$ rpki-client -vvf rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/9151E1075CB8CA7782315512A362C4E53B9BDB13.mft File: 9151E1075CB8CA7782315512A362C4E53B9BDB13.mft (raw, json) Hash identifier: kaXxg7HmZZhTmmxbbU/iLfo2FPPJMoXEfrdsMiYLqm4= Subject key identifier: 9C:C6:34:9D:C2:56:7A:B3:53:AE:3A:03:1C:F3:FD:E3:45:FA:75:E5 Authority key identifier: 91:51:E1:07:5C:B8:CA:77:82:31:55:12:A3:62:C4:E5:3B:9B:DB:13 Certificate issuer: /CN=9151E1075CB8CA7782315512A362C4E53B9BDB13 Certificate serial: 079541C11C28454573416101A104D8E37DB538A5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9151E1075CB8CA7782315512A362C4E53B9BDB13.cer Subject info access: rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/9151E1075CB8CA7782315512A362C4E53B9BDB13.mft Manifest number: 02D4 Signing time: Mon 03 Nov 2025 01:21:54 +0000 Manifest this update: Mon 03 Nov 2025 01:16:54 +0000 Manifest next update: Tue 04 Nov 2025 02:39:54 +0000 Files and hashes: 1: 323830343a3631383a3a2f33322d3438203d3e203238323534.roa (hash: OwpfkvMJYBLk2SatOdXk/hS++QMzvmgGQwwSTkyzjSk=) 2: 3138372e31362e3132382e302f32302d3234203d3e203238323534.roa (hash: NMHwVwtHXr2DKjtztiShZ03Q3GV7uBYbocdEO7d7/ik=) 3: 9151E1075CB8CA7782315512A362C4E53B9BDB13.crl (hash: MeuS7HGumOyI6klXshaKSCwn9C6cjxlixEIU0pNLgFM=) 4: 3137372e37312e31362e302f32312d3234203d3e203238323534.roa (hash: OsirZV8Mu5nf5NzONp0z9Sy1k75E/wPEVukMgbAGCNg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/9151E1075CB8CA7782315512A362C4E53B9BDB13.crl rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/9151E1075CB8CA7782315512A362C4E53B9BDB13.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9151E1075CB8CA7782315512A362C4E53B9BDB13.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 02:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:95:41:c1:1c:28:45:45:73:41:61:01:a1:04:d8:e3:7d:b5:38:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9151E1075CB8CA7782315512A362C4E53B9BDB13 Validity Not Before: Nov 3 01:16:54 2025 GMT Not After : Nov 4 02:39:54 2025 GMT Subject: CN=9CC6349DC2567AB353AE3A031CF3FDE345FA75E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:dc:d5:c3:91:44:22:0c:9f:8d:2c:e2:2e: ac:cb:73:bc:05:95:a5:1c:21:b6:f7:dd:fe:5b:b1: ba:41:cc:f7:d8:b2:ed:77:e6:9e:9c:77:e1:b4:8c: 24:76:1d:ae:a8:85:3c:11:ee:87:20:b5:ac:8e:80: f8:4e:52:66:56:97:37:eb:a7:4e:d2:71:f5:07:93: 45:67:17:be:93:d7:3e:46:8c:6a:d3:cc:85:9d:1b: 57:b4:58:15:95:cc:e0:ed:fd:a8:76:de:b2:94:c7: 64:79:eb:0c:99:85:8a:e1:98:4b:60:d1:c0:1a:fb: 69:48:5a:a0:eb:e3:5a:53:45:55:e1:ee:96:b4:ca: a0:65:1b:a0:97:34:8a:3d:54:4e:84:dc:35:70:4d: d4:c3:77:e7:6f:e4:e1:9c:41:a6:91:bb:c0:ea:91: e3:6c:59:13:01:86:9d:08:e1:aa:1e:9d:6c:6b:37: a5:45:b4:bf:4b:91:e0:43:d6:d0:3e:6d:60:c2:63: 6e:3b:8e:c0:11:10:d8:8b:92:aa:4c:a9:c5:b1:4e: 1b:ac:c4:bc:b2:a0:c3:95:f9:09:9a:fb:6d:a8:cd: c1:6b:29:00:94:a9:04:d1:39:3e:78:7e:e5:0f:d3: 38:6b:3a:54:6a:da:4d:2e:a1:cc:9c:aa:35:a0:56: 49:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C6:34:9D:C2:56:7A:B3:53:AE:3A:03:1C:F3:FD:E3:45:FA:75:E5 X509v3 Authority Key Identifier: keyid:91:51:E1:07:5C:B8:CA:77:82:31:55:12:A3:62:C4:E5:3B:9B:DB:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/9151E1075CB8CA7782315512A362C4E53B9BDB13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9151E1075CB8CA7782315512A362C4E53B9BDB13.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/9151E1075CB8CA7782315512A362C4E53B9BDB13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:eb:1d:fd:5c:ac:70:9d:dc:bc:c3:21:bd:c8:f0:65:b8:0d: 7e:e9:ea:fe:69:3e:33:12:12:a0:17:77:e3:88:b5:15:0a:ed: 7c:64:14:46:9c:84:4c:3b:84:e4:56:e7:31:dc:86:b9:08:ad: b0:31:49:82:7b:69:d2:33:6f:34:40:66:2f:0c:94:37:73:a9: 98:29:af:84:e7:c5:67:fa:ca:61:ed:3b:ca:e3:54:27:a9:cc: 53:8e:1e:46:cf:a8:6a:50:82:ef:9d:0d:08:92:f7:fe:9d:f3: 11:57:68:12:51:dd:b3:02:e3:72:75:ca:4e:24:90:13:3b:bc: 96:5c:90:57:87:ac:c1:ff:b8:9b:d8:dd:6f:95:05:e2:6e:75: c9:35:05:1a:2c:d6:e3:f7:be:85:15:68:4e:85:bc:2a:d8:85: a5:16:40:55:e9:4b:07:cc:1a:2d:10:6b:0a:1b:56:05:66:73: f8:85:62:25:ce:b2:6d:e9:8a:e6:88:13:b4:22:d5:8b:06:a8: 29:17:52:e5:e5:c9:42:f3:b4:48:a2:50:bd:79:e9:5f:14:20: f7:24:b0:72:20:c2:c9:ee:c6:38:53:24:7d:a6:d2:30:a6:35: e0:db:86:dc:18:fd:da:22:bf:32:15:5f:d9:6b:bb:1c:34:5e: 73:50:ee:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUB5VBwRwoRUVzQWEBoQTY4321OKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE1MUUxMDc1Q0I4Q0E3NzgyMzE1NTEyQTM2MkM0RTUz QjlCREIxMzAeFw0yNTExMDMwMTE2NTRaFw0yNTExMDQwMjM5NTRaMDMxMTAvBgNV BAMTKDlDQzYzNDlEQzI1NjdBQjM1M0FFM0EwMzFDRjNGREUzNDVGQTc1RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCKdzVw5FEIgyfjSziLqzLc7wF laUcIbb33f5bsbpBzPfYsu135p6cd+G0jCR2Ha6ohTwR7ocgtayOgPhOUmZWlzfr p07ScfUHk0VnF76T1z5GjGrTzIWdG1e0WBWVzODt/ah23rKUx2R56wyZhYrhmEtg 0cAa+2lIWqDr41pTRVXh7pa0yqBlG6CXNIo9VE6E3DVwTdTDd+dv5OGcQaaRu8Dq keNsWRMBhp0I4aoenWxrN6VFtL9LkeBD1tA+bWDCY247jsARENiLkqpMqcWxThus xLyyoMOV+Qma+22ozcFrKQCUqQTROT54fuUP0zhrOlRq2k0uocycqjWgVkn5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnMY0ncJWerNTrjoDHPP940X6deUwHwYDVR0j BBgwFoAUkVHhB1y4yneCMVUSo2LE5Tub2xMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmpvQzE0Mjd6Z25CTGM2NW9xZmt6Y0IzV2hCV2pGRkhCVENyN3lwQmda Y1YvMC85MTUxRTEwNzVDQjhDQTc3ODIzMTU1MTJBMzYyQzRFNTNCOUJEQjEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNTFFMTA3NUNCOENBNzc4 MjMxNTUxMkEzNjJDNEU1M0I5QkRCMTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NmpvQzE0Mjd6Z25CTGM2NW9xZmt6Y0IzV2hCV2pGRkhCVENyN3lwQmdaY1YvMC85 MTUxRTEwNzVDQjhDQTc3ODIzMTU1MTJBMzYyQzRFNTNCOUJEQjEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy+sd/VyscJ3cvMMhvcjwZbgNfunq/mk+MxISoBd344i1FQrtfGQURpyETDuE 5FbnMdyGuQitsDFJgntp0jNvNEBmLwyUN3OpmCmvhOfFZ/rKYe07yuNUJ6nMU44e Rs+oalCC750NCJL3/p3zEVdoElHdswLjcnXKTiSQEzu8llyQV4eswf+4m9jdb5UF 4m51yTUFGizW4/e+hRVoToW8KtiFpRZAVelLB8waLRBrChtWBWZz+IViJc6ybemK 5ogTtCLViwaoKRdS5eXJQvO0SKJQvXnpXxQg9ySwciDCye7GOFMkfabSMKY14NuG 3Bj92iK/MhVf2Wu7HDRec1Du4A== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:56 2025 by rpki-client