$ rpki-client -vvf rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.mft File: C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.mft (raw, json) Hash identifier: qW86Hbpb5wG/Y3sriNMtjXyi07mIlD6VMe8lvraDrc8= Subject key identifier: 37:98:46:16:58:57:09:F6:B4:1E:E5:71:7A:2A:13:20:8E:67:15:26 Authority key identifier: C9:A3:CA:03:61:FB:5D:EB:B5:D1:BC:76:78:BE:30:AB:AB:EA:CE:18 Certificate issuer: /CN=C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18 Certificate serial: 6DF94DE5BE41E31FFC0CADB8A299D7BDE378DD7B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.cer Subject info access: rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.mft Manifest number: 09 Signing time: Mon 03 Nov 2025 09:21:39 +0000 Manifest this update: Mon 03 Nov 2025 09:16:39 +0000 Manifest next update: Tue 04 Nov 2025 12:01:39 +0000 Files and hashes: 1: C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.crl (hash: qyjtGugw+LF5S0tIgiVMqFxlZxCHbbmsYTKa2W0O6OY=) 2: 323830343a386161633a3a2f33322d3438203d3e20323733363835.roa (hash: r9BKYATaL7zpuCLfHYLC8h82pNv7+c+XuB+/9Zzo3Wo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.crl rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f9:4d:e5:be:41:e3:1f:fc:0c:ad:b8:a2:99:d7:bd:e3:78:dd:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18 Validity Not Before: Nov 3 09:16:39 2025 GMT Not After : Nov 4 12:01:39 2025 GMT Subject: CN=37984616585709F6B41EE5717A2A13208E671526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b8:94:f7:0f:d8:f3:6a:bc:1e:e0:d2:a0:a5: 84:d0:e6:48:24:76:aa:b3:a5:c1:c9:4c:74:d6:b5: d6:cc:3f:ce:77:43:9c:74:46:fc:1c:1a:25:87:b2: 14:86:11:93:64:ce:1f:8b:6f:7d:12:6c:d9:70:26: 0c:19:12:5c:c9:a7:9a:f9:6e:ff:32:bf:1f:ca:33: c0:a6:1c:72:01:84:de:23:53:35:b2:73:f2:70:ff: 78:59:02:e0:73:3b:97:2d:ba:c2:de:4b:98:70:d8: ae:3f:11:f3:b1:d0:50:98:99:cd:eb:56:42:b0:83: c3:45:e4:c4:d1:e8:45:4d:fe:7f:9b:ed:7e:87:e3: 3b:7b:1c:d8:73:1c:bf:2b:93:19:a5:47:33:b6:6d: ee:10:92:28:0f:c1:0b:bc:c8:d1:e5:aa:f5:23:84: 67:73:16:37:b7:df:41:3f:ef:ff:e3:e1:66:13:46: 99:61:10:fc:97:85:ae:36:09:91:62:a5:09:1d:6c: 90:b7:54:96:39:4f:2e:23:d3:f6:5b:2b:8e:96:30: b0:7e:f1:f6:15:ea:5c:f3:40:f1:8e:2f:03:dd:4c: 9c:c0:36:19:27:c9:c5:15:97:a8:9c:4e:95:ba:dc: a1:9c:ca:3d:88:78:41:45:b6:fe:77:62:f2:dc:ac: 44:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:98:46:16:58:57:09:F6:B4:1E:E5:71:7A:2A:13:20:8E:67:15:26 X509v3 Authority Key Identifier: keyid:C9:A3:CA:03:61:FB:5D:EB:B5:D1:BC:76:78:BE:30:AB:AB:EA:CE:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:8a:f1:96:35:0e:12:67:30:4b:38:1c:87:83:05:7d:d4:14: ff:d8:f8:80:4e:2d:6b:f5:56:78:d0:f0:5d:5f:c4:13:90:e6: 11:6b:a2:75:76:c3:0d:fd:d8:bd:b6:e1:5a:58:a8:f8:81:96: ea:6e:df:41:25:27:73:68:2e:c9:35:e4:f4:14:a2:bc:e4:ee: e6:ea:6f:3c:f0:9c:9d:03:a4:c7:28:78:fa:65:a0:2f:8b:8f: 96:79:59:18:22:1d:e2:04:2d:c9:da:57:ec:d5:82:0e:5a:39: 18:0f:d7:07:d4:0b:e1:27:e8:4f:eb:47:44:62:60:57:d0:7e: a4:6a:9f:f3:13:25:67:62:f5:80:dc:4e:d7:6d:21:18:2c:48: ae:8b:72:46:9e:7f:e7:25:22:60:ab:b9:9c:53:4a:64:4f:f1: a3:64:95:9b:2f:a3:42:94:a6:96:f9:74:c7:d8:40:d5:a4:ba: 5c:7c:52:0f:34:91:ed:33:64:17:57:e5:8b:7a:65:a6:b6:ce: 82:df:90:a1:f8:e8:66:62:40:d3:88:f2:cb:26:cb:17:b8:eb: d8:5d:b1:17:11:19:c4:87:bc:4a:05:b7:7a:17:dd:65:e7:d2: 1b:81:e2:dd:2a:56:6a:3e:71:02:09:a4:54:f6:93:a1:e4:e8: b2:69:45:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbflN5b5B4x/8DK24opnXveN43XswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlBM0NBMDM2MUZCNURFQkI1RDFCQzc2NzhCRTMwQUJB QkVBQ0UxODAeFw0yNTExMDMwOTE2MzlaFw0yNTExMDQxMjAxMzlaMDMxMTAvBgNV BAMTKDM3OTg0NjE2NTg1NzA5RjZCNDFFRTU3MTdBMkExMzIwOEU2NzE1MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIuJT3D9jzarwe4NKgpYTQ5kgk dqqzpcHJTHTWtdbMP853Q5x0RvwcGiWHshSGEZNkzh+Lb30SbNlwJgwZElzJp5r5 bv8yvx/KM8CmHHIBhN4jUzWyc/Jw/3hZAuBzO5ctusLeS5hw2K4/EfOx0FCYmc3r VkKwg8NF5MTR6EVN/n+b7X6H4zt7HNhzHL8rkxmlRzO2be4QkigPwQu8yNHlqvUj hGdzFje330E/7//j4WYTRplhEPyXha42CZFipQkdbJC3VJY5Ty4j0/ZbK46WMLB+ 8fYV6lzzQPGOLwPdTJzANhknycUVl6icTpW63KGcyj2IeEFFtv53YvLcrEShAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUN5hGFlhXCfa0HuVxeioTII5nFSYwHwYDVR0j BBgwFoAUyaPKA2H7Xeu10bx2eL4wq6vqzhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVhzRk1ackJtM2NLV1hERHIyZDFtQkcycTdmbVRCOGtENjZSeHN1WlM4 cnMvMC9DOUEzQ0EwMzYxRkI1REVCQjVEMUJDNzY3OEJFMzBBQkFCRUFDRTE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5QTNDQTAzNjFGQjVERUJC NUQxQkM3Njc4QkUzMEFCQUJFQUNFMTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVhzRk1ackJtM2NLV1hERHIyZDFtQkcycTdmbVRCOGtENjZSeHN1WlM4cnMvMC9D OUEzQ0EwMzYxRkI1REVCQjVEMUJDNzY3OEJFMzBBQkFCRUFDRTE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOIrxljUOEmcwSzgch4MFfdQU/9j4gE4ta/VWeNDwXV/EE5DmEWuidXbDDf3Y vbbhWlio+IGW6m7fQSUnc2guyTXk9BSivOTu5upvPPCcnQOkxyh4+mWgL4uPlnlZ GCId4gQtydpX7NWCDlo5GA/XB9QL4SfoT+tHRGJgV9B+pGqf8xMlZ2L1gNxO120h GCxIrotyRp5/5yUiYKu5nFNKZE/xo2SVmy+jQpSmlvl0x9hA1aS6XHxSDzSR7TNk F1fli3plprbOgt+QofjoZmJA04jyyybLF7jr2F2xFxEZxIe8SgW3ehfdZefSG4Hi 3SpWaj5xAgmkVPaToeTosmlFoA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:11:52 2025 by rpki-client