$ rpki-client -vvf rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft File: 9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft (raw, json) Hash identifier: iizWLOY5Lxj9chwGwBNzDhMGgm9Xw4wTklRuMc7ZXj8= Subject key identifier: 08:83:7C:54:20:0B:38:68:B6:C6:FC:8D:15:FD:4F:DA:54:40:3B:C4 Authority key identifier: 93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9 Certificate issuer: /CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9 Certificate serial: 0BC8AC537FEC309FB168404FE043206B74D6F40D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer Subject info access: rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft Manifest number: 023B Signing time: Mon 03 Nov 2025 14:44:31 +0000 Manifest this update: Mon 03 Nov 2025 14:39:31 +0000 Manifest next update: Tue 04 Nov 2025 16:17:31 +0000 Files and hashes: 1: 9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl (hash: pErQqvBjpx3Bft5muuK53t+YetB7ZZpXb+9cdYczgTo=) 2: 323830343a6634633a3a2f33322d313238203d3e20323633353738.roa (hash: tnjJpaX42qhrNEfwxFNIHRMECda6natWe4mEIY7HkLY=) 3: 3137392e3130392e36342e302f32302d3332203d3e20323633353738.roa (hash: Q1uNYyBjGbyIhtDBLHYu22N+qGJlESCPootyri/UJWg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 16:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c8:ac:53:7f:ec:30:9f:b1:68:40:4f:e0:43:20:6b:74:d6:f4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9 Validity Not Before: Nov 3 14:39:31 2025 GMT Not After : Nov 4 16:17:31 2025 GMT Subject: CN=08837C54200B3868B6C6FC8D15FD4FDA54403BC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dd:95:8e:13:12:a1:2e:2c:02:5b:d1:af:4e: 4f:a6:d1:cb:37:bc:88:62:5d:af:8d:55:7d:aa:23: 28:1c:5d:d6:2a:9f:95:7f:17:3f:1c:fd:51:5b:61: 60:93:a3:79:e6:19:e7:8d:ee:ae:af:8a:b7:53:db: 41:a3:02:e5:7a:e6:48:0c:dd:80:1a:0a:8d:11:ab: eb:1d:fe:6f:56:11:14:fa:cb:5c:b7:e4:43:99:d6: da:2b:44:00:19:7e:82:fa:b3:b9:a9:68:d1:1d:07: 70:3c:fd:79:f8:1f:3b:df:a2:9e:06:1e:c8:91:47: e1:a1:4b:65:85:41:3c:66:88:2c:38:15:e4:12:17: f5:e6:2c:56:bc:7e:c9:11:c4:a3:f9:ab:3f:27:58: 7d:01:db:3a:42:58:35:b9:8b:d6:38:62:ae:9c:52: 82:36:82:9b:d9:2b:59:52:cd:a0:29:43:8a:8a:9e: 78:88:63:aa:cb:66:bc:c3:e2:09:e2:ab:f6:c8:f1: 1b:cb:31:3c:fe:29:cc:f3:da:4b:cf:08:4b:bf:a9: 42:1f:bc:95:11:89:8d:eb:c6:e5:2b:af:53:51:66: c0:e3:9c:32:df:d4:05:47:0e:ca:b4:e6:87:1e:75: f4:b0:a2:fa:78:2f:51:2f:68:64:e0:02:9d:4a:51: c5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:83:7C:54:20:0B:38:68:B6:C6:FC:8D:15:FD:4F:DA:54:40:3B:C4 X509v3 Authority Key Identifier: keyid:93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:5e:a6:5c:04:ce:ca:0e:92:99:4e:2e:fe:a0:ff:2c:38:87: 64:21:e6:78:b4:b4:a6:a2:bc:07:8f:b0:96:97:22:09:d7:29: 3f:7e:7f:20:84:71:52:7a:d0:49:66:67:a1:52:a7:b1:a9:70: 74:30:a5:5a:5e:1c:33:d0:f7:07:c3:51:71:79:69:c9:ce:39: 49:05:2e:06:fc:82:36:7b:8f:ca:45:c6:08:db:25:a4:1e:80: 99:f3:e7:3d:7b:ad:89:7d:83:86:c5:80:d5:44:c0:44:a4:da: 2a:55:6f:f1:f3:6e:47:4b:12:b5:fa:65:f7:1c:23:da:e6:cf: 05:a7:7e:1f:dd:3a:d3:a2:1b:5a:79:44:24:3a:84:c5:c2:da: 38:32:cc:94:b1:14:34:56:6f:f9:02:21:08:a1:06:77:82:f2: 37:fa:27:9c:08:d5:a4:1f:f8:93:ab:fe:25:6c:e6:19:78:3f: 30:e8:2b:91:01:30:83:ed:57:7f:ff:3d:c4:a1:85:66:3a:ea: 19:55:53:75:d8:2c:a5:b6:93:6c:4d:90:12:af:87:25:2b:c9: 04:1c:3f:43:40:a1:1a:e2:d4:1e:e8:f9:e6:14:16:b2:bf:eb: 49:63:87:1d:ab:69:a3:77:5f:10:9b:cd:b0:f3:c2:4b:b8:fa: b7:58:6e:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUC8isU3/sMJ+xaEBP4EMga3TW9A0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM5N0MyOEUzMDY1RkJFNDgxMjU0QUE4QzBDRUY2OTA2 RjY2QUJFOTAeFw0yNTExMDMxNDM5MzFaFw0yNTExMDQxNjE3MzFaMDMxMTAvBgNV BAMTKDA4ODM3QzU0MjAwQjM4NjhCNkM2RkM4RDE1RkQ0RkRBNTQ0MDNCQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3ZWOExKhLiwCW9GvTk+m0cs3 vIhiXa+NVX2qIygcXdYqn5V/Fz8c/VFbYWCTo3nmGeeN7q6virdT20GjAuV65kgM 3YAaCo0Rq+sd/m9WERT6y1y35EOZ1torRAAZfoL6s7mpaNEdB3A8/Xn4Hzvfop4G HsiRR+GhS2WFQTxmiCw4FeQSF/XmLFa8fskRxKP5qz8nWH0B2zpCWDW5i9Y4Yq6c UoI2gpvZK1lSzaApQ4qKnniIY6rLZrzD4gniq/bI8RvLMTz+Kczz2kvPCEu/qUIf vJURiY3rxuUrr1NRZsDjnDLf1AVHDsq05ocedfSwovp4L1EvaGTgAp1KUcWPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCIN8VCALOGi2xvyNFf1P2lRAO8QwHwYDVR0j BBgwFoAUk5fCjjBl++SBJUqowM72kG9mq+kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXNoalRieHhpa2N3dk4yS0V4d0NGaGREaEJ0VjdEV0pKTGM2NUMxMUFU aHUvMC85Mzk3QzI4RTMwNjVGQkU0ODEyNTRBQThDMENFRjY5MDZGNjZBQkU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzOTdDMjhFMzA2NUZCRTQ4 MTI1NEFBOEMwQ0VGNjkwNkY2NkFCRTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXNoalRieHhpa2N3dk4yS0V4d0NGaGREaEJ0VjdEV0pKTGM2NUMxMUFUaHUvMC85 Mzk3QzI4RTMwNjVGQkU0ODEyNTRBQThDMENFRjY5MDZGNjZBQkU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsV6mXATOyg6SmU4u/qD/LDiHZCHmeLS0pqK8B4+wlpciCdcpP35/IIRxUnrQ SWZnoVKnsalwdDClWl4cM9D3B8NRcXlpyc45SQUuBvyCNnuPykXGCNslpB6AmfPn PXutiX2DhsWA1UTARKTaKlVv8fNuR0sStfpl9xwj2ubPBad+H90606IbWnlEJDqE xcLaODLMlLEUNFZv+QIhCKEGd4LyN/onnAjVpB/4k6v+JWzmGXg/MOgrkQEwg+1X f/89xKGFZjrqGVVTddgspbaTbE2QEq+HJSvJBBw/Q0ChGuLUHuj55hQWsr/rSWOH Hatpo3dfEJvNsPPCS7j6t1hucQ== -----END CERTIFICATE-----Generated at Tue Nov 4 05:04:46 2025 by rpki-client