$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft File: EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft (raw, json) Hash identifier: dG6G4mY45wc4WJGEEwA7zaULHYXZuPcbGeICB1Ih2x4= Subject key identifier: E5:A3:27:AD:1A:78:71:3B:74:DB:AE:19:D2:0A:30:96:B2:60:8C:FB Authority key identifier: EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73 Certificate issuer: /CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73 Certificate serial: 549EF3C1387037C474946DD9B19AF33401BBD502 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer Subject info access: rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft Manifest number: 0301 Signing time: Tue 04 Nov 2025 19:10:00 +0000 Manifest this update: Tue 04 Nov 2025 19:05:00 +0000 Manifest next update: Wed 05 Nov 2025 20:24:00 +0000 Files and hashes: 1: 323830343a6438303a3a2f33322d3438203d3e203532363335.roa (hash: h5ZbShRyf6a9djvBfVUYZNDwI63lUNghsgSzyARdb0k=) 2: EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl (hash: FFE5NYK2XXBO6ML82S9LFc3d9algtYNid3XmG+BEbqE=) 3: 3137372e3132352e32302e302f32322d3234203d3e203532363335.roa (hash: zB3RAYBJ5ds+DR9vGHFVJDE/Fhcry/mu8n6ADfs/cdI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:9e:f3:c1:38:70:37:c4:74:94:6d:d9:b1:9a:f3:34:01:bb:d5:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73 Validity Not Before: Nov 4 19:05:00 2025 GMT Not After : Nov 5 20:24:00 2025 GMT Subject: CN=E5A327AD1A78713B74DBAE19D20A3096B2608CFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:75:3b:44:c4:dd:e2:24:41:eb:22:dd:60:7f: 17:b8:a9:43:64:b7:29:e3:0b:04:9b:c2:52:fd:56: b5:59:ff:e1:72:c2:9a:2f:5f:f6:58:cd:19:3d:b6: a3:32:eb:3a:e3:7a:51:f1:c6:42:1c:cd:3e:27:24: 9b:cb:6d:3d:95:dc:59:af:e9:5f:ba:21:95:76:ac: d8:7d:e5:93:20:b4:0c:06:5c:73:12:aa:c1:cd:79: 6e:ec:bb:c4:77:f0:2f:f4:d9:11:81:9e:76:ec:b1: fb:0f:00:02:16:e4:2c:be:fe:aa:87:7a:5b:19:b0: 58:4a:6a:89:ea:f5:1c:5a:aa:45:4d:9d:25:e1:02: 6f:11:b0:8a:d9:82:73:6b:7b:7c:ca:9a:a3:d0:11: 37:fc:8b:32:48:54:8d:d4:84:d6:a1:e1:c7:23:88: d5:4a:81:c6:4c:66:90:3f:ca:a7:d4:49:55:17:6c: b2:ba:99:9c:51:fb:cb:3c:7b:25:37:d8:d0:9a:5c: c1:33:31:69:bc:f4:c0:79:7c:69:f1:49:01:36:76: 41:b1:b2:2d:d0:36:1a:9a:d6:c9:14:4f:24:2e:91: 55:e6:86:02:ac:ef:c6:35:87:53:26:11:37:fc:39: 7d:e1:3b:cb:71:8c:0a:5e:95:1c:ec:f1:be:d1:e1: de:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A3:27:AD:1A:78:71:3B:74:DB:AE:19:D2:0A:30:96:B2:60:8C:FB X509v3 Authority Key Identifier: keyid:EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:b7:5a:03:2e:89:76:0d:88:e7:64:d8:8d:d4:cf:0b:c8:a2: 6d:01:5b:b7:6b:68:1d:d3:6b:d5:09:8c:0b:6d:c4:1c:10:93: 10:2a:fb:e3:24:a1:ab:a5:2b:55:4c:ec:2c:44:22:a2:7c:1c: 41:fa:8d:60:b3:60:b2:39:6b:2c:2c:62:da:63:9d:40:ce:de: 1b:a5:80:21:9f:ba:73:2d:8e:02:46:2e:a1:39:db:a9:81:f4: 10:c9:1e:0a:e9:d5:ca:ed:38:b1:9f:70:29:34:ac:65:68:66: e4:da:3c:ff:40:3a:47:b2:bc:aa:06:aa:04:f8:f6:bb:0d:ea: 1f:ed:8c:49:b2:b6:d2:50:42:8b:0a:ac:a7:ff:30:f1:dd:50: dc:1a:5c:79:be:1b:b3:fe:4a:10:85:1d:84:6c:4c:d9:04:15: b4:ef:31:13:e3:c4:11:b0:83:2f:cd:73:37:88:79:f6:66:96: 2e:a3:86:d8:2c:db:d4:82:ef:2a:74:0c:61:2f:7a:36:01:e8: 8b:7b:2e:2c:98:62:1c:92:22:51:ca:42:5d:88:61:11:fa:e1: 0b:b3:f5:04:f1:65:a7:ea:57:ab:73:73:e0:d8:e1:5c:0d:4a: 7e:e8:02:df:62:ba:de:fa:d6:1a:f0:29:f9:82:59:6e:d0:5e: 73:eb:8e:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVJ7zwThwN8R0lG3ZsZrzNAG71QIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMwODY1NTgyMTU4NUEwQTVCN0Q2QTBFNTJGQzc0RUY1 MUY5MEU3MzAeFw0yNTExMDQxOTA1MDBaFw0yNTExMDUyMDI0MDBaMDMxMTAvBgNV BAMTKEU1QTMyN0FEMUE3ODcxM0I3NERCQUUxOUQyMEEzMDk2QjI2MDhDRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXdTtExN3iJEHrIt1gfxe4qUNk tynjCwSbwlL9VrVZ/+FywpovX/ZYzRk9tqMy6zrjelHxxkIczT4nJJvLbT2V3Fmv 6V+6IZV2rNh95ZMgtAwGXHMSqsHNeW7su8R38C/02RGBnnbssfsPAAIW5Cy+/qqH elsZsFhKaonq9RxaqkVNnSXhAm8RsIrZgnNre3zKmqPQETf8izJIVI3UhNah4ccj iNVKgcZMZpA/yqfUSVUXbLK6mZxR+8s8eyU32NCaXMEzMWm89MB5fGnxSQE2dkGx si3QNhqa1skUTyQukVXmhgKs78Y1h1MmETf8OX3hO8txjApelRzs8b7R4d5FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5aMnrRp4cTt0264Z0gowlrJgjPswHwYDVR0j BBgwFoAU7AhlWCFYWgpbfWoOUvx071H5DnMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3RKR2p2cjZ1ZVZxU1NiRnV2Z1NIbnpORXlSMlZrSkh3TWN1OVRBOW1h bUUvMS9FQzA4NjU1ODIxNTg1QTBBNUI3RDZBMEU1MkZDNzRFRjUxRjkwRTczLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDMDg2NTU4MjE1ODVBMEE1 QjdENkEwRTUyRkM3NEVGNTFGOTBFNzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3RKR2p2cjZ1ZVZxU1NiRnV2Z1NIbnpORXlSMlZrSkh3TWN1OVRBOW1hbUUvMS9F QzA4NjU1ODIxNTg1QTBBNUI3RDZBMEU1MkZDNzRFRjUxRjkwRTczLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAULdaAy6Jdg2I52TYjdTPC8iibQFbt2toHdNr1QmMC23EHBCTECr74yShq6Ur VUzsLEQionwcQfqNYLNgsjlrLCxi2mOdQM7eG6WAIZ+6cy2OAkYuoTnbqYH0EMke CunVyu04sZ9wKTSsZWhm5No8/0A6R7K8qgaqBPj2uw3qH+2MSbK20lBCiwqsp/8w 8d1Q3Bpceb4bs/5KEIUdhGxM2QQVtO8xE+PEEbCDL81zN4h59maWLqOG2Czb1ILv KnQMYS96NgHoi3suLJhiHJIiUcpCXYhhEfrhC7P1BPFlp+pXq3Nz4NjhXA1KfugC 32K63vrWGvAp+YJZbtBec+uOOw== -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:27 2025 by rpki-client