$ rpki-client -vvf rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/A7D30C6719D97773C371949D508EC2D8197F352F.mft File: A7D30C6719D97773C371949D508EC2D8197F352F.mft (raw, json) Hash identifier: xtNe3FRIhBZOpVK4En5m8Wsw8YgeEill1/FtLltyDYw= Subject key identifier: B9:03:8A:25:BB:2D:09:98:5F:3A:39:A4:3B:C9:EA:E5:DB:17:90:1A Authority key identifier: A7:D3:0C:67:19:D9:77:73:C3:71:94:9D:50:8E:C2:D8:19:7F:35:2F Certificate issuer: /CN=A7D30C6719D97773C371949D508EC2D8197F352F Certificate serial: 088ED5666D709B21240776F5B3F01E9EB7D37857 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7D30C6719D97773C371949D508EC2D8197F352F.cer Subject info access: rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/A7D30C6719D97773C371949D508EC2D8197F352F.mft Manifest number: 20 Signing time: Tue 04 Nov 2025 10:57:54 +0000 Manifest this update: Tue 04 Nov 2025 10:52:54 +0000 Manifest next update: Wed 05 Nov 2025 12:15:54 +0000 Files and hashes: 1: A7D30C6719D97773C371949D508EC2D8197F352F.crl (hash: 58UlXTkpkRuJR5DaDtHzgOsKfR36UyU/1bI0xLfO+9g=) 2: 3133382e3132322e3131362e302f32322d3234203d3e20323634333139.roa (hash: FyTypNbgy6DksAiuA02zjt5HW5HicpcW/rgfS3cIaM4=) 3: 323830343a323630383a3a2f33322d3430203d3e20323634333139.roa (hash: u49Y01NOV3C0pJal/YhueTHB57QThABkvPiGZRjj/Go=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/A7D30C6719D97773C371949D508EC2D8197F352F.crl rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/A7D30C6719D97773C371949D508EC2D8197F352F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7D30C6719D97773C371949D508EC2D8197F352F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 12:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:8e:d5:66:6d:70:9b:21:24:07:76:f5:b3:f0:1e:9e:b7:d3:78:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D30C6719D97773C371949D508EC2D8197F352F Validity Not Before: Nov 4 10:52:54 2025 GMT Not After : Nov 5 12:15:54 2025 GMT Subject: CN=B9038A25BB2D09985F3A39A43BC9EAE5DB17901A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e3:f0:f3:19:14:75:44:a9:a5:69:d8:dc:46: 13:73:c1:90:0b:4d:18:c7:c0:c3:65:ec:32:fd:dd: 00:24:c0:0c:5c:8b:5d:dd:80:b0:9b:eb:d0:8f:7d: 14:14:d9:45:ca:92:09:0d:60:df:6a:1b:d2:28:9f: 58:6b:ec:4a:8c:89:38:eb:ff:be:44:1b:ad:d2:e7: 34:e6:66:4a:96:c2:a3:94:ed:dd:cb:9c:3c:88:23: b4:1a:d9:bd:7d:5f:95:29:0c:58:43:02:05:5b:88: ae:cf:cc:a8:2f:46:ce:b1:4a:69:cf:4f:f0:b1:4b: 7d:51:86:40:e0:0c:2c:f5:3f:a7:de:30:ec:01:21: d5:63:32:5f:b7:3b:99:f2:de:fb:69:b1:d4:4e:d9: d7:b7:69:96:d1:7a:40:2b:0f:36:78:ed:82:91:f9: cd:ea:05:b3:1f:68:f2:55:7b:c3:cb:71:1d:75:8a: 20:24:cc:e6:cf:5a:03:b9:96:3c:01:e8:c3:fd:7d: e4:55:05:05:68:57:80:1d:d9:10:97:6d:38:21:59: d2:16:b0:2f:36:9f:54:02:40:44:60:ca:38:e9:d5: 15:7b:27:cc:96:fa:ec:c8:90:01:41:51:2d:c6:11: 41:fb:21:21:93:4e:40:fd:ba:97:d4:63:6e:1e:ae: 31:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:03:8A:25:BB:2D:09:98:5F:3A:39:A4:3B:C9:EA:E5:DB:17:90:1A X509v3 Authority Key Identifier: keyid:A7:D3:0C:67:19:D9:77:73:C3:71:94:9D:50:8E:C2:D8:19:7F:35:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/A7D30C6719D97773C371949D508EC2D8197F352F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7D30C6719D97773C371949D508EC2D8197F352F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/A7D30C6719D97773C371949D508EC2D8197F352F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:3f:a7:c2:36:d7:01:7c:5c:66:01:67:32:64:fb:2b:5c:e7: 69:29:47:a0:d5:90:a8:9e:0b:de:af:e3:e1:25:3c:bd:61:1b: 89:96:8a:74:26:3b:e6:ff:60:64:28:02:53:1b:08:f0:18:d0: 46:dd:18:a9:48:b5:78:b5:72:7b:c6:23:83:f4:40:c0:af:c4: 14:70:ae:03:5a:04:bd:b3:0b:10:d0:94:6a:f8:3f:96:b9:fa: 33:c3:5a:0f:1f:18:98:86:0a:4e:a0:14:72:c8:ee:39:53:ac: 1e:55:bf:f2:ac:19:23:3e:c1:dd:d5:48:b6:d6:a1:4b:f9:a4: 40:fb:97:95:1e:59:b3:f2:d2:95:83:fc:c6:de:75:03:53:99: 68:86:06:3a:6e:a6:44:a4:5a:b3:4b:f0:d1:33:62:b6:b0:62: 1e:86:9d:e8:9f:78:67:68:76:16:51:bf:7c:56:a1:51:e8:3d: 20:62:05:3e:b4:e2:3c:62:89:e9:cf:33:7c:13:6c:aa:42:2b: 3f:30:ce:f8:02:5c:27:76:73:5e:97:c1:4b:ff:3c:b4:2e:8e: b7:3b:94:0e:4d:37:d4:78:03:d1:11:9a:59:48:b5:40:93:7e: 96:18:3b:1a:d5:81:45:09:a1:d0:30:af:9f:6b:cf:3c:b0:56: 6c:21:9a:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCI7VZm1wmyEkB3b1s/AenrfTeFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEMzBDNjcxOUQ5Nzc3M0MzNzE5NDlENTA4RUMyRDgx OTdGMzUyRjAeFw0yNTExMDQxMDUyNTRaFw0yNTExMDUxMjE1NTRaMDMxMTAvBgNV BAMTKEI5MDM4QTI1QkIyRDA5OTg1RjNBMzlBNDNCQzlFQUU1REIxNzkwMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD4/DzGRR1RKmladjcRhNzwZAL TRjHwMNl7DL93QAkwAxci13dgLCb69CPfRQU2UXKkgkNYN9qG9Ion1hr7EqMiTjr /75EG63S5zTmZkqWwqOU7d3LnDyII7Qa2b19X5UpDFhDAgVbiK7PzKgvRs6xSmnP T/CxS31RhkDgDCz1P6feMOwBIdVjMl+3O5ny3vtpsdRO2de3aZbRekArDzZ47YKR +c3qBbMfaPJVe8PLcR11iiAkzObPWgO5ljwB6MP9feRVBQVoV4Ad2RCXbTghWdIW sC82n1QCQERgyjjp1RV7J8yW+uzIkAFBUS3GEUH7ISGTTkD9upfUY24erjHTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuQOKJbstCZhfOjmkO8nq5dsXkBowHwYDVR0j BBgwFoAUp9MMZxnZd3PDcZSdUI7C2Bl/NS8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzc5QzJuVUpWWUpUd3lVTFpHb29tOTkzVUVGR0NDeGNUejhUNEVXZ0sz YTQvMC9BN0QzMEM2NzE5RDk3NzczQzM3MTk0OUQ1MDhFQzJEODE5N0YzNTJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3RDMwQzY3MTlEOTc3NzND MzcxOTQ5RDUwOEVDMkQ4MTk3RjM1MkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Nzc5QzJuVUpWWUpUd3lVTFpHb29tOTkzVUVGR0NDeGNUejhUNEVXZ0szYTQvMC9B N0QzMEM2NzE5RDk3NzczQzM3MTk0OUQ1MDhFQzJEODE5N0YzNTJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMD+nwjbXAXxcZgFnMmT7K1znaSlHoNWQqJ4L3q/j4SU8vWEbiZaKdCY75v9g ZCgCUxsI8BjQRt0YqUi1eLVye8Yjg/RAwK/EFHCuA1oEvbMLENCUavg/lrn6M8Na Dx8YmIYKTqAUcsjuOVOsHlW/8qwZIz7B3dVIttahS/mkQPuXlR5Zs/LSlYP8xt51 A1OZaIYGOm6mRKRas0vw0TNitrBiHoad6J94Z2h2FlG/fFahUeg9IGIFPrTiPGKJ 6c8zfBNsqkIrPzDO+AJcJ3ZzXpfBS/88tC6OtzuUDk031HgD0RGaWUi1QJN+lhg7 GtWBRQmh0DCvn2vPPLBWbCGaAg== -----END CERTIFICATE-----Generated at Wed Nov 5 03:37:36 2025 by rpki-client