$ rpki-client -vvf rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft File: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft (raw, json) Hash identifier: bA/eedu9J5yzictbe/7qXMBzwXKQWjuK/fDN9iRXiK8= Subject key identifier: 8B:F5:0A:15:56:F7:8B:49:DA:95:1C:53:78:8A:34:29:99:6B:D9:F8 Authority key identifier: 09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0 Certificate issuer: /CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0 Certificate serial: 05DC8F28DA86C5CBCA38D19C1EA1718D00FEEB87 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer Subject info access: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft Manifest number: 0243 Signing time: Tue 04 Nov 2025 02:23:34 +0000 Manifest this update: Tue 04 Nov 2025 02:18:34 +0000 Manifest next update: Wed 05 Nov 2025 06:22:34 +0000 Files and hashes: 1: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl (hash: DIJ/5ycZ43STRxggKZxFvbe9UEdsFENC2PYtYqNzt5o=) 2: 34352e3136312e33362e302f32322d3332203d3e20323638353030.roa (hash: i8P9i+svn6eTugjVKIH7LsBAziQNryR6tY4w3i2ypmg=) 3: 323830343a353232633a3a2f33322d313238203d3e20323638353030.roa (hash: VL/snBcA4TQASO1JgrhJJ4GnQSQZ2IO6gxXlLXQGjG8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 06:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:dc:8f:28:da:86:c5:cb:ca:38:d1:9c:1e:a1:71:8d:00:fe:eb:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0 Validity Not Before: Nov 4 02:18:34 2025 GMT Not After : Nov 5 06:22:34 2025 GMT Subject: CN=8BF50A1556F78B49DA951C53788A3429996BD9F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:22:68:8a:c4:46:25:33:49:4e:1c:54:b8:00: af:45:97:3a:1a:53:25:94:f1:0f:4f:f8:82:0e:a7: a4:43:8d:4b:56:ee:a8:9c:9d:2f:5f:c8:49:bd:3f: 81:f3:f8:e1:9a:d0:a9:d6:c9:4a:36:df:65:98:c4: e9:c5:19:68:e5:38:ed:4f:8b:90:be:b1:f8:91:74: d7:0b:1e:71:c5:a0:01:f0:d3:02:a5:a3:8a:60:8a: af:6e:90:e6:9a:6c:fd:7f:27:c4:a6:e5:2f:cc:a3: aa:86:3d:91:c4:a4:2a:15:34:8e:60:6c:1b:80:49: d6:5c:56:c4:01:d8:25:4e:73:03:3a:f2:c6:88:1d: bc:79:42:d4:1f:05:c7:e3:b3:15:f0:78:d2:34:ab: da:8f:9a:86:8e:63:16:f9:8c:e9:ee:f5:ef:57:27: 1e:d2:0a:cd:87:2e:01:75:a4:b6:7f:21:03:da:59: 87:91:7e:ae:27:6b:d4:1d:42:7f:cc:24:61:5c:60: 4a:c6:b9:e0:8e:9d:58:57:6f:98:c1:8f:15:29:be: 60:af:e7:d8:ed:ad:9c:9d:36:7c:55:f2:79:b9:05: b4:41:af:67:e5:b2:10:09:ec:f2:92:a7:3e:33:03: 50:cd:27:5f:92:de:bd:97:18:e4:9a:51:1d:66:a2: 25:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F5:0A:15:56:F7:8B:49:DA:95:1C:53:78:8A:34:29:99:6B:D9:F8 X509v3 Authority Key Identifier: keyid:09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:d3:24:09:e4:c1:d0:9d:df:45:2b:9d:01:09:f4:fb:92:92: 93:b3:fd:28:18:a6:86:88:11:a9:ec:b5:31:56:c9:50:6f:d5: 7a:27:d9:94:59:30:e2:04:af:57:24:71:e8:fc:25:70:ee:4e: 43:d5:d2:de:de:15:6a:f5:08:fa:b7:b8:62:88:ee:c5:b3:f5: 60:40:18:00:0e:3b:33:8a:a3:6b:45:a6:e4:3a:e6:17:dd:b8: f0:18:0c:88:34:dc:ec:0f:86:a3:4b:42:84:49:15:8e:cb:7c: b8:ff:6b:9a:6f:3c:7c:86:d6:e9:ca:da:e4:3e:f2:12:1e:d0: b7:f4:dd:9d:43:f4:00:2c:5c:3f:ab:a5:30:9d:82:f6:d2:50: 87:99:82:6a:a7:5b:b8:8c:56:fa:f4:34:5a:25:85:0b:45:fe: 96:4d:7d:d8:c7:8e:be:f5:a6:a7:59:6f:b8:5c:8b:aa:a9:3a: f7:21:c9:7e:09:6c:db:a5:5b:d5:7a:70:55:2f:6d:5d:41:99: 83:a6:54:b4:d8:d4:aa:ac:f1:bd:be:97:8e:aa:12:8c:1b:8d: e9:3b:0f:25:22:c0:fa:53:88:9d:6f:e5:7f:d1:8e:eb:98:80: 05:76:d5:3c:26:c9:66:f7:00:17:3d:e2:46:c7:83:c3:d3:42: 42:e1:77:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBdyPKNqGxcvKONGcHqFxjQD+64cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlEOEQ0QTY3MDY5NTgwRTM0RjE2QUIwNDc0MjBCRDRB MDhENEZGMDAeFw0yNTExMDQwMjE4MzRaFw0yNTExMDUwNjIyMzRaMDMxMTAvBgNV BAMTKDhCRjUwQTE1NTZGNzhCNDlEQTk1MUM1Mzc4OEEzNDI5OTk2QkQ5RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ImiKxEYlM0lOHFS4AK9Flzoa UyWU8Q9P+IIOp6RDjUtW7qicnS9fyEm9P4Hz+OGa0KnWyUo232WYxOnFGWjlOO1P i5C+sfiRdNcLHnHFoAHw0wKlo4pgiq9ukOaabP1/J8Sm5S/Mo6qGPZHEpCoVNI5g bBuASdZcVsQB2CVOcwM68saIHbx5QtQfBcfjsxXweNI0q9qPmoaOYxb5jOnu9e9X Jx7SCs2HLgF1pLZ/IQPaWYeRfq4na9QdQn/MJGFcYErGueCOnVhXb5jBjxUpvmCv 59jtrZydNnxV8nm5BbRBr2flshAJ7PKSpz4zA1DNJ1+S3r2XGOSaUR1moiWlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUi/UKFVb3i0nalRxTeIo0KZlr2fgwHwYDVR0j BBgwFoAUCdjUpnBpWA408WqwR0IL1KCNT/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnlMMURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9D UWsvMC8wOUQ4RDRBNjcwNjk1ODBFMzRGMTZBQjA0NzQyMEJENEEwOEQ0RkYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5RDhENEE2NzA2OTU4MEUz NEYxNkFCMDQ3NDIwQkQ0QTA4RDRGRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnlMMURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9DUWsvMC8w OUQ4RDRBNjcwNjk1ODBFMzRGMTZBQjA0NzQyMEJENEEwOEQ0RkYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN9MkCeTB0J3fRSudAQn0+5KSk7P9KBimhogRqey1MVbJUG/VeifZlFkw4gSv VyRx6PwlcO5OQ9XS3t4VavUI+re4YojuxbP1YEAYAA47M4qja0Wm5DrmF9248BgM iDTc7A+Go0tChEkVjst8uP9rmm88fIbW6cra5D7yEh7Qt/TdnUP0ACxcP6ulMJ2C 9tJQh5mCaqdbuIxW+vQ0WiWFC0X+lk192MeOvvWmp1lvuFyLqqk69yHJfgls26Vb 1XpwVS9tXUGZg6ZUtNjUqqzxvb6XjqoSjBuN6TsPJSLA+lOInW/lf9GO65iABXbV PCbJZvcAFz3iRseDw9NCQuF33Q== -----END CERTIFICATE-----Generated at Tue Nov 4 06:47:46 2025 by rpki-client