$ rpki-client -vvf rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft File: C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft (raw, json) Hash identifier: lN75X2ZMcXEw3Ls0pLxpbcwTNK+ij88196JELR66hZQ= Subject key identifier: BB:E2:E1:02:22:61:25:35:A0:18:41:DA:0A:E3:84:73:C7:77:02:E7 Authority key identifier: C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A Certificate issuer: /CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A Certificate serial: 1589284EDAC187349E052FB8B05818878765FAB2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer Subject info access: rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft Manifest number: 02D3 Signing time: Wed 05 Nov 2025 00:38:53 +0000 Manifest this update: Wed 05 Nov 2025 00:33:53 +0000 Manifest next update: Thu 06 Nov 2025 02:22:53 +0000 Files and hashes: 1: 3230312e3135302e3135322e302f32322d3234203d3e203631383334.roa (hash: bQb6OqUWfTVIWbNybHXXMLPCBzgY58GGYHDVLDz95Ug=) 2: 323830343a316131303a3a2f33322d3438203d3e203631383334.roa (hash: gkUxHP8r9+Fhu5QWQf9DujXsJaThMNFObjuKFQmBFk0=) 3: C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl (hash: VJzU1CkDNS+VWtP2WnosgSgPRfiBJ2pvo39satsKY1s=) 4: 3134332e3133372e3138302e302f32322d3234203d3e203631383334.roa (hash: TybVhUEfgBREmL3NJsvdZgicXA/on5VwTBTGR0erAho=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 02:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:89:28:4e:da:c1:87:34:9e:05:2f:b8:b0:58:18:87:87:65:fa:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A Validity Not Before: Nov 5 00:33:53 2025 GMT Not After : Nov 6 02:22:53 2025 GMT Subject: CN=BBE2E10222612535A01841DA0AE38473C77702E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f4:f2:85:53:57:f0:a9:2e:d2:94:8e:1c:dd: 9e:cb:24:3d:53:cd:8a:a4:26:80:85:fa:f5:aa:c7: 54:be:d9:da:06:e2:03:e1:db:bc:30:ab:5f:92:51: 48:e5:3b:46:68:15:65:5c:c8:ac:bc:d1:48:f9:2e: a0:64:fb:66:0c:92:ed:72:50:53:a1:8e:f6:d5:af: 1f:72:c1:65:0b:2c:a5:0b:6a:e7:8d:0f:a2:8f:eb: c3:a4:ba:1e:f0:55:05:4b:14:29:73:af:ea:13:d6: 43:0a:09:31:3d:b8:66:fc:86:e3:03:bc:8a:28:cc: af:a9:f3:de:75:a5:97:4c:19:d4:78:17:72:3c:e8: db:dc:02:d5:0c:ed:d9:c1:72:f7:f5:ef:d9:6b:27: 4b:66:74:c0:85:c2:d1:a6:f5:73:a4:ef:b1:da:5b: 95:cf:38:27:55:eb:82:db:96:a8:94:8e:92:b5:4a: 89:3f:f2:bb:e0:f6:c6:5b:15:05:03:f0:8b:fb:cd: 9e:42:b1:2b:88:53:66:f7:3e:08:23:71:29:f9:4b: 14:b7:1a:2f:09:8d:8f:aa:3d:2e:4a:25:6d:bb:9d: 45:46:6b:e7:72:64:02:ca:f9:fc:6d:22:05:e9:a7: 83:ac:94:7d:c4:cc:1c:d7:1a:7f:18:e0:0a:21:88: ca:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E2:E1:02:22:61:25:35:A0:18:41:DA:0A:E3:84:73:C7:77:02:E7 X509v3 Authority Key Identifier: keyid:C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:8f:c8:ec:e1:e4:73:67:25:3a:b7:95:33:67:e3:82:8c:a2: cb:26:88:b1:c9:de:a5:d5:a8:e0:9d:68:d6:24:1d:5c:56:01: 4a:b2:4b:ab:47:fc:87:48:31:b7:0a:07:cf:39:c2:c7:08:6d: 9b:69:6d:4d:19:bf:f7:28:cd:67:4b:e0:4d:ae:de:ff:07:cd: df:16:4e:37:66:d5:89:9e:82:8a:a8:e1:38:7b:16:35:89:36: 94:de:d7:51:65:00:92:80:ef:e0:24:a0:92:cf:d6:53:b1:4c: 67:ff:e6:4c:41:08:89:af:00:cf:fd:7b:fb:16:0c:87:24:c3: f7:84:80:62:33:b3:58:a1:1e:a8:71:96:30:d5:71:12:a6:c9: 74:f6:d1:db:85:0b:9d:01:2f:29:f6:8d:18:f9:30:d7:ac:be: 5a:46:18:fd:6f:6a:92:bd:b5:47:f2:f0:3a:4c:ab:27:2b:56: c7:d8:b5:a4:2f:bd:ac:47:42:69:6c:a2:fc:2b:ad:a4:a9:6c: 7a:95:ae:80:55:af:f9:5c:6b:61:f3:82:bc:4e:fe:3d:1a:54: 57:42:bd:93:4d:12:f2:42:6f:c8:12:4d:7e:80:43:8b:05:12: 72:9d:38:2c:cb:30:f3:b2:12:7a:c7:f6:0f:85:c8:6f:03:da: 0c:ec:d2:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFYkoTtrBhzSeBS+4sFgYh4dl+rIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNkM2NUFBMEJBMzNDNjI2RkFCMEI5QzI2RTAyNkVC OTA4NDU0QTAeFw0yNTExMDUwMDMzNTNaFw0yNTExMDYwMjIyNTNaMDMxMTAvBgNV BAMTKEJCRTJFMTAyMjI2MTI1MzVBMDE4NDFEQTBBRTM4NDczQzc3NzAyRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu9PKFU1fwqS7SlI4c3Z7LJD1T zYqkJoCF+vWqx1S+2doG4gPh27wwq1+SUUjlO0ZoFWVcyKy80Uj5LqBk+2YMku1y UFOhjvbVrx9ywWULLKULaueND6KP68Okuh7wVQVLFClzr+oT1kMKCTE9uGb8huMD vIoozK+p8951pZdMGdR4F3I86NvcAtUM7dnBcvf179lrJ0tmdMCFwtGm9XOk77Ha W5XPOCdV64LblqiUjpK1Sok/8rvg9sZbFQUD8Iv7zZ5CsSuIU2b3PggjcSn5SxS3 Gi8JjY+qPS5KJW27nUVGa+dyZALK+fxtIgXpp4OslH3EzBzXGn8Y4AohiMqXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUu+LhAiJhJTWgGEHaCuOEc8d3AucwHwYDVR0j BBgwFoAUwzbGWqC6M8Ym+rC5wm4CbrkIRUowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHBIQjFOV25iZVdBaEJLS1VvZFJrcDFVejFacjVQVDJBSlV4a21BMzFq b2svMS9DMzM2QzY1QUEwQkEzM0M2MjZGQUIwQjlDMjZFMDI2RUI5MDg0NTRBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzMzZDNjVBQTBCQTMzQzYy NkZBQjBCOUMyNkUwMjZFQjkwODQ1NEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHBIQjFOV25iZVdBaEJLS1VvZFJrcDFVejFacjVQVDJBSlV4a21BMzFqb2svMS9D MzM2QzY1QUEwQkEzM0M2MjZGQUIwQjlDMjZFMDI2RUI5MDg0NTRBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASI/I7OHkc2clOreVM2fjgoyiyyaIscnepdWo4J1o1iQdXFYBSrJLq0f8h0gx twoHzznCxwhtm2ltTRm/9yjNZ0vgTa7e/wfN3xZON2bViZ6CiqjhOHsWNYk2lN7X UWUAkoDv4CSgks/WU7FMZ//mTEEIia8Az/17+xYMhyTD94SAYjOzWKEeqHGWMNVx EqbJdPbR24ULnQEvKfaNGPkw16y+WkYY/W9qkr21R/LwOkyrJytWx9i1pC+9rEdC aWyi/CutpKlsepWugFWv+VxrYfOCvE7+PRpUV0K9k00S8kJvyBJNfoBDiwUScp04 LMsw87ISesf2D4XIbwPaDOzSFA== -----END CERTIFICATE-----Generated at Wed Nov 5 13:34:40 2025 by rpki-client