$ rpki-client -vvf rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft File: 9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft (raw, json) Hash identifier: /4Cz5giAZGrmDm3CYSdDKOL8j9+YZyBfooIxNuHOb68= Subject key identifier: F4:28:65:FD:28:CF:52:48:28:32:0C:14:B4:BA:C6:70:21:7B:5E:1C Authority key identifier: 93:39:F7:20:CF:D0:D8:F9:1A:9A:8F:91:6D:79:32:CE:BE:30:10:CD Certificate issuer: /CN=9339F720CFD0D8F91A9A8F916D7932CEBE3010CD Certificate serial: 14B25570362BBCEFA96E7A7FA4FA8E17640C2D76 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer Subject info access: rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft Manifest number: 0303 Signing time: Mon 03 Nov 2025 06:20:10 +0000 Manifest this update: Mon 03 Nov 2025 06:15:10 +0000 Manifest next update: Tue 04 Nov 2025 07:31:10 +0000 Files and hashes: 1: 323830343a336232303a3a2f33322d3438203d3e20323636313331.roa (hash: BuT6SVf+q5oMKia2hb1uFcClSeTWsZZo4z0q3Ha5OtA=) 2: 9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl (hash: oyjObxkY+EhfjVoq8d7wx09hPfvRzUhd9inBM14OCz0=) 3: 34352e362e3131322e302f32322d3234203d3e20323636313331.roa (hash: 7Dz4w+nF0VfTfBfkOh3PyIEA3gtOe3Tz5BUNfanJK1Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 07:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b2:55:70:36:2b:bc:ef:a9:6e:7a:7f:a4:fa:8e:17:64:0c:2d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9339F720CFD0D8F91A9A8F916D7932CEBE3010CD Validity Not Before: Nov 3 06:15:10 2025 GMT Not After : Nov 4 07:31:10 2025 GMT Subject: CN=F42865FD28CF524828320C14B4BAC670217B5E1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1d:c4:24:90:ef:82:7a:3f:5f:33:1d:59:50: 71:83:0e:34:a5:af:e8:a3:24:3b:35:18:d5:3f:4d: ae:68:35:9d:a3:9e:70:b1:f2:48:41:9c:74:0c:ba: db:d1:74:ae:6a:3a:a5:33:fa:d3:13:36:5a:14:7b: 15:fc:bc:4a:2b:30:8b:c7:e1:b1:5c:9e:9d:c1:d1: 18:06:2d:fe:71:91:d3:98:14:e6:87:42:eb:06:81: fa:ec:8b:68:24:7e:11:3f:b9:f5:40:05:b0:b9:29: 4d:24:01:cc:8f:3b:f7:34:1b:4d:69:d5:38:db:88: 91:d7:90:32:e8:66:67:9b:d6:f0:e1:19:91:42:48: 06:40:f6:ce:92:37:ce:7e:23:90:12:fc:d4:d9:02: fa:ad:42:7c:b7:e2:ce:1f:99:a4:cb:35:3d:39:10: c5:35:91:f6:44:8b:f4:a5:97:b6:6b:1d:fc:58:14: 91:ab:9f:7c:13:9b:df:5e:7a:51:c6:c9:20:3a:a6: 06:03:01:17:f3:a8:3c:47:25:ea:f5:fe:bb:82:ee: fb:d4:30:db:5e:ac:83:f2:6b:23:c5:ff:ae:39:bb: 41:8b:57:0f:b2:8f:67:c9:d4:35:d1:d1:e1:4c:99: df:25:e1:fa:dc:20:c9:40:f8:ec:4e:18:41:9f:07: 59:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:28:65:FD:28:CF:52:48:28:32:0C:14:B4:BA:C6:70:21:7B:5E:1C X509v3 Authority Key Identifier: keyid:93:39:F7:20:CF:D0:D8:F9:1A:9A:8F:91:6D:79:32:CE:BE:30:10:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ef:66:2a:19:c5:65:07:17:6e:65:da:e2:24:78:21:43:4a: fe:1a:e9:29:5a:c6:7f:1f:51:63:c7:0e:cd:d3:f6:c5:86:55: e1:6d:61:64:5c:0f:6d:b7:ed:6c:f9:a0:6c:63:b3:fb:48:dc: 8b:53:55:22:75:f1:af:0f:0c:8d:60:0d:39:68:7d:8f:15:7d: 23:27:06:9d:43:5c:54:97:f8:80:b0:6d:9f:54:ce:a4:dd:16: b9:9e:3d:11:de:ec:e9:d6:16:24:13:f2:4e:9b:b0:31:b6:a9: c5:dd:3c:72:d7:f3:38:32:04:b3:8a:c8:86:2a:0f:b6:09:b0: 2c:03:3a:8c:b2:5f:51:a7:00:cf:c1:44:f1:78:90:70:55:4c: df:b4:95:a9:85:87:fc:8b:7a:79:65:21:02:27:fc:bf:4a:19: db:ee:4b:d6:0a:89:51:d1:f8:64:67:12:dd:a5:01:d3:d2:b7: 45:f9:37:06:9d:fb:12:94:7c:08:08:85:f2:f0:f3:e1:66:c4: 76:fc:60:e7:1c:1d:42:dc:51:0f:8d:ff:d7:1b:6e:26:e8:6f: 01:b7:58:6b:02:03:d4:23:8e:d3:1d:d5:0b:db:48:21:9a:34: ca:19:31:48:dc:5b:4e:26:7b:57:5f:2a:2f:a6:3e:d6:cf:02: b6:76:3e:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFLJVcDYrvO+pbnp/pPqOF2QMLXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMzOUY3MjBDRkQwRDhGOTFBOUE4RjkxNkQ3OTMyQ0VC RTMwMTBDRDAeFw0yNTExMDMwNjE1MTBaFw0yNTExMDQwNzMxMTBaMDMxMTAvBgNV BAMTKEY0Mjg2NUZEMjhDRjUyNDgyODMyMEMxNEI0QkFDNjcwMjE3QjVFMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+HcQkkO+Cej9fMx1ZUHGDDjSl r+ijJDs1GNU/Ta5oNZ2jnnCx8khBnHQMutvRdK5qOqUz+tMTNloUexX8vEorMIvH 4bFcnp3B0RgGLf5xkdOYFOaHQusGgfrsi2gkfhE/ufVABbC5KU0kAcyPO/c0G01p 1TjbiJHXkDLoZmeb1vDhGZFCSAZA9s6SN85+I5AS/NTZAvqtQny34s4fmaTLNT05 EMU1kfZEi/Sll7ZrHfxYFJGrn3wTm99eelHGySA6pgYDARfzqDxHJer1/ruC7vvU MNterIPyayPF/645u0GLVw+yj2fJ1DXR0eFMmd8l4frcIMlA+OxOGEGfB1kbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9Chl/SjPUkgoMgwUtLrGcCF7XhwwHwYDVR0j BBgwFoAUkzn3IM/Q2Pkamo+RbXkyzr4wEM0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUFpNExYcnhpUEVjRDFUR3pwM1lIRENSYUQzWkRIcGNyWkg5TEdTQzF0 YVovMS85MzM5RjcyMENGRDBEOEY5MUE5QThGOTE2RDc5MzJDRUJFMzAxMENELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzMzlGNzIwQ0ZEMEQ4Rjkx QTlBOEY5MTZENzkzMkNFQkUzMDEwQ0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUFpNExYcnhpUEVjRDFUR3pwM1lIRENSYUQzWkRIcGNyWkg5TEdTQzF0YVovMS85 MzM5RjcyMENGRDBEOEY5MUE5QThGOTE2RDc5MzJDRUJFMzAxMENELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOO9mKhnFZQcXbmXa4iR4IUNK/hrpKVrGfx9RY8cOzdP2xYZV4W1hZFwPbbft bPmgbGOz+0jci1NVInXxrw8MjWANOWh9jxV9IycGnUNcVJf4gLBtn1TOpN0WuZ49 Ed7s6dYWJBPyTpuwMbapxd08ctfzODIEs4rIhioPtgmwLAM6jLJfUacAz8FE8XiQ cFVM37SVqYWH/It6eWUhAif8v0oZ2+5L1gqJUdH4ZGcS3aUB09K3Rfk3Bp37EpR8 CAiF8vDz4WbEdvxg5xwdQtxRD43/1xtuJuhvAbdYawID1COO0x3VC9tIIZo0yhkx SNxbTiZ7V18qL6Y+1s8CtnY+wQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:24:57 2025 by rpki-client