$ rpki-client -vvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft File: 642D27C2B88FC1E644188313B8DE644A2705C863.mft (raw, json) Hash identifier: 8GUlSqKT/ixID1s/F6noa/DvB7o8zqS0EDaWpfAtVn8= Subject key identifier: C1:F9:3D:42:3B:5B:E9:BA:20:98:FD:65:3E:92:53:DC:E2:9A:13:CD Authority key identifier: 64:2D:27:C2:B8:8F:C1:E6:44:18:83:13:B8:DE:64:4A:27:05:C8:63 Certificate issuer: /CN=642D27C2B88FC1E644188313B8DE644A2705C863 Certificate serial: 69440454D08A823B84BC2623DDF6A1D405992E23 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer Subject info access: rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft Manifest number: 0306 Signing time: Tue 04 Nov 2025 09:25:53 +0000 Manifest this update: Tue 04 Nov 2025 09:20:53 +0000 Manifest next update: Wed 05 Nov 2025 13:04:53 +0000 Files and hashes: 1: 3134332e3133372e382e302f32322d3332203d3e203533313732.roa (hash: Z4Kd/Q+ef3fAVAPdsLOqBV3jmjz3c+VRnOX7iZB4V5E=) 2: 3138362e3232352e36342e302f32302d3332203d3e203533313732.roa (hash: 2N05kYY36sPD4dzgURL5LBC/w+Ebo1TNhqpVhz8vlPE=) 3: 323830343a323938303a3a2f33322d313238203d3e203533313732.roa (hash: noo9CnK8b+ZBOYaxBrPhEjf2vRApCvi1hI1y7VNaBW4=) 4: 642D27C2B88FC1E644188313B8DE644A2705C863.crl (hash: 7QDhYhepl5Qu+eVyPY/POHiWbwD0bQ1NvUsXVN+0ir0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.crl rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 13:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:44:04:54:d0:8a:82:3b:84:bc:26:23:dd:f6:a1:d4:05:99:2e:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642D27C2B88FC1E644188313B8DE644A2705C863 Validity Not Before: Nov 4 09:20:53 2025 GMT Not After : Nov 5 13:04:53 2025 GMT Subject: CN=C1F93D423B5BE9BA2098FD653E9253DCE29A13CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:36:bb:8c:7d:30:4e:2c:d3:5b:d4:17:81:d6: 64:c5:72:49:28:af:4f:6d:c1:7a:8d:8c:c9:35:81: 70:3b:b1:e6:a8:38:ff:2a:30:88:e6:a3:ce:da:de: 91:49:e2:43:48:ce:a9:41:68:f4:f8:db:d9:4e:90: bf:60:c5:78:5b:10:0e:61:9b:88:ac:b1:23:7d:d7: 10:8c:62:d9:50:72:e3:90:7a:e2:a2:95:1b:4c:98: 3b:92:95:0b:a0:4c:ea:82:78:fd:bf:51:a9:42:24: 97:88:50:16:81:29:f4:f2:7c:60:5e:0c:86:11:a0: db:3c:e8:0a:35:bb:2a:7b:af:ca:34:ac:a3:b1:d4: 75:43:bd:85:dc:db:4a:b7:8f:80:0a:00:4b:de:cd: 89:f0:c2:f8:37:e0:4f:e7:c3:3b:c2:0e:3c:a1:31: 39:7b:68:ca:41:47:40:8a:59:ab:64:3d:49:4c:a0: d9:10:a8:c0:5d:3d:b9:2d:0a:32:da:99:07:1d:94: 9f:33:20:3f:a2:9c:18:01:08:76:4d:1f:8e:99:d6: 91:ed:93:40:73:8c:0b:fd:a1:84:a4:9e:94:fa:72: 28:0e:ee:93:07:52:84:74:06:dd:7d:0d:b7:02:1d: 1e:4e:e9:af:f7:02:ad:ac:7c:5c:c7:ee:a7:9a:1d: 6d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F9:3D:42:3B:5B:E9:BA:20:98:FD:65:3E:92:53:DC:E2:9A:13:CD X509v3 Authority Key Identifier: keyid:64:2D:27:C2:B8:8F:C1:E6:44:18:83:13:B8:DE:64:4A:27:05:C8:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:e0:06:ae:71:f3:e7:50:3d:11:e0:04:b1:09:43:50:31:ab: ca:56:a6:6e:ef:ff:c5:4f:c3:90:ee:24:7e:62:9c:12:86:ad: 2b:b6:bd:c6:89:17:73:0f:70:f6:38:cf:65:8d:8c:ad:0e:d0: 8b:8f:f3:88:41:d3:9f:5d:03:be:a0:fc:97:47:0d:ea:44:3e: c9:55:4e:0f:f0:99:8c:ad:4b:28:ef:91:97:72:76:05:6e:13: 6a:f1:79:46:a4:c2:da:b3:0a:dc:f6:8c:87:cb:f4:33:aa:4c: 64:e9:2d:11:16:a3:20:72:74:d4:d9:51:d6:f1:af:b1:73:1c: 36:33:8d:4d:f2:13:95:2a:48:5b:f3:8c:cb:60:8c:18:90:05: 56:a5:45:7c:51:ab:a9:dc:3a:8b:7a:3e:ba:c0:db:56:59:0d: b6:d0:32:0b:e1:f0:13:62:b0:77:74:1d:e7:9c:75:73:e1:81: b2:d8:94:e5:15:b1:fb:92:61:7f:1c:34:ac:da:ce:2d:5d:69: 96:f7:1a:18:29:2f:96:29:b3:fc:d1:bd:00:73:b1:19:cc:3f: ec:cc:37:ef:8a:3e:e2:af:18:3c:c1:53:77:09:22:70:9f:de: f8:bd:4e:ae:87:0a:d8:8f:39:94:12:28:82:47:84:d9:76:56: 55:fb:f2:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaUQEVNCKgjuEvCYj3fah1AWZLiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyRDI3QzJCODhGQzFFNjQ0MTg4MzEzQjhERTY0NEEy NzA1Qzg2MzAeFw0yNTExMDQwOTIwNTNaFw0yNTExMDUxMzA0NTNaMDMxMTAvBgNV BAMTKEMxRjkzRDQyM0I1QkU5QkEyMDk4RkQ2NTNFOTI1M0RDRTI5QTEzQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRNruMfTBOLNNb1BeB1mTFckko r09twXqNjMk1gXA7seaoOP8qMIjmo87a3pFJ4kNIzqlBaPT429lOkL9gxXhbEA5h m4issSN91xCMYtlQcuOQeuKilRtMmDuSlQugTOqCeP2/UalCJJeIUBaBKfTyfGBe DIYRoNs86Ao1uyp7r8o0rKOx1HVDvYXc20q3j4AKAEvezYnwwvg34E/nwzvCDjyh MTl7aMpBR0CKWatkPUlMoNkQqMBdPbktCjLamQcdlJ8zID+inBgBCHZNH46Z1pHt k0BzjAv9oYSknpT6cigO7pMHUoR0Bt19DbcCHR5O6a/3Aq2sfFzH7qeaHW2DAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwfk9Qjtb6bogmP1lPpJT3OKaE80wHwYDVR0j BBgwFoAUZC0nwriPweZEGIMTuN5kSicFyGMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2hKNFJDTlBRdlluUlRtU3BERnpjZjFQV2F4UTlZMTFva0V4cjdkcTVu NWsvMS82NDJEMjdDMkI4OEZDMUU2NDQxODgzMTNCOERFNjQ0QTI3MDVDODYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0MkQyN0MyQjg4RkMxRTY0 NDE4ODMxM0I4REU2NDRBMjcwNUM4NjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2hKNFJDTlBRdlluUlRtU3BERnpjZjFQV2F4UTlZMTFva0V4cjdkcTVuNWsvMS82 NDJEMjdDMkI4OEZDMUU2NDQxODgzMTNCOERFNjQ0QTI3MDVDODYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVuAGrnHz51A9EeAEsQlDUDGrylambu//xU/DkO4kfmKcEoatK7a9xokXcw9w 9jjPZY2MrQ7Qi4/ziEHTn10DvqD8l0cN6kQ+yVVOD/CZjK1LKO+Rl3J2BW4TavF5 RqTC2rMK3PaMh8v0M6pMZOktERajIHJ01NlR1vGvsXMcNjONTfITlSpIW/OMy2CM GJAFVqVFfFGrqdw6i3o+usDbVlkNttAyC+HwE2Kwd3Qd55x1c+GBstiU5RWx+5Jh fxw0rNrOLV1plvcaGCkvlimz/NG9AHOxGcw/7Mw374o+4q8YPMFTdwkicJ/e+L1O rocK2I85lBIogkeE2XZWVfvyLg== -----END CERTIFICATE-----Generated at Wed Nov 5 05:11:35 2025 by rpki-client