$ rpki-client -vvf rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft File: 06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft (raw, json) Hash identifier: tr1YatcVQs3sR51ljbfyVncl2GOKFLs7pIO7SqphvkM= Subject key identifier: 50:35:7C:15:2F:0C:7E:20:FA:22:51:1C:D2:45:84:DC:82:D4:65:18 Authority key identifier: 06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8 Certificate issuer: /CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8 Certificate serial: 10BDDA31F08E20FB12157529F5440224B7E282DD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer Subject info access: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft Manifest number: 01FE Signing time: Tue 04 Nov 2025 17:27:06 +0000 Manifest this update: Tue 04 Nov 2025 17:22:06 +0000 Manifest next update: Wed 05 Nov 2025 18:41:06 +0000 Files and hashes: 1: 06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl (hash: GhezMI91VI7ji6JXLEgvoCoJsg/EuUslmnAErQNoNkI=) 2: 323830343a323064633a3a2f33322d3438203d3e20323634353137.roa (hash: zktTgNIrnpj2jMbA9QGdo43g7zA2iuXC/N7Q9tS3gmM=) 3: 3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa (hash: F2HvTqeq5FaHOhCgbB0cHi4fc5snAunjaRp1FpfCqEg=) 4: 3133322e3235352e3137322e302f32322d3234203d3e20323634353137.roa (hash: Z6gii11kXGa6D+1mie3MmLCB7Lu81yMqpingzMNYyTs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 18:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:bd:da:31:f0:8e:20:fb:12:15:75:29:f5:44:02:24:b7:e2:82:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8 Validity Not Before: Nov 4 17:22:06 2025 GMT Not After : Nov 5 18:41:06 2025 GMT Subject: CN=50357C152F0C7E20FA22511CD24584DC82D46518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:80:4e:72:c2:e6:f7:73:97:29:07:1d:92:f4: 0c:ab:65:3f:02:53:ef:e0:40:2e:54:41:8a:84:14: df:0f:4b:63:e2:8f:61:5d:f4:ca:91:98:3e:9c:6b: 5a:5b:5f:70:a0:0a:2c:29:d2:74:46:9b:e5:de:78: a5:8e:9a:96:83:a9:d8:07:44:e5:c9:99:90:13:78: f9:6b:bf:ce:33:ae:98:03:5d:0f:35:ed:3d:f2:af: 45:a2:a6:50:17:d2:ab:d6:e5:82:28:a4:4c:3c:48: b2:37:ec:a6:27:a3:95:3d:69:38:d1:a8:44:34:f3: b5:f6:a8:67:78:c5:bf:56:bc:aa:22:73:35:46:92: e3:2d:0b:f1:d2:5e:f4:af:8b:89:36:7e:4d:fb:e6: 91:ed:00:23:aa:eb:70:da:24:b8:f6:b9:bd:1a:71: df:ae:6f:d3:40:37:eb:a5:2a:61:51:83:8f:ad:4c: 1b:94:e7:ee:bb:b7:1d:d9:2f:88:bd:b7:b0:ab:d1: 63:f2:09:cf:a7:b2:14:fd:4f:da:d9:fe:ae:bb:b8: eb:da:d4:9b:c9:c1:62:26:8c:8e:5b:27:c1:5b:88: 19:59:6f:dc:98:98:53:f2:c4:a0:6c:73:a7:20:23: 7b:b3:50:e8:b6:45:ec:0e:89:9b:61:84:f6:18:c0: d3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:35:7C:15:2F:0C:7E:20:FA:22:51:1C:D2:45:84:DC:82:D4:65:18 X509v3 Authority Key Identifier: keyid:06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:bf:dd:d9:ce:5c:ba:e7:36:4f:4c:9e:c6:06:58:1b:88:03: af:ae:67:c6:44:0f:6a:b1:29:bc:b8:e9:f9:8c:aa:c3:a9:9d: e8:37:11:e0:a7:15:2b:3b:d5:39:6f:22:b8:35:ed:c6:e2:6f: a4:a3:68:80:73:2e:53:f6:84:78:f8:e3:21:f6:7d:f3:8a:7b: f7:51:97:a4:95:22:a4:54:ce:48:91:5d:68:b4:ef:c7:16:d4: 15:56:96:b0:31:dd:2e:b0:77:6b:07:4a:3c:eb:9c:e4:ca:cd: 61:e2:1d:89:b3:ab:7e:b5:32:3c:c1:15:d2:ac:4d:f9:c3:93: 1f:8f:81:13:5d:53:21:5c:c7:19:ff:3d:8a:f8:2f:5d:ae:41: e3:aa:2e:17:a7:a2:c9:3d:e6:8f:18:2e:fa:64:81:4c:13:82: 96:d6:c0:9b:c4:77:fb:ef:33:98:c2:98:e4:77:b9:61:39:b5: c2:32:6b:d2:47:1f:26:da:de:b0:4a:44:ce:b8:d8:d8:44:19: 5b:64:a6:33:18:ae:6e:ed:48:08:7a:8b:50:e5:30:0a:d9:9f: f5:6e:31:ea:3b:29:86:ee:44:f0:25:d2:e4:e9:79:98:8b:33: 46:de:99:34:70:03:5d:02:83:e1:94:99:ef:62:54:d6:d6:b0: e2:09:c8:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEL3aMfCOIPsSFXUp9UQCJLfigt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQkQzMkU4NjVEOUQwOEZBNUM5ODJBQjdDQkRBNEZD QjIyNjJFODAeFw0yNTExMDQxNzIyMDZaFw0yNTExMDUxODQxMDZaMDMxMTAvBgNV BAMTKDUwMzU3QzE1MkYwQzdFMjBGQTIyNTExQ0QyNDU4NERDODJENDY1MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNgE5ywub3c5cpBx2S9AyrZT8C U+/gQC5UQYqEFN8PS2Pij2Fd9MqRmD6ca1pbX3CgCiwp0nRGm+XeeKWOmpaDqdgH ROXJmZATePlrv84zrpgDXQ817T3yr0WiplAX0qvW5YIopEw8SLI37KYno5U9aTjR qEQ087X2qGd4xb9WvKoiczVGkuMtC/HSXvSvi4k2fk375pHtACOq63DaJLj2ub0a cd+ub9NAN+ulKmFRg4+tTBuU5+67tx3ZL4i9t7Cr0WPyCc+nshT9T9rZ/q67uOva 1JvJwWImjI5bJ8FbiBlZb9yYmFPyxKBsc6cgI3uzUOi2RewOiZthhPYYwNMrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUDV8FS8MfiD6IlEc0kWE3ILUZRgwHwYDVR0j BBgwFoAUBtvTLoZdnQj6XJgqt8vaT8siYugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEdud1gybUFndFlZM1lvcmFkc0Ztb1NWWDRuamZ6bzVkVHFobzhtZzhl UkwvMC8wNkRCRDMyRTg2NUQ5RDA4RkE1Qzk4MkFCN0NCREE0RkNCMjI2MkU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2REJEMzJFODY1RDlEMDhG QTVDOTgyQUI3Q0JEQTRGQ0IyMjYyRTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEdud1gybUFndFlZM1lvcmFkc0Ztb1NWWDRuamZ6bzVkVHFobzhtZzhlUkwvMC8w NkRCRDMyRTg2NUQ5RDA4RkE1Qzk4MkFCN0NCREE0RkNCMjI2MkU4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeL/d2c5cuuc2T0yexgZYG4gDr65nxkQParEpvLjp+Yyqw6md6DcR4KcVKzvV OW8iuDXtxuJvpKNogHMuU/aEePjjIfZ984p791GXpJUipFTOSJFdaLTvxxbUFVaW sDHdLrB3awdKPOuc5MrNYeIdibOrfrUyPMEV0qxN+cOTH4+BE11TIVzHGf89ivgv Xa5B46ouF6eiyT3mjxgu+mSBTBOCltbAm8R3++8zmMKY5He5YTm1wjJr0kcfJtre sEpEzrjY2EQZW2SmMxiubu1ICHqLUOUwCtmf9W4x6jsphu5E8CXS5Ol5mIszRt6Z NHADXQKD4ZSZ72JU1taw4gnIfQ== -----END CERTIFICATE-----Generated at Wed Nov 5 04:08:13 2025 by rpki-client