$ rpki-client -vvf rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.mft File: 9AD736118DEE4B1A75B2C689365A87E1543247BA.mft (raw, json) Hash identifier: MYh2y1IUFGyPsUU94yL9HcLpYLQ/cM/HwIT8SHNfrcs= Subject key identifier: 2C:1B:63:A5:70:1A:16:BE:E7:A3:EC:5D:0C:8E:6C:FB:71:CC:73:3D Authority key identifier: 9A:D7:36:11:8D:EE:4B:1A:75:B2:C6:89:36:5A:87:E1:54:32:47:BA Certificate issuer: /CN=9AD736118DEE4B1A75B2C689365A87E1543247BA Certificate serial: 3B1A24BF6C95BC0035F5F743E0338F45CB6553D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AD736118DEE4B1A75B2C689365A87E1543247BA.cer Subject info access: rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.mft Manifest number: B6 Signing time: Thu 18 Sep 2025 02:49:58 +0000 Manifest this update: Thu 18 Sep 2025 02:44:58 +0000 Manifest next update: Fri 19 Sep 2025 03:40:58 +0000 Files and hashes: 1: 323830343a393162303a3a2f33322d3438203d3e20323734363538.roa (hash: OHDgjz8XKrpjYqeCeBLrr9sjRso+Et//ZZ2WnBAfncg=) 2: 9AD736118DEE4B1A75B2C689365A87E1543247BA.crl (hash: jEL8Q8hGjF2qBLGibzKTphgpR27JhUG90Lg+q5vtzkQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.crl rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AD736118DEE4B1A75B2C689365A87E1543247BA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 03:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1a:24:bf:6c:95:bc:00:35:f5:f7:43:e0:33:8f:45:cb:65:53:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD736118DEE4B1A75B2C689365A87E1543247BA Validity Not Before: Sep 18 02:44:58 2025 GMT Not After : Sep 19 03:40:58 2025 GMT Subject: CN=2C1B63A5701A16BEE7A3EC5D0C8E6CFB71CC733D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:67:d3:c0:f4:b7:94:b7:4b:1d:29:17:c2:37: f2:6f:bc:3f:60:b7:82:0f:b1:a5:8e:b3:24:6d:02: 7b:bd:0c:2a:82:56:ae:88:84:43:9b:8e:af:10:4a: 60:18:d5:2f:15:a1:c4:26:5a:8c:99:74:6f:10:65: 95:b5:dc:73:46:06:66:4d:5a:f0:4a:5a:00:8a:a8: b6:0a:f4:03:b2:89:11:1b:2f:61:f5:eb:dd:5b:49: c4:5a:11:c8:70:fe:df:8a:2d:e4:35:c7:83:80:f3: 17:53:4f:c2:c2:8c:97:79:cf:8b:31:a8:ed:84:04: 7b:6d:aa:3a:00:b5:6d:46:b5:bd:0b:f5:8e:56:4e: 19:13:e4:bf:06:cf:0d:9d:35:53:2c:de:7d:80:f0: 5c:ad:93:1b:4b:24:ad:9f:b6:f3:b4:db:51:9b:34: c1:f4:92:66:b9:10:56:9f:59:05:ef:94:e0:0f:5c: 3d:a0:8a:37:a0:4c:61:09:77:d8:15:a6:32:5e:40: c8:67:ab:fd:c2:1d:66:cc:d6:f0:2e:b7:34:b1:58: da:7a:f8:68:28:7f:8d:07:85:59:a6:39:d3:44:cb: e5:28:7a:51:8f:e4:5c:ae:e7:38:cf:46:02:59:43: 4a:70:0f:0e:6b:fd:55:18:a4:11:94:a0:b7:61:b1: 52:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1B:63:A5:70:1A:16:BE:E7:A3:EC:5D:0C:8E:6C:FB:71:CC:73:3D X509v3 Authority Key Identifier: keyid:9A:D7:36:11:8D:EE:4B:1A:75:B2:C6:89:36:5A:87:E1:54:32:47:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AD736118DEE4B1A75B2C689365A87E1543247BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:24:ad:f7:cb:8d:29:35:18:19:e5:20:fe:3e:58:02:79:5d: 6b:4f:f4:b4:b1:33:6c:a7:d9:dc:d4:1e:05:3b:b4:75:93:34: 57:18:14:c6:17:f8:2c:ad:1c:89:08:8e:c0:f2:20:a0:c3:cb: 97:0e:1e:55:ba:5b:47:db:9e:75:32:22:8a:46:2b:1a:e8:87: a9:46:4b:6c:0a:85:ce:b9:8d:02:b8:02:dd:cb:82:1a:51:70: 94:9d:41:c1:7c:8e:20:b7:47:97:75:e8:be:ae:a9:93:15:51: 94:74:53:cd:d0:c1:78:4c:2b:89:80:cf:db:03:84:67:fc:e7: 68:32:b8:1f:ea:35:cc:ad:0c:62:c2:18:5b:e7:92:98:35:54: 35:6e:e9:1b:cd:7c:60:df:59:be:9d:c9:60:25:b6:f0:ed:df: 8a:b1:69:28:f9:af:04:53:87:92:f6:15:df:41:27:6c:b7:dc: d8:be:dd:1d:3f:ee:a8:04:24:0b:97:71:b3:c5:31:9e:b3:ea: 46:af:85:b0:47:99:b0:17:3d:4d:41:7a:26:0f:da:cb:11:5c: e0:0c:29:38:0d:31:90:8c:c9:02:1a:57:a6:0b:be:29:55:a5: 04:17:d5:d5:0f:b3:e2:8e:86:24:36:9a:7e:27:f5:69:b0:65: ef:83:c0:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOxokv2yVvAA19fdD4DOPRctlU9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFENzM2MTE4REVFNEIxQTc1QjJDNjg5MzY1QTg3RTE1 NDMyNDdCQTAeFw0yNTA5MTgwMjQ0NThaFw0yNTA5MTkwMzQwNThaMDMxMTAvBgNV BAMTKDJDMUI2M0E1NzAxQTE2QkVFN0EzRUM1RDBDOEU2Q0ZCNzFDQzczM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Z9PA9LeUt0sdKRfCN/JvvD9g t4IPsaWOsyRtAnu9DCqCVq6IhEObjq8QSmAY1S8VocQmWoyZdG8QZZW13HNGBmZN WvBKWgCKqLYK9AOyiREbL2H1691bScRaEchw/t+KLeQ1x4OA8xdTT8LCjJd5z4sx qO2EBHttqjoAtW1Gtb0L9Y5WThkT5L8Gzw2dNVMs3n2A8FytkxtLJK2ftvO021Gb NMH0kma5EFafWQXvlOAPXD2gijegTGEJd9gVpjJeQMhnq/3CHWbM1vAutzSxWNp6 +Ggof40HhVmmOdNEy+UoelGP5Fyu5zjPRgJZQ0pwDw5r/VUYpBGUoLdhsVKBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULBtjpXAaFr7no+xdDI5s+3HMcz0wHwYDVR0j BBgwFoAUmtc2EY3uSxp1ssaJNlqH4VQyR7owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNW54QnZybWVFaFZVb3RGdUxoOTM3U1h4cHFmOUVlc2VqNEtjeWtSVGla b2cvMC85QUQ3MzYxMThERUU0QjFBNzVCMkM2ODkzNjVBODdFMTU0MzI0N0JBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBRDczNjExOERFRTRCMUE3 NUIyQzY4OTM2NUE4N0UxNTQzMjQ3QkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NW54QnZybWVFaFZVb3RGdUxoOTM3U1h4cHFmOUVlc2VqNEtjeWtSVGlab2cvMC85 QUQ3MzYxMThERUU0QjFBNzVCMkM2ODkzNjVBODdFMTU0MzI0N0JBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiSSt98uNKTUYGeUg/j5YAnlda0/0tLEzbKfZ3NQeBTu0dZM0VxgUxhf4LK0c iQiOwPIgoMPLlw4eVbpbR9uedTIiikYrGuiHqUZLbAqFzrmNArgC3cuCGlFwlJ1B wXyOILdHl3Xovq6pkxVRlHRTzdDBeEwriYDP2wOEZ/znaDK4H+o1zK0MYsIYW+eS mDVUNW7pG818YN9Zvp3JYCW28O3firFpKPmvBFOHkvYV30EnbLfc2L7dHT/uqAQk C5dxs8UxnrPqRq+FsEeZsBc9TUF6Jg/ayxFc4AwpOA0xkIzJAhpXpgu+KVWlBBfV 1Q+z4o6GJDaafif1abBl74PAnQ== -----END CERTIFICATE-----Generated at Thu Sep 18 11:15:01 2025 by rpki-client