$ rpki-client -vvf rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.mft File: 1D1328217C2BD2863C87D2938A271517414BABF6.mft (raw, json) Hash identifier: fQOxwGNtOyMuvx8wN8ajN+ys01peDteqmHCVrPoWq4A= Subject key identifier: 71:54:87:FE:86:88:D7:4A:55:28:64:31:1F:CF:20:61:63:5B:62:33 Authority key identifier: 1D:13:28:21:7C:2B:D2:86:3C:87:D2:93:8A:27:15:17:41:4B:AB:F6 Certificate issuer: /CN=1D1328217C2BD2863C87D2938A271517414BABF6 Certificate serial: 67684C28BB073DCB0B0BF612F2DC861BC6BC7431 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D1328217C2BD2863C87D2938A271517414BABF6.cer Subject info access: rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.mft Manifest number: CC Signing time: Wed 05 Nov 2025 06:51:24 +0000 Manifest this update: Wed 05 Nov 2025 06:46:24 +0000 Manifest next update: Thu 06 Nov 2025 09:06:24 +0000 Files and hashes: 1: 1D1328217C2BD2863C87D2938A271517414BABF6.crl (hash: Zk9EpAHEDxywp6j1pXrsA0Xch09EbBhFlj6cXwzTPXM=) 2: 323830343a393432633a3a2f33322d3438203d3e20323734383236.roa (hash: Z311etJiWQKLn+JmnE48W3qZSkPhLk9m6+lP+52N5B0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.crl rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D1328217C2BD2863C87D2938A271517414BABF6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 09:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:68:4c:28:bb:07:3d:cb:0b:0b:f6:12:f2:dc:86:1b:c6:bc:74:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D1328217C2BD2863C87D2938A271517414BABF6 Validity Not Before: Nov 5 06:46:24 2025 GMT Not After : Nov 6 09:06:24 2025 GMT Subject: CN=715487FE8688D74A552864311FCF2061635B6233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:49:7c:7f:72:54:4b:d3:c1:98:0c:ac:fc:d2: 58:54:a9:3f:60:e2:16:56:ba:ad:24:36:6e:8a:f2: 74:75:9d:02:2d:03:a9:45:01:12:23:dd:7d:2e:82: e2:f6:5e:bc:3d:51:e1:85:f3:ef:75:47:10:c1:ca: fa:14:53:a9:d3:0d:35:67:7a:5b:24:fa:aa:c1:27: ef:c7:b7:88:1f:d3:99:cb:68:8c:7a:98:a2:e8:73: e7:e5:dd:49:1e:01:50:13:7b:0c:4a:e2:3b:dc:59: eb:5c:20:e4:bf:72:c0:4b:f1:39:b1:41:79:99:ef: 71:2f:81:4f:8e:60:59:21:c7:fd:b5:fc:ba:41:8b: 65:86:08:5a:d0:a6:75:92:fb:fb:d5:4f:11:58:b1: 15:4f:10:e5:21:6b:4f:58:ac:3e:f9:5c:74:4a:68: b3:04:09:84:89:92:32:08:b0:7c:c2:08:d6:2a:f9: ef:dc:a7:51:7a:3b:b2:e5:8d:2f:45:29:20:91:8e: 37:19:f9:79:3d:cf:93:47:5a:3f:09:f9:de:93:0f: d8:6e:ed:1f:18:4c:d7:85:cd:53:03:b0:c6:87:92: ad:94:1e:f9:12:92:7d:92:65:a6:68:c1:04:25:52: 84:01:e9:2d:16:f7:b0:87:76:c3:4b:07:70:e1:b7: 4d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:54:87:FE:86:88:D7:4A:55:28:64:31:1F:CF:20:61:63:5B:62:33 X509v3 Authority Key Identifier: keyid:1D:13:28:21:7C:2B:D2:86:3C:87:D2:93:8A:27:15:17:41:4B:AB:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D1328217C2BD2863C87D2938A271517414BABF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2TJnLMFz36csZxidBrhAnaR88pYzpGadyNYbrvMKr5WD/0/1D1328217C2BD2863C87D2938A271517414BABF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:f2:57:21:7c:06:84:76:d9:fe:f8:0d:b9:c4:e6:e3:90:d5: 59:26:fc:61:b5:8c:0f:c5:c6:95:e7:a4:e4:16:f9:69:10:5b: 8e:8a:f1:2f:29:3a:63:ba:b8:46:95:4b:60:59:fe:cd:e5:be: d9:0c:63:af:d8:62:f3:f3:ec:98:9b:78:96:c6:c2:8d:13:86: f1:0c:c4:fc:2d:94:7a:d9:a2:b1:fa:da:d7:49:3f:a9:de:4a: 42:ff:32:92:3e:09:0a:0d:cc:04:43:b3:5b:89:74:b7:42:7e: ff:b8:39:8c:87:62:e6:27:48:7f:95:6e:39:31:98:a8:6e:da: f1:34:36:bd:9a:12:6e:7a:ef:2a:f1:a9:26:da:cf:85:b2:73: 55:c4:f2:e7:41:88:d4:12:1d:00:f5:a5:66:5c:9d:43:1e:0b: 81:06:35:68:84:cc:da:b4:c6:42:d6:92:bd:dc:d8:51:6a:cd: 24:92:7d:d3:c5:51:89:6c:12:ad:bd:8f:59:14:a7:72:df:c3: 80:50:2c:ec:eb:a5:d1:21:e7:91:63:96:98:63:5e:b8:68:0f: 7d:91:ae:b6:ba:7d:a7:6a:0d:f4:d0:94:44:36:65:93:a1:a0: 0d:a8:02:ed:3d:41:e7:5b:b5:9c:0b:5c:90:2d:49:3a:c5:b8: 15:e7:e2:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZ2hMKLsHPcsLC/YS8tyGG8a8dDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQxMzI4MjE3QzJCRDI4NjNDODdEMjkzOEEyNzE1MTc0 MTRCQUJGNjAeFw0yNTExMDUwNjQ2MjRaFw0yNTExMDYwOTA2MjRaMDMxMTAvBgNV BAMTKDcxNTQ4N0ZFODY4OEQ3NEE1NTI4NjQzMTFGQ0YyMDYxNjM1QjYyMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpSXx/clRL08GYDKz80lhUqT9g 4hZWuq0kNm6K8nR1nQItA6lFARIj3X0uguL2Xrw9UeGF8+91RxDByvoUU6nTDTVn elsk+qrBJ+/Ht4gf05nLaIx6mKLoc+fl3UkeAVATewxK4jvcWetcIOS/csBL8Tmx QXmZ73EvgU+OYFkhx/21/LpBi2WGCFrQpnWS+/vVTxFYsRVPEOUha09YrD75XHRK aLMECYSJkjIIsHzCCNYq+e/cp1F6O7LljS9FKSCRjjcZ+Xk9z5NHWj8J+d6TD9hu 7R8YTNeFzVMDsMaHkq2UHvkSkn2SZaZowQQlUoQB6S0W97CHdsNLB3Dht00BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcVSH/oaI10pVKGQxH88gYWNbYjMwHwYDVR0j BBgwFoAUHRMoIXwr0oY8h9KTiicVF0FLq/YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlRKbkxNRnozNmNzWnhpZEJyaEFuYVI4OHBZenBHYWR5TllicnZNS3I1 V0QvMC8xRDEzMjgyMTdDMkJEMjg2M0M4N0QyOTM4QTI3MTUxNzQxNEJBQkY2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFEMTMyODIxN0MyQkQyODYz Qzg3RDI5MzhBMjcxNTE3NDE0QkFCRjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlRKbkxNRnozNmNzWnhpZEJyaEFuYVI4OHBZenBHYWR5TllicnZNS3I1V0QvMC8x RDEzMjgyMTdDMkJEMjg2M0M4N0QyOTM4QTI3MTUxNzQxNEJBQkY2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAPJXIXwGhHbZ/vgNucTm45DVWSb8YbWMD8XGleek5Bb5aRBbjorxLyk6Y7q4 RpVLYFn+zeW+2Qxjr9hi8/PsmJt4lsbCjROG8QzE/C2Uetmisfra10k/qd5KQv8y kj4JCg3MBEOzW4l0t0J+/7g5jIdi5idIf5VuOTGYqG7a8TQ2vZoSbnrvKvGpJtrP hbJzVcTy50GI1BIdAPWlZlydQx4LgQY1aITM2rTGQtaSvdzYUWrNJJJ908VRiWwS rb2PWRSnct/DgFAs7Oul0SHnkWOWmGNeuGgPfZGutrp9p2oN9NCURDZlk6GgDagC 7T1B51u1nAtckC1JOsW4Fefi2w== -----END CERTIFICATE-----Generated at Wed Nov 5 17:08:51 2025 by rpki-client