$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft File: A99D272225729B303C95F28914878741C6AE29BE.mft (raw, json) Hash identifier: +ALSPK8+//f6bGGI38pWURU/Bz7MKu+imgeEeC6FKl8= Subject key identifier: CD:EA:A8:79:B6:60:2D:D8:1C:34:D7:0D:1C:8A:27:EA:0A:9B:1B:F2 Authority key identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE Certificate issuer: /CN=A99D272225729B303C95F28914878741C6AE29BE Certificate serial: 09A08162209D94ED32C2B313F69F698F74C5F792 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer Subject info access: rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft Manifest number: 0311 Signing time: Tue 04 Nov 2025 21:36:00 +0000 Manifest this update: Tue 04 Nov 2025 21:31:00 +0000 Manifest next update: Wed 05 Nov 2025 22:10:00 +0000 Files and hashes: 1: 323830343a343134633a3a2f33322d3438203d3e203238323034.roa (hash: r8cnAZ/4v8S40dmgDmHooqNyAvqo3wuz9559tBYcDq0=) 2: 3138392e39312e34382e302f32302d3332203d3e203238323034.roa (hash: mDfQLK61XcBdcZJh8AKS28XE2sEJ3Uz/m7Pd8PTtlc4=) 3: A99D272225729B303C95F28914878741C6AE29BE.crl (hash: bGRIjztsr1Ot0dBfZtdf31rfrGsyU9MW8kTZYXQT4uo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 22:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a0:81:62:20:9d:94:ed:32:c2:b3:13:f6:9f:69:8f:74:c5:f7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A99D272225729B303C95F28914878741C6AE29BE Validity Not Before: Nov 4 21:31:00 2025 GMT Not After : Nov 5 22:10:00 2025 GMT Subject: CN=CDEAA879B6602DD81C34D70D1C8A27EA0A9B1BF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e3:40:af:e1:81:1d:cd:81:ef:8f:28:f8:ba: fe:cc:16:02:da:46:ec:7c:96:a0:19:5c:c1:3b:c5: bb:f8:b2:72:41:a7:45:26:89:16:5a:5d:a2:8b:37: b1:60:a8:b2:ee:43:4e:43:cc:6c:46:cf:6d:15:58: 2a:99:88:49:d1:90:51:30:18:51:36:05:79:95:8a: 82:1c:7c:fd:28:59:2d:dd:14:26:e6:5a:5c:6f:c7: a6:be:cb:1b:83:ca:1b:5a:a7:90:e1:b6:18:dc:eb: 25:d5:f3:04:7f:64:75:4b:b7:41:08:ce:63:1b:90: cd:8f:b2:80:26:48:cc:1b:01:78:70:c6:fe:d6:1e: 9d:66:73:bc:07:50:67:14:f3:a6:b3:35:a2:78:53: 70:56:67:28:30:9a:b6:18:e5:08:56:74:fe:f4:0e: 0e:69:2e:2a:69:d7:a3:f6:ed:5c:6e:e2:64:b4:bd: ab:d2:ed:3a:2a:70:31:57:ad:94:3c:44:b3:87:7e: ee:95:1f:be:71:6d:0f:d4:b7:c8:a2:49:5f:a0:0d: f4:3a:9c:3e:c7:70:1e:8b:32:82:ee:b5:8f:2f:2a: 17:bf:5d:8e:e1:ff:40:fe:7b:6f:f8:61:9b:f2:1e: 2c:d7:fb:21:f4:5e:71:44:55:79:33:42:59:62:90: ea:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EA:A8:79:B6:60:2D:D8:1C:34:D7:0D:1C:8A:27:EA:0A:9B:1B:F2 X509v3 Authority Key Identifier: keyid:A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c2:18:3e:cb:82:0d:a3:8d:59:9e:74:27:70:e7:71:cf:a3: 49:81:39:8a:b5:61:0c:ee:0d:8a:56:f2:a0:3a:9e:8c:91:9e: 31:67:0a:9c:8a:b5:be:50:b0:2b:e6:84:9c:5b:af:36:12:bf: af:5f:b2:9f:84:bb:ed:e2:f3:1b:82:e2:8c:b2:55:68:36:1e: b9:a9:9f:2f:71:60:05:df:4c:18:66:3c:89:15:4e:78:27:3f: 8f:a8:1e:ec:9d:0f:05:b0:c0:86:c8:2d:17:21:68:7d:eb:e9: 06:22:11:a1:88:1c:fc:b9:e1:14:20:1d:8b:93:32:76:5b:a9: 87:da:af:e1:0e:8a:d6:d9:0d:d3:87:f9:c8:ab:ec:e6:b8:53: 8d:b6:41:2e:07:02:ab:c5:8f:e0:4e:df:79:53:06:81:64:da: 87:60:ad:6d:cb:92:d1:c2:8d:4d:ba:27:39:ea:fe:22:eb:b4: 3b:22:04:66:e2:1a:d1:b1:a3:e0:fe:9c:3f:a5:17:61:73:a6: 0f:a0:81:c0:06:0a:e0:18:5b:f6:4a:a0:fc:96:fb:d3:9c:5d: d7:83:3a:3a:44:93:69:98:05:2d:4e:9b:77:47:5a:17:6d:b1: b5:10:8f:93:26:99:2e:75:ad:97:35:9e:57:ed:48:67:d5:0f: 79:c5:f3:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCaCBYiCdlO0ywrMT9p9pj3TF95IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk5RDI3MjIyNTcyOUIzMDNDOTVGMjg5MTQ4Nzg3NDFD NkFFMjlCRTAeFw0yNTExMDQyMTMxMDBaFw0yNTExMDUyMjEwMDBaMDMxMTAvBgNV BAMTKENERUFBODc5QjY2MDJERDgxQzM0RDcwRDFDOEEyN0VBMEE5QjFCRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg40Cv4YEdzYHvjyj4uv7MFgLa Rux8lqAZXME7xbv4snJBp0UmiRZaXaKLN7FgqLLuQ05DzGxGz20VWCqZiEnRkFEw GFE2BXmVioIcfP0oWS3dFCbmWlxvx6a+yxuDyhtap5Dhthjc6yXV8wR/ZHVLt0EI zmMbkM2PsoAmSMwbAXhwxv7WHp1mc7wHUGcU86azNaJ4U3BWZygwmrYY5QhWdP70 Dg5pLipp16P27Vxu4mS0vavS7ToqcDFXrZQ8RLOHfu6VH75xbQ/Ut8iiSV+gDfQ6 nD7HcB6LMoLutY8vKhe/XY7h/0D+e2/4YZvyHizX+yH0XnFEVXkzQllikOqPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzeqoebZgLdgcNNcNHIon6gqbG/IwHwYDVR0j BBgwFoAUqZ0nIiVymzA8lfKJFIeHQcauKb4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnRDa2h3eVROSHdMQjFZTG5pTWZNTjh0UmFrNlRRTFkza3Q2SnBXRFBN RmgvMC9BOTlEMjcyMjI1NzI5QjMwM0M5NUYyODkxNDg3ODc0MUM2QUUyOUJFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5OUQyNzIyMjU3MjlCMzAz Qzk1RjI4OTE0ODc4NzQxQzZBRTI5QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnRDa2h3eVROSHdMQjFZTG5pTWZNTjh0UmFrNlRRTFkza3Q2SnBXRFBNRmgvMC9B OTlEMjcyMjI1NzI5QjMwM0M5NUYyODkxNDg3ODc0MUM2QUUyOUJFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIsIYPsuCDaONWZ50J3Dncc+jSYE5irVhDO4NilbyoDqejJGeMWcKnIq1vlCw K+aEnFuvNhK/r1+yn4S77eLzG4LijLJVaDYeuamfL3FgBd9MGGY8iRVOeCc/j6ge 7J0PBbDAhsgtFyFofevpBiIRoYgc/LnhFCAdi5Mydluph9qv4Q6K1tkN04f5yKvs 5rhTjbZBLgcCq8WP4E7feVMGgWTah2CtbcuS0cKNTbonOer+Iuu0OyIEZuIa0bGj 4P6cP6UXYXOmD6CBwAYK4Bhb9kqg/Jb705xd14M6OkSTaZgFLU6bd0daF22xtRCP kyaZLnWtlzWeV+1IZ9UPecXz3g== -----END CERTIFICATE-----Generated at Wed Nov 5 10:05:10 2025 by rpki-client