$ rpki-client -vvf rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft File: C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft (raw, json) Hash identifier: tPochy6MPclO/4KHGPFcatilH/s4dYBCq6PQEDXibn0= Subject key identifier: 56:25:77:1C:E3:8C:C7:50:96:8C:3B:68:74:31:3B:C8:1A:81:30:F7 Authority key identifier: C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B Certificate issuer: /CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B Certificate serial: 65DBAD0DB9067E5756D47215504B0AE5AD9AAD0A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer Subject info access: rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft Manifest number: 0216 Signing time: Wed 20 Aug 2025 06:33:35 +0000 Manifest this update: Wed 20 Aug 2025 06:28:35 +0000 Manifest next update: Thu 21 Aug 2025 09:02:35 +0000 Files and hashes: 1: 323830343a373739383a3a2f33322d313238203d3e20323731313838.roa (hash: Oq8XP3wv/ghsrdwyvbkipNglCVLH6ofbbhpDuh9rzrI=) 2: C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl (hash: MeDJztVLkADdHaNMUQAGYRsk2QrDKrC24gFUJPkGmhI=) 3: 323830343a373739383a3a2f33342d313238203d3e20323731313838.roa (hash: cQjGN5WENW46/jBuhJA1lT+mTYrjHprWmDjgq2R5zjY=) 4: 3230302e362e34382e302f32342d3332203d3e20323731313838.roa (hash: HXzDFfjvaudy+HCQJ3LevFAJF+IlNvHbKDb7azvjpI4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 09:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:db:ad:0d:b9:06:7e:57:56:d4:72:15:50:4b:0a:e5:ad:9a:ad:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B Validity Not Before: Aug 20 06:28:35 2025 GMT Not After : Aug 21 09:02:35 2025 GMT Subject: CN=5625771CE38CC750968C3B6874313BC81A8130F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b5:0c:9c:d9:19:bf:7f:80:83:dc:90:95:1c: ef:14:d1:79:99:97:09:e1:85:4d:56:fb:75:2b:40: 04:fb:8f:c6:a8:fd:bd:4b:ec:19:3e:0b:b3:3d:02: ae:80:a3:aa:fb:2d:52:98:d8:da:cb:d7:41:32:bb: 6d:e4:19:45:42:c6:a7:53:b7:2a:a9:1a:d8:99:0c: ab:29:46:ae:db:6e:d1:d0:5f:c2:ad:92:f7:ee:35: 00:2d:9f:a3:ab:bd:d4:11:ba:05:4b:1e:6c:6c:19: 47:d3:dd:11:a7:84:38:20:bd:5c:16:37:db:d1:a1: 75:90:45:24:b6:8b:4d:c2:4f:c2:af:eb:a9:0e:e3: f3:65:2d:5c:69:22:5a:48:a0:e1:a5:28:b7:58:be: 4b:92:46:f5:b5:8d:58:74:8a:4f:f3:09:2f:47:18: 98:80:cc:44:af:48:61:c2:7b:c7:ba:e9:bb:85:da: 62:97:e9:08:44:4f:64:96:e8:50:25:d3:11:1f:d6: 06:d6:93:73:3f:c8:66:e9:7d:2c:1a:5c:66:82:05: cb:77:41:f5:3c:2f:e2:1e:f7:12:58:04:b6:0b:c7: 09:a0:53:01:c3:11:dd:28:3c:0c:d3:42:88:1b:03: 9a:ef:4b:ba:de:d5:bf:fe:c1:59:70:ad:5f:48:d9: 20:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:25:77:1C:E3:8C:C7:50:96:8C:3B:68:74:31:3B:C8:1A:81:30:F7 X509v3 Authority Key Identifier: keyid:C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:29:4b:10:16:c8:ba:d3:f0:2f:23:6f:16:af:c8:eb:22:b1: 35:76:5f:81:ff:d5:e0:1e:63:b5:1d:91:85:ef:db:2a:46:06: b5:51:92:b5:e9:bf:c8:0d:30:22:58:69:f5:9f:50:a3:fa:54: ea:82:f2:a9:42:9e:18:4f:1f:74:f6:dd:9c:33:de:09:9e:69: bb:2e:4c:d0:6b:bd:4e:22:21:76:96:64:d2:34:ab:e1:c9:86: df:98:d9:9f:16:c9:9a:11:c1:71:f8:46:17:49:66:18:8b:d4: e8:9c:87:87:20:87:5d:65:18:90:48:33:b5:3b:e6:d2:47:f9: 9d:03:fa:82:94:83:f3:7a:57:92:a6:12:80:fd:a4:e3:00:4b: cb:71:0f:40:7c:72:5d:02:27:4d:66:a5:22:95:f4:0c:a1:76: 06:e3:22:89:d7:bf:9f:a4:0a:f5:69:fc:53:c1:1c:e3:d2:54: ff:9b:14:f2:35:52:7e:a8:d4:4b:d3:17:0b:9b:84:df:0d:f5: de:ca:dc:c5:b9:08:8b:c1:a9:2f:72:49:0f:55:90:5c:bd:10: 0d:2c:e8:17:ca:b6:8c:17:12:e4:d7:e8:77:16:d8:70:6d:1a: 54:da:39:78:ea:e1:e2:5f:c1:fe:0d:5a:06:3c:f1:42:a7:73: 58:62:55:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZdutDbkGfldW1HIVUEsK5a2arQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlEQjhFQTExRjZBNUE0ODVBRUMyOTU1NjE0MzgxNURC MjUwN0EzQjAeFw0yNTA4MjAwNjI4MzVaFw0yNTA4MjEwOTAyMzVaMDMxMTAvBgNV BAMTKDU2MjU3NzFDRTM4Q0M3NTA5NjhDM0I2ODc0MzEzQkM4MUE4MTMwRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDptQyc2Rm/f4CD3JCVHO8U0XmZ lwnhhU1W+3UrQAT7j8ao/b1L7Bk+C7M9Aq6Ao6r7LVKY2NrL10Eyu23kGUVCxqdT tyqpGtiZDKspRq7bbtHQX8KtkvfuNQAtn6OrvdQRugVLHmxsGUfT3RGnhDggvVwW N9vRoXWQRSS2i03CT8Kv66kO4/NlLVxpIlpIoOGlKLdYvkuSRvW1jVh0ik/zCS9H GJiAzESvSGHCe8e66buF2mKX6QhET2SW6FAl0xEf1gbWk3M/yGbpfSwaXGaCBct3 QfU8L+Ie9xJYBLYLxwmgUwHDEd0oPAzTQogbA5rvS7re1b/+wVlwrV9I2SBFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUViV3HOOMx1CWjDtodDE7yBqBMPcwHwYDVR0j BBgwFoAUyduOoR9qWkha7ClVYUOBXbJQejswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVRXeFpWUzVMSnpMdlVYdmdrM2RvUjlhRjZoMW9nWEFCMkM1bWtlZ0p2 SzQvMC9DOURCOEVBMTFGNkE1QTQ4NUFFQzI5NTU2MTQzODE1REIyNTA3QTNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5REI4RUExMUY2QTVBNDg1 QUVDMjk1NTYxNDM4MTVEQjI1MDdBM0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVRXeFpWUzVMSnpMdlVYdmdrM2RvUjlhRjZoMW9nWEFCMkM1bWtlZ0p2SzQvMC9D OURCOEVBMTFGNkE1QTQ4NUFFQzI5NTU2MTQzODE1REIyNTA3QTNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABilLEBbIutPwLyNvFq/I6yKxNXZfgf/V4B5jtR2Rhe/bKkYGtVGStem/yA0w Ilhp9Z9Qo/pU6oLyqUKeGE8fdPbdnDPeCZ5puy5M0Gu9TiIhdpZk0jSr4cmG35jZ nxbJmhHBcfhGF0lmGIvU6JyHhyCHXWUYkEgztTvm0kf5nQP6gpSD83pXkqYSgP2k 4wBLy3EPQHxyXQInTWalIpX0DKF2BuMiide/n6QK9Wn8U8Ec49JU/5sU8jVSfqjU S9MXC5uE3w313srcxbkIi8GpL3JJD1WQXL0QDSzoF8q2jBcS5NfodxbYcG0aVNo5 eOrh4l/B/g1aBjzxQqdzWGJVGw== -----END CERTIFICATE-----Generated at Wed Aug 20 16:30:57 2025 by rpki-client