$ rpki-client -vvf rpki-repo.registro.br/repo/B4iUdeeuhT2A3tGv5XbWFcVv9yZjN4f9hr9dcA7dZ3pA/0/968BC20DD88FCE9320FB1B78DEABAE723650B19A.mft File: 968BC20DD88FCE9320FB1B78DEABAE723650B19A.mft (raw, json) Hash identifier: kgO6ps0+dLAaxVg6sAbOLxEYP0PHBqSboCIWm+HAxtY= Subject key identifier: 9A:D3:42:61:F4:CF:17:DF:66:56:52:9F:FC:43:D5:04:C0:00:3F:14 Authority key identifier: 96:8B:C2:0D:D8:8F:CE:93:20:FB:1B:78:DE:AB:AE:72:36:50:B1:9A Certificate issuer: /CN=968BC20DD88FCE9320FB1B78DEABAE723650B19A Certificate serial: 5FA2884C688EB1C8F8C4A23F846FB9DF4BBF45B6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968BC20DD88FCE9320FB1B78DEABAE723650B19A.cer Subject info access: rsync://rpki-repo.registro.br/repo/B4iUdeeuhT2A3tGv5XbWFcVv9yZjN4f9hr9dcA7dZ3pA/0/968BC20DD88FCE9320FB1B78DEABAE723650B19A.mft Manifest number: 0E Signing time: Thu 18 Sep 2025 12:02:26 +0000 Manifest this update: Thu 18 Sep 2025 11:57:26 +0000 Manifest next update: Fri 19 Sep 2025 14:56:26 +0000 Files and hashes: 1: 968BC20DD88FCE9320FB1B78DEABAE723650B19A.crl (hash: 98u5vJyE21wWNl3pk8mi6XcBlpGT1hgoeTyZ6XbBJO0=) 2: 323830343a386437303a3a2f33322d3438203d3e20323733333537.roa (hash: 4CEQBt4BmzbIPE+E6qeam70iefvvydOSZTgaOLcmxe4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/B4iUdeeuhT2A3tGv5XbWFcVv9yZjN4f9hr9dcA7dZ3pA/0/968BC20DD88FCE9320FB1B78DEABAE723650B19A.crl rsync://rpki-repo.registro.br/repo/B4iUdeeuhT2A3tGv5XbWFcVv9yZjN4f9hr9dcA7dZ3pA/0/968BC20DD88FCE9320FB1B78DEABAE723650B19A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968BC20DD88FCE9320FB1B78DEABAE723650B19A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 14:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a2:88:4c:68:8e:b1:c8:f8:c4:a2:3f:84:6f:b9:df:4b:bf:45:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968BC20DD88FCE9320FB1B78DEABAE723650B19A Validity Not Before: Sep 18 11:57:26 2025 GMT Not After : Sep 19 14:56:26 2025 GMT Subject: CN=9AD34261F4CF17DF6656529FFC43D504C0003F14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5c:a6:9a:aa:d4:b8:cb:d3:69:20:52:07:d3: b8:3c:e8:3f:af:9f:20:32:f4:d3:50:c5:54:9a:88: 11:f2:3d:c7:d0:0b:65:bf:42:9d:0c:90:08:7a:aa: f8:2a:5b:ff:e2:68:d9:34:3c:af:f5:aa:61:0e:73: 33:d6:0c:a4:62:4b:a5:39:2e:eb:d5:aa:2a:70:15: 4f:f2:a8:b2:18:78:3a:6d:8d:86:c7:19:e8:4c:d4: d2:ec:4f:74:38:a2:a8:cf:37:38:0b:3f:ab:1c:37: 24:ac:a8:20:c7:39:df:17:e8:56:dc:d6:0b:e2:f4: e3:54:8c:eb:60:0a:3a:f8:86:eb:9b:e2:80:99:86: c6:1a:a2:7a:9e:21:ce:9c:aa:af:df:c0:16:48:9a: c9:7e:f5:6b:98:a6:70:37:18:67:a3:75:b0:b1:a4: 34:a8:da:d1:0d:a1:26:d2:25:4b:e6:4e:e5:09:a2: 7c:84:0d:34:77:e0:f0:95:ae:e7:2b:33:ee:c5:d5: 4e:f2:fa:5d:b6:4a:34:a9:fb:b5:8a:4f:d5:17:65: 13:ef:0c:a2:54:2f:3b:30:36:ca:30:73:60:71:9b: 7b:a6:2e:eb:ef:68:48:01:61:1b:36:74:ed:3f:5c: f4:89:04:e9:f0:60:df:2f:35:0d:d1:bf:38:0c:a1: 04:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D3:42:61:F4:CF:17:DF:66:56:52:9F:FC:43:D5:04:C0:00:3F:14 X509v3 Authority Key Identifier: keyid:96:8B:C2:0D:D8:8F:CE:93:20:FB:1B:78:DE:AB:AE:72:36:50:B1:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/B4iUdeeuhT2A3tGv5XbWFcVv9yZjN4f9hr9dcA7dZ3pA/0/968BC20DD88FCE9320FB1B78DEABAE723650B19A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968BC20DD88FCE9320FB1B78DEABAE723650B19A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4iUdeeuhT2A3tGv5XbWFcVv9yZjN4f9hr9dcA7dZ3pA/0/968BC20DD88FCE9320FB1B78DEABAE723650B19A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:5a:5f:34:be:5e:32:00:2b:ed:cf:2e:c3:90:f1:42:1b:c5: b3:3e:e5:07:c7:7a:b1:21:41:b4:ae:0f:57:56:ce:58:3c:fe: 13:dc:b4:54:0b:ac:4f:99:67:54:d2:b4:3c:df:98:bb:4e:aa: 3d:4f:96:bb:be:59:23:60:fb:92:5a:e3:57:b8:af:1f:59:73: 22:44:73:21:e0:1d:4f:03:33:53:06:2f:b0:b3:3f:57:4f:b6: dc:40:df:a0:a6:98:22:98:37:5e:61:3e:28:17:29:0d:4e:ac: 2f:44:14:44:86:b2:3c:03:80:f7:9b:f2:43:e6:7a:8b:2c:78: 88:5d:97:e8:10:e1:96:28:43:9c:06:19:88:ef:1a:aa:cc:b3: 4a:be:85:b6:dc:bc:cf:6f:41:69:c1:49:9d:83:87:f4:06:04: f9:df:85:e6:6d:69:22:b1:56:22:9e:5b:42:97:b8:db:17:bb: e7:8a:9c:a8:d1:b4:5b:d6:4e:d5:53:6a:52:f3:fe:f2:20:8c: 36:23:14:22:d9:cd:f7:85:07:9b:30:c7:8e:54:be:9b:0d:07: 5b:bf:c5:c3:16:91:f9:7a:74:cc:e9:e0:67:e8:2d:d9:38:47: 55:58:a9:fb:fd:69:0b:a6:bd:41:05:0a:84:40:0f:a7:01:1e: 01:0d:69:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUX6KITGiOscj4xKI/hG+530u/RbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4QkMyMEREODhGQ0U5MzIwRkIxQjc4REVBQkFFNzIz NjUwQjE5QTAeFw0yNTA5MTgxMTU3MjZaFw0yNTA5MTkxNDU2MjZaMDMxMTAvBgNV BAMTKDlBRDM0MjYxRjRDRjE3REY2NjU2NTI5RkZDNDNENTA0QzAwMDNGMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHXKaaqtS4y9NpIFIH07g86D+v nyAy9NNQxVSaiBHyPcfQC2W/Qp0MkAh6qvgqW//iaNk0PK/1qmEOczPWDKRiS6U5 LuvVqipwFU/yqLIYeDptjYbHGehM1NLsT3Q4oqjPNzgLP6scNySsqCDHOd8X6Fbc 1gvi9ONUjOtgCjr4huub4oCZhsYaonqeIc6cqq/fwBZImsl+9WuYpnA3GGejdbCx pDSo2tENoSbSJUvmTuUJonyEDTR34PCVrucrM+7F1U7y+l22SjSp+7WKT9UXZRPv DKJULzswNsowc2Bxm3umLuvvaEgBYRs2dO0/XPSJBOnwYN8vNQ3RvzgMoQTnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmtNCYfTPF99mVlKf/EPVBMAAPxQwHwYDVR0j BBgwFoAUlovCDdiPzpMg+xt43quucjZQsZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQjRpVWRlZXVoVDJBM3RHdjVYYldGY1Z2OXlaak40ZjlocjlkY0E3ZFoz cEEvMC85NjhCQzIwREQ4OEZDRTkzMjBGQjFCNzhERUFCQUU3MjM2NTBCMTlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2OEJDMjBERDg4RkNFOTMy MEZCMUI3OERFQUJBRTcyMzY1MEIxOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QjRpVWRlZXVoVDJBM3RHdjVYYldGY1Z2OXlaak40ZjlocjlkY0E3ZFozcEEvMC85 NjhCQzIwREQ4OEZDRTkzMjBGQjFCNzhERUFCQUU3MjM2NTBCMTlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFlpfNL5eMgAr7c8uw5DxQhvFsz7lB8d6sSFBtK4PV1bOWDz+E9y0VAusT5ln VNK0PN+Yu06qPU+Wu75ZI2D7klrjV7ivH1lzIkRzIeAdTwMzUwYvsLM/V0+23EDf oKaYIpg3XmE+KBcpDU6sL0QURIayPAOA95vyQ+Z6iyx4iF2X6BDhlihDnAYZiO8a qsyzSr6Ftty8z29BacFJnYOH9AYE+d+F5m1pIrFWIp5bQpe42xe754qcqNG0W9ZO 1VNqUvP+8iCMNiMUItnN94UHmzDHjlS+mw0HW7/FwxaR+Xp0zOngZ+gt2ThHVVip +/1pC6a9QQUKhEAPpwEeAQ1prQ== -----END CERTIFICATE-----Generated at Thu Sep 18 18:04:00 2025 by rpki-client