$ rpki-client -vvf rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft File: 9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft (raw, json) Hash identifier: usVUdqfsM5Ni6Mh7XD6VIfOW3yFC0yongkV8KBlJJH8= Subject key identifier: 1D:58:BB:B3:0D:A3:17:AF:C8:CD:0B:30:3D:3B:CA:CE:78:0A:85:A3 Authority key identifier: 9B:CF:53:52:E2:C8:A4:37:59:7F:AB:4E:62:75:E8:61:F7:E4:2F:01 Certificate issuer: /CN=9BCF5352E2C8A437597FAB4E6275E861F7E42F01 Certificate serial: 1C0A80B48155F2EE275DEBBB67399A4002971B84 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.cer Subject info access: rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft Manifest number: 90 Signing time: Thu 18 Sep 2025 11:46:33 +0000 Manifest this update: Thu 18 Sep 2025 11:41:33 +0000 Manifest next update: Fri 19 Sep 2025 11:57:33 +0000 Files and hashes: 1: 323830343a373934633a3a2f33322d3332203d3e20323731323937.roa (hash: EPgT0uqHRP14e2Ydws+qdNEZrTAIh7Vm9BAP/DL1mMo=) 2: 9BCF5352E2C8A437597FAB4E6275E861F7E42F01.crl (hash: +QxH8BKm4eWspPvyxMquT0syYsKtdpYSoARVghW6mnM=) 3: 3139322e3233312e3137352e302f32342d3234203d3e20323731323937.roa (hash: RvjBWTTGSRQhFYPFHIcADDXN+HPlEAjpyTfgUWjt4MY=) 4: 34352e3232392e3133362e302f32342d3234203d3e20323731323937.roa (hash: +o5sIScdM46kmAqqS9GWVWLK1tGhtWhWXgceQVZIZ0s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.crl rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 11:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:0a:80:b4:81:55:f2:ee:27:5d:eb:bb:67:39:9a:40:02:97:1b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BCF5352E2C8A437597FAB4E6275E861F7E42F01 Validity Not Before: Sep 18 11:41:33 2025 GMT Not After : Sep 19 11:57:33 2025 GMT Subject: CN=1D58BBB30DA317AFC8CD0B303D3BCACE780A85A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ca:05:3b:0c:48:ed:48:4d:e4:5d:d4:68:e2: 8e:1c:3a:20:f8:f2:92:ce:77:b2:ad:ef:73:fb:da: 3b:97:f3:c9:0c:9b:fc:ef:27:48:48:99:5a:b7:b0: 5d:a4:21:ee:12:22:01:8d:c7:a9:c3:b5:9d:db:bc: df:0c:63:20:6d:cd:8f:d0:f1:93:68:d6:56:00:47: d8:4d:32:83:79:7f:ac:4b:84:5f:b4:6a:92:5f:95: 14:b3:96:1f:22:79:4a:47:b2:d9:2a:b9:c8:5b:86: e2:86:c4:10:45:a0:b4:8e:ae:2b:79:38:48:d0:80: dc:7b:c4:68:9f:26:90:73:2c:11:ff:3f:fe:97:15: 5d:3e:8a:6b:da:bf:59:cc:be:f8:e4:a3:7a:82:d5: 12:3c:26:72:f6:89:31:0c:3e:79:e0:8d:1f:c8:51: 02:fc:9a:1e:b3:e0:67:89:34:fa:41:e8:09:93:cc: 6b:27:9b:38:a5:ad:ef:ec:5b:57:71:4a:ff:1d:fb: 92:b8:46:09:7f:5b:59:dd:08:56:57:8b:5e:b7:9f: 0b:a4:6c:d0:ca:58:5d:37:e5:8a:16:91:c7:de:49: 09:91:b6:07:cd:64:c1:b6:67:8b:f5:27:d4:a5:ed: 2f:f5:84:3c:b5:a8:95:2e:ca:b7:ca:24:6f:85:6e: a4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:58:BB:B3:0D:A3:17:AF:C8:CD:0B:30:3D:3B:CA:CE:78:0A:85:A3 X509v3 Authority Key Identifier: keyid:9B:CF:53:52:E2:C8:A4:37:59:7F:AB:4E:62:75:E8:61:F7:E4:2F:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:9d:5a:b5:80:53:11:13:3c:48:58:8e:bc:26:ad:75:e9:33: 7a:cd:70:f1:43:23:67:6e:ea:46:d4:f7:61:d1:ef:8a:8f:c7: 15:6e:62:4a:22:8d:63:c6:14:88:ea:8b:aa:f5:cc:c8:3b:82: d2:af:ec:3e:52:20:2f:50:b2:94:08:f5:4e:9b:53:80:dd:4b: 36:e1:11:00:af:10:50:f8:3a:49:8d:b2:a8:0d:88:4d:f5:ca: 99:02:98:26:67:c0:d0:b4:9a:79:dd:a7:bf:98:8e:2d:ab:f5: bc:4c:e6:42:0b:80:57:74:1e:f7:29:a2:85:14:cf:2a:0e:f8: f8:01:07:c9:a7:fb:a0:0a:88:87:ac:dc:36:a2:cb:f6:fd:e8: 91:f2:5c:c3:4b:a3:38:f9:5c:dc:a6:56:58:e1:82:20:06:21: ab:8c:94:22:9d:84:96:36:b8:b0:11:ad:ad:dc:89:7b:5c:2f: b6:f3:b1:86:4b:39:61:17:fb:c6:96:2f:8d:97:ee:db:63:85: fd:a5:63:41:52:d6:94:17:bf:35:35:f2:43:30:eb:20:28:ac: 02:06:65:36:eb:60:30:d2:48:1b:4d:7d:1e:89:37:47:78:1f: 5e:d3:09:c6:06:0b:9d:dd:30:16:c4:ef:1d:5a:3f:77:4f:43: 91:46:f4:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHAqAtIFV8u4nXeu7ZzmaQAKXG4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJDRjUzNTJFMkM4QTQzNzU5N0ZBQjRFNjI3NUU4NjFG N0U0MkYwMTAeFw0yNTA5MTgxMTQxMzNaFw0yNTA5MTkxMTU3MzNaMDMxMTAvBgNV BAMTKDFENThCQkIzMERBMzE3QUZDOENEMEIzMDNEM0JDQUNFNzgwQTg1QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAygU7DEjtSE3kXdRo4o4cOiD4 8pLOd7Kt73P72juX88kMm/zvJ0hImVq3sF2kIe4SIgGNx6nDtZ3bvN8MYyBtzY/Q 8ZNo1lYAR9hNMoN5f6xLhF+0apJflRSzlh8ieUpHstkquchbhuKGxBBFoLSOrit5 OEjQgNx7xGifJpBzLBH/P/6XFV0+imvav1nMvvjko3qC1RI8JnL2iTEMPnngjR/I UQL8mh6z4GeJNPpB6AmTzGsnmzilre/sW1dxSv8d+5K4Rgl/W1ndCFZXi163nwuk bNDKWF035YoWkcfeSQmRtgfNZMG2Z4v1J9Sl7S/1hDy1qJUuyrfKJG+FbqTrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHVi7sw2jF6/IzQswPTvKzngKhaMwHwYDVR0j BBgwFoAUm89TUuLIpDdZf6tOYnXoYffkLwEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN01aRWltbmFTNTlFMmVBdzhoNG9YS2VocjVDWW1tTXRIWGtuMW91QXRo ZFEvMC85QkNGNTM1MkUyQzhBNDM3NTk3RkFCNEU2Mjc1RTg2MUY3RTQyRjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCQ0Y1MzUyRTJDOEE0Mzc1 OTdGQUI0RTYyNzVFODYxRjdFNDJGMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N01aRWltbmFTNTlFMmVBdzhoNG9YS2VocjVDWW1tTXRIWGtuMW91QXRoZFEvMC85 QkNGNTM1MkUyQzhBNDM3NTk3RkFCNEU2Mjc1RTg2MUY3RTQyRjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApp1atYBTERM8SFiOvCatdekzes1w8UMjZ27qRtT3YdHvio/HFW5iSiKNY8YU iOqLqvXMyDuC0q/sPlIgL1CylAj1TptTgN1LNuERAK8QUPg6SY2yqA2ITfXKmQKY JmfA0LSaed2nv5iOLav1vEzmQguAV3Qe9ymihRTPKg74+AEHyaf7oAqIh6zcNqLL 9v3okfJcw0ujOPlc3KZWWOGCIAYhq4yUIp2Elja4sBGtrdyJe1wvtvOxhks5YRf7 xpYvjZfu22OF/aVjQVLWlBe/NTXyQzDrICisAgZlNutgMNJIG019Hok3R3gfXtMJ xgYLnd0wFsTvHVo/d09DkUb0/g== -----END CERTIFICATE-----Generated at Thu Sep 18 14:39:29 2025 by rpki-client