$ rpki-client -vvf rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft File: 244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft (raw, json) Hash identifier: tX93Y3LcNpgO0fAqHZZl6Gildh+kvdl2QL59iR2B2rw= Subject key identifier: 7A:6D:0A:8D:52:27:93:75:17:55:7B:5A:B8:DF:20:FD:C3:8B:15:FC Authority key identifier: 24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F Certificate issuer: /CN=244388DDFE9A99D71CEB27CDB6C76637D22CAB8F Certificate serial: 46F53F02BE2AB176E10B8CE5593E0C4A40D2C84E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer Subject info access: rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft Manifest number: 0305 Signing time: Tue 04 Nov 2025 14:49:32 +0000 Manifest this update: Tue 04 Nov 2025 14:44:32 +0000 Manifest next update: Wed 05 Nov 2025 15:28:32 +0000 Files and hashes: 1: 244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.crl (hash: IF5wNGQdC4gg0smaMUpZTyC4ERME91yvBl4u0HTKwkU=) 2: 3134332e3230382e3230342e302f32322d3234203d3e20323632343232.roa (hash: TgRt4L6a8pOv3SCwRQclmf3KBjiND8STFDG66uENJ+A=) 3: 323830343a3433633a3a2f33322d3430203d3e20323632343232.roa (hash: PLKMLaZ2a7H9L5imphdZ9G/Nf2BRc20xdttKf+egV64=) 4: 3137372e33392e38302e302f32312d3234203d3e20323632343232.roa (hash: +VsihtT40UXUDslQFosRezPR5S+3EFSwp+A0r5iVJB0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.crl rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 15:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:f5:3f:02:be:2a:b1:76:e1:0b:8c:e5:59:3e:0c:4a:40:d2:c8:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=244388DDFE9A99D71CEB27CDB6C76637D22CAB8F Validity Not Before: Nov 4 14:44:32 2025 GMT Not After : Nov 5 15:28:32 2025 GMT Subject: CN=7A6D0A8D5227937517557B5AB8DF20FDC38B15FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:4e:c3:02:cb:b0:98:45:a8:f8:48:de:8f: 6f:89:31:8f:bb:41:16:b4:fd:b8:83:5a:a5:39:c9: d6:06:1f:42:37:60:5e:fe:a8:31:9f:b1:51:04:95: 05:d6:f7:99:7d:be:ed:ac:d1:bc:7d:39:e9:0d:7b: 24:d9:b1:83:62:17:89:6a:77:cc:0c:22:8d:77:6d: 93:2b:a8:b0:4d:15:88:2b:9a:c3:76:6e:e3:88:98: a6:4e:95:a5:1a:bf:70:3e:30:be:b5:09:d7:8f:18: 57:a8:02:2a:ca:6c:eb:27:3e:6a:38:36:20:bf:e0: da:72:29:7c:4f:a9:3f:d1:42:4d:27:b5:a6:ed:9f: 92:ca:a9:a3:d1:e4:1a:00:94:f3:74:69:4e:72:4f: 22:c9:cf:68:ae:37:f9:c8:4a:b3:a4:4b:59:5f:5e: b3:f3:54:20:10:40:60:c9:3b:76:e3:2a:47:e9:04: 10:6a:3c:7b:10:11:3c:06:29:4f:1a:fb:94:e6:07: bd:a0:28:1d:68:04:9c:36:ca:6a:74:6b:01:bc:f6: 21:3a:29:19:e8:2a:ad:5e:23:dc:bd:13:f4:47:99: 81:c7:4c:00:f2:e4:c8:93:41:ec:66:ce:f4:13:c7: 04:ca:2c:99:50:58:f7:e2:66:6e:b7:c0:3c:6b:f2: f4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6D:0A:8D:52:27:93:75:17:55:7B:5A:B8:DF:20:FD:C3:8B:15:FC X509v3 Authority Key Identifier: keyid:24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:76:55:55:53:42:72:fb:f5:71:f9:c9:0f:51:7b:6a:cf:56: e3:27:52:2d:d5:49:b7:1e:48:ab:b7:83:b7:2b:b6:13:b0:37: 5c:9a:d9:e8:9f:1e:59:af:dc:9f:e5:16:69:23:c6:dc:1b:b1: ad:db:0d:a3:6d:bd:c7:6f:1b:2c:77:ba:88:46:11:1b:f5:7f: bf:3c:f2:04:d1:ac:91:f0:a9:67:ec:e2:2c:4e:3e:dc:dc:ec: 4e:86:42:a2:4f:f1:79:5d:88:73:b9:f8:f4:70:db:16:ec:2e: 5c:27:53:fd:27:54:6d:54:fb:25:0b:06:ef:78:a3:1d:9a:d7: d8:5a:a9:a1:59:7e:28:91:04:75:68:0b:f0:35:5a:25:f1:2b: f9:45:d5:11:40:7e:2f:8c:79:ba:d2:ce:fe:96:c5:c5:98:21: 53:aa:5c:80:6d:60:00:b6:2d:01:3f:f3:88:18:b0:66:13:d5: bb:b0:e6:ca:a7:c3:e6:6f:e3:01:bb:41:92:9a:03:d0:16:bb: ca:02:7b:da:10:ad:87:18:96:00:af:d0:a3:5c:2a:f7:92:4f: ae:02:e6:67:20:04:75:80:64:ce:30:b1:88:bf:0f:67:64:66: a2:a3:f9:20:5a:56:9c:a3:bd:5b:60:60:7b:69:73:15:5b:71: 8f:8f:e9:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURvU/Ar4qsXbhC4zlWT4MSkDSyE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ0Mzg4RERGRTlBOTlENzFDRUIyN0NEQjZDNzY2MzdE MjJDQUI4RjAeFw0yNTExMDQxNDQ0MzJaFw0yNTExMDUxNTI4MzJaMDMxMTAvBgNV BAMTKDdBNkQwQThENTIyNzkzNzUxNzU1N0I1QUI4REYyMEZEQzM4QjE1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9x07DAsuwmEWo+Ejej2+JMY+7 QRa0/biDWqU5ydYGH0I3YF7+qDGfsVEElQXW95l9vu2s0bx9OekNeyTZsYNiF4lq d8wMIo13bZMrqLBNFYgrmsN2buOImKZOlaUav3A+ML61CdePGFeoAirKbOsnPmo4 NiC/4NpyKXxPqT/RQk0ntabtn5LKqaPR5BoAlPN0aU5yTyLJz2iuN/nISrOkS1lf XrPzVCAQQGDJO3bjKkfpBBBqPHsQETwGKU8a+5TmB72gKB1oBJw2ymp0awG89iE6 KRnoKq1eI9y9E/RHmYHHTADy5MiTQexmzvQTxwTKLJlQWPfiZm63wDxr8vSNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUem0KjVInk3UXVXtauN8g/cOLFfwwHwYDVR0j BBgwFoAUJEOI3f6amdcc6yfNtsdmN9Isq48wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2Vrb0FxUWVYek5LRUFYcUdNZHdxWmY5VGc3TmRKUXJiU2FlaHgxZEtn bWcvMS8yNDQzODhEREZFOUE5OUQ3MUNFQjI3Q0RCNkM3NjYzN0QyMkNBQjhGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0NDM4OERERkU5QTk5RDcx Q0VCMjdDREI2Qzc2NjM3RDIyQ0FCOEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2Vrb0FxUWVYek5LRUFYcUdNZHdxWmY5VGc3TmRKUXJiU2FlaHgxZEtnbWcvMS8y NDQzODhEREZFOUE5OUQ3MUNFQjI3Q0RCNkM3NjYzN0QyMkNBQjhGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANnZVVVNCcvv1cfnJD1F7as9W4ydSLdVJtx5Iq7eDtyu2E7A3XJrZ6J8eWa/c n+UWaSPG3BuxrdsNo229x28bLHe6iEYRG/V/vzzyBNGskfCpZ+ziLE4+3NzsToZC ok/xeV2Ic7n49HDbFuwuXCdT/SdUbVT7JQsG73ijHZrX2FqpoVl+KJEEdWgL8DVa JfEr+UXVEUB+L4x5utLO/pbFxZghU6pcgG1gALYtAT/ziBiwZhPVu7DmyqfD5m/j AbtBkpoD0Ba7ygJ72hCthxiWAK/Qo1wq95JPrgLmZyAEdYBkzjCxiL8PZ2RmoqP5 IFpWnKO9W2Bge2lzFVtxj4/puA== -----END CERTIFICATE-----Generated at Wed Nov 5 01:59:53 2025 by rpki-client