$ rpki-client -vvf rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.mft File: 99CBE612CF987BC19B2EBFA775C37AA88704A02A.mft (raw, json) Hash identifier: zSSHSrrhvG9gMyOsLKnviLw1Z5IV1sKw4h/gjQ65i8A= Subject key identifier: 93:AA:D6:44:C2:2C:AF:17:9B:BE:58:0B:FF:7C:86:84:AC:DA:41:A2 Authority key identifier: 99:CB:E6:12:CF:98:7B:C1:9B:2E:BF:A7:75:C3:7A:A8:87:04:A0:2A Certificate issuer: /CN=99CBE612CF987BC19B2EBFA775C37AA88704A02A Certificate serial: 34E01A4E350361034F5597E2E5085C81FD8D5A07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99CBE612CF987BC19B2EBFA775C37AA88704A02A.cer Subject info access: rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.mft Manifest number: F5 Signing time: Mon 03 Nov 2025 01:07:38 +0000 Manifest this update: Mon 03 Nov 2025 01:02:38 +0000 Manifest next update: Tue 04 Nov 2025 04:55:38 +0000 Files and hashes: 1: 34352e3137372e342e302f32332d3332203d3e20323638393433.roa (hash: 0+kYLD8yHBn8SEvHZmP6Lna69QmTu4oRBPJPDeUnb5c=) 2: 99CBE612CF987BC19B2EBFA775C37AA88704A02A.crl (hash: GTKh+EcVDgeNxZP+xkxSTLMC6xsY6oCYc0y7rQ1MrY4=) 3: 34352e3137362e3133362e302f32322d3332203d3e20323638393433.roa (hash: Vrt0CzEyM2PFJe+InYR1IwnM+I67HCAmxDrqTTmERvo=) 4: 323830343a356366383a3a2f33322d313238203d3e20323638393433.roa (hash: GcYsJrCgHMe99NpgpZuWCzNu1TQaO1J+BqBAsKQkiDU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.crl rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99CBE612CF987BC19B2EBFA775C37AA88704A02A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 04:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:e0:1a:4e:35:03:61:03:4f:55:97:e2:e5:08:5c:81:fd:8d:5a:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99CBE612CF987BC19B2EBFA775C37AA88704A02A Validity Not Before: Nov 3 01:02:38 2025 GMT Not After : Nov 4 04:55:38 2025 GMT Subject: CN=93AAD644C22CAF179BBE580BFF7C8684ACDA41A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2f:7b:e3:1f:e2:29:a2:8f:ed:2f:73:b0:cf: 92:f9:ea:aa:d5:c6:ca:94:ce:46:c2:e0:70:20:ca: de:bb:d6:11:27:d3:66:b0:67:9b:86:76:da:0d:6d: cf:7a:5a:0f:a0:6c:88:1b:5f:12:f2:73:25:f8:f8: 2a:83:95:33:06:d7:57:a2:62:e0:50:59:c2:e8:47: c1:7f:4b:b1:98:a5:06:27:ad:7b:00:21:4a:aa:00: 33:c8:a5:a5:5d:ed:d7:8b:46:81:09:ab:d5:fc:a2: 66:b7:59:26:43:11:ac:ab:dc:aa:64:42:e8:90:04: b5:07:96:f3:e3:1b:59:7a:ff:fc:06:2c:a3:f6:3c: e3:3b:e8:bc:aa:dd:90:5c:7e:5d:32:ec:eb:be:0b: 2b:f0:e1:b0:10:ac:99:8e:7d:7e:7f:50:ab:d4:46: 69:de:94:26:d2:f3:f0:83:e3:87:e4:7e:b7:63:d8: 2c:7b:1b:12:10:c6:10:5b:a0:88:ef:ab:0d:e4:3e: fa:d8:97:45:8e:43:b3:ce:12:24:49:b4:90:30:a5: a8:bf:70:12:15:b1:47:09:80:11:43:05:a7:9b:69: 84:c8:aa:88:49:18:cc:2f:49:6c:38:19:b7:b3:31: 8a:12:10:c5:ac:af:01:dc:18:da:89:1d:f3:95:38: 54:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AA:D6:44:C2:2C:AF:17:9B:BE:58:0B:FF:7C:86:84:AC:DA:41:A2 X509v3 Authority Key Identifier: keyid:99:CB:E6:12:CF:98:7B:C1:9B:2E:BF:A7:75:C3:7A:A8:87:04:A0:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99CBE612CF987BC19B2EBFA775C37AA88704A02A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:e6:2e:1b:90:cd:d9:4f:13:93:cc:9f:97:85:93:37:38:7f: e1:b5:87:38:df:6f:77:fb:8f:e7:c9:81:b2:b1:17:ca:5e:df: 97:b6:ed:df:a9:cf:72:45:bc:14:54:a8:10:9c:75:8c:27:f2: c7:58:ac:0f:45:2b:7f:e3:d3:13:41:02:62:08:33:40:19:30: 48:51:d5:15:af:bf:ec:ce:5e:95:c7:04:2d:3f:2e:fc:f0:2a: 31:8e:35:20:32:d6:f5:01:da:61:cf:13:be:7d:74:ee:a5:2a: cd:00:80:2e:65:62:22:f3:83:21:de:15:ee:3b:54:49:7c:eb: ee:f0:c1:25:a1:e0:59:3b:ef:4e:92:d0:e8:24:b8:07:7a:fd: b3:8c:d2:74:c1:12:35:f4:de:a3:3a:52:8a:d4:60:29:b0:d5: 58:59:30:12:75:d3:77:78:a7:9a:f0:b0:aa:23:10:1e:c1:23: ec:51:4c:b4:67:68:04:ec:9f:3f:d5:45:b2:4b:02:7b:44:e0: 4d:38:da:87:5f:4b:32:ea:05:da:ae:87:ff:d1:7c:31:d5:fa: b7:de:de:66:9c:c4:ec:8b:36:b3:2e:83:62:ec:dd:33:0c:57: e6:63:09:c1:a3:5d:0b:6b:ef:19:0c:30:85:dd:36:0c:c4:09: d8:8a:b0:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNOAaTjUDYQNPVZfi5Qhcgf2NWgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDQkU2MTJDRjk4N0JDMTlCMkVCRkE3NzVDMzdBQTg4 NzA0QTAyQTAeFw0yNTExMDMwMTAyMzhaFw0yNTExMDQwNDU1MzhaMDMxMTAvBgNV BAMTKDkzQUFENjQ0QzIyQ0FGMTc5QkJFNTgwQkZGN0M4Njg0QUNEQTQxQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdL3vjH+Ipoo/tL3Owz5L56qrV xsqUzkbC4HAgyt671hEn02awZ5uGdtoNbc96Wg+gbIgbXxLycyX4+CqDlTMG11ei YuBQWcLoR8F/S7GYpQYnrXsAIUqqADPIpaVd7deLRoEJq9X8oma3WSZDEayr3Kpk QuiQBLUHlvPjG1l6//wGLKP2POM76Lyq3ZBcfl0y7Ou+Cyvw4bAQrJmOfX5/UKvU RmnelCbS8/CD44fkfrdj2Cx7GxIQxhBboIjvqw3kPvrYl0WOQ7POEiRJtJAwpai/ cBIVsUcJgBFDBaebaYTIqohJGMwvSWw4GbezMYoSEMWsrwHcGNqJHfOVOFShAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUk6rWRMIsrxebvlgL/3yGhKzaQaIwHwYDVR0j BBgwFoAUmcvmEs+Ye8GbLr+ndcN6qIcEoCowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjY1aGt2V1JtUEFnVTZGaU1uTDF3aTEyRmttZUNrZXlRQWRDM0RvUkZz QzQvMC85OUNCRTYxMkNGOTg3QkMxOUIyRUJGQTc3NUMzN0FBODg3MDRBMDJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5Q0JFNjEyQ0Y5ODdCQzE5 QjJFQkZBNzc1QzM3QUE4ODcwNEEwMkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NjY1aGt2V1JtUEFnVTZGaU1uTDF3aTEyRmttZUNrZXlRQWRDM0RvUkZzQzQvMC85 OUNCRTYxMkNGOTg3QkMxOUIyRUJGQTc3NUMzN0FBODg3MDRBMDJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl+YuG5DN2U8Tk8yfl4WTNzh/4bWHON9vd/uP58mBsrEXyl7fl7bt36nPckW8 FFSoEJx1jCfyx1isD0Urf+PTE0ECYggzQBkwSFHVFa+/7M5elccELT8u/PAqMY41 IDLW9QHaYc8Tvn107qUqzQCALmViIvODId4V7jtUSXzr7vDBJaHgWTvvTpLQ6CS4 B3r9s4zSdMESNfTeozpSitRgKbDVWFkwEnXTd3inmvCwqiMQHsEj7FFMtGdoBOyf P9VFsksCe0TgTTjah19LMuoF2q6H/9F8MdX6t97eZpzE7Is2sy6DYuzdMwxX5mMJ waNdC2vvGQwwhd02DMQJ2IqwFw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:01 2025 by rpki-client