$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft File: D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft (raw, json) Hash identifier: j/kvDZtvZrZXYt1oDsoJVdjPtm8eh1UhTvPlyKY1QSM= Subject key identifier: D8:D4:EF:2A:3F:6D:7B:E8:5E:8D:32:17:B4:A0:17:32:ED:27:F6:51 Authority key identifier: D7:96:87:8B:38:80:1E:1B:A9:BC:F0:FF:2E:29:FB:87:A5:CC:72:AB Certificate issuer: /CN=D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB Certificate serial: 47909EBAB3E080C90CF86DF1292965554A3CDD3D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.cer Subject info access: rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft Manifest number: E7 Signing time: Mon 03 Nov 2025 17:12:38 +0000 Manifest this update: Mon 03 Nov 2025 17:07:38 +0000 Manifest next update: Tue 04 Nov 2025 20:07:38 +0000 Files and hashes: 1: D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.crl (hash: JwyLiz637Ld1F1xADTy8ogKyqkdbY25Pn/O4d7TXOpg=) 2: AS28343.roa (hash: 38oCwk7agpN74oJb3YDJeiQoYXWYFqwuFuOq7AnXNJI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.crl rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 18:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:90:9e:ba:b3:e0:80:c9:0c:f8:6d:f1:29:29:65:55:4a:3c:dd:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB Validity Not Before: Nov 3 17:07:38 2025 GMT Not After : Nov 4 20:07:38 2025 GMT Subject: CN=D8D4EF2A3F6D7BE85E8D3217B4A01732ED27F651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dc:26:82:fe:0e:a9:07:dc:44:b3:d3:5c:99: 98:26:09:53:3a:18:0f:21:ce:e7:e8:6e:10:da:d3: 57:5e:41:64:10:b3:e4:aa:c0:66:87:0d:68:0e:00: cb:eb:83:f8:72:3a:e4:26:d1:dc:57:a7:f5:9b:af: e2:8e:5a:29:90:1d:54:84:ea:de:91:92:44:3d:11: 9c:fd:3a:e1:37:95:bc:27:be:82:e6:5c:5c:87:67: 0d:b7:65:e5:41:58:89:41:0d:d8:81:25:ec:38:d9: 67:81:91:c3:d3:e4:b3:82:27:05:09:61:fe:cf:0b: 9c:62:8c:af:02:e9:b0:ef:4b:32:e7:86:7a:95:e7: f0:43:e8:e9:99:7e:ab:bf:af:d4:f2:bd:21:58:20: f3:1c:0e:c6:43:91:a9:bc:69:49:b5:e9:f7:70:d3: 28:7a:ab:23:d5:a5:9c:2a:3e:1e:d8:3e:f2:20:28: 04:0f:38:73:5d:1e:a8:7e:53:35:95:6b:fb:78:6b: 4f:b9:35:55:86:12:d3:2f:eb:4f:9d:61:0b:5f:8a: cb:b0:8f:e4:ce:d7:c6:df:d7:db:b6:98:40:a1:6f: 08:99:d0:3d:63:7d:df:9f:b4:76:39:3c:90:8d:fc: 02:28:fc:fe:a6:1c:32:4e:99:47:d2:d9:f4:42:d0: 9c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D4:EF:2A:3F:6D:7B:E8:5E:8D:32:17:B4:A0:17:32:ED:27:F6:51 X509v3 Authority Key Identifier: keyid:D7:96:87:8B:38:80:1E:1B:A9:BC:F0:FF:2E:29:FB:87:A5:CC:72:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:0b:b3:65:80:a1:a3:13:5b:fd:fa:5a:2e:79:f9:7b:59:4c: a6:e4:c5:d2:a4:31:bd:1f:ed:c3:5c:fc:d4:9e:4c:cf:fd:d3: 15:a7:0a:f5:95:e9:60:23:ce:8e:99:7f:90:9e:28:05:e7:1c: 44:a0:7b:de:bd:cd:63:de:0a:0b:3e:6a:94:c2:ef:49:72:8e: 61:88:67:64:a8:76:d6:f7:8f:9a:a1:3a:85:27:52:73:c9:e3: bd:17:74:07:c7:69:d4:f2:3b:d4:ff:37:c5:04:43:ca:d0:1b: 76:79:53:78:38:f2:d0:bb:d2:59:ab:74:62:0a:d8:0f:3a:2f: 61:6c:62:53:e9:8b:32:6e:e5:5b:42:bb:d1:90:10:03:b5:3d: c0:98:bc:cb:95:c7:80:c2:ca:7f:34:3f:cc:9c:f9:97:cd:23: 87:f7:33:28:f0:11:f5:31:11:09:06:3c:83:18:4a:24:96:60: 11:bf:b2:46:dc:53:18:13:14:15:59:a6:14:2c:4f:91:0b:9f: 4f:2f:19:7d:5d:21:5d:e1:c7:22:a0:7e:20:c1:ff:38:c0:53: 1d:a2:bb:7b:76:28:6b:80:53:d1:29:8d:a1:b4:b5:3f:27:fc: fa:0f:00:c7:a4:b6:cd:c5:ae:f9:f9:23:18:8c:09:e9:46:e2: 02:52:de:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR5CeurPggMkM+G3xKSllVUo83T0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc5Njg3OEIzODgwMUUxQkE5QkNGMEZGMkUyOUZCODdB NUNDNzJBQjAeFw0yNTExMDMxNzA3MzhaFw0yNTExMDQyMDA3MzhaMDMxMTAvBgNV BAMTKEQ4RDRFRjJBM0Y2RDdCRTg1RThEMzIxN0I0QTAxNzMyRUQyN0Y2NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF3CaC/g6pB9xEs9NcmZgmCVM6 GA8hzufobhDa01deQWQQs+SqwGaHDWgOAMvrg/hyOuQm0dxXp/Wbr+KOWimQHVSE 6t6RkkQ9EZz9OuE3lbwnvoLmXFyHZw23ZeVBWIlBDdiBJew42WeBkcPT5LOCJwUJ Yf7PC5xijK8C6bDvSzLnhnqV5/BD6OmZfqu/r9TyvSFYIPMcDsZDkam8aUm16fdw 0yh6qyPVpZwqPh7YPvIgKAQPOHNdHqh+UzWVa/t4a0+5NVWGEtMv60+dYQtfisuw j+TO18bf19u2mEChbwiZ0D1jfd+ftHY5PJCN/AIo/P6mHDJOmUfS2fRC0Jz5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2NTvKj9te+hejTIXtKAXMu0n9lEwHwYDVR0j BBgwFoAU15aHiziAHhupvPD/Lin7h6XMcqswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWlyZEwzOFJ1ZDlGZTQzbnJ3Q1RoNkxQZ1JlcmFWc3pIUzZ2MUp5SDZZ U3cvMC9ENzk2ODc4QjM4ODAxRTFCQTlCQ0YwRkYyRTI5RkI4N0E1Q0M3MkFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OTY4NzhCMzg4MDFFMUJB OUJDRjBGRjJFMjlGQjg3QTVDQzcyQUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWlyZEwzOFJ1ZDlGZTQzbnJ3Q1RoNkxQZ1JlcmFWc3pIUzZ2MUp5SDZZU3cvMC9E Nzk2ODc4QjM4ODAxRTFCQTlCQ0YwRkYyRTI5RkI4N0E1Q0M3MkFCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARguzZYChoxNb/fpaLnn5e1lMpuTF0qQxvR/tw1z81J5Mz/3TFacK9ZXpYCPO jpl/kJ4oBeccRKB73r3NY94KCz5qlMLvSXKOYYhnZKh21vePmqE6hSdSc8njvRd0 B8dp1PI71P83xQRDytAbdnlTeDjy0LvSWat0YgrYDzovYWxiU+mLMm7lW0K70ZAQ A7U9wJi8y5XHgMLKfzQ/zJz5l80jh/czKPAR9TERCQY8gxhKJJZgEb+yRtxTGBMU FVmmFCxPkQufTy8ZfV0hXeHHIqB+IMH/OMBTHaK7e3Yoa4BT0SmNobS1Pyf8+g8A x6S2zcWu+fkjGIwJ6UbiAlLeYQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:08:52 2025 by rpki-client