$ rpki-client -vvf rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft File: 032EBC04B31CCA7416FFF2267C50AACE979BC999.mft (raw, json) Hash identifier: dR3t5LiqHbCWlOGofpssdKbdduZJkANLH3biZUYhLbc= Subject key identifier: DA:B7:1C:4F:A0:93:F1:2A:72:19:E5:4D:DE:67:43:56:09:F5:65:E1 Authority key identifier: 03:2E:BC:04:B3:1C:CA:74:16:FF:F2:26:7C:50:AA:CE:97:9B:C9:99 Certificate issuer: /CN=032EBC04B31CCA7416FFF2267C50AACE979BC999 Certificate serial: 437AB268B8469833E2A293AC17C7668B6F49CD59 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer Subject info access: rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft Manifest number: 0304 Signing time: Wed 05 Nov 2025 01:41:38 +0000 Manifest this update: Wed 05 Nov 2025 01:36:38 +0000 Manifest next update: Thu 06 Nov 2025 05:38:38 +0000 Files and hashes: 1: 3139322e3134302e382e302f32322d3234203d3e20323636313534.roa (hash: CpqLIBzmicEoVPfEWNr6C+jklcz10z4IQ55m+/YVhko=) 2: 323830343a336238343a3a2f33322d3438203d3e20323636313534.roa (hash: yVul3bbZD+r92jcpuS15go6j6ZP0llLrnRE0EZOcs+4=) 3: 032EBC04B31CCA7416FFF2267C50AACE979BC999.crl (hash: FWiTARF5OWrLma98+vgw2KnrdiOqq7zqmQ5hkmOzSUs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.crl rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 05:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7a:b2:68:b8:46:98:33:e2:a2:93:ac:17:c7:66:8b:6f:49:cd:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032EBC04B31CCA7416FFF2267C50AACE979BC999 Validity Not Before: Nov 5 01:36:38 2025 GMT Not After : Nov 6 05:38:38 2025 GMT Subject: CN=DAB71C4FA093F12A7219E54DDE67435609F565E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bc:45:5d:62:12:82:cd:29:46:62:4c:05:8b: 46:10:9e:df:ca:f8:a6:91:2a:2f:a5:3f:b6:9f:cd: 0d:5e:8a:8f:46:86:6c:5b:ea:17:df:e8:e9:2d:fb: 0a:fa:98:6c:59:c7:be:04:5c:2e:e0:41:e5:a3:bb: 37:c2:4c:9e:0d:04:e4:8a:cb:4e:59:e6:11:b1:4d: f4:93:c0:9c:87:57:34:8f:cc:37:97:56:23:01:98: dc:60:39:99:e8:aa:bb:21:7b:5d:0c:fd:44:10:64: bb:d4:68:a7:9b:5a:36:aa:bf:74:9c:14:0c:56:d2: 01:44:31:a0:2a:2a:5b:40:9c:a9:5b:33:d7:e9:bb: 6f:09:42:ca:6e:c8:a3:da:60:e1:31:24:08:5e:5a: 4f:04:6c:1f:00:e7:01:65:c9:a8:1b:20:db:10:a5: 79:ef:09:b4:52:2e:40:a2:f3:f2:79:c9:27:8e:b1: 7c:3c:3d:4f:94:5a:01:95:dd:92:84:4f:48:3c:48: 70:20:38:96:21:e8:ec:9a:19:60:fc:5e:86:37:24: e7:c9:ac:f9:b9:cc:b2:c7:fb:97:45:0b:c4:ec:48: 02:be:4d:6b:09:3a:73:86:56:04:93:11:19:d1:b5: a4:79:0d:fb:1a:2a:67:10:49:4d:45:1e:a7:84:37: 44:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B7:1C:4F:A0:93:F1:2A:72:19:E5:4D:DE:67:43:56:09:F5:65:E1 X509v3 Authority Key Identifier: keyid:03:2E:BC:04:B3:1C:CA:74:16:FF:F2:26:7C:50:AA:CE:97:9B:C9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:11:8b:c8:90:a9:a2:ad:c7:07:18:84:d0:32:b9:e4:47:b9: 77:b0:f6:78:30:45:0a:4f:81:08:4b:ed:4f:28:22:4d:00:36: 73:52:66:f4:69:8b:3d:10:3d:3e:6a:a4:6e:65:02:71:75:0e: 19:6b:7b:1c:bf:4b:f2:bd:ab:84:df:49:f2:24:74:32:28:d8: 8a:f9:93:d3:fd:7f:63:bc:26:e1:7a:2b:c3:c5:bf:47:9c:81: 5a:a1:a4:13:a8:2c:46:54:95:a3:4a:ec:ed:a2:fc:50:b9:97: 85:c7:75:66:36:cc:fe:67:10:e8:f0:b6:b4:74:bf:66:b5:1d: 36:5a:d9:f5:b0:e4:ff:47:42:7b:70:41:b4:e3:06:92:65:9e: f0:ad:26:66:ae:9b:c5:f7:b1:b8:6d:90:79:22:0b:3f:f0:de: 7b:5f:34:ef:35:89:aa:c1:1b:3a:6c:37:c5:46:f4:4f:64:aa: 6d:52:b8:40:7d:19:a4:c4:64:58:cc:c4:a8:ff:d5:e7:ac:f5: a7:22:39:23:d3:5e:db:b8:43:8a:a4:4b:1f:c2:da:98:fb:06: d2:d4:42:46:41:90:87:fd:07:2f:d4:6b:af:74:30:d3:35:49: bc:ef:dd:03:59:15:e1:98:15:b2:09:81:5e:88:9f:08:41:8e: 63:fd:e1:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ3qyaLhGmDPiopOsF8dmi29JzVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyRUJDMDRCMzFDQ0E3NDE2RkZGMjI2N0M1MEFBQ0U5 NzlCQzk5OTAeFw0yNTExMDUwMTM2MzhaFw0yNTExMDYwNTM4MzhaMDMxMTAvBgNV BAMTKERBQjcxQzRGQTA5M0YxMkE3MjE5RTU0RERFNjc0MzU2MDlGNTY1RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIvEVdYhKCzSlGYkwFi0YQnt/K +KaRKi+lP7afzQ1eio9Ghmxb6hff6Okt+wr6mGxZx74EXC7gQeWjuzfCTJ4NBOSK y05Z5hGxTfSTwJyHVzSPzDeXViMBmNxgOZnoqrshe10M/UQQZLvUaKebWjaqv3Sc FAxW0gFEMaAqKltAnKlbM9fpu28JQspuyKPaYOExJAheWk8EbB8A5wFlyagbINsQ pXnvCbRSLkCi8/J5ySeOsXw8PU+UWgGV3ZKET0g8SHAgOJYh6OyaGWD8XoY3JOfJ rPm5zLLH+5dFC8TsSAK+TWsJOnOGVgSTERnRtaR5DfsaKmcQSU1FHqeEN0S1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2rccT6CT8SpyGeVN3mdDVgn1ZeEwHwYDVR0j BBgwFoAUAy68BLMcynQW//ImfFCqzpebyZkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE16dFpSQVUyR1FyNGV6azhSODk4Z0YzYUZnbnBoQTlRc05LQWRDa0Z0 TWsvMS8wMzJFQkMwNEIzMUNDQTc0MTZGRkYyMjY3QzUwQUFDRTk3OUJDOTk5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMkVCQzA0QjMxQ0NBNzQx NkZGRjIyNjdDNTBBQUNFOTc5QkM5OTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE16dFpSQVUyR1FyNGV6azhSODk4Z0YzYUZnbnBoQTlRc05LQWRDa0Z0TWsvMS8w MzJFQkMwNEIzMUNDQTc0MTZGRkYyMjY3QzUwQUFDRTk3OUJDOTk5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJBGLyJCpoq3HBxiE0DK55Ee5d7D2eDBFCk+BCEvtTygiTQA2c1Jm9GmLPRA9 PmqkbmUCcXUOGWt7HL9L8r2rhN9J8iR0MijYivmT0/1/Y7wm4Xorw8W/R5yBWqGk E6gsRlSVo0rs7aL8ULmXhcd1ZjbM/mcQ6PC2tHS/ZrUdNlrZ9bDk/0dCe3BBtOMG kmWe8K0mZq6bxfexuG2QeSILP/Dee1807zWJqsEbOmw3xUb0T2SqbVK4QH0ZpMRk WMzEqP/V56z1pyI5I9Ne27hDiqRLH8LamPsG0tRCRkGQh/0HL9Rrr3Qw0zVJvO/d A1kV4ZgVsgmBXoifCEGOY/3huA== -----END CERTIFICATE-----Generated at Wed Nov 5 10:00:37 2025 by rpki-client