$ rpki-client -vvf rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.mft File: 9AD736118DEE4B1A75B2C689365A87E1543247BA.mft (raw, json) Hash identifier: 0H2ACoSSHyXpUqs+Q9meEucT+yythGBGLFP/7/+vEN8= Subject key identifier: 52:DF:8C:DB:01:A7:A9:D1:A2:79:5B:10:73:1F:6F:63:9D:7A:08:BC Authority key identifier: 9A:D7:36:11:8D:EE:4B:1A:75:B2:C6:89:36:5A:87:E1:54:32:47:BA Certificate issuer: /CN=9AD736118DEE4B1A75B2C689365A87E1543247BA Certificate serial: 4DB0D2E09F02A69DEC387A92E78E310342878EF4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AD736118DEE4B1A75B2C689365A87E1543247BA.cer Subject info access: rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.mft Manifest number: F3 Signing time: Sun 02 Nov 2025 18:47:32 +0000 Manifest this update: Sun 02 Nov 2025 18:42:32 +0000 Manifest next update: Mon 03 Nov 2025 20:16:32 +0000 Files and hashes: 1: 9AD736118DEE4B1A75B2C689365A87E1543247BA.crl (hash: V32/gmEym08FdymZM78DcgE2qAJH0RHmzrpxBUUaFK0=) 2: 323830343a393162303a3a2f33322d3438203d3e20323734363538.roa (hash: OHDgjz8XKrpjYqeCeBLrr9sjRso+Et//ZZ2WnBAfncg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.crl rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AD736118DEE4B1A75B2C689365A87E1543247BA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 20:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b0:d2:e0:9f:02:a6:9d:ec:38:7a:92:e7:8e:31:03:42:87:8e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD736118DEE4B1A75B2C689365A87E1543247BA Validity Not Before: Nov 2 18:42:32 2025 GMT Not After : Nov 3 20:16:32 2025 GMT Subject: CN=52DF8CDB01A7A9D1A2795B10731F6F639D7A08BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:22:aa:42:71:68:84:d3:5d:ca:e0:0f:46:86: 85:0b:7f:b1:0e:0f:27:98:10:d6:ec:52:4b:15:d4: 14:a1:01:b2:da:cd:68:1f:72:27:44:db:00:d2:15: 31:43:43:18:20:4f:3f:13:dc:3b:db:1b:20:b7:92: d6:23:f6:ba:e9:cf:43:b8:19:d1:f3:58:22:eb:67: d7:4f:88:72:05:c2:29:c3:bd:a0:a4:64:3f:89:f1: 8c:12:56:c5:c4:30:e6:e5:17:e6:0b:30:fb:37:e5: 91:ee:08:f4:a3:ef:bd:c4:d8:fc:02:4d:27:dc:4c: 92:9b:a1:0b:23:f2:94:72:28:0e:26:9a:0a:59:15: eb:f4:b3:54:4d:91:70:fe:be:8a:02:c4:3f:45:ac: c1:db:c0:f9:c0:70:8f:ab:ea:b1:86:a0:49:c1:52: bf:4e:8b:aa:fe:97:4c:c6:f4:6e:04:5b:d6:27:d7: 8e:3c:b0:3f:93:32:c1:c1:db:19:b5:d7:c7:03:90: dc:1c:43:f3:51:8a:9f:14:53:19:cd:5a:1c:a0:16: 4d:ff:34:6f:03:54:44:97:24:76:62:24:db:37:4f: f4:dd:8b:6a:82:12:76:a5:d7:16:7f:00:f5:af:79: c6:6b:9f:0c:b2:7b:9e:9a:5b:9e:c6:ca:d1:b5:d0: b2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DF:8C:DB:01:A7:A9:D1:A2:79:5B:10:73:1F:6F:63:9D:7A:08:BC X509v3 Authority Key Identifier: keyid:9A:D7:36:11:8D:EE:4B:1A:75:B2:C6:89:36:5A:87:E1:54:32:47:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AD736118DEE4B1A75B2C689365A87E1543247BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:fe:d7:24:71:59:94:d0:39:fd:08:d4:45:d4:02:42:6d:c7: 38:04:35:85:cf:a6:86:c0:b1:34:8a:78:97:7a:5b:79:b0:bb: 1c:be:fe:f1:c3:f2:9a:28:c1:ca:be:be:2f:bf:2c:5d:a6:d0: 92:96:dd:42:b1:c4:49:8c:bc:3c:99:c8:27:a0:db:77:f3:a1: 19:d4:70:d4:2c:28:b7:85:df:3f:8a:0f:21:8e:5f:65:88:fd: d4:4e:86:07:8f:0a:0e:f7:99:a3:78:c4:fe:4e:bf:80:fa:df: 72:62:93:83:7e:59:2d:a3:ce:f4:be:ae:a6:9d:d2:51:2f:46: f9:31:03:75:da:4b:81:81:2a:42:23:88:a7:ee:40:60:37:b8: 36:45:d0:65:e9:b0:d0:8d:2a:92:c3:b6:fb:46:14:b9:51:ab: 06:2e:ae:f5:38:b0:b1:7b:f5:40:8f:42:47:cc:28:bb:e3:3e: 02:6a:4b:81:b0:4b:a5:b2:72:b6:99:68:54:4d:6a:c2:35:65: 53:23:b5:6f:19:ef:e8:ba:07:e9:c3:60:cc:d8:92:1d:71:a9: d5:fc:89:6a:66:e8:83:87:71:48:09:99:3e:a6:2b:33:89:1d: b5:1a:41:35:4e:02:fd:21:a4:28:0a:0c:ac:f7:72:ea:f7:f4: f6:d0:4b:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTbDS4J8Cpp3sOHqS544xA0KHjvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFENzM2MTE4REVFNEIxQTc1QjJDNjg5MzY1QTg3RTE1 NDMyNDdCQTAeFw0yNTExMDIxODQyMzJaFw0yNTExMDMyMDE2MzJaMDMxMTAvBgNV BAMTKDUyREY4Q0RCMDFBN0E5RDFBMjc5NUIxMDczMUY2RjYzOUQ3QTA4QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsIqpCcWiE013K4A9GhoULf7EO DyeYENbsUksV1BShAbLazWgfcidE2wDSFTFDQxggTz8T3DvbGyC3ktYj9rrpz0O4 GdHzWCLrZ9dPiHIFwinDvaCkZD+J8YwSVsXEMOblF+YLMPs35ZHuCPSj773E2PwC TSfcTJKboQsj8pRyKA4mmgpZFev0s1RNkXD+vooCxD9FrMHbwPnAcI+r6rGGoEnB Ur9Oi6r+l0zG9G4EW9Yn1448sD+TMsHB2xm118cDkNwcQ/NRip8UUxnNWhygFk3/ NG8DVESXJHZiJNs3T/Tdi2qCEnal1xZ/APWvecZrnwyye56aW57GytG10LJvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUt+M2wGnqdGieVsQcx9vY516CLwwHwYDVR0j BBgwFoAUmtc2EY3uSxp1ssaJNlqH4VQyR7owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNW54QnZybWVFaFZVb3RGdUxoOTM3U1h4cHFmOUVlc2VqNEtjeWtSVGla b2cvMC85QUQ3MzYxMThERUU0QjFBNzVCMkM2ODkzNjVBODdFMTU0MzI0N0JBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBRDczNjExOERFRTRCMUE3 NUIyQzY4OTM2NUE4N0UxNTQzMjQ3QkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NW54QnZybWVFaFZVb3RGdUxoOTM3U1h4cHFmOUVlc2VqNEtjeWtSVGlab2cvMC85 QUQ3MzYxMThERUU0QjFBNzVCMkM2ODkzNjVBODdFMTU0MzI0N0JBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMP7XJHFZlNA5/QjURdQCQm3HOAQ1hc+mhsCxNIp4l3pbebC7HL7+8cPymijB yr6+L78sXabQkpbdQrHESYy8PJnIJ6Dbd/OhGdRw1Cwot4XfP4oPIY5fZYj91E6G B48KDveZo3jE/k6/gPrfcmKTg35ZLaPO9L6upp3SUS9G+TEDddpLgYEqQiOIp+5A YDe4NkXQZemw0I0qksO2+0YUuVGrBi6u9TiwsXv1QI9CR8wou+M+AmpLgbBLpbJy tploVE1qwjVlUyO1bxnv6LoH6cNgzNiSHXGp1fyJambog4dxSAmZPqYrM4kdtRpB NU4C/SGkKAoMrPdy6vf09tBLtg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:32:04 2025 by rpki-client