$ rpki-client -vvf rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.mft File: 39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.mft (raw, json) Hash identifier: VP9S3EuiIIzmVSq1Dax9AtlkLXbZILJrUA8Rr3hjR8c= Subject key identifier: 01:9A:E9:81:81:C4:D8:0A:EB:79:6D:34:82:EF:58:0B:DF:32:8A:EC Authority key identifier: 39:DB:9E:8B:0D:7E:2A:74:C7:FA:D5:FB:DF:12:55:B5:5A:8F:DD:5E Certificate issuer: /CN=39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E Certificate serial: 6DCDE19B172DC7330A0B9EA42CDC9833A7C48932 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.cer Subject info access: rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.mft Manifest number: CA Signing time: Thu 18 Sep 2025 06:17:14 +0000 Manifest this update: Thu 18 Sep 2025 06:12:14 +0000 Manifest next update: Fri 19 Sep 2025 07:06:14 +0000 Files and hashes: 1: 3139302e3139362e3234342e302f32322d3232203d3e20323636313736.roa (hash: Y0hBWzedH6u8hIuNnAI1d4XljUbZa7l01VaWq7Kuhac=) 2: 3139302e3139362e3234372e302f32342d3234203d3e20323636313736.roa (hash: iCsDA9bvaRaU4YPT9gBkA6wjYYLdpioSEXlmkwGQ/20=) 3: 323830343a336264633a3a2f33322d3332203d3e20323636313736.roa (hash: oYcp44bLibhjBd34YNYWnpWyJNcqoWLaR+cmxg2Pk48=) 4: 39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.crl (hash: 8hfWzGKcm/6NYGq8ebKnJU+AUP5es9as6cbLeRNynZ8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.crl rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 07:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:cd:e1:9b:17:2d:c7:33:0a:0b:9e:a4:2c:dc:98:33:a7:c4:89:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E Validity Not Before: Sep 18 06:12:14 2025 GMT Not After : Sep 19 07:06:14 2025 GMT Subject: CN=019AE98181C4D80AEB796D3482EF580BDF328AEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bb:0c:c1:0f:dc:36:5c:f3:eb:29:09:48:68: 60:80:c5:5d:3f:00:3b:23:82:80:fe:7c:d6:66:47: bf:95:b8:ed:36:49:21:4c:bb:42:21:ae:ac:c5:d3: ae:57:17:6e:5f:fb:4b:67:7d:93:7a:a3:48:9a:ab: da:61:6c:15:ae:61:79:87:bc:e5:84:1e:c0:89:f2: e6:3f:73:83:75:7b:24:8c:b6:6b:cb:c0:63:65:d7: 7a:ed:b0:bf:de:62:6a:1d:b8:c7:00:83:de:5d:54: 9c:7b:fb:ad:59:6e:db:bb:33:bb:08:9d:31:3c:0f: 0f:d3:3a:e1:29:00:66:b1:61:9f:04:85:e7:f2:65: 54:e1:d7:62:6d:8a:dc:b3:2e:87:b8:32:f3:a8:12: 37:58:d6:1e:b4:6a:08:2d:31:dc:31:0a:bb:7a:4f: 5b:07:14:4d:11:2f:ad:60:17:f6:25:81:fa:be:81: 43:e8:88:b4:e9:dd:7e:3d:9e:09:09:81:8d:48:73: 1c:85:87:fd:76:d3:6d:8f:ad:44:aa:c3:b4:b1:dc: 65:c0:78:22:c1:e9:67:9b:f9:bb:46:c7:84:ae:c3: 53:91:a3:fb:40:0a:f9:46:fb:10:7a:a6:1a:7b:a9: 1e:87:28:16:42:77:31:9e:5c:6b:20:a0:e2:27:5a: 7c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9A:E9:81:81:C4:D8:0A:EB:79:6D:34:82:EF:58:0B:DF:32:8A:EC X509v3 Authority Key Identifier: keyid:39:DB:9E:8B:0D:7E:2A:74:C7:FA:D5:FB:DF:12:55:B5:5A:8F:DD:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5a:80:24:34:fc:6f:b0:b0:55:07:18:65:10:a9:1c:85:bb: 2c:44:86:68:c6:7a:1a:ac:fe:22:6c:fa:b4:2d:f0:0d:3d:1c: 66:81:8b:df:a8:18:e0:c3:56:63:8c:58:b8:2a:9b:9b:84:63: 85:ff:6b:45:0d:e0:80:d7:78:87:97:17:f6:2e:3a:e2:01:0f: 7b:c6:a6:ab:1e:4e:0b:6d:d3:9a:0d:21:91:6e:5d:bf:d1:a2: b9:21:5d:e5:76:7c:1d:36:d0:4c:e9:d6:77:4c:88:e4:89:07: fa:66:a4:d2:31:b5:34:16:75:fd:27:6c:b7:67:88:e2:e1:65: e9:41:92:b5:4f:b7:4c:6c:e3:53:40:e6:08:89:a9:c0:95:df: 2b:40:a6:0c:2c:5b:be:29:6c:0d:f2:f5:75:c2:fa:9e:69:f4: 36:ad:94:36:0a:b3:cd:b5:ad:4e:4b:80:98:48:43:53:be:79: ad:32:af:11:60:60:57:00:01:b8:3d:1f:bb:03:d7:05:da:67: fd:03:36:f1:c6:dd:3b:92:b8:cb:1c:41:1e:33:f9:b6:08:df: 0f:fc:9e:74:ab:2f:d4:c7:83:c7:a3:52:64:b3:74:5a:22:cf: eb:a7:51:34:53:51:f4:0b:b4:09:2e:87:89:15:ac:53:a2:38: a2:be:3b:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbc3hmxctxzMKC56kLNyYM6fEiTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlEQjlFOEIwRDdFMkE3NEM3RkFENUZCREYxMjU1QjU1 QThGREQ1RTAeFw0yNTA5MTgwNjEyMTRaFw0yNTA5MTkwNzA2MTRaMDMxMTAvBgNV BAMTKDAxOUFFOTgxODFDNEQ4MEFFQjc5NkQzNDgyRUY1ODBCREYzMjhBRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6uwzBD9w2XPPrKQlIaGCAxV0/ ADsjgoD+fNZmR7+VuO02SSFMu0IhrqzF065XF25f+0tnfZN6o0iaq9phbBWuYXmH vOWEHsCJ8uY/c4N1eySMtmvLwGNl13rtsL/eYmoduMcAg95dVJx7+61Zbtu7M7sI nTE8Dw/TOuEpAGaxYZ8EhefyZVTh12JtityzLoe4MvOoEjdY1h60aggtMdwxCrt6 T1sHFE0RL61gF/Ylgfq+gUPoiLTp3X49ngkJgY1IcxyFh/12022PrUSqw7Sx3GXA eCLB6Web+btGx4Suw1ORo/tACvlG+xB6php7qR6HKBZCdzGeXGsgoOInWnzJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAZrpgYHE2ArreW00gu9YC98yiuwwHwYDVR0j BBgwFoAUOdueiw1+KnTH+tX73xJVtVqP3V4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmRjdDdHUDZydXJUY3p5RlQ5N3JTZ3FIOTlUTjJudmNxaHlxdEx2RVRQ NEUvMC8zOURCOUU4QjBEN0UyQTc0QzdGQUQ1RkJERjEyNTVCNTVBOEZERDVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5REI5RThCMEQ3RTJBNzRD N0ZBRDVGQkRGMTI1NUI1NUE4RkRENUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NmRjdDdHUDZydXJUY3p5RlQ5N3JTZ3FIOTlUTjJudmNxaHlxdEx2RVRQNEUvMC8z OURCOUU4QjBEN0UyQTc0QzdGQUQ1RkJERjEyNTVCNTVBOEZERDVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATlqAJDT8b7CwVQcYZRCpHIW7LESGaMZ6Gqz+Imz6tC3wDT0cZoGL36gY4MNW Y4xYuCqbm4Rjhf9rRQ3ggNd4h5cX9i464gEPe8amqx5OC23Tmg0hkW5dv9GiuSFd 5XZ8HTbQTOnWd0yI5IkH+mak0jG1NBZ1/Sdst2eI4uFl6UGStU+3TGzjU0DmCImp wJXfK0CmDCxbvilsDfL1dcL6nmn0Nq2UNgqzzbWtTkuAmEhDU755rTKvEWBgVwAB uD0fuwPXBdpn/QM28cbdO5K4yxxBHjP5tgjfD/yedKsv1MeDx6NSZLN0WiLP66dR NFNR9Au0CS6HiRWsU6I4or47rQ== -----END CERTIFICATE-----Generated at Thu Sep 18 07:25:48 2025 by rpki-client