$ rpki-client -vvf rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft File: D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft (raw, json) Hash identifier: zWla7AsBYko2iJezF9zOFBfvyeMs1kaI8qYmsC7fiBk= Subject key identifier: 2F:0F:D3:79:32:71:F0:0D:02:E2:96:07:61:28:34:9C:B8:C1:DD:60 Authority key identifier: D1:40:32:9A:9C:2C:7F:8E:F6:7D:07:AE:69:78:FC:F2:C2:57:CB:DC Certificate issuer: /CN=D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC Certificate serial: 0409BB7E0971E7A4532636A0D8B5F4164C91EB57 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer Subject info access: rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft Manifest number: 61 Signing time: Tue 04 Nov 2025 19:52:27 +0000 Manifest this update: Tue 04 Nov 2025 19:47:27 +0000 Manifest next update: Wed 05 Nov 2025 20:02:27 +0000 Files and hashes: 1: D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl (hash: QTb4spJj5ybFRHy0epR7fgB4Az5rHXghCkEwkPdZjKM=) 2: 3133382e39392e38302e302f32332d3332203d3e20323731353936.roa (hash: HLRC3ILU1/Q0mbHQEP1oVDDagjnMAzt8TFJhqxGdn2k=) 3: 323830343a376530303a3a2f33322d313238203d3e20323731353936.roa (hash: atkpFiuFx9gI+NQUYhUM8BLIYtiVv1QBW1r3n1UGNww=) 4: 3139302e392e3132362e302f32342d3332203d3e20323731353936.roa (hash: uGWB+dLXvJyRVohmeQH5EDKbrZFb7329DIF62AsG+G4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:09:bb:7e:09:71:e7:a4:53:26:36:a0:d8:b5:f4:16:4c:91:eb:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC Validity Not Before: Nov 4 19:47:27 2025 GMT Not After : Nov 5 20:02:27 2025 GMT Subject: CN=2F0FD3793271F00D02E296076128349CB8C1DD60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dc:e5:87:00:ca:d6:da:f0:bb:9f:3a:a4:0f: 9f:4c:3b:6f:24:3b:8f:e6:ac:41:a1:0f:ac:b6:9f: 74:cd:22:f4:8f:13:66:c4:57:3d:e2:6b:1e:22:a3: 5e:81:d9:76:e3:ed:18:9f:86:3d:5e:dc:d5:6e:42: f3:75:fb:e9:1e:76:d7:ba:62:e3:d7:4b:54:e7:d6: 69:58:e7:a5:67:1d:76:38:ed:01:33:ed:64:0b:b4: 66:5f:be:c2:6c:c2:af:59:3f:9f:bf:42:31:37:ac: 26:d0:d0:dd:4a:53:d7:fc:ba:65:14:23:2e:5d:4d: 9a:2f:c2:5b:86:16:22:e8:45:38:64:fb:2d:b8:db: a3:3d:d0:72:3a:b4:fa:48:ce:18:14:53:2e:b4:24: 78:5a:62:82:54:62:f0:f9:ac:08:85:f0:66:c8:0b: 72:c2:e3:89:ef:07:62:17:9b:68:04:34:d8:ca:da: d0:6e:86:6b:88:91:01:6b:d4:74:55:78:f6:e5:66: 1f:e5:dc:86:7b:a7:c2:ac:39:b4:bd:81:da:37:49: 1a:47:04:33:1c:33:04:75:fb:f1:d5:25:75:71:31: ce:bc:0f:33:92:3a:70:08:c9:f6:1a:54:23:38:60: 78:16:d2:e4:6c:16:39:50:48:e7:5d:c1:39:1e:ae: d4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0F:D3:79:32:71:F0:0D:02:E2:96:07:61:28:34:9C:B8:C1:DD:60 X509v3 Authority Key Identifier: keyid:D1:40:32:9A:9C:2C:7F:8E:F6:7D:07:AE:69:78:FC:F2:C2:57:CB:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ae:f1:03:41:85:83:ef:1d:e6:7d:2c:d8:75:c8:93:6f:2e: 1e:c5:9d:1b:3d:77:15:99:ec:3a:4a:9d:e9:ab:de:4e:e0:02: 8d:1c:28:ad:3d:6f:44:9a:ff:e5:ce:14:ac:9a:6f:49:28:9c: 3e:70:42:d8:d7:34:c9:a3:10:59:8b:ff:08:ee:f8:e9:79:7e: 2b:82:0c:94:32:4f:7c:78:de:96:63:c7:b5:37:7c:21:07:e5: 55:75:0f:54:f3:43:98:29:fd:0d:42:0a:ac:dd:3d:f7:ea:8a: f5:d8:97:9a:39:89:48:04:be:e6:ad:95:40:44:c2:12:0e:93: e6:79:e7:75:17:2c:f8:ac:67:74:0e:de:5a:55:bf:d9:d4:94: 96:db:a5:2e:1f:c9:f0:21:11:03:35:98:f7:03:55:b8:51:16: 0c:ab:e1:cc:31:a1:9c:bb:83:4f:08:33:98:71:71:ac:f3:fb: 04:f0:8b:1f:ad:de:ed:d7:8a:f1:2e:fb:99:ed:ba:35:48:7c: 0d:d0:6f:63:d0:f3:10:44:84:d1:81:d1:54:f1:16:8f:83:40: 7d:d9:cc:2d:2e:39:3d:28:67:b9:bd:9d:8a:9c:32:ad:0a:51: 00:ec:08:75:72:cf:90:eb:cc:b8:1e:d2:1b:66:b5:4c:67:92: 5d:cb:61:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBAm7fglx56RTJjag2LX0FkyR61cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE0MDMyOUE5QzJDN0Y4RUY2N0QwN0FFNjk3OEZDRjJD MjU3Q0JEQzAeFw0yNTExMDQxOTQ3MjdaFw0yNTExMDUyMDAyMjdaMDMxMTAvBgNV BAMTKDJGMEZEMzc5MzI3MUYwMEQwMkUyOTYwNzYxMjgzNDlDQjhDMURENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz3OWHAMrW2vC7nzqkD59MO28k O4/mrEGhD6y2n3TNIvSPE2bEVz3iax4io16B2Xbj7Rifhj1e3NVuQvN1++kedte6 YuPXS1Tn1mlY56VnHXY47QEz7WQLtGZfvsJswq9ZP5+/QjE3rCbQ0N1KU9f8umUU Iy5dTZovwluGFiLoRThk+y2426M90HI6tPpIzhgUUy60JHhaYoJUYvD5rAiF8GbI C3LC44nvB2IXm2gENNjK2tBuhmuIkQFr1HRVePblZh/l3IZ7p8KsObS9gdo3SRpH BDMcMwR1+/HVJXVxMc68DzOSOnAIyfYaVCM4YHgW0uRsFjlQSOddwTkertSxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULw/TeTJx8A0C4pYHYSg0nLjB3WAwHwYDVR0j BBgwFoAU0UAympwsf472fQeuaXj88sJXy9wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0hxcXlFSGtvV2ptVzhwUGJwVUh1ZWVTWm53ZGRLaUVRRUhUbXlaMWVF SkwvMC9EMTQwMzI5QTlDMkM3RjhFRjY3RDA3QUU2OTc4RkNGMkMyNTdDQkRDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxNDAzMjlBOUMyQzdGOEVG NjdEMDdBRTY5NzhGQ0YyQzI1N0NCREMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0hxcXlFSGtvV2ptVzhwUGJwVUh1ZWVTWm53ZGRLaUVRRUhUbXlaMWVFSkwvMC9E MTQwMzI5QTlDMkM3RjhFRjY3RDA3QUU2OTc4RkNGMkMyNTdDQkRDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKK7xA0GFg+8d5n0s2HXIk28uHsWdGz13FZnsOkqd6aveTuACjRworT1vRJr/ 5c4UrJpvSSicPnBC2Nc0yaMQWYv/CO746Xl+K4IMlDJPfHjelmPHtTd8IQflVXUP VPNDmCn9DUIKrN099+qK9diXmjmJSAS+5q2VQETCEg6T5nnndRcs+KxndA7eWlW/ 2dSUltulLh/J8CERAzWY9wNVuFEWDKvhzDGhnLuDTwgzmHFxrPP7BPCLH63e7deK 8S77me26NUh8DdBvY9DzEESE0YHRVPEWj4NAfdnMLS45PShnub2dipwyrQpRAOwI dXLPkOvMuB7SG2a1TGeSXcthuw== -----END CERTIFICATE-----Generated at Wed Nov 5 12:35:47 2025 by rpki-client