$ rpki-client -vvf rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.mft File: 39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.mft (raw, json) Hash identifier: pUbXAgAXF1zIih81AaSTlh7KYDP6pCcIf+YLSjkaJcI= Subject key identifier: AC:E4:9C:7F:E1:E9:66:E5:EE:29:BA:95:EB:DF:41:E2:F8:1B:AB:5A Authority key identifier: 39:DB:9E:8B:0D:7E:2A:74:C7:FA:D5:FB:DF:12:55:B5:5A:8F:DD:5E Certificate issuer: /CN=39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E Certificate serial: 2BEC169077DC44D578CFA99D12F6AF8F9474131E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.cer Subject info access: rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.mft Manifest number: 0102 Signing time: Mon 03 Nov 2025 09:17:00 +0000 Manifest this update: Mon 03 Nov 2025 09:12:00 +0000 Manifest next update: Tue 04 Nov 2025 10:30:00 +0000 Files and hashes: 1: 39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.crl (hash: xnY8ISkndIMrkNf43ykNipuC/qb/+h20iOi1cSKFJlg=) 2: 323830343a336264633a3a2f33322d3332203d3e20323636313736.roa (hash: oYcp44bLibhjBd34YNYWnpWyJNcqoWLaR+cmxg2Pk48=) 3: 3139302e3139362e3234372e302f32342d3234203d3e20323636313736.roa (hash: iCsDA9bvaRaU4YPT9gBkA6wjYYLdpioSEXlmkwGQ/20=) 4: 3139302e3139362e3234342e302f32322d3232203d3e20323636313736.roa (hash: Y0hBWzedH6u8hIuNnAI1d4XljUbZa7l01VaWq7Kuhac=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.crl rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 10:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ec:16:90:77:dc:44:d5:78:cf:a9:9d:12:f6:af:8f:94:74:13:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E Validity Not Before: Nov 3 09:12:00 2025 GMT Not After : Nov 4 10:30:00 2025 GMT Subject: CN=ACE49C7FE1E966E5EE29BA95EBDF41E2F81BAB5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:74:87:f7:ad:f3:99:77:35:a9:64:0c:37:fe: 38:15:48:d9:76:ad:f9:05:0f:57:a2:1a:ec:dc:84: 0c:32:a7:9c:1a:f2:41:5b:be:12:b8:18:34:67:4b: 42:81:32:f9:b9:fc:76:42:ca:93:d3:f2:e3:56:4c: 2a:78:6e:e6:04:d9:47:5a:03:99:b4:36:84:79:3a: 6a:f7:1b:ce:e5:48:63:87:69:9b:9c:4d:ce:d6:f1: 3a:06:3d:0d:4b:51:ba:e3:7e:7d:55:7a:51:2f:f0: 6f:de:53:52:5c:29:e0:00:cd:18:1c:62:5c:ce:d8: c7:2f:e5:c2:d8:ee:0f:0a:13:09:38:91:10:61:4a: ad:3f:34:99:a1:b9:e5:3c:7e:68:3b:df:4d:17:bb: 4c:50:f3:af:f0:4b:bc:8a:49:cf:e0:d3:a3:c2:9b: 17:9c:e7:a1:0d:ce:4c:65:8c:c2:f8:3e:aa:1e:3e: e4:9e:bf:c5:81:81:f8:ea:26:8a:c7:80:41:01:91: 54:97:87:da:db:7b:44:03:16:49:ac:db:77:f1:d8: b4:81:37:60:ca:73:60:14:43:b2:63:58:1e:fa:15: 68:88:9f:31:71:5d:0b:29:b2:f4:5d:c7:ce:25:f8: 10:37:ee:67:75:30:f3:8b:97:55:de:8d:f2:e2:ae: 56:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E4:9C:7F:E1:E9:66:E5:EE:29:BA:95:EB:DF:41:E2:F8:1B:AB:5A X509v3 Authority Key Identifier: keyid:39:DB:9E:8B:0D:7E:2A:74:C7:FA:D5:FB:DF:12:55:B5:5A:8F:DD:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:17:5d:b0:09:e5:5d:94:62:31:ff:10:90:e9:0a:fa:47:93: e3:e0:b2:f9:c0:c3:22:e8:2f:37:f9:a4:d7:a7:45:01:b1:e2: b3:9a:93:9c:42:b0:2c:51:16:2e:2d:a8:48:1e:84:98:f3:2b: 5f:8a:68:23:94:5f:65:c4:e5:53:15:0f:fc:13:7c:07:c4:08: db:bc:54:8c:8b:90:7d:1f:b0:b1:00:d9:50:28:55:87:b8:48: d9:c0:12:82:f4:2d:2f:b8:f3:b0:ee:5f:27:74:09:e8:29:ef: f7:bf:02:55:a2:68:91:18:9c:9c:e7:17:0b:c9:44:06:21:ee: f2:41:c8:bf:3c:b4:77:29:1a:f9:90:d1:73:33:22:47:31:a7: ba:22:72:90:2d:e6:f8:c6:c7:41:53:09:1e:c9:ab:8c:57:b5: dd:a2:37:c8:59:23:74:e1:38:9c:b2:f7:26:58:e6:73:c0:77: 59:1d:ae:91:7e:5c:75:83:5b:2e:32:02:b9:a1:7b:91:b9:68: 26:0c:6e:d2:93:02:3f:3a:d1:d7:fb:7f:b5:bd:79:87:9d:82: e2:a7:d0:f2:f2:c8:5d:ad:57:fe:41:77:e6:83:4e:d5:c6:9d: a3:7d:09:db:66:c5:b4:20:83:8d:ea:4d:f4:b3:71:dd:2f:eb: 3c:20:9e:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUK+wWkHfcRNV4z6mdEvavj5R0Ex4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlEQjlFOEIwRDdFMkE3NEM3RkFENUZCREYxMjU1QjU1 QThGREQ1RTAeFw0yNTExMDMwOTEyMDBaFw0yNTExMDQxMDMwMDBaMDMxMTAvBgNV BAMTKEFDRTQ5QzdGRTFFOTY2RTVFRTI5QkE5NUVCREY0MUUyRjgxQkFCNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTdIf3rfOZdzWpZAw3/jgVSNl2 rfkFD1eiGuzchAwyp5wa8kFbvhK4GDRnS0KBMvm5/HZCypPT8uNWTCp4buYE2Uda A5m0NoR5Omr3G87lSGOHaZucTc7W8ToGPQ1LUbrjfn1VelEv8G/eU1JcKeAAzRgc YlzO2Mcv5cLY7g8KEwk4kRBhSq0/NJmhueU8fmg7300Xu0xQ86/wS7yKSc/g06PC mxec56ENzkxljML4PqoePuSev8WBgfjqJorHgEEBkVSXh9rbe0QDFkms23fx2LSB N2DKc2AUQ7JjWB76FWiInzFxXQspsvRdx84l+BA37md1MPOLl1XejfLirlYRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrOScf+HpZuXuKbqV699B4vgbq1owHwYDVR0j BBgwFoAUOdueiw1+KnTH+tX73xJVtVqP3V4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmRjdDdHUDZydXJUY3p5RlQ5N3JTZ3FIOTlUTjJudmNxaHlxdEx2RVRQ NEUvMC8zOURCOUU4QjBEN0UyQTc0QzdGQUQ1RkJERjEyNTVCNTVBOEZERDVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5REI5RThCMEQ3RTJBNzRD N0ZBRDVGQkRGMTI1NUI1NUE4RkRENUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NmRjdDdHUDZydXJUY3p5RlQ5N3JTZ3FIOTlUTjJudmNxaHlxdEx2RVRQNEUvMC8z OURCOUU4QjBEN0UyQTc0QzdGQUQ1RkJERjEyNTVCNTVBOEZERDVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaRddsAnlXZRiMf8QkOkK+keT4+Cy+cDDIugvN/mk16dFAbHis5qTnEKwLFEW Li2oSB6EmPMrX4poI5RfZcTlUxUP/BN8B8QI27xUjIuQfR+wsQDZUChVh7hI2cAS gvQtL7jzsO5fJ3QJ6Cnv978CVaJokRicnOcXC8lEBiHu8kHIvzy0dyka+ZDRczMi RzGnuiJykC3m+MbHQVMJHsmrjFe13aI3yFkjdOE4nLL3Jljmc8B3WR2ukX5cdYNb LjICuaF7kbloJgxu0pMCPzrR1/t/tb15h52C4qfQ8vLIXa1X/kF35oNO1cado30J 22bFtCCDjepN9LNx3S/rPCCeWw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:13:24 2025 by rpki-client