$ rpki-client -vvf rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft File: 406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft (raw, json) Hash identifier: z0u87AoJXg2kEenn3edpmF9T+fgPxpXZ/u0ozjEYOp8= Subject key identifier: 8D:24:C3:31:71:6A:BD:7D:77:AA:17:67:65:5E:6D:2F:D9:A3:B5:54 Authority key identifier: 40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3 Certificate issuer: /CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3 Certificate serial: 732E4A633E5440E5F2A2EB7EB22172EABF5F536E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft Manifest number: 0306 Signing time: Tue 04 Nov 2025 13:58:06 +0000 Manifest this update: Tue 04 Nov 2025 13:53:06 +0000 Manifest next update: Wed 05 Nov 2025 16:58:06 +0000 Files and hashes: 1: 323830343a386566303a323a3a2f34372d3437203d3e20323733343537.roa (hash: dqdT0Z2X2ujGOU5wllrriRCiSwGcK/M1ZPuIhoxu7I0=) 2: 323830343a386566303a3a2f33322d3430203d3e20323733343537.roa (hash: cijZiORTQj8pw+Vial1gPDZ9Wbm7UefB7xwRnVBMG3A=) 3: 406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl (hash: Z7YOXOqBJET8yqK9hi/zy7uyQSz02DkOoc+zzPjemNk=) 4: 323830343a386566303a343a3a2f34372d3437203d3e20323733343537.roa (hash: SUmLEg8kb6XKx6NKYqf3IeVCbffV6D4xIgJGrq8TI6A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 16:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2e:4a:63:3e:54:40:e5:f2:a2:eb:7e:b2:21:72:ea:bf:5f:53:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3 Validity Not Before: Nov 4 13:53:06 2025 GMT Not After : Nov 5 16:58:06 2025 GMT Subject: CN=8D24C331716ABD7D77AA1767655E6D2FD9A3B554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:22:56:3d:51:c6:3d:50:bc:15:20:e7:07:f5: c7:b8:54:f8:26:19:e3:87:09:62:00:f9:df:9b:be: 25:89:7e:9b:05:0f:3a:2e:92:7e:86:16:af:ea:c9: da:b1:8e:e7:96:7b:c9:14:dc:cd:2a:29:24:d7:36: 3a:44:ee:91:37:da:e9:96:ff:f9:23:e9:f1:b9:50: 93:e4:05:de:34:cf:30:5b:b7:89:08:5d:b2:1a:15: 7b:d5:de:20:06:53:f1:ee:e8:13:4a:d0:96:d1:dd: 2e:f7:a2:a7:9b:b4:42:d8:4e:b3:78:4b:c4:9c:59: be:9a:79:af:ac:d2:d6:75:29:07:92:0f:3f:7a:3c: 92:8e:af:c9:ab:96:6c:51:99:4f:c0:85:89:a9:7e: 05:25:72:f7:ae:bd:9c:58:af:93:5d:14:7e:5d:ae: a4:b8:84:79:2b:ab:e1:1c:28:2a:66:34:c4:3b:e9: c3:3f:e7:74:7e:55:14:aa:9d:b2:f6:12:b9:a9:af: 83:34:ee:bf:fd:03:18:4d:42:40:02:ca:40:1e:63: e8:f3:34:20:5a:4e:f6:5a:50:eb:e8:22:44:16:cb: a5:2e:6c:a8:cf:00:5f:db:0e:81:dc:a4:86:ac:f7: c2:96:3e:61:a9:c8:4a:06:01:6d:05:18:91:77:11: 88:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:24:C3:31:71:6A:BD:7D:77:AA:17:67:65:5E:6D:2F:D9:A3:B5:54 X509v3 Authority Key Identifier: keyid:40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ff:c5:f1:96:51:be:d6:5e:88:75:5b:e2:49:8a:98:88:c1: 15:b3:e7:5d:3e:e2:94:58:cb:a3:b2:06:28:56:ba:a7:67:9d: be:a5:98:3d:67:7c:06:fc:62:90:e2:03:5a:50:6d:36:34:ec: 21:70:62:26:24:52:2f:6c:55:56:dc:0d:82:fb:4b:94:b6:13: da:f3:e2:f6:66:1d:e2:0b:cd:d6:a4:69:9e:cd:04:de:a0:77: 1f:19:4a:be:1f:41:14:c9:d5:55:f8:56:cc:33:19:ff:e4:b4: 36:eb:95:bf:fd:ee:b2:ff:2c:60:bc:ed:36:9a:40:2c:e4:14: 31:6d:ea:72:b0:cf:7e:c1:1e:04:a4:7d:45:0a:10:b3:e3:c8: a8:81:2a:e6:f6:a0:bd:39:6d:60:5b:c2:41:f1:0f:64:c1:a9: 90:7a:28:51:e2:8f:6a:8c:22:d4:96:3d:9b:7e:4f:1a:af:54: a1:eb:ed:1a:62:aa:a1:ac:0d:f5:9f:bd:bc:e5:d4:60:f0:9b: e7:10:52:87:d5:ab:96:d2:b3:6e:4e:ff:9d:eb:73:d2:b9:04: 81:50:ba:27:09:65:47:26:6f:5d:bb:ab:b2:04:2d:a0:41:26: 1d:d1:65:db:bb:8e:af:3a:ca:2a:ca:e3:c7:ad:27:72:1d:7f: 83:04:83:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcy5KYz5UQOXyout+siFy6r9fU24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA2QjAwRDVCNjYwRjZFRUM1Qzg0MTRGQTBGMEI3RkYz RUM1NzZBMzAeFw0yNTExMDQxMzUzMDZaFw0yNTExMDUxNjU4MDZaMDMxMTAvBgNV BAMTKDhEMjRDMzMxNzE2QUJEN0Q3N0FBMTc2NzY1NUU2RDJGRDlBM0I1NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGIlY9UcY9ULwVIOcH9ce4VPgm GeOHCWIA+d+bviWJfpsFDzoukn6GFq/qydqxjueWe8kU3M0qKSTXNjpE7pE32umW //kj6fG5UJPkBd40zzBbt4kIXbIaFXvV3iAGU/Hu6BNK0JbR3S73oqebtELYTrN4 S8ScWb6aea+s0tZ1KQeSDz96PJKOr8mrlmxRmU/AhYmpfgUlcveuvZxYr5NdFH5d rqS4hHkrq+EcKCpmNMQ76cM/53R+VRSqnbL2Ermpr4M07r/9AxhNQkACykAeY+jz NCBaTvZaUOvoIkQWy6UubKjPAF/bDoHcpIas98KWPmGpyEoGAW0FGJF3EYiBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjSTDMXFqvX13qhdnZV5tL9mjtVQwHwYDVR0j BBgwFoAUQGsA1bZg9u7FyEFPoPC3/z7FdqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWRQZnVSRVBUQnR0TXFRb3BUeXRwbmlLaEUzTEhkRnN6YXZEWk1CYzUy VW0vMS80MDZCMDBENUI2NjBGNkVFQzVDODQxNEZBMEYwQjdGRjNFQzU3NkEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwNkIwMEQ1QjY2MEY2RUVD NUM4NDE0RkEwRjBCN0ZGM0VDNTc2QTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWRQZnVSRVBUQnR0TXFRb3BUeXRwbmlLaEUzTEhkRnN6YXZEWk1CYzUyVW0vMS80 MDZCMDBENUI2NjBGNkVFQzVDODQxNEZBMEYwQjdGRjNFQzU3NkEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm//F8ZZRvtZeiHVb4kmKmIjBFbPnXT7ilFjLo7IGKFa6p2edvqWYPWd8Bvxi kOIDWlBtNjTsIXBiJiRSL2xVVtwNgvtLlLYT2vPi9mYd4gvN1qRpns0E3qB3HxlK vh9BFMnVVfhWzDMZ/+S0NuuVv/3usv8sYLztNppALOQUMW3qcrDPfsEeBKR9RQoQ s+PIqIEq5vagvTltYFvCQfEPZMGpkHooUeKPaowi1JY9m35PGq9UoevtGmKqoawN 9Z+9vOXUYPCb5xBSh9WrltKzbk7/netz0rkEgVC6JwllRyZvXbursgQtoEEmHdFl 27uOrzrKKsrjx60nch1/gwSDCQ== -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:04 2025 by rpki-client