$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft File: D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft (raw, json) Hash identifier: 7t55gWjcHN1EuW+yd+/QuzsbbSgttBMo7/bRO3mkvU4= Subject key identifier: 2B:0C:97:CC:32:42:5C:76:80:43:F2:4D:00:B6:02:41:D3:B9:2D:0D Authority key identifier: D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B Certificate issuer: /CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B Certificate serial: 2683452B9E1F7979505C70536F93086495BF49DB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft Manifest number: 01A7 Signing time: Tue 04 Nov 2025 18:37:11 +0000 Manifest this update: Tue 04 Nov 2025 18:32:11 +0000 Manifest next update: Wed 05 Nov 2025 21:26:11 +0000 Files and hashes: 1: 3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa (hash: mQl+DqMitEfto4sm/J239pDInofAJ055830zO5LsIjU=) 2: 3137372e37332e36302e302f32322d3234203d3e20323633343638.roa (hash: ojNYwHHCihvNSk2FkbyfGPhui+Fo/NptmXx53NBSpaQ=) 3: 323830343a313234633a3a2f33322d3438203d3e20323633343638.roa (hash: T2k3XHzj+R5PWM1PAn1IiRXkMkZU+kzdLTKOTB9BdPU=) 4: D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl (hash: i/WWhAM6zulf34WKMoOt45zRAzfqChKjmJeBmCBF+xs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 21:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:83:45:2b:9e:1f:79:79:50:5c:70:53:6f:93:08:64:95:bf:49:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B Validity Not Before: Nov 4 18:32:11 2025 GMT Not After : Nov 5 21:26:11 2025 GMT Subject: CN=2B0C97CC32425C768043F24D00B60241D3B92D0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0c:8c:08:8c:b3:21:27:4f:cd:ad:d9:8e:54: 0d:5b:39:e4:80:54:58:44:29:81:9f:71:b0:52:fe: 2a:92:a0:b6:1c:6b:26:57:ba:ab:d4:e9:d6:33:b6: be:d5:28:78:9c:57:3c:3c:f1:29:f2:72:7a:65:84: 6d:76:9d:a3:28:5f:6f:ce:85:e8:18:bc:d6:39:a8: 08:1b:45:2f:af:d2:2d:35:21:cf:18:5c:d2:74:96: 7f:99:16:bb:e4:ab:2b:31:1b:bc:2f:82:d8:97:51: 6d:69:f7:7f:c1:9f:78:63:20:f7:92:b7:15:26:14: 37:5f:44:e5:76:fc:7d:3f:32:57:3e:57:dc:ae:90: 46:b2:e8:8b:d4:1b:2f:d8:9f:b5:f5:f5:eb:b8:fb: ca:84:31:dc:09:66:cd:55:1a:9b:04:a3:b7:c9:e5: 7e:da:42:fb:39:12:73:7e:36:da:9d:5f:ee:25:48: 19:d3:cf:f2:a3:f3:ef:67:59:50:58:7e:7b:50:a7: 70:49:5d:a6:b6:11:dc:ac:e9:e9:87:e6:9b:d1:28: a4:66:20:b0:fb:2a:ad:61:37:77:24:80:2d:c2:f7: bf:80:5e:74:28:aa:dc:19:97:03:bf:f0:29:d5:f5: bd:e9:f9:ef:ca:9d:c9:c3:04:45:ff:f8:d7:62:35: 4b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0C:97:CC:32:42:5C:76:80:43:F2:4D:00:B6:02:41:D3:B9:2D:0D X509v3 Authority Key Identifier: keyid:D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c6:df:f6:38:0e:ce:bf:44:2f:af:c3:40:12:a6:8e:40:5d: c9:f2:33:fa:4d:d2:77:ae:79:4a:82:2b:0a:03:ec:d5:d4:f8: be:3d:2f:81:d5:c5:24:97:27:1b:51:ee:69:5a:51:7b:ce:42: 03:9c:31:3d:81:4d:67:5f:cb:f4:06:eb:01:8c:4d:4e:99:0a: 16:89:be:bb:0c:9f:76:f7:42:c2:49:45:60:b4:d1:4b:a7:6c: 39:fb:f8:f4:9c:b6:96:51:66:cc:dc:61:26:b8:94:7f:1b:96: 81:16:7a:66:2a:d7:b2:bd:f9:8c:90:a6:56:e0:24:5f:41:8a: 5b:dd:69:d8:aa:d6:e7:92:67:ad:13:e7:9e:9f:69:16:e3:56: fe:60:af:3d:07:8e:89:af:36:68:b3:d8:5a:23:20:f0:b9:86: 0c:c1:fd:10:20:35:33:11:94:ad:13:48:5b:03:33:44:97:87: 78:b3:10:08:33:e3:ef:1d:e9:77:7d:92:c6:d2:3f:39:75:63: db:a2:71:92:5c:fb:7a:01:a1:ba:51:d7:20:35:75:cb:0a:ec: c9:82:25:f3:37:59:68:dd:15:f8:75:36:c5:49:66:5a:3c:c3: 9a:e5:11:a9:65:c3:6f:48:81:df:a7:8d:f9:bc:5e:6a:29:27: 16:5b:45:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJoNFK54feXlQXHBTb5MIZJW/SdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM3NEY1NDI4MEZDOUNGN0U5MDY4QzZGRjc0NEZBNUFE MTQ5RDcxQjAeFw0yNTExMDQxODMyMTFaFw0yNTExMDUyMTI2MTFaMDMxMTAvBgNV BAMTKDJCMEM5N0NDMzI0MjVDNzY4MDQzRjI0RDAwQjYwMjQxRDNCOTJEMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDIwIjLMhJ0/NrdmOVA1bOeSA VFhEKYGfcbBS/iqSoLYcayZXuqvU6dYztr7VKHicVzw88SnycnplhG12naMoX2/O hegYvNY5qAgbRS+v0i01Ic8YXNJ0ln+ZFrvkqysxG7wvgtiXUW1p93/Bn3hjIPeS txUmFDdfROV2/H0/Mlc+V9yukEay6IvUGy/Yn7X19eu4+8qEMdwJZs1VGpsEo7fJ 5X7aQvs5EnN+NtqdX+4lSBnTz/Kj8+9nWVBYfntQp3BJXaa2Edys6emH5pvRKKRm ILD7Kq1hN3ckgC3C97+AXnQoqtwZlwO/8CnV9b3p+e/KncnDBEX/+NdiNUsnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKwyXzDJCXHaAQ/JNALYCQdO5LQ0wHwYDVR0j BBgwFoAU03T1QoD8nPfpBoxv90T6WtFJ1xswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0Vh blkvMC9EMzc0RjU0MjgwRkM5Q0Y3RTkwNjhDNkZGNzQ0RkE1QUQxNDlENzFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNzRGNTQyODBGQzlDRjdF OTA2OEM2RkY3NDRGQTVBRDE0OUQ3MUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0VhblkvMC9E Mzc0RjU0MjgwRkM5Q0Y3RTkwNjhDNkZGNzQ0RkE1QUQxNDlENzFCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfsbf9jgOzr9EL6/DQBKmjkBdyfIz+k3Sd655SoIrCgPs1dT4vj0vgdXFJJcn G1HuaVpRe85CA5wxPYFNZ1/L9AbrAYxNTpkKFom+uwyfdvdCwklFYLTRS6dsOfv4 9Jy2llFmzNxhJriUfxuWgRZ6ZirXsr35jJCmVuAkX0GKW91p2KrW55JnrRPnnp9p FuNW/mCvPQeOia82aLPYWiMg8LmGDMH9ECA1MxGUrRNIWwMzRJeHeLMQCDPj7x3p d32SxtI/OXVj26Jxklz7egGhulHXIDV1ywrsyYIl8zdZaN0V+HU2xUlmWjzDmuUR qWXDb0iB36eN+bxeaiknFltF9g== -----END CERTIFICATE-----Generated at Wed Nov 5 10:28:21 2025 by rpki-client