$ rpki-client -vvf rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft File: 9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft (raw, json) Hash identifier: nOKf0sVFYXMBBd2acd8Fyv17jXrV60ikk3h74LFy5IE= Subject key identifier: 8F:95:E2:E6:AD:D2:35:48:84:CD:14:62:C5:60:FB:43:44:B5:0E:55 Authority key identifier: 99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87 Certificate issuer: /CN=9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87 Certificate serial: 41E9D2BD83B135BFA4BFE33D3046D4A6EAD5477D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft Manifest number: 02EF Signing time: Mon 03 Nov 2025 01:12:14 +0000 Manifest this update: Mon 03 Nov 2025 01:07:14 +0000 Manifest next update: Tue 04 Nov 2025 01:55:14 +0000 Files and hashes: 1: 323830343a346566303a3a2f33322d3336203d3e20323638323932.roa (hash: JzJsy650SSsFhDpBxyHj9SfH3TNilDwlyqAwmdmbW/o=) 2: 34352e3233372e342e302f32322d3234203d3e20323638323932.roa (hash: YOvdKqb793ktG+K4voH6fVWuWoEYneOJkNY8DmbE57k=) 3: 9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl (hash: ISHjt8rQm6nYx2BctsJ0tG1lbBfpZN9aSEFbW02ukp4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 01:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:e9:d2:bd:83:b1:35:bf:a4:bf:e3:3d:30:46:d4:a6:ea:d5:47:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87 Validity Not Before: Nov 3 01:07:14 2025 GMT Not After : Nov 4 01:55:14 2025 GMT Subject: CN=8F95E2E6ADD2354884CD1462C560FB4344B50E55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:57:c6:b6:48:80:4c:e8:e6:a2:90:f4:81: 50:5d:03:a2:f9:07:77:c8:88:60:5a:1b:7a:a0:64: d9:aa:48:b4:09:bb:0b:22:b4:8d:d2:c8:fc:22:3d: a1:b9:e8:c5:6a:69:fe:5e:5d:28:57:99:88:9b:2f: 0a:0a:03:b8:c6:26:31:91:44:17:aa:f3:04:c6:8c: e2:82:32:02:fb:61:ee:04:e2:ea:e6:49:46:e9:04: 48:6e:21:34:e9:85:02:d5:88:e9:a6:f5:42:38:1b: b2:12:75:86:ed:7a:01:03:d0:c2:10:04:3f:28:83: 62:2b:39:bd:94:6f:0a:48:90:28:53:1e:08:bb:da: 4e:7c:bb:e7:ba:40:2f:de:df:b2:d6:c7:59:73:d7: 5b:23:07:bd:67:95:5c:00:ca:e2:e3:b1:d1:c4:d9: 2b:ba:a0:72:6a:68:49:c2:38:80:b3:b5:0f:00:65: 20:3e:1e:74:72:ae:19:a7:ff:79:01:e4:59:00:bc: 2f:f5:5c:79:82:20:53:1c:16:7b:a9:f5:54:ba:90: f0:a3:2b:fd:7d:0f:c4:f6:3e:dd:55:3d:f9:54:7e: c0:ff:34:24:55:de:5f:75:89:6d:95:c2:47:64:11: 47:1f:d7:57:d7:e2:6a:10:00:be:f5:b7:fc:cc:12: 38:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:95:E2:E6:AD:D2:35:48:84:CD:14:62:C5:60:FB:43:44:B5:0E:55 X509v3 Authority Key Identifier: keyid:99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:fd:ee:f8:45:e4:31:03:6a:ff:33:ae:13:19:de:db:a5:42: 43:c9:8b:16:86:9c:91:89:47:d5:26:62:10:46:82:ba:00:f6: 60:b0:83:6b:9a:4a:39:ac:6b:ec:07:d6:fd:ab:a7:6f:36:0a: 29:8a:b2:dc:8f:6c:5a:a2:2d:b7:b0:2e:c1:21:18:48:ba:b4: c1:c6:a7:5b:28:97:e1:a8:12:aa:fb:51:58:ff:a9:72:b3:52: 06:5e:85:b6:35:08:68:35:16:38:c0:3e:5d:db:e7:3f:45:ad: 82:27:b0:85:73:fa:e0:a8:be:ea:12:8d:4b:f2:ab:01:d5:aa: fe:fe:43:32:0b:56:cf:49:72:43:8c:cb:7c:85:f0:8c:30:a7: c3:6e:f8:0f:cb:1a:9d:3f:6a:0f:2e:e7:6f:eb:15:5c:62:19: 89:d6:ef:ad:19:d6:e7:a2:45:4a:29:38:6b:a3:7e:bb:8d:40: fe:58:02:1e:ea:9f:c5:2e:bc:c5:e6:91:94:bd:72:11:ee:90: f9:cf:87:37:f9:0a:8b:00:ed:cc:4a:2a:6d:3e:f7:3c:3b:36: 69:8e:43:ca:2b:05:8e:38:3b:a4:af:d2:de:53:d1:bf:72:df: 23:bc:b9:56:39:2d:49:97:b8:94:7d:dd:91:c7:e2:26:45:7a: 02:c9:da:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQenSvYOxNb+kv+M9MEbUpurVR30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk2NUIxRTI5MzFDOTRDREEwM0NCNjNFRjNBNkNBRTMz QkMxNUU4NzAeFw0yNTExMDMwMTA3MTRaFw0yNTExMDQwMTU1MTRaMDMxMTAvBgNV BAMTKDhGOTVFMkU2QUREMjM1NDg4NENEMTQ2MkM1NjBGQjQzNDRCNTBFNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuU1fGtkiATOjmopD0gVBdA6L5 B3fIiGBaG3qgZNmqSLQJuwsitI3SyPwiPaG56MVqaf5eXShXmYibLwoKA7jGJjGR RBeq8wTGjOKCMgL7Ye4E4urmSUbpBEhuITTphQLViOmm9UI4G7ISdYbtegED0MIQ BD8og2IrOb2UbwpIkChTHgi72k58u+e6QC/e37LWx1lz11sjB71nlVwAyuLjsdHE 2Su6oHJqaEnCOICztQ8AZSA+HnRyrhmn/3kB5FkAvC/1XHmCIFMcFnup9VS6kPCj K/19D8T2Pt1VPflUfsD/NCRV3l91iW2VwkdkEUcf11fX4moQAL71t/zMEjgBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUj5Xi5q3SNUiEzRRixWD7Q0S1DlUwHwYDVR0j BBgwFoAUmWWx4pMclM2gPLY+86bK4zvBXocwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmJkM2RjelpMb3phcVVoRmdyVTJiVGlBN2o3aktvelRHZ0VSZHo4bzJi aG4vMC85OTY1QjFFMjkzMUM5NENEQTAzQ0I2M0VGM0E2Q0FFMzNCQzE1RTg3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5NjVCMUUyOTMxQzk0Q0RB MDNDQjYzRUYzQTZDQUUzM0JDMTVFODcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmJkM2RjelpMb3phcVVoRmdyVTJiVGlBN2o3aktvelRHZ0VSZHo4bzJiaG4vMC85 OTY1QjFFMjkzMUM5NENEQTAzQ0I2M0VGM0E2Q0FFMzNCQzE1RTg3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPv3u+EXkMQNq/zOuExne26VCQ8mLFoackYlH1SZiEEaCugD2YLCDa5pKOaxr 7AfW/aunbzYKKYqy3I9sWqItt7AuwSEYSLq0wcanWyiX4agSqvtRWP+pcrNSBl6F tjUIaDUWOMA+XdvnP0WtgiewhXP64Ki+6hKNS/KrAdWq/v5DMgtWz0lyQ4zLfIXw jDCnw274D8sanT9qDy7nb+sVXGIZidbvrRnW56JFSik4a6N+u41A/lgCHuqfxS68 xeaRlL1yEe6Q+c+HN/kKiwDtzEoqbT73PDs2aY5DyisFjjg7pK/S3lPRv3LfI7y5 VjktSZe4lH3dkcfiJkV6Asna7g== -----END CERTIFICATE-----Generated at Mon Nov 3 12:31:30 2025 by rpki-client