$ rpki-client -vvf rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft File: 085A4379FC02066399A7BABE986F2B930711F0E0.mft (raw, json) Hash identifier: a6w8moayW70Llpa2graGSt76r88nfqQ6diu1XXJKk1k= Subject key identifier: B5:A5:7A:D0:10:66:39:E6:12:CA:2E:B8:DA:B7:92:21:51:45:5B:4F Authority key identifier: 08:5A:43:79:FC:02:06:63:99:A7:BA:BE:98:6F:2B:93:07:11:F0:E0 Certificate issuer: /CN=085A4379FC02066399A7BABE986F2B930711F0E0 Certificate serial: 2F4BE1812B0630E31F54A397E72E0E3431DB4C34 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer Subject info access: rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft Manifest number: 0159 Signing time: Tue 04 Nov 2025 17:29:41 +0000 Manifest this update: Tue 04 Nov 2025 17:24:41 +0000 Manifest next update: Wed 05 Nov 2025 20:50:41 +0000 Files and hashes: 1: 085A4379FC02066399A7BABE986F2B930711F0E0.crl (hash: PPZqrYFllyK2uKIW3m7CsANFAgpnQwrzLMbo8ImKAXk=) 2: 3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa (hash: +xOfTPOyg3oZBW1SRivjN46hBESQU5WWrM4vrLYmFGA=) 3: 323830343a336262633a3a2f33322d313238203d3e20323636313638.roa (hash: OyHPZjFM6nE6jESktIZHb4U9fXKswqrOu5Gkjq9t1u4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.crl rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:4b:e1:81:2b:06:30:e3:1f:54:a3:97:e7:2e:0e:34:31:db:4c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=085A4379FC02066399A7BABE986F2B930711F0E0 Validity Not Before: Nov 4 17:24:41 2025 GMT Not After : Nov 5 20:50:41 2025 GMT Subject: CN=B5A57AD0106639E612CA2EB8DAB7922151455B4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:d7:d0:2c:a1:a5:2f:c5:f6:79:c2:3c:9d: 40:a0:5a:e2:bb:25:3b:91:a4:ff:4e:4a:78:1d:c5: 11:05:62:65:22:32:57:bd:3d:d9:5a:1f:17:5f:69: 85:21:ad:a2:44:f5:d4:31:4c:e8:0f:16:b5:0e:2d: d0:9a:36:66:95:3e:f6:a3:22:63:07:17:0b:72:f5: 39:8d:43:3c:29:35:0a:15:1b:78:c0:01:1d:7d:c3: 76:f7:86:a7:0b:1b:2f:5c:d4:0b:41:3f:3f:c0:be: 14:10:f9:e0:98:c4:0d:02:45:38:18:00:89:30:a6: ec:e1:64:6b:02:a6:92:e7:72:fc:d0:d8:08:1d:5c: e3:9d:05:36:a5:11:33:ff:dd:b7:95:e9:d3:be:bc: ee:a1:dd:b0:f5:cf:91:8a:83:fc:17:0c:b7:d3:40: 73:ea:a0:5d:26:6c:d5:1c:43:05:e0:0d:d1:91:65: 99:ce:94:a1:30:53:72:eb:f1:70:b9:78:19:b4:18: ee:ae:a3:a5:a6:94:01:16:0f:a4:f6:58:d7:1c:7f: 44:07:23:9e:16:b0:c7:1a:b5:eb:60:5a:53:16:5d: 84:04:80:2d:67:05:86:e6:33:bc:bd:d9:d0:a9:84: 7a:dd:66:cb:59:21:17:d2:a7:b8:86:e5:d2:02:af: b9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A5:7A:D0:10:66:39:E6:12:CA:2E:B8:DA:B7:92:21:51:45:5B:4F X509v3 Authority Key Identifier: keyid:08:5A:43:79:FC:02:06:63:99:A7:BA:BE:98:6F:2B:93:07:11:F0:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:98:d5:c7:05:4c:aa:23:c0:e0:8f:c0:50:25:87:54:a2:20: 21:8f:ac:72:ad:8a:83:73:9a:9c:9d:40:1d:61:93:d2:73:b2: 98:5d:f0:37:ab:ce:c3:3e:b7:f5:82:b5:9e:fd:1a:ee:65:fa: 00:2b:89:15:23:bd:f8:aa:f9:45:bd:fd:f5:5e:01:4e:5a:8d: 99:7b:85:0c:72:64:4f:ec:1b:60:88:20:d6:1e:54:16:eb:93: e8:a2:2a:49:6d:f5:2d:ab:0c:3d:76:83:e8:22:53:41:14:08: 63:1e:0e:b2:02:7c:58:32:5f:1a:61:67:9e:01:29:5d:55:a9: 42:b0:6d:b2:5e:b8:31:74:ee:ab:80:0b:cc:20:16:31:1c:00: be:19:20:72:ec:74:16:9f:d5:f7:a6:56:72:d2:ce:5d:6f:6d: 0b:fd:22:a1:20:6a:9a:00:5a:a5:96:2a:58:f7:e6:71:32:19: 3e:db:e4:5e:89:50:c3:74:39:b4:69:f1:78:f8:1c:d5:b9:0a: c4:83:2d:80:97:80:a8:cb:17:be:70:b1:13:55:87:ac:af:dc: 84:76:57:d5:d3:f7:06:a3:cd:b8:a5:13:2b:40:8d:66:d4:df: 2f:12:ae:25:bf:99:ad:f2:a9:9d:32:2a:bb:51:19:45:a1:47: d5:8f:ab:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUL0vhgSsGMOMfVKOX5y4ONDHbTDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg1QTQzNzlGQzAyMDY2Mzk5QTdCQUJFOTg2RjJCOTMw NzExRjBFMDAeFw0yNTExMDQxNzI0NDFaFw0yNTExMDUyMDUwNDFaMDMxMTAvBgNV BAMTKEI1QTU3QUQwMTA2NjM5RTYxMkNBMkVCOERBQjc5MjIxNTE0NTVCNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClwtfQLKGlL8X2ecI8nUCgWuK7 JTuRpP9OSngdxREFYmUiMle9PdlaHxdfaYUhraJE9dQxTOgPFrUOLdCaNmaVPvaj ImMHFwty9TmNQzwpNQoVG3jAAR19w3b3hqcLGy9c1AtBPz/AvhQQ+eCYxA0CRTgY AIkwpuzhZGsCppLncvzQ2AgdXOOdBTalETP/3beV6dO+vO6h3bD1z5GKg/wXDLfT QHPqoF0mbNUcQwXgDdGRZZnOlKEwU3Lr8XC5eBm0GO6uo6WmlAEWD6T2WNccf0QH I54WsMcatetgWlMWXYQEgC1nBYbmM7y92dCphHrdZstZIRfSp7iG5dICr7mxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtaV60BBmOeYSyi642reSIVFFW08wHwYDVR0j BBgwFoAUCFpDefwCBmOZp7q+mG8rkwcR8OAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2habmRWczFTVnNBZXBkeVB3MnVpRURYUVdTNU02ejR5ZVlSeDZGWmc0 V1MvMC8wODVBNDM3OUZDMDIwNjYzOTlBN0JBQkU5ODZGMkI5MzA3MTFGMEUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4NUE0Mzc5RkMwMjA2NjM5 OUE3QkFCRTk4NkYyQjkzMDcxMUYwRTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2habmRWczFTVnNBZXBkeVB3MnVpRURYUVdTNU02ejR5ZVlSeDZGWmc0V1MvMC8w ODVBNDM3OUZDMDIwNjYzOTlBN0JBQkU5ODZGMkI5MzA3MTFGMEUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOpjVxwVMqiPA4I/AUCWHVKIgIY+scq2Kg3OanJ1AHWGT0nOymF3wN6vOwz63 9YK1nv0a7mX6ACuJFSO9+Kr5Rb399V4BTlqNmXuFDHJkT+wbYIgg1h5UFuuT6KIq SW31LasMPXaD6CJTQRQIYx4OsgJ8WDJfGmFnngEpXVWpQrBtsl64MXTuq4ALzCAW MRwAvhkgcux0Fp/V96ZWctLOXW9tC/0ioSBqmgBapZYqWPfmcTIZPtvkXolQw3Q5 tGnxePgc1bkKxIMtgJeAqMsXvnCxE1WHrK/chHZX1dP3BqPNuKUTK0CNZtTfLxKu Jb+ZrfKpnTIqu1EZRaFH1Y+ruQ== -----END CERTIFICATE-----Generated at Wed Nov 5 07:54:51 2025 by rpki-client