$ rpki-client -vvf rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/E7700F13658CA0FAD21A568C7195309EAC2021BA.mft File: E7700F13658CA0FAD21A568C7195309EAC2021BA.mft (raw, json) Hash identifier: JB4quergGqwbtmzJheoFUS1YdCfxhs7nUUu2lh+Jb9M= Subject key identifier: 68:30:2F:AB:3A:34:D5:3D:6F:52:2F:EF:40:CF:A1:91:70:D9:B9:DA Authority key identifier: E7:70:0F:13:65:8C:A0:FA:D2:1A:56:8C:71:95:30:9E:AC:20:21:BA Certificate issuer: /CN=E7700F13658CA0FAD21A568C7195309EAC2021BA Certificate serial: 308ACFF6951970FDCCD601A514022055D1C8A67C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7700F13658CA0FAD21A568C7195309EAC2021BA.cer Subject info access: rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/E7700F13658CA0FAD21A568C7195309EAC2021BA.mft Manifest number: 01F3 Signing time: Wed 05 Nov 2025 16:11:32 +0000 Manifest this update: Wed 05 Nov 2025 16:06:32 +0000 Manifest next update: Thu 06 Nov 2025 16:12:32 +0000 Files and hashes: 1: 323830343a336665343a3a2f33322d3438203d3e203236363136.roa (hash: tymaYqKKAAJSsYPTeIUQKLfz2ToYvJ1AmX7k0ccvB60=) 2: 3230302e3135322e34382e302f32302d3234203d3e203236363136.roa (hash: Z0eXAFFExdaItl/MJwNM7AEYBAXCGsMGkcloh1WD2oU=) 3: 3230302e3232392e3136302e302f32302d3234203d3e203236363136.roa (hash: 2atlLIUO1h/3m9ncBja7+ITp2ajDKALK+1pIOiaKeEU=) 4: E7700F13658CA0FAD21A568C7195309EAC2021BA.crl (hash: BJ02Rm7hjBFkls0GLDUprFNZRTCacdsX2MsHPKh8I+4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/E7700F13658CA0FAD21A568C7195309EAC2021BA.crl rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/E7700F13658CA0FAD21A568C7195309EAC2021BA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7700F13658CA0FAD21A568C7195309EAC2021BA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 16:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:8a:cf:f6:95:19:70:fd:cc:d6:01:a5:14:02:20:55:d1:c8:a6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7700F13658CA0FAD21A568C7195309EAC2021BA Validity Not Before: Nov 5 16:06:32 2025 GMT Not After : Nov 6 16:12:32 2025 GMT Subject: CN=68302FAB3A34D53D6F522FEF40CFA19170D9B9DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:42:2c:6a:bd:43:53:0c:03:1c:ac:a8:e0:a2: eb:ba:04:9c:05:1b:9d:be:7e:59:cc:6e:92:00:14: 65:3a:24:82:08:6d:cc:1f:83:2a:34:29:1b:41:8c: 27:44:f1:88:e8:47:2b:23:b5:13:3a:92:8b:94:8d: 1a:dc:75:36:80:29:95:85:60:e6:6e:9e:94:6e:00: 26:c1:81:ae:9e:5b:27:17:a1:a5:7b:fd:c5:b1:02: 82:9f:89:dc:c3:37:de:75:cb:6b:d9:b5:43:b0:d3: 9d:ca:87:96:ec:a8:bc:5f:ee:a3:95:71:7b:c9:cf: 0e:15:2c:07:34:39:5d:a2:05:64:0f:1a:ff:6c:44: 47:c3:5c:ae:5a:9f:40:29:d4:1f:71:ff:35:6c:c6: c0:13:73:47:55:1b:1f:50:11:bf:56:c1:f1:4a:e8: 21:4d:62:e4:58:09:91:f4:1c:cc:b3:b4:09:1e:5b: cb:05:2e:0e:7d:66:8c:c7:01:53:94:60:b6:d5:b7: 16:75:58:49:f0:7d:c1:e3:03:ef:0d:02:c6:bf:39: 7d:c5:e8:ae:b5:0f:58:35:81:8e:9f:13:fb:0e:0b: a6:be:e4:38:a2:47:90:54:7e:3f:70:4a:7a:58:d8: 54:50:c8:25:81:b2:dd:b9:f8:54:0e:35:81:c7:13: 27:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:30:2F:AB:3A:34:D5:3D:6F:52:2F:EF:40:CF:A1:91:70:D9:B9:DA X509v3 Authority Key Identifier: keyid:E7:70:0F:13:65:8C:A0:FA:D2:1A:56:8C:71:95:30:9E:AC:20:21:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/E7700F13658CA0FAD21A568C7195309EAC2021BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7700F13658CA0FAD21A568C7195309EAC2021BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/E7700F13658CA0FAD21A568C7195309EAC2021BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:7a:95:d8:9f:40:65:9f:42:3d:10:f8:07:68:6b:49:35:ed: 12:a2:6b:88:a6:48:9d:39:88:39:ec:9a:0a:77:40:34:f6:0f: ec:e6:08:0c:35:6d:d3:d1:65:77:4b:94:2e:33:72:3a:83:f7: a8:b0:14:b9:3e:29:77:99:5f:1a:36:e9:8f:14:ff:b6:87:af: 27:76:97:7b:7e:31:00:7d:3a:a0:75:db:f9:6c:2a:3c:fe:41: c2:c1:1d:e2:28:0b:c9:02:5f:49:8e:28:7d:7b:01:49:06:b7: 15:51:b5:3c:7e:e7:b2:f8:8b:e2:d0:9e:0b:60:77:38:d0:91: e7:9f:a6:0d:28:b4:f9:ad:83:c6:d7:ed:a4:4c:bc:3e:d7:2d: c7:06:e5:56:0d:53:97:f6:78:93:84:39:de:af:92:61:eb:3d: aa:99:93:c3:bd:69:a0:a1:2e:ca:cb:e9:24:5a:64:a6:0f:85: 12:37:2b:ed:f8:ab:d4:bf:09:0a:79:e1:37:41:b1:b3:50:c3: 93:2f:17:b1:46:c7:d3:0a:81:c9:de:3e:dc:44:2c:60:1f:ec: c7:ee:02:43:ee:b2:1b:6a:dd:73:34:56:eb:b7:92:e7:9e:47: c9:f4:f3:c9:3d:76:0f:3a:31:06:c8:90:71:7c:40:2d:96:82: f6:86:d0:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMIrP9pUZcP3M1gGlFAIgVdHIpnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc3MDBGMTM2NThDQTBGQUQyMUE1NjhDNzE5NTMwOUVB QzIwMjFCQTAeFw0yNTExMDUxNjA2MzJaFw0yNTExMDYxNjEyMzJaMDMxMTAvBgNV BAMTKDY4MzAyRkFCM0EzNEQ1M0Q2RjUyMkZFRjQwQ0ZBMTkxNzBEOUI5REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0QixqvUNTDAMcrKjgouu6BJwF G52+flnMbpIAFGU6JIIIbcwfgyo0KRtBjCdE8YjoRysjtRM6kouUjRrcdTaAKZWF YOZunpRuACbBga6eWycXoaV7/cWxAoKfidzDN951y2vZtUOw053Kh5bsqLxf7qOV cXvJzw4VLAc0OV2iBWQPGv9sREfDXK5an0Ap1B9x/zVsxsATc0dVGx9QEb9WwfFK 6CFNYuRYCZH0HMyztAkeW8sFLg59ZozHAVOUYLbVtxZ1WEnwfcHjA+8NAsa/OX3F 6K61D1g1gY6fE/sOC6a+5DiiR5BUfj9wSnpY2FRQyCWBst25+FQONYHHEycHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaDAvqzo01T1vUi/vQM+hkXDZudowHwYDVR0j BBgwFoAU53APE2WMoPrSGlaMcZUwnqwgIbowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFZRVWFKbW14THhmbmNGeDdMbjFBTHBTWmpCYmh1YnhvNUJOVHpWamdN dlUvMC9FNzcwMEYxMzY1OENBMEZBRDIxQTU2OEM3MTk1MzA5RUFDMjAyMUJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3NzAwRjEzNjU4Q0EwRkFE MjFBNTY4QzcxOTUzMDlFQUMyMDIxQkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFZRVWFKbW14THhmbmNGeDdMbjFBTHBTWmpCYmh1YnhvNUJOVHpWamdNdlUvMC9F NzcwMEYxMzY1OENBMEZBRDIxQTU2OEM3MTk1MzA5RUFDMjAyMUJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlXqV2J9AZZ9CPRD4B2hrSTXtEqJriKZInTmIOeyaCndANPYP7OYIDDVt09Fl d0uULjNyOoP3qLAUuT4pd5lfGjbpjxT/toevJ3aXe34xAH06oHXb+WwqPP5BwsEd 4igLyQJfSY4ofXsBSQa3FVG1PH7nsviL4tCeC2B3ONCR55+mDSi0+a2DxtftpEy8 PtctxwblVg1Tl/Z4k4Q53q+SYes9qpmTw71poKEuysvpJFpkpg+FEjcr7fir1L8J CnnhN0Gxs1DDky8XsUbH0wqByd4+3EQsYB/sx+4CQ+6yG2rdczRW67eS555HyfTz yT12DzoxBsiQcXxALZaC9obQlA== -----END CERTIFICATE-----Generated at Wed Nov 5 20:59:36 2025 by rpki-client