$ rpki-client -vvf rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft File: D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft (raw, json) Hash identifier: yoEjtlkUYjMCYtasHMDX9niSW0GYjrWE+YCctXxzHL4= Subject key identifier: 1C:EB:C4:54:E2:04:D3:CB:38:C2:2C:FC:C4:C4:61:31:A2:50:42:10 Authority key identifier: D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05 Certificate issuer: /CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05 Certificate serial: 17D7564810BFE690A890B8E661DC845B87D0044C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer Subject info access: rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft Manifest number: 0301 Signing time: Wed 05 Nov 2025 05:40:24 +0000 Manifest this update: Wed 05 Nov 2025 05:35:24 +0000 Manifest next update: Thu 06 Nov 2025 07:03:24 +0000 Files and hashes: 1: 323830343a326630383a3a2f33322d3332203d3e20323634383637.roa (hash: V7DnBsCJIuISkVSnruTXr9sSBfm6Q+BYBb5kdZYmrfc=) 2: D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl (hash: zCPn2OBq1FwhE9mGMaUgCOwD40BVjW1/Ae3mRSrfeuA=) 3: 3136382e3230352e3232342e302f32322d3234203d3e20323634383637.roa (hash: 0HtIStJbMsMcPkb3Bpf/zwlv0P5p5WuHdoYgzHMGegQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d7:56:48:10:bf:e6:90:a8:90:b8:e6:61:dc:84:5b:87:d0:04:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05 Validity Not Before: Nov 5 05:35:24 2025 GMT Not After : Nov 6 07:03:24 2025 GMT Subject: CN=1CEBC454E204D3CB38C22CFCC4C46131A2504210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fc:67:2f:5a:45:21:c2:4e:21:64:30:f3:fe: 95:9e:b6:46:af:e7:df:45:47:b3:71:a1:8b:36:f9: 52:f5:e4:78:2a:b9:73:cc:41:3f:b2:e7:e7:82:51: 00:90:fe:7f:81:7b:96:26:5c:9c:e1:c8:dc:e0:02: 21:4a:18:c2:cb:26:85:eb:67:2a:fe:a2:62:cb:33: 3d:06:d5:24:90:3f:e4:ef:d9:0a:57:12:75:c9:cc: a6:87:1a:37:f7:97:0e:0e:7c:ea:84:75:59:93:72: 02:58:91:ee:23:c4:24:a3:18:bf:f5:a4:64:e1:13: 1c:a1:a8:d1:f5:91:4a:c9:83:65:7e:73:1c:e4:e8: 77:f9:da:97:27:a7:2f:50:f0:72:cb:56:cc:5e:5d: 30:91:02:3a:83:bd:1b:c0:61:9e:7e:b1:b0:19:4f: c8:e8:3b:6f:b2:8e:80:c4:de:a1:76:22:68:a6:10: d1:c0:02:91:d3:e3:20:a7:42:a0:34:bc:ca:11:fa: 8c:27:db:ee:b0:8c:6b:49:a1:17:b6:36:bf:b2:cd: 02:42:c1:07:c2:8d:a1:4d:1c:5e:e8:97:a9:40:55: 87:92:42:fa:0c:88:60:40:6c:f9:5f:6b:d5:d1:67: 03:b7:44:6e:d8:32:7e:b3:bc:7d:ce:a2:88:2d:44: 19:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EB:C4:54:E2:04:D3:CB:38:C2:2C:FC:C4:C4:61:31:A2:50:42:10 X509v3 Authority Key Identifier: keyid:D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:47:f1:b9:36:f3:83:60:b0:1d:f4:07:f6:c3:95:27:2c:a2: 63:bf:82:e5:5e:a7:47:b8:c3:9a:3e:a4:b8:d1:9c:28:9f:16: 6a:63:03:a9:46:c7:f0:c3:df:fc:cd:ad:49:81:34:d8:c5:9d: f1:f5:00:5c:3e:e0:5f:fe:e4:a5:b9:de:d0:05:65:14:cd:95: 1f:75:cc:8d:a5:91:5c:71:f4:21:d5:4f:6c:1b:74:97:eb:7a: 02:ad:45:02:cb:9a:7d:8a:41:27:cc:60:d6:69:47:80:c9:d4: 49:0e:48:5b:43:b8:56:6b:79:f7:35:88:aa:57:20:64:99:c3: b7:a3:e9:39:6b:69:bd:49:29:ac:2c:1f:36:66:ab:41:71:21: 6c:2b:c9:5d:61:d8:47:68:56:4e:4a:45:ba:2d:0d:e6:3c:bc: e0:af:de:c2:65:e6:74:dd:33:63:46:26:cf:e3:91:d0:bb:28: 6b:2e:a5:5d:3b:da:6a:60:40:f0:34:ac:f7:5a:7b:84:ea:ac: aa:b4:15:61:e5:29:c7:a4:a4:86:05:f3:fc:eb:6f:9d:77:3f: 5b:d9:c2:ba:7c:b8:3e:56:99:4d:b3:4e:01:88:3e:d1:d4:1a: 40:a3:aa:29:d2:c5:bf:02:73:21:09:a6:0f:b2:e0:76:b6:6d: 6c:8c:b8:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUF9dWSBC/5pCokLjmYdyEW4fQBEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhEOUI4RTRBODM1QTJGRTBGOTA1Nzg2REVEOEI1MzBG N0YwQUQwNTAeFw0yNTExMDUwNTM1MjRaFw0yNTExMDYwNzAzMjRaMDMxMTAvBgNV BAMTKDFDRUJDNDU0RTIwNEQzQ0IzOEMyMkNGQ0M0QzQ2MTMxQTI1MDQyMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw/GcvWkUhwk4hZDDz/pWetkav 599FR7NxoYs2+VL15HgquXPMQT+y5+eCUQCQ/n+Be5YmXJzhyNzgAiFKGMLLJoXr Zyr+omLLMz0G1SSQP+Tv2QpXEnXJzKaHGjf3lw4OfOqEdVmTcgJYke4jxCSjGL/1 pGThExyhqNH1kUrJg2V+cxzk6Hf52pcnpy9Q8HLLVsxeXTCRAjqDvRvAYZ5+sbAZ T8joO2+yjoDE3qF2ImimENHAApHT4yCnQqA0vMoR+own2+6wjGtJoRe2Nr+yzQJC wQfCjaFNHF7ol6lAVYeSQvoMiGBAbPlfa9XRZwO3RG7YMn6zvH3OoogtRBmFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHOvEVOIE08s4wiz8xMRhMaJQQhAwHwYDVR0j BBgwFoAU2Nm45Kg1ov4PkFeG3ti1MPfwrQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0ZoSDNjcVphOHNHY1pBM21LWGtnNjZKb2FoUG05VlNYaUVaNHJpWVpD MTQvMS9EOEQ5QjhFNEE4MzVBMkZFMEY5MDU3ODZERUQ4QjUzMEY3RjBBRDA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4RDlCOEU0QTgzNUEyRkUw RjkwNTc4NkRFRDhCNTMwRjdGMEFEMDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0ZoSDNjcVphOHNHY1pBM21LWGtnNjZKb2FoUG05VlNYaUVaNHJpWVpDMTQvMS9E OEQ5QjhFNEE4MzVBMkZFMEY5MDU3ODZERUQ4QjUzMEY3RjBBRDA1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwkfxuTbzg2CwHfQH9sOVJyyiY7+C5V6nR7jDmj6kuNGcKJ8WamMDqUbH8MPf /M2tSYE02MWd8fUAXD7gX/7kpbne0AVlFM2VH3XMjaWRXHH0IdVPbBt0l+t6Aq1F AsuafYpBJ8xg1mlHgMnUSQ5IW0O4Vmt59zWIqlcgZJnDt6PpOWtpvUkprCwfNmar QXEhbCvJXWHYR2hWTkpFui0N5jy84K/ewmXmdN0zY0Ymz+OR0Lsoay6lXTvaamBA 8DSs91p7hOqsqrQVYeUpx6SkhgXz/OtvnXc/W9nCuny4PlaZTbNOAYg+0dQaQKOq KdLFvwJzIQmmD7LgdrZtbIy4mA== -----END CERTIFICATE-----Generated at Wed Nov 5 16:32:04 2025 by rpki-client