$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft File: F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft (raw, json) Hash identifier: Bd1TvjXnUFz3+sC6a8y144ItNdFntecPajyCulx4eUU= Subject key identifier: 84:C9:88:07:D0:A2:67:FC:B5:07:96:8A:CE:04:7D:D9:55:64:97:0C Authority key identifier: F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3 Certificate issuer: /CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3 Certificate serial: 546FF5FC21B649DF0B1F7D380161A7E4A879EA02 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer Subject info access: rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft Manifest number: 0305 Signing time: Wed 05 Nov 2025 00:28:13 +0000 Manifest this update: Wed 05 Nov 2025 00:23:13 +0000 Manifest next update: Thu 06 Nov 2025 03:18:13 +0000 Files and hashes: 1: 323830343a353838633a3a2f33322d3438203d3e20323638313335.roa (hash: 8eAkq4HT64a5baT56OgFx1DH72F9mwfih602zhR2CH0=) 2: F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl (hash: ON6Fiz8/A6g2Ci/YgmLanloSfgCvz21WpAQawhmceFk=) 3: 34352e3137302e342e302f32322d3234203d3e20323638313335.roa (hash: SoeCL0aZ+l3TLgazhWCoIgR3tjyNLppAEi6iu2aQgvU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:6f:f5:fc:21:b6:49:df:0b:1f:7d:38:01:61:a7:e4:a8:79:ea:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3 Validity Not Before: Nov 5 00:23:13 2025 GMT Not After : Nov 6 03:18:13 2025 GMT Subject: CN=84C98807D0A267FCB507968ACE047DD95564970C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:36:2d:60:9a:1d:3c:f5:fe:14:bf:75:36:79: 5e:3e:6d:a8:68:6d:72:2d:a4:56:94:7b:da:2a:64: 36:74:3d:02:6e:88:20:dd:bf:be:2c:32:45:a1:9b: bc:10:b9:58:9e:50:b4:f0:fb:27:e3:fc:e6:b0:dc: 4a:65:e7:aa:db:16:c4:5f:3d:80:6a:39:b1:ca:5f: 91:2b:b4:1a:bb:b6:69:6b:5b:31:80:78:a4:7a:73: e3:cd:29:21:d1:31:ea:df:99:9f:4f:07:6f:6c:ed: 09:54:aa:b7:b7:2a:f7:5d:e8:46:70:a5:59:ff:dd: ea:73:43:0f:0a:9d:ed:ef:93:31:a7:c8:d7:cf:03: 9a:68:57:ca:1e:27:33:1d:0b:a5:c1:bd:20:7c:28: 96:c5:75:77:a3:60:30:05:89:16:46:f9:79:e9:dc: e9:4c:de:4d:66:3b:7a:8b:4e:ac:26:cc:7f:90:6a: be:90:95:b4:d8:20:e0:5d:f5:03:59:14:0b:20:2d: bc:fe:8b:33:7f:7e:04:fb:83:0b:60:b3:38:2e:00: e3:87:be:7d:33:d4:c8:c3:bb:29:c9:2b:1c:8a:35: 62:8b:e5:a9:37:c3:5a:e9:78:61:4a:f1:d5:a1:46: 19:ef:dd:a9:ce:fc:27:92:7a:da:32:80:a8:76:3b: 96:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C9:88:07:D0:A2:67:FC:B5:07:96:8A:CE:04:7D:D9:55:64:97:0C X509v3 Authority Key Identifier: keyid:F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:94:5f:2c:69:07:f0:3c:7b:40:04:07:e5:09:58:0a:8b:60: 42:c8:c9:fe:61:9c:3c:59:f0:c7:bd:b0:3e:63:cd:d7:90:94: 24:57:c5:34:07:bf:1f:0f:ef:ae:8e:37:c2:a2:b9:f5:f5:97: 4b:fc:56:14:05:93:06:04:4d:43:f5:40:d2:8b:1f:82:41:46: 20:66:7c:8f:98:93:fd:47:a5:f4:1e:4e:b9:f3:01:29:a2:88: c2:e5:63:f5:38:a1:82:54:9d:9f:11:f6:02:d0:1e:45:da:21: e7:de:9c:d2:49:55:ab:b5:a2:13:b9:33:6e:6c:0a:53:4c:6c: 33:35:e2:9d:64:4b:d6:5c:6a:bf:9f:e3:5b:8f:09:bb:a0:de: 17:ee:8b:57:1a:c6:8d:e9:44:39:df:18:5e:3c:2f:a8:e9:50: 9a:bf:86:f2:e0:81:ea:d5:99:fe:f4:df:4e:8a:1b:cb:e0:cd: b5:56:6f:5a:40:18:d3:5f:3d:3f:88:d1:90:40:a6:0a:93:12: 24:fa:ef:23:f1:f9:cd:57:7b:91:74:11:4d:fa:ba:c5:1b:f2: f0:66:43:b2:ad:f3:36:c5:9f:d1:c5:ef:6a:d8:af:72:14:a6: d0:c3:2e:af:2b:be:8d:56:fe:71:e5:85:70:5b:03:ca:2e:60: ab:3a:f4:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVG/1/CG2Sd8LH304AWGn5Kh56gIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM0NTg2RTVGRUFERDYyNDIwNUNBOUNBQTE3NUQzRENB NTlEMzJCMzAeFw0yNTExMDUwMDIzMTNaFw0yNTExMDYwMzE4MTNaMDMxMTAvBgNV BAMTKDg0Qzk4ODA3RDBBMjY3RkNCNTA3OTY4QUNFMDQ3REQ5NTU2NDk3MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnNi1gmh089f4Uv3U2eV4+baho bXItpFaUe9oqZDZ0PQJuiCDdv74sMkWhm7wQuVieULTw+yfj/Oaw3Epl56rbFsRf PYBqObHKX5ErtBq7tmlrWzGAeKR6c+PNKSHRMerfmZ9PB29s7QlUqre3Kvdd6EZw pVn/3epzQw8Kne3vkzGnyNfPA5poV8oeJzMdC6XBvSB8KJbFdXejYDAFiRZG+Xnp 3OlM3k1mO3qLTqwmzH+Qar6QlbTYIOBd9QNZFAsgLbz+izN/fgT7gwtgszguAOOH vn0z1MjDuynJKxyKNWKL5ak3w1rpeGFK8dWhRhnv3anO/CeSetoygKh2O5apAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhMmIB9CiZ/y1B5aKzgR92VVklwwwHwYDVR0j BBgwFoAU80WG5f6t1iQgXKnKoXXT3KWdMrMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG91czRVTVhzcG5IU3o1NE5NOUM1Tm1nRUxueUhIbXVUMXFTcENFWWdC TDQvMS9GMzQ1ODZFNUZFQURENjI0MjA1Q0E5Q0FBMTc1RDNEQ0E1OUQzMkIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzNDU4NkU1RkVBREQ2MjQy MDVDQTlDQUExNzVEM0RDQTU5RDMyQjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG91czRVTVhzcG5IU3o1NE5NOUM1Tm1nRUxueUhIbXVUMXFTcENFWWdCTDQvMS9G MzQ1ODZFNUZFQURENjI0MjA1Q0E5Q0FBMTc1RDNEQ0E1OUQzMkIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlpRfLGkH8Dx7QAQH5QlYCotgQsjJ/mGcPFnwx72wPmPN15CUJFfFNAe/Hw/v ro43wqK59fWXS/xWFAWTBgRNQ/VA0osfgkFGIGZ8j5iT/Uel9B5OufMBKaKIwuVj 9TihglSdnxH2AtAeRdoh596c0klVq7WiE7kzbmwKU0xsMzXinWRL1lxqv5/jW48J u6DeF+6LVxrGjelEOd8YXjwvqOlQmr+G8uCB6tWZ/vTfTooby+DNtVZvWkAY0189 P4jRkECmCpMSJPrvI/H5zVd7kXQRTfq6xRvy8GZDsq3zNsWf0cXvativchSm0MMu ryu+jVb+ceWFcFsDyi5gqzr0cA== -----END CERTIFICATE-----Generated at Wed Nov 5 18:08:56 2025 by rpki-client