$ rpki-client -vvf rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.mft File: 9070D2E187CE3F862AB9E78E2A420A02C3525244.mft (raw, json) Hash identifier: 1IjH2i2/05kgfNbIa+ewxFhjt+0ofk8VUtu+2ZEHeww= Subject key identifier: 09:0A:58:1E:C2:0A:C3:4C:F5:8D:4A:C4:8B:8E:42:F3:3F:7F:8A:A4 Authority key identifier: 90:70:D2:E1:87:CE:3F:86:2A:B9:E7:8E:2A:42:0A:02:C3:52:52:44 Certificate issuer: /CN=9070D2E187CE3F862AB9E78E2A420A02C3525244 Certificate serial: 68C82B04FED2584F52BB2AE91491BBFEEA8DFBC6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9070D2E187CE3F862AB9E78E2A420A02C3525244.cer Subject info access: rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.mft Manifest number: 17 Signing time: Wed 17 Sep 2025 21:04:55 +0000 Manifest this update: Wed 17 Sep 2025 20:59:55 +0000 Manifest next update: Thu 18 Sep 2025 23:12:55 +0000 Files and hashes: 1: 323830343a393532343a3a2f33322d3438203d3e203631363235.roa (hash: i6NrnPeEmUZ9PBdw/Sv5k2uiHHpyfFWWELso32cI//w=) 2: 9070D2E187CE3F862AB9E78E2A420A02C3525244.crl (hash: LnH+FJztTWZ9kka6+LN9/KQqxPiCPhf5X7xZGuH+yaI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.crl rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9070D2E187CE3F862AB9E78E2A420A02C3525244.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 18 Sep 2025 23:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c8:2b:04:fe:d2:58:4f:52:bb:2a:e9:14:91:bb:fe:ea:8d:fb:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9070D2E187CE3F862AB9E78E2A420A02C3525244 Validity Not Before: Sep 17 20:59:55 2025 GMT Not After : Sep 18 23:12:55 2025 GMT Subject: CN=090A581EC20AC34CF58D4AC48B8E42F33F7F8AA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6e:4c:79:eb:6e:b9:b8:d8:42:84:e1:ca:3d: 89:42:c5:80:dc:79:15:86:7e:75:ba:b4:e1:23:09: 49:57:86:ba:de:0f:2c:3d:b0:cb:e3:ca:a9:40:23: b1:02:b9:0f:2a:6f:d6:3f:91:51:b2:01:51:9b:f2: 78:25:73:8b:e1:3f:f8:c2:99:99:27:31:54:18:79: c5:d6:24:33:c9:30:55:99:6d:96:16:15:6a:dd:2a: e2:88:5d:b5:91:01:e6:25:48:c7:a8:0f:c0:39:66: af:c0:fa:99:c0:8b:0f:92:3b:e9:df:4a:a7:0e:69: d3:51:43:d9:d3:b1:69:56:12:ca:d5:9c:65:b3:30: 01:95:4e:6f:22:68:24:64:b0:22:0b:d6:c8:8c:57: 8e:ab:66:04:8e:09:d7:06:26:1c:ac:a6:75:3b:00: 19:1b:c5:01:1e:74:63:ef:54:88:9e:b1:89:99:0b: fe:b0:e7:8b:09:ae:35:e7:c1:21:a9:3b:65:c3:d4: 10:a1:d5:d3:79:07:18:a1:56:f1:7d:1a:92:c2:e6: ab:65:06:99:87:2c:f9:dc:5c:2c:7b:23:67:2a:3d: 99:78:b1:ad:16:fc:8e:9c:4b:53:96:fb:a9:2d:dd: 4e:0c:b1:b1:cd:5f:b5:35:dc:04:f6:08:5d:9e:31: ef:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0A:58:1E:C2:0A:C3:4C:F5:8D:4A:C4:8B:8E:42:F3:3F:7F:8A:A4 X509v3 Authority Key Identifier: keyid:90:70:D2:E1:87:CE:3F:86:2A:B9:E7:8E:2A:42:0A:02:C3:52:52:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9070D2E187CE3F862AB9E78E2A420A02C3525244.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:76:3e:1d:d8:14:e4:a3:00:8d:52:14:d2:c6:9f:70:f4:45: 4f:20:ed:6c:7e:a3:4d:75:49:a6:7a:f0:d9:9f:76:aa:a9:5f: 6f:df:6d:3e:bb:5f:2c:1f:0e:5e:a8:5e:85:0d:9d:c6:d9:2a: 1a:94:b5:cc:70:bb:51:c1:fd:95:44:9f:78:18:31:f8:df:e3: 84:06:c7:f1:c9:fd:85:8c:f3:99:16:2d:aa:56:a2:bf:5f:d9: c3:4e:5b:ea:51:6c:a7:a6:4a:7d:df:f1:e9:9d:59:78:a9:99: fc:ae:35:2a:99:7f:a1:69:b0:c2:53:b2:3c:06:2d:91:1f:7d: c4:2c:54:5f:a4:c1:d7:9b:f0:db:49:4d:80:e8:02:98:a2:40: a8:97:fa:cd:a9:b7:39:3f:6e:1a:5f:7a:4f:2f:b4:3d:50:f3: f3:61:1a:1b:d4:a2:52:c3:8c:1b:71:7a:66:72:a0:15:20:9d: 60:e7:77:d3:1d:ea:20:df:da:89:04:12:f3:8c:59:63:6c:9b: 01:23:63:00:41:9c:90:73:ff:09:8a:7b:f9:91:bd:53:76:39: 32:48:06:9f:63:9a:a4:11:99:a1:dc:97:2b:b5:19:c8:65:57: c5:f4:d8:db:06:70:fa:0b:72:e7:4f:c2:4a:86:28:f7:c7:1a: b8:c4:e9:71 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUaMgrBP7SWE9SuyrpFJG7/uqN+8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA3MEQyRTE4N0NFM0Y4NjJBQjlFNzhFMkE0MjBBMDJD MzUyNTI0NDAeFw0yNTA5MTcyMDU5NTVaFw0yNTA5MTgyMzEyNTVaMDMxMTAvBgNV BAMTKDA5MEE1ODFFQzIwQUMzNENGNThENEFDNDhCOEU0MkYzM0Y3RjhBQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbkx56265uNhChOHKPYlCxYDc eRWGfnW6tOEjCUlXhrreDyw9sMvjyqlAI7ECuQ8qb9Y/kVGyAVGb8nglc4vhP/jC mZknMVQYecXWJDPJMFWZbZYWFWrdKuKIXbWRAeYlSMeoD8A5Zq/A+pnAiw+SO+nf SqcOadNRQ9nTsWlWEsrVnGWzMAGVTm8iaCRksCIL1siMV46rZgSOCdcGJhyspnU7 ABkbxQEedGPvVIiesYmZC/6w54sJrjXnwSGpO2XD1BCh1dN5BxihVvF9GpLC5qtl BpmHLPncXCx7I2cqPZl4sa0W/I6cS1OW+6kt3U4MsbHNX7U13AT2CF2eMe9NAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUCQpYHsIKw0z1jUrEi45C8z9/iqQwHwYDVR0j BBgwFoAUkHDS4YfOP4YqueeOKkIKAsNSUkQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby83cUtac3RCUDMzQ0d0Y0I1bkd0cjJuWHhSUWVhV0F6VmNTdGhvRmFiNlF5 LzAvOTA3MEQyRTE4N0NFM0Y4NjJBQjlFNzhFMkE0MjBBMDJDMzUyNTI0NC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85MDcwRDJFMTg3Q0UzRjg2MkFC OUU3OEUyQTQyMEEwMkMzNTI1MjQ0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdx S1pzdEJQMzNDR3RjQjVuR3RyMm5YeFJRZWFXQXpWY1N0aG9GYWI2UXkvMC85MDcw RDJFMTg3Q0UzRjg2MkFCOUU3OEUyQTQyMEEwMkMzNTI1MjQ0Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA pXY+HdgU5KMAjVIU0safcPRFTyDtbH6jTXVJpnrw2Z92qqlfb99tPrtfLB8OXqhe hQ2dxtkqGpS1zHC7UcH9lUSfeBgx+N/jhAbH8cn9hYzzmRYtqlaiv1/Zw05b6lFs p6ZKfd/x6Z1ZeKmZ/K41Kpl/oWmwwlOyPAYtkR99xCxUX6TB15vw20lNgOgCmKJA qJf6zam3OT9uGl96Ty+0PVDz82EaG9SiUsOMG3F6ZnKgFSCdYOd30x3qIN/aiQQS 84xZY2ybASNjAEGckHP/CYp7+ZG9U3Y5MkgGn2OapBGZodyXK7UZyGVXxfTY2wZw +gty50/CSoYo98cauMTpcQ== -----END CERTIFICATE-----Generated at Thu Sep 18 12:07:17 2025 by rpki-client