$ rpki-client -vvf rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/9E4879406B65EF8221038D32E538827A3EECF4BA.mft File: 9E4879406B65EF8221038D32E538827A3EECF4BA.mft (raw, json) Hash identifier: d4NRpsrjiDUyzZgRRfOtyRV6ZhryaBFqXW9HFvcRwKw= Subject key identifier: 5E:31:82:71:AC:B4:30:0F:0C:AA:C2:73:27:73:4C:3A:D2:3C:E2:DE Authority key identifier: 9E:48:79:40:6B:65:EF:82:21:03:8D:32:E5:38:82:7A:3E:EC:F4:BA Certificate issuer: /CN=9E4879406B65EF8221038D32E538827A3EECF4BA Certificate serial: 2DE032D81337AC77198B75404E5AD778DBFFD1AA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4879406B65EF8221038D32E538827A3EECF4BA.cer Subject info access: rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/9E4879406B65EF8221038D32E538827A3EECF4BA.mft Manifest number: 2F Signing time: Mon 03 Nov 2025 00:25:02 +0000 Manifest this update: Mon 03 Nov 2025 00:20:02 +0000 Manifest next update: Tue 04 Nov 2025 03:29:02 +0000 Files and hashes: 1: 9E4879406B65EF8221038D32E538827A3EECF4BA.crl (hash: jlqH3iL9LCTxkAOQ9ex4OWCJoHj7uxbhVIQUSbPepXE=) 2: 34352e3136372e34342e302f32332d3233203d3e20323638303530.roa (hash: aNORjxhlTSUHtVXKZieQ8wfokZ/T0y04jgWrQ3Mv6dc=) 3: 34352e3136372e34342e302f32322d3232203d3e20323638303530.roa (hash: rrJ+t/uPzPVSo2fnqpoXZyOtw7S+kiE8d9qnvH8GwUw=) 4: 34352e3136372e34342e302f32342d3234203d3e20323638303530.roa (hash: bMR89hrvvP8DXXQQoXsS2lNkIaUeLBjSaEJGV1P0brY=) 5: 34352e3136372e34362e302f32332d3233203d3e20323638303530.roa (hash: vkcq7ewTfVMzG730cc6lY9sIXO3PP4Ac2fQO3ga1HOg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/9E4879406B65EF8221038D32E538827A3EECF4BA.crl rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/9E4879406B65EF8221038D32E538827A3EECF4BA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4879406B65EF8221038D32E538827A3EECF4BA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 03:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e0:32:d8:13:37:ac:77:19:8b:75:40:4e:5a:d7:78:db:ff:d1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E4879406B65EF8221038D32E538827A3EECF4BA Validity Not Before: Nov 3 00:20:02 2025 GMT Not After : Nov 4 03:29:02 2025 GMT Subject: CN=5E318271ACB4300F0CAAC27327734C3AD23CE2DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4a:96:d7:6e:cc:ed:57:97:2f:fd:41:59:c1: ff:8d:c7:05:b3:e4:06:41:7e:b7:56:77:92:e2:b9: 8c:a6:fb:19:57:26:26:e9:04:36:9a:80:f4:2f:98: f9:c3:c2:e1:0e:b5:ea:56:26:80:81:a3:e1:a8:70: 74:1d:c3:55:6d:de:54:c5:6e:75:db:b3:ad:7b:db: 0b:d1:0a:47:cc:6f:1e:e9:02:4a:c7:4e:00:d9:d5: 0a:b5:f9:bf:f0:51:c8:ac:cc:5e:6d:5c:17:a4:71: 23:92:69:67:90:9b:51:89:a5:ad:c1:eb:40:d7:fe: a0:50:fa:7b:50:0c:ec:6f:c7:b1:70:bf:e6:3b:4f: 97:74:40:cd:88:31:60:d2:9f:78:a8:9e:0c:7d:e2: b0:e8:3c:a1:fc:13:8c:2c:f6:c7:92:79:3f:a6:7f: af:6e:75:ca:ac:53:47:ec:c3:9b:d5:7b:6b:c7:01: a0:91:49:23:7b:a8:4e:21:d7:d7:88:36:72:da:40: a0:66:81:dc:d5:f7:09:c3:d9:b1:87:4a:59:19:36: c8:fe:a2:fb:11:a9:87:9b:a8:53:84:cd:d2:51:30: aa:93:ae:72:be:7c:bf:5f:38:28:67:ca:de:7d:c9: 18:9f:00:26:64:a4:3b:7c:92:46:d0:26:e8:5a:8b: b0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:31:82:71:AC:B4:30:0F:0C:AA:C2:73:27:73:4C:3A:D2:3C:E2:DE X509v3 Authority Key Identifier: keyid:9E:48:79:40:6B:65:EF:82:21:03:8D:32:E5:38:82:7A:3E:EC:F4:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/9E4879406B65EF8221038D32E538827A3EECF4BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4879406B65EF8221038D32E538827A3EECF4BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgzokigrUWGYb4JHya7a92M9ub74tQ36Km1w1ZPSWUbb/0/9E4879406B65EF8221038D32E538827A3EECF4BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:99:cd:c6:3d:1c:76:1e:88:22:2c:61:c8:25:1b:2d:29:de: 81:02:f1:31:96:51:bb:db:8d:65:20:9f:d5:d2:af:e1:b1:fe: 26:28:c8:a3:d0:8b:8b:ad:16:f3:3c:6b:0d:97:79:61:8f:9b: 67:33:be:24:73:cf:af:70:21:18:26:55:9e:c4:c3:aa:17:93: bc:ff:f4:ef:37:79:76:e0:c7:68:2f:8a:b6:99:4a:0e:15:dc: 4e:0d:3f:ff:b1:d4:63:f7:fe:1c:96:b9:bc:0a:45:94:67:cf: a7:e3:28:23:0c:ab:80:40:23:a7:21:59:cf:cf:5e:e4:c2:83: 7c:e8:e8:82:7b:b3:e6:88:db:32:be:56:11:98:f4:01:29:53: b9:27:95:7e:17:2d:7d:44:61:b3:c1:bf:6e:58:05:2a:54:a6: 9f:92:5c:a6:13:59:af:40:dc:a0:f9:c7:ca:9b:c3:bd:cf:44: 1e:8f:2f:0e:79:8d:a8:18:5e:69:7f:fe:85:33:8e:b1:86:74: 9c:c1:7b:65:c8:86:b8:93:2e:38:92:27:c1:24:d8:45:2d:eb: ff:73:8b:40:eb:ea:19:d6:d6:81:45:3a:84:da:56:43:60:ef: 20:98:5a:e8:56:dd:c9:2f:d2:51:4e:b3:4c:5e:bf:f9:5d:59: 82:a2:19:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULeAy2BM3rHcZi3VATlrXeNv/0aowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU0ODc5NDA2QjY1RUY4MjIxMDM4RDMyRTUzODgyN0Ez RUVDRjRCQTAeFw0yNTExMDMwMDIwMDJaFw0yNTExMDQwMzI5MDJaMDMxMTAvBgNV BAMTKDVFMzE4MjcxQUNCNDMwMEYwQ0FBQzI3MzI3NzM0QzNBRDIzQ0UyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPSpbXbsztV5cv/UFZwf+NxwWz 5AZBfrdWd5LiuYym+xlXJibpBDaagPQvmPnDwuEOtepWJoCBo+GocHQdw1Vt3lTF bnXbs6172wvRCkfMbx7pAkrHTgDZ1Qq1+b/wUciszF5tXBekcSOSaWeQm1GJpa3B 60DX/qBQ+ntQDOxvx7Fwv+Y7T5d0QM2IMWDSn3iongx94rDoPKH8E4ws9seSeT+m f69udcqsU0fsw5vVe2vHAaCRSSN7qE4h19eINnLaQKBmgdzV9wnD2bGHSlkZNsj+ ovsRqYebqFOEzdJRMKqTrnK+fL9fOChnyt59yRifACZkpDt8kkbQJuhai7CdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXjGCcay0MA8MqsJzJ3NMOtI84t4wHwYDVR0j BBgwFoAUnkh5QGtl74IhA40y5TiCej7s9LowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2d6b2tpZ3JVV0dZYjRKSHlhN2E5Mk05dWI3NHRRMzZLbTF3MVpQU1dV YmIvMC85RTQ4Nzk0MDZCNjVFRjgyMjEwMzhEMzJFNTM4ODI3QTNFRUNGNEJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFNDg3OTQwNkI2NUVGODIy MTAzOEQzMkU1Mzg4MjdBM0VFQ0Y0QkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2d6b2tpZ3JVV0dZYjRKSHlhN2E5Mk05dWI3NHRRMzZLbTF3MVpQU1dVYmIvMC85 RTQ4Nzk0MDZCNjVFRjgyMjEwMzhEMzJFNTM4ODI3QTNFRUNGNEJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM5nNxj0cdh6IIixhyCUbLSnegQLxMZZRu9uNZSCf1dKv4bH+JijIo9CLi60W 8zxrDZd5YY+bZzO+JHPPr3AhGCZVnsTDqheTvP/07zd5duDHaC+KtplKDhXcTg0/ /7HUY/f+HJa5vApFlGfPp+MoIwyrgEAjpyFZz89e5MKDfOjognuz5ojbMr5WEZj0 ASlTuSeVfhctfURhs8G/blgFKlSmn5JcphNZr0DcoPnHypvDvc9EHo8vDnmNqBhe aX/+hTOOsYZ0nMF7ZciGuJMuOJInwSTYRS3r/3OLQOvqGdbWgUU6hNpWQ2DvIJha 6FbdyS/SUU6zTF6/+V1ZgqIZyQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:05:40 2025 by rpki-client