$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft File: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft (raw, json) Hash identifier: 694FVVVkQYHGej+qZOBLRexPc8rY/oRfBtsfh4srWDw= Subject key identifier: 24:3F:42:A8:2B:CC:5C:C7:02:AA:AF:44:CE:F5:3F:FA:A9:2C:06:43 Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 Certificate issuer: /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Certificate serial: 0D0CEAD9B9E576FB480FEBA7DBE720F8637E689B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft Manifest number: 0306 Signing time: Tue 04 Nov 2025 18:15:59 +0000 Manifest this update: Tue 04 Nov 2025 18:10:59 +0000 Manifest next update: Wed 05 Nov 2025 21:35:59 +0000 Files and hashes: 1: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl (hash: 81fE5TeQ/Jc0b5+F7m90d+lxxf5lj1LqixL5wlC0+fU=) 2: 323830343a346335633a3a2f33322d3438203d3e20323637333636.roa (hash: aBuDzalJjtN6QjODimHKIqdgYVt/ZmaeAC/ItTdnYZs=) 3: 34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa (hash: uvDWAWwHQEIwaeCaS7oSbgW6akspuwjD8Bob8V00050=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 21:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:0c:ea:d9:b9:e5:76:fb:48:0f:eb:a7:db:e7:20:f8:63:7e:68:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Validity Not Before: Nov 4 18:10:59 2025 GMT Not After : Nov 5 21:35:59 2025 GMT Subject: CN=243F42A82BCC5CC702AAAF44CEF53FFAA92C0643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7a:cc:44:e2:10:ff:ae:7a:4e:40:ab:da:6d: fa:60:ec:5a:4e:09:08:7d:9c:8f:ea:44:66:ac:13: 32:56:d5:f9:bf:56:eb:2f:8c:fc:df:c6:f5:e9:38: 04:ef:94:98:3e:b9:4b:76:e4:3d:da:8c:c1:ac:9c: 2f:f2:b5:77:f9:a5:c3:de:31:83:63:bf:b1:85:ab: 78:1b:1a:04:cb:46:dc:c6:18:45:5d:ec:16:d5:d6: 60:3e:fb:a5:e8:40:7c:d4:bc:ad:ae:cf:ff:77:2a: e9:58:d0:75:de:38:28:03:d3:35:a1:86:d0:cd:ff: 91:ea:b8:4d:b3:87:b1:50:71:be:ed:0e:40:fe:13: b3:4a:87:09:f6:ce:30:40:ef:e1:4c:16:eb:41:a2: 2c:e3:29:2a:00:4d:f7:b3:11:1d:a7:8e:6f:16:cc: eb:2e:f5:90:b8:32:07:55:de:b9:54:7e:0d:ba:e7: 8a:1f:f4:26:fa:72:64:1e:f5:ea:90:8a:16:1d:97: 12:43:a1:44:1f:23:59:d8:bf:eb:a6:95:3b:6b:c7: 81:e1:05:d4:b7:05:b4:79:5b:49:f4:c9:69:c8:15: 38:ab:61:7a:7b:72:b2:03:7a:8c:78:02:cf:4e:74: b4:e9:03:0d:42:0d:eb:19:c9:48:e2:5a:44:28:96: 18:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3F:42:A8:2B:CC:5C:C7:02:AA:AF:44:CE:F5:3F:FA:A9:2C:06:43 X509v3 Authority Key Identifier: keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:8d:1b:e9:bb:14:ec:d8:b1:b1:97:a3:3f:fb:4c:30:b2:b0: ab:f4:51:64:b2:ac:9c:6a:3c:85:c3:2e:cb:94:a2:43:12:b4: b4:e3:b2:8a:15:64:2b:20:e2:d5:9e:1a:c6:f0:c8:b5:24:5d: 2a:2f:43:0e:e9:35:2b:a7:3b:2c:57:17:ed:41:77:5b:0b:b2: e3:8b:e8:9a:97:b1:a2:a2:be:11:36:27:52:a2:08:ec:18:b9: ed:ca:cf:38:25:de:31:0b:29:c4:db:3a:18:e5:c6:9a:ee:c9: 5b:23:82:8d:6d:a6:b0:c3:07:10:b1:59:e4:4e:01:9e:d6:9e: b0:df:fb:81:e8:cf:9e:72:db:a5:23:4c:53:ec:b6:c6:d5:bf: eb:48:73:83:ef:e5:f9:86:dd:24:c6:39:b7:1c:12:18:b8:67: 66:9d:5c:89:3a:b1:1c:b8:26:8e:48:2c:0d:17:5f:05:4c:c9: 0b:3e:0f:bf:48:20:1b:8d:03:71:c7:3d:80:de:30:36:ce:14: 82:b1:c4:e6:ee:8f:c8:e0:e0:4b:7f:a4:55:60:35:f6:8e:38: d7:57:f7:1c:44:ce:df:41:23:94:88:ec:03:87:c8:c2:8f:91: d5:ee:c9:e0:36:bf:f8:4e:36:c3:68:00:fb:2a:24:29:f0:8d: de:df:5b:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDQzq2bnldvtID+un2+cg+GN+aJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMEFFNjNFRDk5MTI0RjdEM0YxNEI4RkE5QzFGRjM3 ODAwNjdDMjAeFw0yNTExMDQxODEwNTlaFw0yNTExMDUyMTM1NTlaMDMxMTAvBgNV BAMTKDI0M0Y0MkE4MkJDQzVDQzcwMkFBQUY0NENFRjUzRkZBQTkyQzA2NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1esxE4hD/rnpOQKvabfpg7FpO CQh9nI/qRGasEzJW1fm/VusvjPzfxvXpOATvlJg+uUt25D3ajMGsnC/ytXf5pcPe MYNjv7GFq3gbGgTLRtzGGEVd7BbV1mA++6XoQHzUvK2uz/93KulY0HXeOCgD0zWh htDN/5HquE2zh7FQcb7tDkD+E7NKhwn2zjBA7+FMFutBoizjKSoATfezER2njm8W zOsu9ZC4MgdV3rlUfg2654of9Cb6cmQe9eqQihYdlxJDoUQfI1nYv+umlTtrx4Hh BdS3BbR5W0n0yWnIFTirYXp7crIDeox4As9OdLTpAw1CDesZyUjiWkQolhgrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJD9CqCvMXMcCqq9EzvU/+qksBkMwHwYDVR0j BBgwFoAU9CCuY+2ZEk99PxS4+pwf83gAZ8IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhH MWYvMC9GNDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0MjBBRTYzRUQ5OTEyNEY3 RDNGMTRCOEZBOUMxRkYzNzgwMDY3QzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhHMWYvMC9G NDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZo0b6bsU7NixsZejP/tMMLKwq/RRZLKsnGo8hcMuy5SiQxK0tOOyihVkKyDi 1Z4axvDItSRdKi9DDuk1K6c7LFcX7UF3Wwuy44vompexoqK+ETYnUqII7Bi57crP OCXeMQspxNs6GOXGmu7JWyOCjW2msMMHELFZ5E4BntaesN/7gejPnnLbpSNMU+y2 xtW/60hzg+/l+YbdJMY5txwSGLhnZp1ciTqxHLgmjkgsDRdfBUzJCz4Pv0ggG40D ccc9gN4wNs4UgrHE5u6PyODgS3+kVWA19o4411f3HETO30EjlIjsA4fIwo+R1e7J 4Da/+E42w2gA+yokKfCN3t9boQ== -----END CERTIFICATE-----Generated at Wed Nov 5 05:08:12 2025 by rpki-client