$ rpki-client -vvf rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.mft File: 59F73133C9108C206FE9409E22591FE97847518A.mft (raw, json) Hash identifier: Cw8xwrBpvKdtanNsmc1By+0e/mfwYjrRnPn7/i2s74E= Subject key identifier: EB:6D:DF:E1:BC:14:0F:19:7D:8C:B5:46:30:D7:F2:C2:44:A6:8B:C4 Authority key identifier: 59:F7:31:33:C9:10:8C:20:6F:E9:40:9E:22:59:1F:E9:78:47:51:8A Certificate issuer: /CN=59F73133C9108C206FE9409E22591FE97847518A Certificate serial: 39E3AC404A1918E80942641AA20FFAD89B6D93EC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59F73133C9108C206FE9409E22591FE97847518A.cer Subject info access: rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.mft Manifest number: 0301 Signing time: Mon 03 Nov 2025 13:01:35 +0000 Manifest this update: Mon 03 Nov 2025 12:56:35 +0000 Manifest next update: Tue 04 Nov 2025 15:30:35 +0000 Files and hashes: 1: 59F73133C9108C206FE9409E22591FE97847518A.crl (hash: /stMrokNVm7DGrnVOKJtbUQgt0pzV4cAq9amKrkXI2I=) 2: 3137372e3133372e3131322e302f32312d3234203d3e203532363030.roa (hash: tj+Nk5YIFtNNAnbCVCfNRDb7J/dOF5OGaMHrBVoGDB4=) 3: 323830343a6431633a3a2f33322d313238203d3e203532363030.roa (hash: KALs4Bg1TQfELrRE+85zSdFG7MESCGOAh2u6gZmU89k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.crl rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59F73133C9108C206FE9409E22591FE97847518A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 15:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e3:ac:40:4a:19:18:e8:09:42:64:1a:a2:0f:fa:d8:9b:6d:93:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59F73133C9108C206FE9409E22591FE97847518A Validity Not Before: Nov 3 12:56:35 2025 GMT Not After : Nov 4 15:30:35 2025 GMT Subject: CN=EB6DDFE1BC140F197D8CB54630D7F2C244A68BC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e9:9c:e0:40:ac:da:b0:b2:64:1f:21:88:d2: b3:e0:db:26:8f:53:37:b5:11:4e:04:f5:de:32:65: 44:a2:78:49:c8:dc:74:14:07:90:c3:1a:19:da:d5: 9c:95:90:9a:dd:50:f8:f1:af:ad:4d:a2:c9:46:95: 1f:44:1e:10:f5:83:f5:d6:7d:a9:bf:eb:b8:8e:2d: a1:1d:89:5d:ba:40:b1:92:f2:8b:77:0f:b9:60:8b: 50:a7:e2:16:15:da:c3:a9:44:ec:b0:17:2a:6f:e8: 58:82:90:f9:3b:84:ea:7c:9b:ae:39:99:f1:2d:2e: a7:f4:ba:86:d9:82:0a:c5:14:74:82:94:b6:16:36: bc:66:3b:43:98:cd:f0:de:c1:f7:50:51:29:a9:b6: 5a:b1:3b:2f:a2:5c:33:bf:d0:00:1d:90:ac:5e:79: f2:ed:66:0c:9d:11:09:7a:2a:2b:10:e0:12:fa:c9: 87:cc:fb:c7:0b:f4:85:7b:4c:a2:c4:b1:38:d0:91: 9a:f2:6c:1c:91:8c:e8:b2:40:d6:f7:50:75:2a:73: ab:94:a6:6b:c7:8e:f5:be:d3:71:ff:4f:69:a4:34: 15:a1:8b:5b:00:62:78:66:31:dd:f3:85:13:15:d3: 04:42:ab:05:b5:7a:eb:2c:80:94:41:62:24:5c:aa: 8c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6D:DF:E1:BC:14:0F:19:7D:8C:B5:46:30:D7:F2:C2:44:A6:8B:C4 X509v3 Authority Key Identifier: keyid:59:F7:31:33:C9:10:8C:20:6F:E9:40:9E:22:59:1F:E9:78:47:51:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59F73133C9108C206FE9409E22591FE97847518A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/1/59F73133C9108C206FE9409E22591FE97847518A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:3a:e6:30:cb:18:5f:63:ca:04:59:32:2a:ff:90:cd:ee:2a: 01:72:f4:99:78:ac:e1:6d:ed:6d:7a:a6:8c:66:f6:b7:6c:2a: ba:dd:33:7d:94:a4:fd:be:88:d8:43:bb:67:d3:4b:e3:ea:20: 70:58:7f:cd:a3:5e:c4:da:02:10:d2:3c:ac:f1:cf:fc:b0:c6: 84:75:75:a5:12:9d:ae:85:71:cf:78:9a:cd:fc:55:51:53:7c: c4:c0:1e:94:fa:36:60:0e:9a:e6:38:26:50:99:a9:74:f1:49: f0:0b:43:8c:f4:9e:d4:da:3c:71:2e:ca:1d:c8:6a:25:82:bf: e8:da:9e:a6:17:fc:1b:7a:15:8c:8b:dd:e1:20:db:03:fa:2b: 50:a9:90:bf:b8:32:3f:5c:2f:61:fe:72:70:5b:96:c2:36:e4: a1:72:65:1c:67:c5:49:e7:6d:78:72:08:88:fa:54:2e:89:17: cd:b7:3e:c0:c6:cd:1e:33:3b:0e:7e:02:8e:52:aa:a8:4e:e8: f8:1a:14:b0:81:e2:85:c1:28:77:4f:85:11:a3:4b:9f:af:88: b9:51:9c:8b:38:f5:39:36:8f:ab:eb:a9:04:48:1e:07:b4:c4: a8:2a:9f:2c:89:88:66:e1:ea:98:6d:6f:20:e2:96:98:06:77: 83:43:e8:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOeOsQEoZGOgJQmQaog/62Jttk+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlGNzMxMzNDOTEwOEMyMDZGRTk0MDlFMjI1OTFGRTk3 ODQ3NTE4QTAeFw0yNTExMDMxMjU2MzVaFw0yNTExMDQxNTMwMzVaMDMxMTAvBgNV BAMTKEVCNkRERkUxQkMxNDBGMTk3RDhDQjU0NjMwRDdGMkMyNDRBNjhCQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM6ZzgQKzasLJkHyGI0rPg2yaP Uze1EU4E9d4yZUSieEnI3HQUB5DDGhna1ZyVkJrdUPjxr61NoslGlR9EHhD1g/XW fam/67iOLaEdiV26QLGS8ot3D7lgi1Cn4hYV2sOpROywFypv6FiCkPk7hOp8m645 mfEtLqf0uobZggrFFHSClLYWNrxmO0OYzfDewfdQUSmptlqxOy+iXDO/0AAdkKxe efLtZgydEQl6KisQ4BL6yYfM+8cL9IV7TKLEsTjQkZrybByRjOiyQNb3UHUqc6uU pmvHjvW+03H/T2mkNBWhi1sAYnhmMd3zhRMV0wRCqwW1eussgJRBYiRcqoytAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU623f4bwUDxl9jLVGMNfywkSmi8QwHwYDVR0j BBgwFoAUWfcxM8kQjCBv6UCeIlkf6XhHUYowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXhORVdqaGNpdnIzdUM1NGtaNUdva3hpWGNyV0w0Ync4alM5WERQR2o1 Mm4vMS81OUY3MzEzM0M5MTA4QzIwNkZFOTQwOUUyMjU5MUZFOTc4NDc1MThBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU5RjczMTMzQzkxMDhDMjA2 RkU5NDA5RTIyNTkxRkU5Nzg0NzUxOEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OXhORVdqaGNpdnIzdUM1NGtaNUdva3hpWGNyV0w0Ync4alM5WERQR2o1Mm4vMS81 OUY3MzEzM0M5MTA4QzIwNkZFOTQwOUUyMjU5MUZFOTc4NDc1MThBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAszrmMMsYX2PKBFkyKv+Qze4qAXL0mXis4W3tbXqmjGb2t2wqut0zfZSk/b6I 2EO7Z9NL4+ogcFh/zaNexNoCENI8rPHP/LDGhHV1pRKdroVxz3iazfxVUVN8xMAe lPo2YA6a5jgmUJmpdPFJ8AtDjPSe1No8cS7KHchqJYK/6Nqephf8G3oVjIvd4SDb A/orUKmQv7gyP1wvYf5ycFuWwjbkoXJlHGfFSedteHIIiPpULokXzbc+wMbNHjM7 Dn4CjlKqqE7o+BoUsIHihcEod0+FEaNLn6+IuVGcizj1OTaPq+upBEgeB7TEqCqf LImIZuHqmG1vIOKWmAZ3g0Po4w== -----END CERTIFICATE-----Generated at Mon Nov 3 19:25:38 2025 by rpki-client