:3a:ee:f3:fe: 21:65:64:d9:70:7a:b1:4a:11:3b:ce:7e:a3:d4:2d: 62:64:cc:11:57:20:66:db:ed:cd:ac:f1:69:98:8f: a3:c9:29:30:56:5c:b2:a5:86:62:65:cd:73:ae:f7: 6f:72:94:d4:2c:11:ba:6e:38:50:ae:3d:eb:13:62: 60:0f:4d:f8:e2:76:f5:90:3a:56:7d:46:f2:3d:87: 31:20:3a:44:e7:72:5e:15:a0:4f:ad:ef:ef:9f:26: 99:29:c5:be:ff:9f:76:cc:f7:9a:05:74:f8:91:5b: 7c:1c:79:97:0a:f1:ed:d1:b5:88:ce:e5:53:0d:a0: 2c:5c:6e:f1:71:0f:21:7a:ee:cb:09:bb:1b:26:71: c2:66:60:9c:6e:c8:ea:11:e6:4d:ea:fe:7b:93:95: 8c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A8:F3:52:31:60:43:FA:FF:1F:6E:1B:A1:7C:5D:5D:9B:41:7E:89 X509v3 Authority Key Identifier: keyid:93:9B:31:76:1D:81:1E:C1:2B:DF:84:56:C5:74:E6:87:4A:3A:AD:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/939B31761D811EC12BDF8456C574E6874A3AAD78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:98:f5:20:06:ff:c9:11:b2:b0:c4:48:bc:1e:11:43:08:80: 04:8a:44:e4:a8:35:19:26:45:d7:b6:d7:3a:44:40:6b:d1:fa: 86:57:38:17:f9:16:8b:fb:5f:bf:df:a5:ac:ae:3e:00:9c:54: 84:62:0c:e1:45:c9:4a:69:cc:fb:22:ff:8b:6f:bd:4e:17:eb: fb:85:16:a3:d2:4f:03:6e:56:81:ed:ff:c0:ce:e2:bb:8a:08: 42:72:49:3e:54:c6:5f:80:f9:1b:1a:5b:2e:0a:f7:fc:30:dc: 4e:56:8b:e4:e1:9a:f4:ee:9d:f1:c3:30:88:f4:2c:ee:a2:56: c1:d2:a9:08:30:cc:97:ef:91:31:58:f9:10:37:74:54:cc:b2: 1d:dc:f1:ce:df:08:54:92:9d:d6:e6:07:60:9a:95:04:29:0e: 4a:01:4c:8e:b8:59:58:3c:e3:5f:6d:8f:8a:c4:7b:64:7b:de: 73:c8:66:09:1f:26:71:38:31:bf:00:63:2f:d6:0b:89:2e:0c: 35:4c:9d:c3:56:a9:fe:31:ea:8e:15:ec:3c:a5:e0:2e:04:a1: ef:bb:e6:4e:3c:e2:b1:91:c1:6f:96:11:13:dd:1a:d7:92:0d: 5b:bb:b0:49:eb:b6:64:f8:f0:03:4a:d3:98:80:1b:0d:e9:6b: 52:d0:a0:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYeLhwNL9mX/5Yjh+wNRjshmxDKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM5QjMxNzYxRDgxMUVDMTJCREY4NDU2QzU3NEU2ODc0 QTNBQUQ3ODAeFw0yNTExMDUxNDAyMzBaFw0yNTExMDYxNDUyMzBaMDMxMTAvBgNV BAMTKEMyQThGMzUyMzE2MDQzRkFGRjFGNkUxQkExN0M1RDVEOUI0MTdFODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1neARYDFWW72vdnyGXVHSRk8E /Sjipy91KShdvx2M5i2Qz2fb9pUa6hddzMQ0TB8pMJKIlM3y9hsbER5wmZWIZrwG QbRJav/LQDOAkyB084dZLmfNIVTBqcJqTIdmg5ot7Rs7Ou7z/iFlZNlwerFKETvO fqPULWJkzBFXIGbb7c2s8WmYj6PJKTBWXLKlhmJlzXOu929ylNQsEbpuOFCuPesT YmAPTfjidvWQOlZ9RvI9hzEgOkTncl4VoE+t7++fJpkpxb7/n3bM95oFdPiRW3wc eZcK8e3RtYjO5VMNoCxcbvFxDyF67ssJuxsmccJmYJxuyOoR5k3q/nuTlYyHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwqjzUjFgQ/r/H24boXxdXZtBfokwHwYDVR0j BBgwFoAUk5sxdh2BHsEr34RWxXTmh0o6rXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE43TmlRQU1WMWd5eHJ5emt5TDE3OTRYb1d4SHFoWmljVmd6VDdtYjhx M3ovMC85MzlCMzE3NjFEODExRUMxMkJERjg0NTZDNTc0RTY4NzRBM0FBRDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzOUIzMTc2MUQ4MTFFQzEy QkRGODQ1NkM1NzRFNjg3NEEzQUFENzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE43TmlRQU1WMWd5eHJ5emt5TDE3OTRYb1d4SHFoWmljVmd6VDdtYjhxM3ovMC85 MzlCMzE3NjFEODExRUMxMkJERjg0NTZDNTc0RTY4NzRBM0FBRDc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlJj1IAb/yRGysMRIvB4RQwiABIpE5Kg1GSZF17bXOkRAa9H6hlc4F/kWi/tf v9+lrK4+AJxUhGIM4UXJSmnM+yL/i2+9Thfr+4UWo9JPA25Wge3/wM7iu4oIQnJJ PlTGX4D5GxpbLgr3/DDcTlaL5OGa9O6d8cMwiPQs7qJWwdKpCDDMl++RMVj5EDd0 VMyyHdzxzt8IVJKd1uYHYJqVBCkOSgFMjrhZWDzjX22PisR7ZHvec8hmCR8mcTgx vwBjL9YLiS4MNUydw1ap/jHqjhXsPKXgLgSh77vmTjzisZHBb5YRE90a15INW7uw Seu2ZPjwA0rTmIAbDelrUtCgyQ== -----END CERTIFICATE-----Generated at Thu Nov 6 06:19:15 2025 by rpki-client