$ rpki-client -vvf rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft File: C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft (raw, json) Hash identifier: wKMfWL36yo+3hG6qbZx3wQijhDbsPxxK1qeFxohJ2BE= Subject key identifier: 26:DB:D3:9D:E2:19:AD:BE:57:B1:97:E3:46:EF:EF:7D:82:45:07:06 Authority key identifier: C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43 Certificate issuer: /CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43 Certificate serial: 6922FE2538ABAD82D9C08820D72C151E464D132A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer Subject info access: rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft Manifest number: 02FC Signing time: Tue 04 Nov 2025 14:19:16 +0000 Manifest this update: Tue 04 Nov 2025 14:14:16 +0000 Manifest next update: Wed 05 Nov 2025 17:01:16 +0000 Files and hashes: 1: C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl (hash: j20+gUHvxcngojPHiz8/w9cbf/vVUwISjFT/wMx2XgM=) 2: 323830343a323761383a3a2f33322d3334203d3e20323633393135.roa (hash: UhTWnyVMbYu8EHBAglnDBIow7lLgfSvBg43ee63dnW4=) 3: 3133382e3230342e3232342e302f32322d3234203d3e20323633393135.roa (hash: cYRnXeUL77tbZZROt3Wn+JGjwSu2QmTDm/qcgCbUuRs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 17:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:22:fe:25:38:ab:ad:82:d9:c0:88:20:d7:2c:15:1e:46:4d:13:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43 Validity Not Before: Nov 4 14:14:16 2025 GMT Not After : Nov 5 17:01:16 2025 GMT Subject: CN=26DBD39DE219ADBE57B197E346EFEF7D82450706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9f:ac:72:0e:fc:20:d6:9b:e4:7a:7c:99:4f: fc:5b:94:ba:1a:a0:28:24:57:cc:13:e6:bb:95:49: 2c:14:ef:71:7c:fb:4a:69:86:cd:c6:67:92:c1:b5: aa:e2:d6:1b:59:6d:8b:bd:49:b3:67:47:6b:6c:4c: 71:c1:e4:40:15:46:e5:ce:db:f0:bb:5c:47:0e:82: 7a:e7:89:8a:b3:5c:36:67:3f:af:67:b8:2a:0a:70: 73:6d:03:75:45:ce:45:82:5d:a6:36:2e:40:04:cd: ff:48:fa:b5:c0:8b:80:2a:3b:0c:24:7e:17:4a:b0: 27:7c:69:05:58:4d:da:b7:6b:8e:63:31:4f:03:27: fd:40:5c:f4:fd:06:84:7f:f5:f0:40:34:78:95:ca: 80:de:d8:41:e8:13:9c:61:79:1d:3b:4d:cb:4f:23: 19:b6:24:8b:48:99:7f:ca:24:82:aa:09:9a:d8:c5: 3a:a3:85:bd:8d:78:79:41:0f:c4:8b:37:50:a0:74: dc:d0:97:29:3d:04:3d:58:0c:51:4c:24:aa:cc:75: 2d:ff:0a:3d:18:dd:3b:fd:a7:ad:96:40:9b:da:d3: 1e:b1:02:3e:88:bc:48:b3:86:92:e9:8b:4a:17:bb: ea:e3:18:63:f2:cb:e6:7f:2e:a5:6e:a7:c6:00:64: 93:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:DB:D3:9D:E2:19:AD:BE:57:B1:97:E3:46:EF:EF:7D:82:45:07:06 X509v3 Authority Key Identifier: keyid:C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:25:f8:00:61:5f:4c:d2:93:66:19:8a:f9:bd:bc:fb:84:b1: cd:b2:c6:b0:b5:ce:ba:8c:19:db:91:05:85:66:66:94:26:61: 1a:f1:42:2c:11:cc:8b:64:90:28:ce:48:04:c1:21:ff:66:1b: d5:11:c4:4a:e7:bd:35:53:cb:e0:7d:90:79:3d:64:77:c1:ae: dd:5e:3a:05:6a:cc:6c:7a:79:23:a8:ff:7b:67:26:c7:41:0c: 91:dc:22:6f:d6:48:23:72:f6:e1:43:f3:fe:d1:96:d3:28:b7: 84:92:9d:12:2b:4e:75:be:1e:34:3f:bc:8e:cb:06:16:7f:66: 69:2e:22:a1:41:e0:d3:fc:65:c5:d6:86:7c:18:59:d2:2a:66: 94:13:02:d4:0c:0b:c0:74:3e:70:15:2e:01:34:7f:75:f3:17: b6:fb:47:d7:49:58:ad:c8:b7:e4:42:f8:3d:da:72:4b:f4:d5: 57:bc:b6:e6:61:08:57:f8:d0:a8:da:dc:bf:6b:9f:18:f5:ec: 8e:93:2f:9f:09:42:05:ea:db:41:71:a8:ee:78:06:de:51:4e: 2d:de:4b:08:c0:60:3a:79:51:f5:df:3f:3a:43:88:1b:6b:22: 9c:2e:d1:3e:44:73:09:c0:1f:b7:82:70:c2:75:93:5c:fe:80: 6f:fe:e5:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaSL+JTirrYLZwIgg1ywVHkZNEyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAyOEE5NUZCNkY3RTlCMzA0QUI3QjE1QkE5Q0YzN0M3 NDIwRUU0MzAeFw0yNTExMDQxNDE0MTZaFw0yNTExMDUxNzAxMTZaMDMxMTAvBgNV BAMTKDI2REJEMzlERTIxOUFEQkU1N0IxOTdFMzQ2RUZFRjdEODI0NTA3MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVn6xyDvwg1pvkenyZT/xblLoa oCgkV8wT5ruVSSwU73F8+0pphs3GZ5LBtari1htZbYu9SbNnR2tsTHHB5EAVRuXO 2/C7XEcOgnrniYqzXDZnP69nuCoKcHNtA3VFzkWCXaY2LkAEzf9I+rXAi4AqOwwk fhdKsCd8aQVYTdq3a45jMU8DJ/1AXPT9BoR/9fBANHiVyoDe2EHoE5xheR07TctP Ixm2JItImX/KJIKqCZrYxTqjhb2NeHlBD8SLN1CgdNzQlyk9BD1YDFFMJKrMdS3/ Cj0Y3Tv9p62WQJva0x6xAj6IvEizhpLpi0oXu+rjGGPyy+Z/LqVup8YAZJP3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJtvTneIZrb5XsZfjRu/vfYJFBwYwHwYDVR0j BBgwFoAUwCipX7b36bMEq3sVupzzfHQg7kMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2J0aXdGWmNhbXg4enJBbXlxVWVwaDZ4ZERWWnVIWHN4ZTY4dVFMZnhF R3gvMS9DMDI4QTk1RkI2RjdFOUIzMDRBQjdCMTVCQTlDRjM3Qzc0MjBFRTQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwMjhBOTVGQjZGN0U5QjMw NEFCN0IxNUJBOUNGMzdDNzQyMEVFNDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2J0aXdGWmNhbXg4enJBbXlxVWVwaDZ4ZERWWnVIWHN4ZTY4dVFMZnhFR3gvMS9D MDI4QTk1RkI2RjdFOUIzMDRBQjdCMTVCQTlDRjM3Qzc0MjBFRTQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVCX4AGFfTNKTZhmK+b28+4SxzbLGsLXOuowZ25EFhWZmlCZhGvFCLBHMi2SQ KM5IBMEh/2Yb1RHESue9NVPL4H2QeT1kd8Gu3V46BWrMbHp5I6j/e2cmx0EMkdwi b9ZII3L24UPz/tGW0yi3hJKdEitOdb4eND+8jssGFn9maS4ioUHg0/xlxdaGfBhZ 0ipmlBMC1AwLwHQ+cBUuATR/dfMXtvtH10lYrci35EL4PdpyS/TVV7y25mEIV/jQ qNrcv2ufGPXsjpMvnwlCBerbQXGo7ngG3lFOLd5LCMBgOnlR9d8/OkOIG2sinC7R PkRzCcAft4JwwnWTXP6Ab/7lug== -----END CERTIFICATE-----Generated at Wed Nov 5 03:19:27 2025 by rpki-client