$ rpki-client -vvf rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/9DE32C9C96D6323358BE054E570FF9A96BD5E071.mft File: 9DE32C9C96D6323358BE054E570FF9A96BD5E071.mft (raw, json) Hash identifier: Wh/MyMRCAwjgPLFqfKv0VVuLfsXyJuPzkEJhU2x6BkM= Subject key identifier: 88:D2:55:53:BB:7E:A7:9E:86:B3:D6:46:29:DA:32:45:96:70:1D:4D Authority key identifier: 9D:E3:2C:9C:96:D6:32:33:58:BE:05:4E:57:0F:F9:A9:6B:D5:E0:71 Certificate issuer: /CN=9DE32C9C96D6323358BE054E570FF9A96BD5E071 Certificate serial: 73D312C8FCD3B33A3F310EAE1EFA4130F257354D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE32C9C96D6323358BE054E570FF9A96BD5E071.cer Subject info access: rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/9DE32C9C96D6323358BE054E570FF9A96BD5E071.mft Manifest number: 05 Signing time: Wed 05 Nov 2025 23:03:59 +0000 Manifest this update: Wed 05 Nov 2025 22:58:59 +0000 Manifest next update: Fri 07 Nov 2025 00:31:59 +0000 Files and hashes: 1: 9DE32C9C96D6323358BE054E570FF9A96BD5E071.crl (hash: 1zs8mGiARZAJx7T1deImm0+U6mA5htN5ir4lL59MUUQ=) 2: 323830343a393636343a3a2f33322d3334203d3e20323734333334.roa (hash: BON1vMPP4y5ygRUwN4IewX4Z2RB3UA2Bse05ZUhz+8I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/9DE32C9C96D6323358BE054E570FF9A96BD5E071.crl rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/9DE32C9C96D6323358BE054E570FF9A96BD5E071.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE32C9C96D6323358BE054E570FF9A96BD5E071.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 07 Nov 2025 00:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:d3:12:c8:fc:d3:b3:3a:3f:31:0e:ae:1e:fa:41:30:f2:57:35:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DE32C9C96D6323358BE054E570FF9A96BD5E071 Validity Not Before: Nov 5 22:58:59 2025 GMT Not After : Nov 7 00:31:59 2025 GMT Subject: CN=88D25553BB7EA79E86B3D64629DA324596701D4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:81:10:0e:f6:48:24:39:d7:59:27:72:f4:5d: 43:84:1f:a2:0f:dc:e4:f1:ae:23:fc:ac:09:66:8e: d0:3d:98:ff:28:31:e9:26:84:12:ba:b5:d7:bc:43: 65:96:72:ab:82:f7:60:81:c8:09:d4:c9:52:2e:b9: 26:e7:ea:7f:0a:84:80:a4:94:8c:72:54:fc:77:11: 8f:cd:1c:a9:90:c5:cf:6e:47:c4:1a:e5:4a:83:7a: 14:01:dc:10:4a:c6:91:13:53:11:0b:1f:9c:9b:59: 1d:80:45:6e:1f:fc:b0:24:1e:72:9b:9c:2d:c6:56: 29:d2:ab:cf:2e:bf:4c:e8:66:0f:2d:ac:d2:5e:b0: cb:e5:09:c5:ca:2b:44:cb:d7:53:78:0a:e3:19:9b: 6b:e2:29:e9:ea:1f:b5:22:e0:d5:83:d8:51:e8:c4: 09:1f:c7:9b:b6:7e:ef:c0:5d:d2:4d:2f:99:5d:7b: 3d:f4:a2:91:0b:a8:f0:60:81:75:93:f0:ee:6b:ab: 36:67:c4:cf:5d:a5:20:02:70:94:a2:ff:10:83:de: c9:cc:06:df:e5:dc:5e:30:af:85:b8:90:24:1a:7a: c1:de:3f:c3:86:29:85:9a:22:ee:3b:f0:f4:a2:64: f2:f3:b9:ff:0a:a4:30:37:a4:c9:1f:cb:ad:ad:f8: ee:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D2:55:53:BB:7E:A7:9E:86:B3:D6:46:29:DA:32:45:96:70:1D:4D X509v3 Authority Key Identifier: keyid:9D:E3:2C:9C:96:D6:32:33:58:BE:05:4E:57:0F:F9:A9:6B:D5:E0:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/9DE32C9C96D6323358BE054E570FF9A96BD5E071.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE32C9C96D6323358BE054E570FF9A96BD5E071.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/9DE32C9C96D6323358BE054E570FF9A96BD5E071.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:47:f7:24:a3:fd:55:68:cf:cb:cd:80:7a:c6:97:04:5c:6b: 49:07:5d:ae:35:85:0e:2c:cb:1f:2b:f7:ee:10:87:22:59:8f: ea:58:a3:ef:9b:0f:11:db:33:10:6b:3a:cf:86:1e:dc:3b:fe: 33:2c:93:9c:e8:b3:dd:4a:d9:e9:46:0f:6f:ee:7e:33:84:c3: a8:db:8f:a1:8a:90:8c:40:5f:f0:11:b3:cf:0c:22:12:b0:e1: 32:60:05:32:59:ae:c8:e7:46:b7:c5:14:8d:70:b2:89:06:a1: 7b:92:8f:91:9e:14:db:46:c0:2a:db:88:0b:a2:71:80:f4:e2: dc:26:34:0c:fd:a2:85:4b:a6:42:f8:f6:ec:bd:42:40:04:16: 27:8a:08:27:ec:f3:eb:17:1f:5e:29:ce:77:1e:1c:ed:e5:70: 9d:d4:a4:d4:f6:1e:61:48:41:fd:3d:63:73:48:32:09:22:ec: ab:2d:a3:3e:8b:d4:97:47:84:15:66:4a:67:17:78:a5:a7:78: a6:8f:61:04:6d:34:4c:c2:e2:8c:fe:90:af:3f:dd:40:22:cc: db:26:2f:55:01:c0:36:4d:19:a9:fc:2c:63:8a:c4:31:c2:2a: 7c:87:dd:71:3e:47:a9:d1:5d:ea:a6:ce:17:48:a4:f1:d3:3d: 95:7c:66:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUc9MSyPzTszo/MQ6uHvpBMPJXNU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURFMzJDOUM5NkQ2MzIzMzU4QkUwNTRFNTcwRkY5QTk2 QkQ1RTA3MTAeFw0yNTExMDUyMjU4NTlaFw0yNTExMDcwMDMxNTlaMDMxMTAvBgNV BAMTKDg4RDI1NTUzQkI3RUE3OUU4NkIzRDY0NjI5REEzMjQ1OTY3MDFENEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkgRAO9kgkOddZJ3L0XUOEH6IP 3OTxriP8rAlmjtA9mP8oMekmhBK6tde8Q2WWcquC92CByAnUyVIuuSbn6n8KhICk lIxyVPx3EY/NHKmQxc9uR8Qa5UqDehQB3BBKxpETUxELH5ybWR2ARW4f/LAkHnKb nC3GVinSq88uv0zoZg8trNJesMvlCcXKK0TL11N4CuMZm2viKenqH7Ui4NWD2FHo xAkfx5u2fu/AXdJNL5ldez30opELqPBggXWT8O5rqzZnxM9dpSACcJSi/xCD3snM Bt/l3F4wr4W4kCQaesHeP8OGKYWaIu478PSiZPLzuf8KpDA3pMkfy62t+O51AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiNJVU7t+p56Gs9ZGKdoyRZZwHU0wHwYDVR0j BBgwFoAUneMsnJbWMjNYvgVOVw/5qWvV4HEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkRNU3M5SGRKZzNmOWp0SFNURGt2ZWVDOGlkcmg4UGo4aWVpNlhSNHFq SzcvMC85REUzMkM5Qzk2RDYzMjMzNThCRTA1NEU1NzBGRjlBOTZCRDVFMDcxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlERTMyQzlDOTZENjMyMzM1 OEJFMDU0RTU3MEZGOUE5NkJENUUwNzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkRNU3M5SGRKZzNmOWp0SFNURGt2ZWVDOGlkcmg4UGo4aWVpNlhSNHFqSzcvMC85 REUzMkM5Qzk2RDYzMjMzNThCRTA1NEU1NzBGRjlBOTZCRDVFMDcxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMkf3JKP9VWjPy82AesaXBFxrSQddrjWFDizLHyv37hCHIlmP6lij75sPEdsz EGs6z4Ye3Dv+MyyTnOiz3UrZ6UYPb+5+M4TDqNuPoYqQjEBf8BGzzwwiErDhMmAF MlmuyOdGt8UUjXCyiQahe5KPkZ4U20bAKtuIC6JxgPTi3CY0DP2ihUumQvj27L1C QAQWJ4oIJ+zz6xcfXinOdx4c7eVwndSk1PYeYUhB/T1jc0gyCSLsqy2jPovUl0eE FWZKZxd4pad4po9hBG00TMLijP6Qrz/dQCLM2yYvVQHANk0ZqfwsY4rEMcIqfIfd cT5HqdFd6qbOF0ik8dM9lXxmQA== -----END CERTIFICATE-----Generated at Thu Nov 6 04:40:44 2025 by rpki-client