$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft File: 1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft (raw, json) Hash identifier: /3obOsgI425ypRsJCiCAiwoz4Lp50jeg1e4UJm/RzIE= Subject key identifier: C1:92:B2:F2:71:AC:36:C3:85:96:48:44:D9:D0:43:BF:B7:B2:F3:9D Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Certificate serial: 75C1FBD78011DB9E3589B413CB7B633BB5AA9664 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft Manifest number: 030D Signing time: Tue 04 Nov 2025 18:56:09 +0000 Manifest this update: Tue 04 Nov 2025 18:51:09 +0000 Manifest next update: Wed 05 Nov 2025 22:36:09 +0000 Files and hashes: 1: 3138312e3233322e3232342e302f32332d3234203d3e20323634313230.roa (hash: KQ4w4HsCnS6muTAhBvT26hKjOMoO/6iO//Sml7Vi/vM=) 2: 323830343a323263303a3a2f33322d3430203d3e20323634313230.roa (hash: d/dDHA39Nu1q0bgvuw2F6HRvtau+Fjh+UiGSneZo8KE=) 3: 3137372e31322e3132382e302f32322d3234203d3e20323634313230.roa (hash: WO+FKFMBBiOVPBQfaW1urrem7SgkrtoJJxK0M0e9ZEI=) 4: 3133382e39372e34302e302f32322d3234203d3e20323634313230.roa (hash: sUu/YLPLaMu0Olqsngx/9uH8qml8jsoB7mpsGIvMI3k=) 5: 1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl (hash: SQPMS2GPSvIqr+m8yUlOAGW0DQ7wVA9GFh3B1obe+8s=) 6: 3138392e38392e3234302e302f32342d3234203d3e20323634313230.roa (hash: 2fr7r8R9lDxNrRl4/Hw4+ij8XzNMy1fJIpN7SWdKn+s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 22:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c1:fb:d7:80:11:db:9e:35:89:b4:13:cb:7b:63:3b:b5:aa:96:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Validity Not Before: Nov 4 18:51:09 2025 GMT Not After : Nov 5 22:36:09 2025 GMT Subject: CN=C192B2F271AC36C385964844D9D043BFB7B2F39D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c8:ce:56:98:06:37:fa:0b:ac:c7:ad:ad:17: 96:ca:e3:2e:ba:f6:a7:ad:4b:16:bf:0b:15:d6:d2: e5:0f:8f:f1:18:48:8e:e4:b7:b4:c8:d8:96:83:7d: fb:ab:63:41:4e:2f:16:77:72:51:d8:39:53:62:3f: 41:74:06:8c:fe:11:18:67:67:ee:4e:eb:2a:42:f4: 33:f1:dd:96:08:1b:b4:c7:45:71:5b:86:21:e9:33: d8:bc:92:ab:44:b1:d5:57:69:4b:bb:97:6f:c5:50: 96:89:48:b2:8f:3b:0f:e7:aa:f6:d4:3a:f6:6f:4a: df:b2:9c:b9:b4:8a:35:90:5f:5e:b6:80:35:69:17: d8:d4:c3:32:68:4e:37:9a:e1:8a:ad:ef:85:07:f3: 8e:b4:60:13:b0:d0:ac:78:45:4e:7e:9c:7c:32:d7: 94:64:9b:90:28:85:72:cc:f6:45:c0:e6:f7:40:e5: 4f:a3:a6:7e:f6:22:ef:74:e3:d4:10:8b:d9:a3:c6: 5c:95:63:81:56:1f:d5:93:62:18:9c:a6:ce:e9:06: bb:bc:54:b0:85:ed:f5:1a:52:7c:a0:3c:15:70:cf: 91:4a:6a:6d:8e:4c:5d:c1:e5:3c:04:b2:4b:01:25: 38:06:63:49:5b:aa:a9:06:e1:fb:8f:23:45:29:f1: 54:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:92:B2:F2:71:AC:36:C3:85:96:48:44:D9:D0:43:BF:B7:B2:F3:9D X509v3 Authority Key Identifier: keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:d1:e5:3c:dd:8d:33:8c:92:1c:2a:e2:18:25:36:a1:62:af: 86:b9:e1:b0:08:75:45:a9:af:48:10:c0:2c:bf:d8:62:03:bb: 4f:82:ce:ba:74:5b:ff:9f:4d:38:1a:c5:87:3d:a6:c2:2a:d0: f3:23:a3:fa:32:48:13:e8:aa:2a:24:65:3f:79:9a:70:da:c2: 6b:53:30:93:d1:57:7f:b4:a7:f7:53:c2:93:2c:df:5f:2a:31: 93:95:05:7e:dd:7f:8f:25:32:be:1f:82:85:4b:73:e4:ed:6e: b6:19:e1:87:de:ae:d1:71:81:fa:2e:c7:db:04:b2:91:c4:d3: 61:b5:4a:bd:ad:b6:ec:97:56:3f:94:56:3c:9d:35:32:a8:d6: 61:ba:17:63:dd:d6:51:44:e6:04:bc:f5:62:f2:46:fb:10:68: 6c:c7:01:e0:c7:74:27:1d:bc:06:42:75:85:75:07:75:6c:08: a4:44:f1:13:2e:53:66:ea:e0:74:f2:36:4e:78:89:e7:de:ae: f0:ee:68:96:af:15:e5:61:0d:7c:c8:8b:5d:c8:a2:ec:f6:38: 57:ce:59:76:1a:10:e9:19:5e:2e:91:c9:34:fb:a2:0e:5a:58: 55:92:29:77:1b:0f:fa:6c:62:bd:9f:8d:f9:ca:42:f2:d1:78: ea:93:2d:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdcH714AR2541ibQTy3tjO7WqlmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3M0ZBRjhEODY3QjYzNEVBQzVFNzM4NkRFNTcwODMw MzNBMUM5NjAeFw0yNTExMDQxODUxMDlaFw0yNTExMDUyMjM2MDlaMDMxMTAvBgNV BAMTKEMxOTJCMkYyNzFBQzM2QzM4NTk2NDg0NEQ5RDA0M0JGQjdCMkYzOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNyM5WmAY3+gusx62tF5bK4y66 9qetSxa/CxXW0uUPj/EYSI7kt7TI2JaDffurY0FOLxZ3clHYOVNiP0F0Boz+ERhn Z+5O6ypC9DPx3ZYIG7THRXFbhiHpM9i8kqtEsdVXaUu7l2/FUJaJSLKPOw/nqvbU OvZvSt+ynLm0ijWQX162gDVpF9jUwzJoTjea4Yqt74UH8460YBOw0Kx4RU5+nHwy 15Rkm5AohXLM9kXA5vdA5U+jpn72Iu9049QQi9mjxlyVY4FWH9WTYhicps7pBru8 VLCF7fUaUnygPBVwz5FKam2OTF3B5TwEsksBJTgGY0lbqqkG4fuPI0Up8VTJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwZKy8nGsNsOFlkhE2dBDv7ey850wHwYDVR0j BBgwFoAUGnP6+NhntjTqxec4beVwgwM6HJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1lWOUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtD cHUvMi8xQTczRkFGOEQ4NjdCNjM0RUFDNUU3Mzg2REU1NzA4MzAzM0ExQzk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNzNGQUY4RDg2N0I2MzRF QUM1RTczODZERTU3MDgzMDMzQTFDOTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1lWOUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtDcHUvMi8x QTczRkFGOEQ4NjdCNjM0RUFDNUU3Mzg2REU1NzA4MzAzM0ExQzk2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFtHlPN2NM4ySHCriGCU2oWKvhrnhsAh1RamvSBDALL/YYgO7T4LOunRb/59N OBrFhz2mwirQ8yOj+jJIE+iqKiRlP3macNrCa1Mwk9FXf7Sn91PCkyzfXyoxk5UF ft1/jyUyvh+ChUtz5O1uthnhh96u0XGB+i7H2wSykcTTYbVKva227JdWP5RWPJ01 MqjWYboXY93WUUTmBLz1YvJG+xBobMcB4Md0Jx28BkJ1hXUHdWwIpETxEy5TZurg dPI2TniJ596u8O5olq8V5WENfMiLXcii7PY4V85ZdhoQ6RleLpHJNPuiDlpYVZIp dxsP+mxivZ+N+cpC8tF46pMtjg== -----END CERTIFICATE-----Generated at Wed Nov 5 04:37:05 2025 by rpki-client