$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/9206B911EB707B51B01C514E2075DE8549D4A1EE.mft File: 9206B911EB707B51B01C514E2075DE8549D4A1EE.mft (raw, json) Hash identifier: h/eByj+Ug7wugphfyl1bYKjgWteLEa0Gl7Gs5IqAw+c= Subject key identifier: 8A:9D:5C:40:74:D7:F1:34:6E:53:F7:BD:A7:74:D6:9F:7F:B1:8C:CE Authority key identifier: 92:06:B9:11:EB:70:7B:51:B0:1C:51:4E:20:75:DE:85:49:D4:A1:EE Certificate issuer: /CN=9206B911EB707B51B01C514E2075DE8549D4A1EE Certificate serial: 7E8E8BFF8D9F11E46B9402C98FD2CA8BEC30B3DE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9206B911EB707B51B01C514E2075DE8549D4A1EE.cer Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/9206B911EB707B51B01C514E2075DE8549D4A1EE.mft Manifest number: 20 Signing time: Mon 03 Nov 2025 09:55:14 +0000 Manifest this update: Mon 03 Nov 2025 09:50:14 +0000 Manifest next update: Tue 04 Nov 2025 12:03:14 +0000 Files and hashes: 1: 9206B911EB707B51B01C514E2075DE8549D4A1EE.crl (hash: pHwuJdrhV0J/D/5QEMXl+Fk/rSBo6sPB1PVEvB1qM4U=) 2: 323830343a313765303a3a2f33322d313238203d3e20323633323536.roa (hash: WZa5RIJVI7ulRy7XNmHGGmkharWYBsvMqdMOQ2YXxvI=) 3: 3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa (hash: bLqJJkasthqOaqT8gpz8G1kBlRUmvgNUOS+ABxSh4FM=) 4: 3139382e35382e382e302f32322d3332203d3e20323633323536.roa (hash: D9B2OUKSdM0EaN2edFkvVLcGZKIAlQrNBvTsq4yVj8c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/9206B911EB707B51B01C514E2075DE8549D4A1EE.crl rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/9206B911EB707B51B01C514E2075DE8549D4A1EE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9206B911EB707B51B01C514E2075DE8549D4A1EE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:8e:8b:ff:8d:9f:11:e4:6b:94:02:c9:8f:d2:ca:8b:ec:30:b3:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9206B911EB707B51B01C514E2075DE8549D4A1EE Validity Not Before: Nov 3 09:50:14 2025 GMT Not After : Nov 4 12:03:14 2025 GMT Subject: CN=8A9D5C4074D7F1346E53F7BDA774D69F7FB18CCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:31:f0:9e:13:01:50:84:96:79:2d:56:c4:d0: 84:72:c1:67:f1:e5:2c:87:0c:49:8a:09:11:59:a1: ab:ac:32:30:af:f7:99:db:e6:83:5e:a3:90:a7:0b: bc:b0:68:4b:23:c8:10:9a:64:05:67:2e:d1:4c:ab: 95:c2:96:70:9b:8f:a0:90:bf:44:e7:e5:81:09:aa: 6d:6a:6e:24:f6:49:14:da:27:0f:4a:c0:3d:84:c8: 7b:57:d0:77:4b:00:15:b2:55:bd:2f:78:ab:00:f0: 63:57:3c:49:1c:63:3c:88:d1:e9:1c:7a:b2:58:61: 8b:1b:aa:77:c8:3a:0d:ac:14:3c:e9:2e:4f:75:c4: 88:1d:4b:2b:97:a1:69:47:56:d7:fc:a1:c1:50:da: 8f:82:fa:d6:a9:4a:d3:39:4f:b0:a8:6e:b8:aa:05: c8:4e:f8:6a:5a:ab:ae:35:90:a2:5b:13:17:f9:67: 37:29:88:72:b9:2a:25:fd:d7:8e:fa:ab:c2:1c:32: 90:38:d4:42:29:e1:5b:6a:01:07:1e:3c:de:86:cb: a2:5d:aa:b8:08:00:cd:e2:33:a3:ff:4d:93:0a:fd: 12:b2:ec:cb:cb:6c:3a:f0:1b:b5:e5:1e:e3:06:34: 90:0d:b3:cf:29:25:43:4e:8b:33:54:cb:cf:ca:6c: f6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9D:5C:40:74:D7:F1:34:6E:53:F7:BD:A7:74:D6:9F:7F:B1:8C:CE X509v3 Authority Key Identifier: keyid:92:06:B9:11:EB:70:7B:51:B0:1C:51:4E:20:75:DE:85:49:D4:A1:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/9206B911EB707B51B01C514E2075DE8549D4A1EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9206B911EB707B51B01C514E2075DE8549D4A1EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/9206B911EB707B51B01C514E2075DE8549D4A1EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:5e:14:d4:e3:e1:33:7e:73:50:d2:e1:44:68:c9:c9:bb:7f: 87:02:ce:8a:ac:13:a4:4e:50:85:13:25:4d:c0:1d:1a:b6:19: c8:1b:b4:9b:85:c1:fa:3d:8d:69:58:0e:86:05:9e:f4:06:0f: 81:19:4b:eb:14:40:68:f1:8d:4e:5b:14:48:cf:b9:ee:ff:19: 67:b9:27:a2:07:5b:7c:31:10:61:ae:29:0c:e2:ec:5c:3e:94: 32:8e:e4:2a:dd:9f:e0:20:1f:84:2d:52:ba:16:08:9b:1f:2a: 66:34:52:68:5f:79:fc:5d:f8:6b:a6:4b:8e:5f:27:4e:ae:da: 6b:3b:a3:2d:86:40:8d:f7:b2:7e:e3:db:f0:d7:a1:dd:71:2a: 38:97:fb:33:45:86:c5:d5:38:9e:6b:a0:f5:55:e9:9a:c2:03: 5e:c8:d5:3a:b8:4c:0f:d6:9c:08:02:11:52:4d:5c:73:14:5a: 23:8c:ed:66:1d:4f:bc:8a:c9:46:08:6a:48:6d:0f:a4:ff:07: f5:98:f4:27:88:74:3f:01:6e:5a:73:67:37:6f:ee:7e:ea:30: 2c:78:a8:7d:0d:31:fb:16:7d:b4:fc:f0:f9:82:5a:5e:a8:62: 89:e4:49:d7:52:05:bb:b8:09:69:12:c9:a3:53:d1:fc:c5:ac: eb:67:ff:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfo6L/42fEeRrlALJj9LKi+wws94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIwNkI5MTFFQjcwN0I1MUIwMUM1MTRFMjA3NURFODU0 OUQ0QTFFRTAeFw0yNTExMDMwOTUwMTRaFw0yNTExMDQxMjAzMTRaMDMxMTAvBgNV BAMTKDhBOUQ1QzQwNzREN0YxMzQ2RTUzRjdCREE3NzRENjlGN0ZCMThDQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqMfCeEwFQhJZ5LVbE0IRywWfx 5SyHDEmKCRFZoausMjCv95nb5oNeo5CnC7ywaEsjyBCaZAVnLtFMq5XClnCbj6CQ v0Tn5YEJqm1qbiT2SRTaJw9KwD2EyHtX0HdLABWyVb0veKsA8GNXPEkcYzyI0ekc erJYYYsbqnfIOg2sFDzpLk91xIgdSyuXoWlHVtf8ocFQ2o+C+tapStM5T7Cobriq BchO+Gpaq641kKJbExf5ZzcpiHK5KiX91476q8IcMpA41EIp4VtqAQcePN6Gy6Jd qrgIAM3iM6P/TZMK/RKy7MvLbDrwG7XlHuMGNJANs88pJUNOizNUy8/KbPatAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUip1cQHTX8TRuU/e9p3TWn3+xjM4wHwYDVR0j BBgwFoAUkga5Eetwe1GwHFFOIHXehUnUoe4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXB3UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJk U2QvMC85MjA2QjkxMUVCNzA3QjUxQjAxQzUxNEUyMDc1REU4NTQ5RDRBMUVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyMDZCOTExRUI3MDdCNTFC MDFDNTE0RTIwNzVERTg1NDlENEExRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXB3UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJkU2QvMC85 MjA2QjkxMUVCNzA3QjUxQjAxQzUxNEUyMDc1REU4NTQ5RDRBMUVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIV4U1OPhM35zUNLhRGjJybt/hwLOiqwTpE5QhRMlTcAdGrYZyBu0m4XB+j2N aVgOhgWe9AYPgRlL6xRAaPGNTlsUSM+57v8ZZ7knogdbfDEQYa4pDOLsXD6UMo7k Kt2f4CAfhC1SuhYImx8qZjRSaF95/F34a6ZLjl8nTq7aazujLYZAjfeyfuPb8Neh 3XEqOJf7M0WGxdU4nmug9VXpmsIDXsjVOrhMD9acCAIRUk1ccxRaI4ztZh1PvIrJ RghqSG0PpP8H9Zj0J4h0PwFuWnNnN2/ufuowLHiofQ0x+xZ9tPzw+YJaXqhiieRJ 11IFu7gJaRLJo1PR/MWs62f/IA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:01:24 2025 by rpki-client