$ rpki-client -vvf rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft File: C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft (raw, json) Hash identifier: 74Y01gIn3mJRiMBpATbTsoxNSNDFf1niLlIQAT2CNf4= Subject key identifier: 81:3D:ED:F8:7B:83:EF:F8:70:19:EC:94:D8:7C:3F:C7:6E:A4:F8:77 Authority key identifier: C9:B4:4C:42:CE:21:94:CF:2A:ED:5F:3F:1C:5F:9E:7D:28:D2:2E:AC Certificate issuer: /CN=C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC Certificate serial: 237DE45EC07FDE01D74572A08D9CE3DB4E411583 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer Subject info access: rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft Manifest number: 5E Signing time: Mon 03 Nov 2025 08:21:44 +0000 Manifest this update: Mon 03 Nov 2025 08:16:44 +0000 Manifest next update: Tue 04 Nov 2025 09:59:44 +0000 Files and hashes: 1: 323830343a326130343a3a2f33322d313238203d3e20323634303531.roa (hash: RSDuNCVU1VTlfLD/mOTkHE5pcS11RZ6Pk8iJjzVZgVU=) 2: 3134332e3133372e3136302e302f32322d3332203d3e20323634303531.roa (hash: 6odTTXV/YEt0Dl4aWNPP6L1GAoNrXc5ZxFO+rO0cG3A=) 3: C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl (hash: K0uwY8AMBOpWOLGvnagwjHEfjymaJZHaO8MOzqfq4t4=) 4: 3137302e3234362e3232342e302f32322d3332203d3e20323634303531.roa (hash: ai1fq1d0v27iy15z6wZaaZtUTWGC9NDlAklm01QMFAU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:7d:e4:5e:c0:7f:de:01:d7:45:72:a0:8d:9c:e3:db:4e:41:15:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC Validity Not Before: Nov 3 08:16:44 2025 GMT Not After : Nov 4 09:59:44 2025 GMT Subject: CN=813DEDF87B83EFF87019EC94D87C3FC76EA4F877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e2:2e:36:5b:eb:0c:e7:8a:68:95:aa:e4:74: 50:b7:e3:dd:9f:d7:cb:0e:81:e2:3c:0d:78:94:5e: ab:d6:34:75:bc:71:08:cb:be:a3:fd:85:41:31:4e: a2:0b:93:24:97:b8:9d:48:a5:f1:3d:b9:42:dc:8e: 1f:67:6e:61:72:66:64:e4:92:b3:46:72:dc:4c:30: c0:3c:d2:71:cc:b1:01:a6:7a:05:16:3c:e0:20:5d: b6:46:31:0a:46:df:eb:b6:ca:11:3d:b7:01:80:ff: af:21:4e:88:70:72:56:5e:60:7c:02:5b:ee:c6:9b: 70:27:e0:d2:35:ec:5e:09:17:58:af:e3:d0:f6:ac: 77:93:2b:78:76:fa:68:14:fc:2e:62:a1:35:3d:82: c8:7a:0e:7b:40:96:d3:c5:ec:92:fc:0d:a5:e8:ec: ef:8d:3b:82:cd:aa:74:ea:ca:d3:96:4f:96:cf:3d: 03:f1:8a:25:a4:3b:af:1c:45:e1:3f:03:6a:62:64: e1:56:1b:b1:59:9b:31:fd:6c:b4:0f:92:d7:de:bb: 35:cc:b2:88:17:a9:46:56:16:5f:d2:2f:39:c8:9e: 80:2c:19:5c:9f:df:fa:52:ea:c5:cb:94:28:60:ed: 2f:f1:16:9d:62:90:e0:c9:48:af:49:8c:3c:23:cb: 24:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3D:ED:F8:7B:83:EF:F8:70:19:EC:94:D8:7C:3F:C7:6E:A4:F8:77 X509v3 Authority Key Identifier: keyid:C9:B4:4C:42:CE:21:94:CF:2A:ED:5F:3F:1C:5F:9E:7D:28:D2:2E:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:5f:44:71:bb:42:59:5d:23:05:f6:e2:63:ef:39:13:5f:85: 83:0a:e0:b8:20:48:85:a5:9b:63:18:76:a0:84:54:57:82:f9: 41:5d:6d:f6:7a:89:a7:98:79:86:ae:0c:e2:7b:7a:7e:39:fd: ed:79:fd:eb:03:37:44:2d:b5:6d:be:18:1d:4f:9d:16:ca:41: 2c:f5:1b:fc:b1:1d:bd:c4:cc:42:ce:af:d0:8b:75:6b:bc:e0: 35:6f:00:dc:48:6d:1d:33:48:d8:84:dc:ce:3b:c7:48:61:19: 3e:7e:6b:8a:b9:27:4a:a5:7d:15:fe:97:b4:8f:83:3a:95:2c: 01:9c:5a:8e:c8:4e:3c:31:c0:ef:f2:41:88:84:46:85:53:11: 38:c5:70:8e:c3:2c:21:e0:a7:cd:f8:6b:bb:b6:83:e1:ab:c3: 58:7e:cf:74:f9:f3:51:72:a7:89:ef:1b:c5:33:bd:69:e1:71: aa:6d:92:db:96:86:c0:c9:00:de:64:41:5c:64:a2:94:9f:83: 74:a8:69:00:bb:50:69:cf:d8:c4:89:05:84:48:0c:59:e0:3e: 88:a8:b7:0c:9d:31:e8:5e:75:e5:4f:70:ed:41:6e:db:be:05: 20:7b:7e:c3:8a:1e:8a:e7:ef:6a:8e:a4:c9:ee:4f:55:23:8b: fe:d7:c9:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI33kXsB/3gHXRXKgjZzj205BFYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCNDRDNDJDRTIxOTRDRjJBRUQ1RjNGMUM1RjlFN0Qy OEQyMkVBQzAeFw0yNTExMDMwODE2NDRaFw0yNTExMDQwOTU5NDRaMDMxMTAvBgNV BAMTKDgxM0RFREY4N0I4M0VGRjg3MDE5RUM5NEQ4N0MzRkM3NkVBNEY4NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl4i42W+sM54polarkdFC3492f 18sOgeI8DXiUXqvWNHW8cQjLvqP9hUExTqILkySXuJ1IpfE9uULcjh9nbmFyZmTk krNGctxMMMA80nHMsQGmegUWPOAgXbZGMQpG3+u2yhE9twGA/68hTohwclZeYHwC W+7Gm3An4NI17F4JF1iv49D2rHeTK3h2+mgU/C5ioTU9gsh6DntAltPF7JL8DaXo 7O+NO4LNqnTqytOWT5bPPQPxiiWkO68cReE/A2piZOFWG7FZmzH9bLQPktfeuzXM sogXqUZWFl/SLznInoAsGVyf3/pS6sXLlChg7S/xFp1ikODJSK9JjDwjyySPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgT3t+HuD7/hwGeyU2Hw/x26k+HcwHwYDVR0j BBgwFoAUybRMQs4hlM8q7V8/HF+efSjSLqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHh5VUtKSFhBWTNKQ3gyVEZ3V0VhR05uZFdCbTNkZUZidWZuQmlQcmE4 VHEvMC9DOUI0NEM0MkNFMjE5NENGMkFFRDVGM0YxQzVGOUU3RDI4RDIyRUFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5QjQ0QzQyQ0UyMTk0Q0Yy QUVENUYzRjFDNUY5RTdEMjhEMjJFQUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHh5VUtKSFhBWTNKQ3gyVEZ3V0VhR05uZFdCbTNkZUZidWZuQmlQcmE4VHEvMC9D OUI0NEM0MkNFMjE5NENGMkFFRDVGM0YxQzVGOUU3RDI4RDIyRUFDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASV9EcbtCWV0jBfbiY+85E1+FgwrguCBIhaWbYxh2oIRUV4L5QV1t9nqJp5h5 hq4M4nt6fjn97Xn96wM3RC21bb4YHU+dFspBLPUb/LEdvcTMQs6v0It1a7zgNW8A 3EhtHTNI2ITczjvHSGEZPn5rirknSqV9Ff6XtI+DOpUsAZxajshOPDHA7/JBiIRG hVMROMVwjsMsIeCnzfhru7aD4avDWH7PdPnzUXKnie8bxTO9aeFxqm2S25aGwMkA 3mRBXGSilJ+DdKhpALtQac/YxIkFhEgMWeA+iKi3DJ0x6F515U9w7UFu274FIHt+ w4oeiufvao6kye5PVSOL/tfJfQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:33:52 2025 by rpki-client