$ rpki-client -vvf rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft File: 9A8CDCA9443D140D02860AA0070928656A172CE1.mft (raw, json) Hash identifier: 1y5pWrjsOue5T/ADMVBa0/MbplhAGrgIp45FfZAFLec= Subject key identifier: 81:95:5B:1A:3D:8E:02:3F:B5:65:00:7F:F2:F8:0E:D4:A4:C7:F7:B1 Authority key identifier: 9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1 Certificate issuer: /CN=9A8CDCA9443D140D02860AA0070928656A172CE1 Certificate serial: 33D5917D8AB753E0C702D840CA2C60D3686AC0D1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer Subject info access: rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft Manifest number: 0305 Signing time: Mon 03 Nov 2025 15:33:06 +0000 Manifest this update: Mon 03 Nov 2025 15:28:06 +0000 Manifest next update: Tue 04 Nov 2025 18:48:06 +0000 Files and hashes: 1: 3137302e3234352e39322e302f32322d3234203d3e20323636353230.roa (hash: UXdHA797b5kGmZTBMIoKW3ejH3LItHlI0iAJwdYv0OA=) 2: 9A8CDCA9443D140D02860AA0070928656A172CE1.crl (hash: 5BpNY3ZbJha8WbJJvKEbhP2ATOx9WR7pBAZPuLFk2bo=) 3: 323830343a333930633a3a2f33322d3438203d3e20323636353230.roa (hash: 6QI59QFSBypQTZ5kO9smMt1xwKHCr2mkAkTRBmyy6jQ=) 4: 34352e3137372e3134302e302f32322d3234203d3e20323636353230.roa (hash: 8R4rvXI+iMslyFXB4PeOWRFCLmpgdZrCcLVZ5KHaVfI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.crl rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 18:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d5:91:7d:8a:b7:53:e0:c7:02:d8:40:ca:2c:60:d3:68:6a:c0:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8CDCA9443D140D02860AA0070928656A172CE1 Validity Not Before: Nov 3 15:28:06 2025 GMT Not After : Nov 4 18:48:06 2025 GMT Subject: CN=81955B1A3D8E023FB565007FF2F80ED4A4C7F7B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:00:f1:06:da:63:8e:f0:da:92:57:68:68:07: c9:6d:8d:c4:65:8d:be:a9:05:84:6a:f6:ac:93:47: f3:7d:6e:f7:bc:5f:fd:fb:0e:ec:45:0e:d1:8c:0c: 9f:75:f4:b0:c2:57:f1:31:41:68:48:0c:18:83:b8: 32:66:a6:88:d1:6b:f7:0d:03:a9:6c:e4:dd:3e:a1: df:23:85:76:33:20:26:1f:aa:80:48:8d:9e:f0:7b: 07:3d:59:5b:c8:07:5c:13:16:0b:10:1d:8d:6d:7d: 4b:c9:21:bd:63:9d:36:02:1a:cd:c0:73:6b:36:fe: 37:ad:27:71:df:f8:f3:47:9d:50:89:78:34:f5:31: af:b0:c5:62:2f:86:45:bd:51:60:59:6e:ac:35:b2: a1:2d:91:91:a2:4c:f1:39:e5:60:0e:e5:8f:d2:55: 80:be:1c:f2:8b:6c:5a:82:23:ae:51:97:d3:f0:d0: 15:b2:29:2b:68:27:40:4a:f4:1e:46:94:f7:85:3b: f2:65:83:26:88:f7:b5:c1:71:83:86:8f:e3:9b:c6: 70:22:c0:21:0d:09:b0:ce:6c:80:10:0b:8f:3a:81: a6:b9:c4:51:00:41:d5:9c:fb:74:ea:a8:fd:f5:f6: 99:b8:e5:ff:17:07:ec:1a:6d:23:8f:ad:3e:5d:78: e7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:95:5B:1A:3D:8E:02:3F:B5:65:00:7F:F2:F8:0E:D4:A4:C7:F7:B1 X509v3 Authority Key Identifier: keyid:9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d2:a8:31:7f:42:8d:70:3b:23:c6:f7:8a:91:98:80:83:26: 7b:6a:21:49:6d:2c:08:7a:6b:18:d6:b6:6e:09:64:ed:a0:aa: 8e:d8:44:e8:17:56:f8:14:ff:9e:d6:68:48:dd:13:9e:48:5c: d2:05:a7:22:a7:8f:30:55:a5:61:f8:1c:72:4b:de:b2:20:b8: 4a:3a:3e:c8:0d:d6:c4:7f:df:e4:40:b7:4c:9a:4f:a1:48:df: 6d:c4:b8:95:e6:38:7c:53:da:9a:36:a0:d7:01:6a:99:a7:81: 69:a8:60:48:f3:f6:bb:67:73:5c:1d:78:bc:a9:a2:4f:23:d2: 0e:13:a8:4b:9f:da:09:8e:7a:ba:ef:56:21:ba:f9:83:6f:07: 2f:8f:b6:5d:0b:8a:77:e1:9b:88:74:27:69:ae:5e:b2:44:23: a2:28:eb:7e:13:92:b5:bd:6d:ba:a0:78:32:4d:12:84:62:f3: bb:d4:b2:cf:21:ec:41:e8:23:47:e0:af:fe:0d:73:03:21:b2: 07:b8:10:fa:8d:f7:b1:3a:40:87:30:0d:55:96:05:6a:0c:88: dc:4d:60:4b:9b:03:aa:de:e4:33:7b:ec:ef:68:3f:95:3d:7f: 45:17:6f:a8:f2:48:b8:f7:1a:0e:cd:a5:bc:a1:bb:d0:5d:06: f8:c8:1b:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUM9WRfYq3U+DHAthAyixg02hqwNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4Q0RDQTk0NDNEMTQwRDAyODYwQUEwMDcwOTI4NjU2 QTE3MkNFMTAeFw0yNTExMDMxNTI4MDZaFw0yNTExMDQxODQ4MDZaMDMxMTAvBgNV BAMTKDgxOTU1QjFBM0Q4RTAyM0ZCNTY1MDA3RkYyRjgwRUQ0QTRDN0Y3QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoAPEG2mOO8NqSV2hoB8ltjcRl jb6pBYRq9qyTR/N9bve8X/37DuxFDtGMDJ919LDCV/ExQWhIDBiDuDJmpojRa/cN A6ls5N0+od8jhXYzICYfqoBIjZ7wewc9WVvIB1wTFgsQHY1tfUvJIb1jnTYCGs3A c2s2/jetJ3Hf+PNHnVCJeDT1Ma+wxWIvhkW9UWBZbqw1sqEtkZGiTPE55WAO5Y/S VYC+HPKLbFqCI65Rl9Pw0BWyKStoJ0BK9B5GlPeFO/JlgyaI97XBcYOGj+ObxnAi wCENCbDObIAQC486gaa5xFEAQdWc+3TqqP319pm45f8XB+wabSOPrT5deOdVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgZVbGj2OAj+1ZQB/8vgO1KTH97EwHwYDVR0j BBgwFoAUmozcqUQ9FA0ChgqgBwkoZWoXLOEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmd5TllXTjlyOGZQV003d0NmZHB6M1JOaEh3aEFaeUNrQkhjcVh1OWlC VW0vMS85QThDRENBOTQ0M0QxNDBEMDI4NjBBQTAwNzA5Mjg2NTZBMTcyQ0UxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBOENEQ0E5NDQzRDE0MEQw Mjg2MEFBMDA3MDkyODY1NkExNzJDRTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qmd5TllXTjlyOGZQV003d0NmZHB6M1JOaEh3aEFaeUNrQkhjcVh1OWlCVW0vMS85 QThDRENBOTQ0M0QxNDBEMDI4NjBBQTAwNzA5Mjg2NTZBMTcyQ0UxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXNKoMX9CjXA7I8b3ipGYgIMme2ohSW0sCHprGNa2bglk7aCqjthE6BdW+BT/ ntZoSN0Tnkhc0gWnIqePMFWlYfgcckvesiC4Sjo+yA3WxH/f5EC3TJpPoUjfbcS4 leY4fFPamjag1wFqmaeBaahgSPP2u2dzXB14vKmiTyPSDhOoS5/aCY56uu9WIbr5 g28HL4+2XQuKd+GbiHQnaa5eskQjoijrfhOStb1tuqB4Mk0ShGLzu9SyzyHsQegj R+Cv/g1zAyGyB7gQ+o33sTpAhzANVZYFagyI3E1gS5sDqt7kM3vs72g/lT1/RRdv qPJIuPcaDs2lvKG70F0G+Mgb/g== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:00 2025 by rpki-client