$ rpki-client -vvf rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.mft File: E11F8ABED7D76E5375A8436FD1F79955FF2FE223.mft (raw, json) Hash identifier: PrW2HoWfxf2z8cdUb/XE+a/aJT9eLVbincr3Y0EdtyU= Subject key identifier: 9C:D2:3E:E6:2A:D9:0B:49:59:8A:D3:C7:F1:49:3C:FC:28:3A:DD:7B Authority key identifier: E1:1F:8A:BE:D7:D7:6E:53:75:A8:43:6F:D1:F7:99:55:FF:2F:E2:23 Certificate issuer: /CN=E11F8ABED7D76E5375A8436FD1F79955FF2FE223 Certificate serial: 23CC2DFF8A634D89BC1BE84D55F9AB9EBA3BBB27 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.cer Subject info access: rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.mft Manifest number: 0248 Signing time: Wed 05 Nov 2025 18:00:15 +0000 Manifest this update: Wed 05 Nov 2025 17:55:15 +0000 Manifest next update: Thu 06 Nov 2025 20:10:15 +0000 Files and hashes: 1: 34352e37312e3132302e302f32322d3234203d3e20323637363139.roa (hash: GpQZkLwXG54lHOHQzGAKznEEd+6AMx8gO62nnVu5jhE=) 2: 323830343a343431303a3a2f33322d3438203d3e20323637363139.roa (hash: VSSVyl3TEf6TYDtC7eJ00zjTr9caCfIiX+mXtC3UJkg=) 3: E11F8ABED7D76E5375A8436FD1F79955FF2FE223.crl (hash: 4x6qcvsI5+V/ehyBf+Z5AjwLrQfTVifklTpMGxryHBE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.crl rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 17:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:cc:2d:ff:8a:63:4d:89:bc:1b:e8:4d:55:f9:ab:9e:ba:3b:bb:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E11F8ABED7D76E5375A8436FD1F79955FF2FE223 Validity Not Before: Nov 5 17:55:15 2025 GMT Not After : Nov 6 20:10:15 2025 GMT Subject: CN=9CD23EE62AD90B49598AD3C7F1493CFC283ADD7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:15:9b:b5:a8:30:e8:46:6c:3c:2e:45:68:a6: 06:23:20:2e:9c:e1:1a:de:58:da:97:8c:5d:4c:bc: 99:8b:5b:eb:73:09:4e:b1:59:f9:88:e4:43:37:03: 3e:29:a2:ab:ca:12:36:ab:6e:cf:5b:82:59:6f:39: 22:88:1d:30:33:a2:6b:65:97:98:fc:e4:27:a4:74: 98:05:be:41:af:d7:41:f3:d0:dc:55:48:9c:a1:94: 85:03:a9:18:9b:aa:38:ad:3c:47:a5:72:7b:03:1d: 32:c4:21:46:6c:5c:3e:a6:40:ac:59:66:d3:bf:9a: b9:3d:44:13:48:df:5a:d1:21:39:ec:b6:ab:46:ca: 87:a3:03:a1:4b:e2:e9:9a:d6:0b:3b:d5:8e:f3:b7: 65:4f:c7:76:9b:94:95:39:49:fd:71:b1:05:6e:1e: 9c:ad:c8:57:51:3c:0b:ab:56:1b:9f:30:4f:9e:7a: ed:9e:0f:87:76:ed:12:21:90:ba:dc:8e:5a:7e:76: d8:25:f0:ce:7d:20:4f:4f:7b:34:90:e9:1e:d7:3a: 64:ee:07:83:92:0a:b1:ce:7d:7f:51:d8:5a:0b:6d: a7:4f:47:a8:22:0e:11:01:bd:2f:2e:36:76:e3:07: f8:9e:c8:51:91:4b:9d:18:c3:ee:1d:52:04:a6:f0: 30:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D2:3E:E6:2A:D9:0B:49:59:8A:D3:C7:F1:49:3C:FC:28:3A:DD:7B X509v3 Authority Key Identifier: keyid:E1:1F:8A:BE:D7:D7:6E:53:75:A8:43:6F:D1:F7:99:55:FF:2F:E2:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:30:14:25:fe:e8:a5:c3:ae:65:83:9f:b3:96:25:a7:ba:09: 3b:25:57:d6:5a:f9:e9:35:4a:fd:be:4d:0e:73:a4:b9:29:8d: 1e:25:f4:97:54:43:11:b3:b6:b6:eb:c2:c7:e3:37:5e:4d:aa: 22:fe:5e:4b:be:9c:50:06:b6:07:c1:df:9c:46:79:6c:28:f6: bf:77:92:59:54:8e:cb:fa:3e:82:7c:2a:07:42:d6:fd:de:94: 9e:69:34:b1:d6:e9:3a:25:38:9a:88:cc:c1:15:00:fc:a7:76: 2d:d1:ed:7c:a2:5d:55:c2:d8:85:ba:67:f1:45:78:47:d9:dd: 73:f7:66:30:20:bd:89:a3:95:15:cf:4e:d0:b4:52:3e:07:d3: 0e:d2:00:66:e9:20:b9:6a:74:50:3b:d9:84:e6:36:3c:74:65: 56:4d:1c:29:3d:45:4f:43:d3:34:a6:b9:3c:77:05:3c:e8:48: f1:5a:32:43:f0:3c:63:86:51:96:6c:31:ae:11:a0:d8:c9:a0: 37:ac:91:6d:33:92:93:7f:33:0b:06:2d:4b:26:f9:3a:65:06: 2b:2f:12:d4:91:37:50:52:a3:70:e5:09:32:34:02:04:a8:b3: 22:7b:17:1c:5f:a9:fb:70:5a:46:7e:db:80:fe:c9:d5:7d:29: 4f:45:63:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI8wt/4pjTYm8G+hNVfmrnro7uycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTExRjhBQkVEN0Q3NkU1Mzc1QTg0MzZGRDFGNzk5NTVG RjJGRTIyMzAeFw0yNTExMDUxNzU1MTVaFw0yNTExMDYyMDEwMTVaMDMxMTAvBgNV BAMTKDlDRDIzRUU2MkFEOTBCNDk1OThBRDNDN0YxNDkzQ0ZDMjgzQUREN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUFZu1qDDoRmw8LkVopgYjIC6c 4RreWNqXjF1MvJmLW+tzCU6xWfmI5EM3Az4poqvKEjarbs9bgllvOSKIHTAzomtl l5j85CekdJgFvkGv10Hz0NxVSJyhlIUDqRibqjitPEelcnsDHTLEIUZsXD6mQKxZ ZtO/mrk9RBNI31rRITnstqtGyoejA6FL4uma1gs71Y7zt2VPx3ablJU5Sf1xsQVu HpytyFdRPAurVhufME+eeu2eD4d27RIhkLrcjlp+dtgl8M59IE9PezSQ6R7XOmTu B4OSCrHOfX9R2FoLbadPR6giDhEBvS8uNnbjB/ieyFGRS50Yw+4dUgSm8DDRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnNI+5irZC0lZitPH8Uk8/Cg63XswHwYDVR0j BBgwFoAU4R+KvtfXblN1qENv0feZVf8v4iMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEdIaFBkM1d0clhzcTlzZ3ZqSFRpaFk4MzRSR1laTVp4elM0M3lDS1dG b3UvMC9FMTFGOEFCRUQ3RDc2RTUzNzVBODQzNkZEMUY3OTk1NUZGMkZFMjIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxMUY4QUJFRDdENzZFNTM3 NUE4NDM2RkQxRjc5OTU1RkYyRkUyMjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEdIaFBkM1d0clhzcTlzZ3ZqSFRpaFk4MzRSR1laTVp4elM0M3lDS1dGb3UvMC9F MTFGOEFCRUQ3RDc2RTUzNzVBODQzNkZEMUY3OTk1NUZGMkZFMjIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqjAUJf7opcOuZYOfs5Ylp7oJOyVX1lr56TVK/b5NDnOkuSmNHiX0l1RDEbO2 tuvCx+M3Xk2qIv5eS76cUAa2B8HfnEZ5bCj2v3eSWVSOy/o+gnwqB0LW/d6Unmk0 sdbpOiU4mojMwRUA/Kd2LdHtfKJdVcLYhbpn8UV4R9ndc/dmMCC9iaOVFc9O0LRS PgfTDtIAZukguWp0UDvZhOY2PHRlVk0cKT1FT0PTNKa5PHcFPOhI8VoyQ/A8Y4ZR lmwxrhGg2MmgN6yRbTOSk38zCwYtSyb5OmUGKy8S1JE3UFKjcOUJMjQCBKizInsX HF+p+3BaRn7bgP7J1X0pT0VjAw== -----END CERTIFICATE-----Generated at Wed Nov 5 19:48:43 2025 by rpki-client