$ rpki-client -vvf rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft File: D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft (raw, json) Hash identifier: A4mPIwFysEnDAdxjHQnaXVGt6iv2P3w+0izm4irKR24= Subject key identifier: A9:FB:DB:CB:7B:3A:20:CB:F4:DA:1C:C1:9D:B4:47:55:10:F7:E7:F2 Authority key identifier: D9:18:92:54:B7:5B:9D:BB:CA:84:EA:D7:98:65:C5:C5:F7:F1:0E:5D Certificate issuer: /CN=D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D Certificate serial: 5CDE19B10158E6CCCB682B6CD0C9CB22645A897A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft Manifest number: B5 Signing time: Sun 02 Nov 2025 19:38:59 +0000 Manifest this update: Sun 02 Nov 2025 19:33:59 +0000 Manifest next update: Mon 03 Nov 2025 22:33:59 +0000 Files and hashes: 1: D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.crl (hash: jKHygu6TVeac40+TEZdxHacNvW71Wae9JEfftTCK2v4=) 2: 323830343a346237343a3a2f33322d313238203d3e20323637333037.roa (hash: dUZNvF/89BKD0mmyDTVw/iy7hWhShcuVbo/kVaXn0wc=) 3: 34352e3233332e3130342e302f32322d3332203d3e20323637333037.roa (hash: 9GALASwvDqxvBvCAHp51gmtuAoBU3cDGHtT6KouQUqs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.crl rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 22:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:de:19:b1:01:58:e6:cc:cb:68:2b:6c:d0:c9:cb:22:64:5a:89:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D Validity Not Before: Nov 2 19:33:59 2025 GMT Not After : Nov 3 22:33:59 2025 GMT Subject: CN=A9FBDBCB7B3A20CBF4DA1CC19DB4475510F7E7F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:82:71:e5:0b:86:d0:82:8e:8b:ef:e2:37:ca: d3:df:47:ce:31:e2:75:7e:b2:31:5b:7e:39:8f:ba: cd:d9:46:32:94:d1:dd:9f:b9:4a:87:53:b3:f6:08: 60:a9:42:89:c9:7f:ba:be:ca:5f:8b:b5:7a:04:d2: 50:26:dd:e9:0e:3a:65:59:73:be:18:9a:5c:04:38: dc:c9:93:bd:e1:be:d2:ce:22:ec:6f:f4:32:6b:19: 08:2c:f3:01:78:d0:2a:cb:09:fe:e7:33:e3:57:8e: 29:c0:75:09:ec:6b:c1:17:73:11:fa:62:a0:63:cb: dc:b9:36:92:3c:67:0e:67:3b:ed:2d:0f:f0:94:cb: dc:e7:0b:1b:cc:40:0a:3d:dd:bb:68:c0:3f:11:b8: 27:d5:66:c3:4f:77:eb:ad:65:28:c7:df:68:64:59: a9:36:e2:8f:40:e9:25:51:73:74:12:1b:bf:d9:41: 14:d6:a5:0c:ac:8f:23:e7:f8:54:2e:8f:3e:a2:77: 84:19:1f:1f:4e:e4:eb:20:1f:0e:8b:0d:3d:a9:66: e7:0d:53:bf:78:bc:24:e8:73:22:0f:3e:e9:8b:e1: f4:45:8c:86:f9:95:58:e6:44:eb:7f:84:29:45:67: 8e:27:c9:c6:22:dd:e8:23:1b:0b:44:cc:5d:ec:49: 86:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FB:DB:CB:7B:3A:20:CB:F4:DA:1C:C1:9D:B4:47:55:10:F7:E7:F2 X509v3 Authority Key Identifier: keyid:D9:18:92:54:B7:5B:9D:BB:CA:84:EA:D7:98:65:C5:C5:F7:F1:0E:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:88:7a:5e:8f:e2:3f:75:b2:f7:2d:6b:d5:98:00:0b:c7:fc: d4:46:4e:0a:c1:70:ea:4b:20:0b:5a:59:e7:19:30:6c:75:7c: d1:2d:f1:c2:b4:8b:c1:fa:d8:17:5e:5d:ac:e5:a7:98:8f:5b: 28:a8:6b:16:2e:fb:7b:a9:1c:3a:6b:bf:58:06:d3:51:a6:58: 54:e1:a9:24:eb:c6:ac:21:f6:b0:5e:4f:90:a8:40:d3:1e:9d: 5e:e8:4a:c0:35:9f:f5:52:58:ce:3d:c4:4f:08:8f:84:01:09: a1:56:be:c8:b1:26:f5:59:79:5e:63:71:87:99:25:cf:63:e8: 16:f1:49:32:53:f4:07:e2:85:2c:d1:dd:22:00:1e:61:10:ca: 41:eb:d0:7a:f2:fe:d8:a0:96:e9:3c:88:68:e8:cc:04:0e:19: c6:b9:31:8c:ca:95:ac:13:34:a4:1e:f2:cc:f2:3e:42:06:30: 44:97:a3:a9:9a:26:9f:35:b2:7f:2c:6a:25:82:98:1f:24:50: 2c:f9:3f:b0:02:de:21:b7:08:26:33:98:40:0c:89:e3:54:1b: 48:a6:10:8c:f7:a7:bf:49:b1:c2:08:02:9e:7b:58:f5:7e:60: 46:98:f6:b7:f0:c4:e3:be:30:d0:7d:0b:87:86:f2:62:c2:4a: 53:bf:e6:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXN4ZsQFY5szLaCts0MnLImRaiXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkxODkyNTRCNzVCOURCQkNBODRFQUQ3OTg2NUM1QzVG N0YxMEU1RDAeFw0yNTExMDIxOTMzNTlaFw0yNTExMDMyMjMzNTlaMDMxMTAvBgNV BAMTKEE5RkJEQkNCN0IzQTIwQ0JGNERBMUNDMTlEQjQ0NzU1MTBGN0U3RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYgnHlC4bQgo6L7+I3ytPfR84x 4nV+sjFbfjmPus3ZRjKU0d2fuUqHU7P2CGCpQonJf7q+yl+LtXoE0lAm3ekOOmVZ c74YmlwEONzJk73hvtLOIuxv9DJrGQgs8wF40CrLCf7nM+NXjinAdQnsa8EXcxH6 YqBjy9y5NpI8Zw5nO+0tD/CUy9znCxvMQAo93btowD8RuCfVZsNPd+utZSjH32hk Wak24o9A6SVRc3QSG7/ZQRTWpQysjyPn+FQujz6id4QZHx9O5OsgHw6LDT2pZucN U794vCTocyIPPumL4fRFjIb5lVjmROt/hClFZ44nycYi3egjGwtEzF3sSYbzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqfvby3s6IMv02hzBnbRHVRD35/IwHwYDVR0j BBgwFoAU2RiSVLdbnbvKhOrXmGXFxffxDl0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUhBdnhnMjhGQ0tkRDk2SGdZcnltYXNUb3VyQ3lrS3VrOGhhNXpNNkh0 cXMvMC9EOTE4OTI1NEI3NUI5REJCQ0E4NEVBRDc5ODY1QzVDNUY3RjEwRTVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5MTg5MjU0Qjc1QjlEQkJD QTg0RUFENzk4NjVDNUM1RjdGMTBFNUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUhBdnhnMjhGQ0tkRDk2SGdZcnltYXNUb3VyQ3lrS3VrOGhhNXpNNkh0cXMvMC9E OTE4OTI1NEI3NUI5REJCQ0E4NEVBRDc5ODY1QzVDNUY3RjEwRTVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdoh6Xo/iP3Wy9y1r1ZgAC8f81EZOCsFw6ksgC1pZ5xkwbHV80S3xwrSLwfrY F15drOWnmI9bKKhrFi77e6kcOmu/WAbTUaZYVOGpJOvGrCH2sF5PkKhA0x6dXuhK wDWf9VJYzj3ETwiPhAEJoVa+yLEm9Vl5XmNxh5klz2PoFvFJMlP0B+KFLNHdIgAe YRDKQevQevL+2KCW6TyIaOjMBA4ZxrkxjMqVrBM0pB7yzPI+QgYwRJejqZomnzWy fyxqJYKYHyRQLPk/sALeIbcIJjOYQAyJ41QbSKYQjPenv0mxwggCnntY9X5gRpj2 t/DE474w0H0Lh4byYsJKU7/mKw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:29 2025 by rpki-client