$ rpki-client -vvf rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.mft File: 9070D2E187CE3F862AB9E78E2A420A02C3525244.mft (raw, json) Hash identifier: Kus4LPpZVUxuf7KsfZJYLUeW7aEdpR/HXSkFzZqoWxg= Subject key identifier: 51:FC:CD:F7:74:D2:92:B9:0F:AB:E2:76:2C:C4:85:9C:68:5D:7E:60 Authority key identifier: 90:70:D2:E1:87:CE:3F:86:2A:B9:E7:8E:2A:42:0A:02:C3:52:52:44 Certificate issuer: /CN=9070D2E187CE3F862AB9E78E2A420A02C3525244 Certificate serial: 293694EFD3F2880BAA9E6EAB05D470C94CC48DFB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9070D2E187CE3F862AB9E78E2A420A02C3525244.cer Subject info access: rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.mft Manifest number: 55 Signing time: Mon 03 Nov 2025 07:08:26 +0000 Manifest this update: Mon 03 Nov 2025 07:03:26 +0000 Manifest next update: Tue 04 Nov 2025 07:39:26 +0000 Files and hashes: 1: 9070D2E187CE3F862AB9E78E2A420A02C3525244.crl (hash: Yvr5lELnXf/O+KbvtCFh9lA/BtkQIDCfaLTC1zH2kS4=) 2: 323830343a393532343a3a2f33322d3438203d3e203631363235.roa (hash: i6NrnPeEmUZ9PBdw/Sv5k2uiHHpyfFWWELso32cI//w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.crl rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9070D2E187CE3F862AB9E78E2A420A02C3525244.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 07:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:36:94:ef:d3:f2:88:0b:aa:9e:6e:ab:05:d4:70:c9:4c:c4:8d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9070D2E187CE3F862AB9E78E2A420A02C3525244 Validity Not Before: Nov 3 07:03:26 2025 GMT Not After : Nov 4 07:39:26 2025 GMT Subject: CN=51FCCDF774D292B90FABE2762CC4859C685D7E60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:62:df:a7:33:31:06:53:a9:13:2e:35:09:2f: a1:17:c3:8c:d0:9a:ce:c5:a5:cc:a7:a9:1b:c4:95: 76:65:26:9f:75:b5:52:4d:da:36:79:ea:df:67:34: 76:5e:3d:97:13:3e:fd:b8:0a:b0:f0:ed:71:5d:be: a3:5e:22:9d:e4:e8:43:37:c7:89:c2:b4:23:72:1f: 67:4d:37:d5:11:3d:f4:68:f5:69:1e:d0:5e:93:cc: 97:3d:42:b2:99:c9:fb:50:5c:2b:bb:7c:e1:b3:4d: 73:74:7c:28:e9:6b:26:69:e8:07:6e:6b:c0:24:c1: 8d:42:1f:50:2a:86:36:ec:4f:88:19:57:31:8c:d5: 16:db:5a:eb:89:e6:fd:d8:7d:f3:3f:8e:f9:69:98: 2b:cf:62:f8:2e:9f:a0:f3:8a:0a:5a:48:97:97:ad: b6:0e:c8:69:0f:67:92:bc:24:4a:30:12:53:80:e7: 1d:e3:a0:1f:90:c4:6a:df:88:6c:f3:91:c1:ce:08: cd:94:dc:34:9a:b2:d6:dc:a9:28:0b:ed:81:b0:4f: 95:f9:ce:26:fa:e2:fa:0d:0f:8d:d1:b0:b4:ca:58: c0:76:1c:74:06:9f:0f:37:1b:cd:39:2b:02:4e:d3: 13:be:36:39:33:ac:60:e5:44:80:70:d7:86:c4:11: 41:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FC:CD:F7:74:D2:92:B9:0F:AB:E2:76:2C:C4:85:9C:68:5D:7E:60 X509v3 Authority Key Identifier: keyid:90:70:D2:E1:87:CE:3F:86:2A:B9:E7:8E:2A:42:0A:02:C3:52:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9070D2E187CE3F862AB9E78E2A420A02C3525244.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ed:f8:d1:40:36:fb:9e:18:fd:ab:0c:ce:7c:78:e7:5d:3e: fa:03:5c:0d:c8:3e:ae:f7:1d:7a:ad:ee:c8:5e:60:e8:e0:2a: 80:5f:ba:9b:1f:d5:bc:c2:68:12:3d:02:a8:1e:9d:28:ba:75: 11:1c:a3:04:32:ca:99:d4:7f:ea:78:2f:4d:ca:49:f9:02:79: d0:8b:f3:f4:41:3c:7e:c8:42:c0:fb:94:5d:2c:2e:2b:1a:e4: f8:61:b8:41:62:b7:da:ad:fe:9a:67:a7:0f:d1:70:ca:42:94: ec:e5:ee:67:5e:29:ef:a3:82:97:29:2a:90:00:0b:39:79:b9: 8e:c0:58:39:05:29:1a:e0:28:5f:40:5e:4b:6b:21:a4:d0:0b: 2e:04:21:4a:da:76:1e:59:70:c0:b4:0b:99:3a:af:0e:5a:3c: dd:ff:aa:94:7b:b6:25:31:e5:b3:0f:96:62:b3:61:a8:3a:1b: 78:f3:9c:26:4c:ee:35:82:60:7f:42:bc:ae:b0:fc:1f:a3:73: 97:a7:6b:b5:ee:b6:06:f3:9c:a3:25:61:75:9c:c1:f1:2a:c1: 62:63:f0:f8:87:5e:d9:00:f7:4e:6a:46:ed:5a:9b:42:a4:24: 17:0d:9c:58:08:07:67:6f:df:cb:54:6a:9a:3e:26:b8:9b:40: d0:be:df:3d -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUKTaU79PyiAuqnm6rBdRwyUzEjfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA3MEQyRTE4N0NFM0Y4NjJBQjlFNzhFMkE0MjBBMDJD MzUyNTI0NDAeFw0yNTExMDMwNzAzMjZaFw0yNTExMDQwNzM5MjZaMDMxMTAvBgNV BAMTKDUxRkNDREY3NzREMjkyQjkwRkFCRTI3NjJDQzQ4NTlDNjg1RDdFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuYt+nMzEGU6kTLjUJL6EXw4zQ ms7FpcynqRvElXZlJp91tVJN2jZ56t9nNHZePZcTPv24CrDw7XFdvqNeIp3k6EM3 x4nCtCNyH2dNN9URPfRo9Wke0F6TzJc9QrKZyftQXCu7fOGzTXN0fCjpayZp6Adu a8AkwY1CH1AqhjbsT4gZVzGM1RbbWuuJ5v3YffM/jvlpmCvPYvgun6DzigpaSJeX rbYOyGkPZ5K8JEowElOA5x3joB+QxGrfiGzzkcHOCM2U3DSastbcqSgL7YGwT5X5 zib64voND43RsLTKWMB2HHQGnw83G805KwJO0xO+NjkzrGDlRIBw14bEEUEfAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUUfzN93TSkrkPq+J2LMSFnGhdfmAwHwYDVR0j BBgwFoAUkHDS4YfOP4YqueeOKkIKAsNSUkQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby83cUtac3RCUDMzQ0d0Y0I1bkd0cjJuWHhSUWVhV0F6VmNTdGhvRmFiNlF5 LzAvOTA3MEQyRTE4N0NFM0Y4NjJBQjlFNzhFMkE0MjBBMDJDMzUyNTI0NC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85MDcwRDJFMTg3Q0UzRjg2MkFC OUU3OEUyQTQyMEEwMkMzNTI1MjQ0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdx S1pzdEJQMzNDR3RjQjVuR3RyMm5YeFJRZWFXQXpWY1N0aG9GYWI2UXkvMC85MDcw RDJFMTg3Q0UzRjg2MkFCOUU3OEUyQTQyMEEwMkMzNTI1MjQ0Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA We340UA2+54Y/asMznx4510++gNcDcg+rvcdeq3uyF5g6OAqgF+6mx/VvMJoEj0C qB6dKLp1ERyjBDLKmdR/6ngvTcpJ+QJ50Ivz9EE8fshCwPuUXSwuKxrk+GG4QWK3 2q3+mmenD9FwykKU7OXuZ14p76OClykqkAALOXm5jsBYOQUpGuAoX0BeS2shpNAL LgQhStp2HllwwLQLmTqvDlo83f+qlHu2JTHlsw+WYrNhqDobePOcJkzuNYJgf0K8 rrD8H6Nzl6drte62BvOcoyVhdZzB8SrBYmPw+Ide2QD3TmpG7VqbQqQkFw2cWAgH Z2/fy1Rqmj4muJtA0L7fPQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:10:08 2025 by rpki-client