$ rpki-client -vvf rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/9EB4A38624F7D695FCD98CF10F4CD7185801C022.mft File: 9EB4A38624F7D695FCD98CF10F4CD7185801C022.mft (raw, json) Hash identifier: nIvet5Z3V1r0LQ7qbLUkEewCGrDlbeacVS+7H/l623w= Subject key identifier: E1:92:2C:80:D4:EF:98:44:EA:54:AA:6D:17:F1:5F:F6:BE:7F:61:6A Authority key identifier: 9E:B4:A3:86:24:F7:D6:95:FC:D9:8C:F1:0F:4C:D7:18:58:01:C0:22 Certificate issuer: /CN=9EB4A38624F7D695FCD98CF10F4CD7185801C022 Certificate serial: 6416BF097065836E8C0551DC592EC56EA12FC102 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EB4A38624F7D695FCD98CF10F4CD7185801C022.cer Subject info access: rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/9EB4A38624F7D695FCD98CF10F4CD7185801C022.mft Manifest number: 0124 Signing time: Mon 03 Nov 2025 15:19:00 +0000 Manifest this update: Mon 03 Nov 2025 15:14:00 +0000 Manifest next update: Tue 04 Nov 2025 18:31:00 +0000 Files and hashes: 1: 9EB4A38624F7D695FCD98CF10F4CD7185801C022.crl (hash: t1lvehZjieC8cdde+FbPVa6NdOhFw8wfh9BuidlK4ak=) 2: 323830343a386362343a3a2f33322d313238203d3e20323733383136.roa (hash: vR0+t5o0BErCUNY0gBOo83IO4lHKRwqHuqdJFECLRQQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/9EB4A38624F7D695FCD98CF10F4CD7185801C022.crl rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/9EB4A38624F7D695FCD98CF10F4CD7185801C022.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EB4A38624F7D695FCD98CF10F4CD7185801C022.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 18:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:16:bf:09:70:65:83:6e:8c:05:51:dc:59:2e:c5:6e:a1:2f:c1:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EB4A38624F7D695FCD98CF10F4CD7185801C022 Validity Not Before: Nov 3 15:14:00 2025 GMT Not After : Nov 4 18:31:00 2025 GMT Subject: CN=E1922C80D4EF9844EA54AA6D17F15FF6BE7F616A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bf:dd:18:1a:ae:0a:15:b5:57:4f:ca:a7:8e: e8:6e:b5:51:78:9f:7f:8d:e7:12:14:24:0d:21:32: cf:fb:f1:9a:3d:cc:03:6d:0d:25:25:eb:8f:34:d9: 49:1e:2a:f4:b4:0d:6f:f3:e6:65:41:55:fc:02:d8: 84:60:f3:b6:0b:a2:3e:bb:c2:87:8c:71:01:ed:fb: c9:56:e0:f5:c7:a7:7a:b1:05:c7:7b:f1:fb:85:a6: 2a:73:3a:66:c8:4c:84:b2:b1:d0:e6:82:f2:3c:7d: e8:6a:db:70:21:1c:92:d1:b0:43:b9:aa:6a:6b:a7: 5f:ab:b1:d8:6d:f2:83:5e:f1:5a:82:4d:a5:1e:a3: 6f:49:73:62:a5:00:4f:0a:79:46:db:ea:b4:17:f8: ef:88:bb:b2:ee:62:2f:6c:7c:71:21:77:98:36:06: 1e:17:bd:8a:91:ff:d2:16:74:b3:0e:27:32:71:8b: d1:48:dc:ad:64:35:4c:4c:fb:a6:70:2c:f8:e3:b7: e8:d6:12:6f:a1:46:b3:24:8b:19:52:99:59:70:5d: f6:1c:f6:c8:fb:20:b8:69:e6:7e:ad:1e:99:b3:f3: d0:fd:d6:1b:10:c2:68:d7:93:fa:41:f0:f2:21:22: 68:c8:83:2c:e4:95:ff:86:9a:ba:7c:7b:14:9a:39: 43:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:92:2C:80:D4:EF:98:44:EA:54:AA:6D:17:F1:5F:F6:BE:7F:61:6A X509v3 Authority Key Identifier: keyid:9E:B4:A3:86:24:F7:D6:95:FC:D9:8C:F1:0F:4C:D7:18:58:01:C0:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/9EB4A38624F7D695FCD98CF10F4CD7185801C022.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EB4A38624F7D695FCD98CF10F4CD7185801C022.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/9EB4A38624F7D695FCD98CF10F4CD7185801C022.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:02:49:2f:55:b6:10:52:a9:2d:e4:52:0f:60:0a:8c:fc:3a: 39:75:3c:f2:60:7e:03:d8:17:ba:4a:2a:8f:9f:81:a3:3c:ca: 6a:90:fe:64:a5:be:68:29:17:3d:b2:90:06:9c:12:9e:0a:b6: 42:57:bc:ff:86:d6:a0:c1:9a:c4:ce:0a:d7:af:f3:e0:a7:2b: 7d:ec:7a:25:24:b2:b9:46:08:8f:62:71:4a:2c:83:bb:38:93: dc:15:58:80:2f:97:c2:84:a2:86:2a:88:1c:8c:5a:f8:5b:fe: 65:88:83:94:d1:6f:87:a5:67:82:09:02:90:87:00:0f:f5:54: 33:6a:f1:ec:cc:89:b4:53:26:66:a1:57:bc:25:e6:1b:01:89: 36:9f:ce:38:d4:99:b1:2c:f4:5c:4e:6f:a8:02:d3:30:8b:f5: 92:73:30:5d:92:11:81:7c:41:6d:7a:9a:70:d8:56:20:ed:44: 50:8e:01:bb:80:19:52:3a:b4:bb:64:0e:36:f2:e7:f1:b1:fa: 82:17:91:56:9c:9a:f6:5f:5a:c0:96:c6:ea:61:63:97:82:2b: 03:79:68:ef:c3:1a:52:93:09:86:69:9c:7b:e9:97:95:4b:96: fc:50:41:d2:41:86:cd:93:f7:61:b0:ec:aa:7a:3b:ed:a5:86: 0b:1f:12:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZBa/CXBlg26MBVHcWS7FbqEvwQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVCNEEzODYyNEY3RDY5NUZDRDk4Q0YxMEY0Q0Q3MTg1 ODAxQzAyMjAeFw0yNTExMDMxNTE0MDBaFw0yNTExMDQxODMxMDBaMDMxMTAvBgNV BAMTKEUxOTIyQzgwRDRFRjk4NDRFQTU0QUE2RDE3RjE1RkY2QkU3RjYxNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzv90YGq4KFbVXT8qnjuhutVF4 n3+N5xIUJA0hMs/78Zo9zANtDSUl64802UkeKvS0DW/z5mVBVfwC2IRg87YLoj67 woeMcQHt+8lW4PXHp3qxBcd78fuFpipzOmbITISysdDmgvI8fehq23AhHJLRsEO5 qmprp1+rsdht8oNe8VqCTaUeo29Jc2KlAE8KeUbb6rQX+O+Iu7LuYi9sfHEhd5g2 Bh4XvYqR/9IWdLMOJzJxi9FI3K1kNUxM+6ZwLPjjt+jWEm+hRrMkixlSmVlwXfYc 9sj7ILhp5n6tHpmz89D91hsQwmjXk/pB8PIhImjIgyzklf+Gmrp8exSaOUM3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4ZIsgNTvmETqVKptF/Ff9r5/YWowHwYDVR0j BBgwFoAUnrSjhiT31pX82YzxD0zXGFgBwCIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFdlWVEyZ0hFczNwRkg4YmVtc010cXU3djc2TGdXWUZYd05RR3o3U0FN V3UvMC85RUI0QTM4NjI0RjdENjk1RkNEOThDRjEwRjRDRDcxODU4MDFDMDIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFQjRBMzg2MjRGN0Q2OTVG Q0Q5OENGMTBGNENENzE4NTgwMUMwMjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFdlWVEyZ0hFczNwRkg4YmVtc010cXU3djc2TGdXWUZYd05RR3o3U0FNV3UvMC85 RUI0QTM4NjI0RjdENjk1RkNEOThDRjEwRjRDRDcxODU4MDFDMDIyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdgJJL1W2EFKpLeRSD2AKjPw6OXU88mB+A9gXukoqj5+BozzKapD+ZKW+aCkX PbKQBpwSngq2Qle8/4bWoMGaxM4K16/z4Kcrfex6JSSyuUYIj2JxSiyDuziT3BVY gC+XwoSihiqIHIxa+Fv+ZYiDlNFvh6VnggkCkIcAD/VUM2rx7MyJtFMmZqFXvCXm GwGJNp/OONSZsSz0XE5vqALTMIv1knMwXZIRgXxBbXqacNhWIO1EUI4Bu4AZUjq0 u2QONvLn8bH6gheRVpya9l9awJbG6mFjl4IrA3lo78MaUpMJhmmce+mXlUuW/FBB 0kGGzZP3YbDsqno77aWGCx8Stg== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:25 2025 by rpki-client