$ rpki-client -vvf rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft File: 98525FF70BD67C78C36BE3190E3463098E95DF2C.mft (raw, json) Hash identifier: 4FwmNtCDB/K19B1ADhcO+G+X/vCrfpv0+TtBcrR7DgU= Subject key identifier: FD:65:88:9D:93:17:32:D6:42:AE:E8:C5:51:4E:60:18:C1:06:43:AC Authority key identifier: 98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C Certificate issuer: /CN=98525FF70BD67C78C36BE3190E3463098E95DF2C Certificate serial: 126DA36C0D7C1A489D4006FAB3751EB22D4282CD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer Subject info access: rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft Manifest number: 0305 Signing time: Wed 05 Nov 2025 00:00:29 +0000 Manifest this update: Tue 04 Nov 2025 23:55:29 +0000 Manifest next update: Thu 06 Nov 2025 03:24:29 +0000 Files and hashes: 1: 98525FF70BD67C78C36BE3190E3463098E95DF2C.crl (hash: 9UZwQeZYkj9X6TdGnQagY1J3AppkYe4CY62PWPQ70C0=) 2: 323830343a333966633a3a2f33322d3438203d3e20323636303633.roa (hash: uZx6MKqpTg13sIPZCAlz9trqbeJwgRlXEg00ldqRU1M=) 3: 34352e342e3130342e302f32322d3234203d3e20323636303633.roa (hash: YqZ3SJPT6Xcqs9peUTXMNxMHIB0EzaAQ68UaAdgZNVs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:6d:a3:6c:0d:7c:1a:48:9d:40:06:fa:b3:75:1e:b2:2d:42:82:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98525FF70BD67C78C36BE3190E3463098E95DF2C Validity Not Before: Nov 4 23:55:29 2025 GMT Not After : Nov 6 03:24:29 2025 GMT Subject: CN=FD65889D931732D642AEE8C5514E6018C10643AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:94:aa:c8:e5:48:5c:e7:0c:87:db:17:8d:1f: b2:86:51:3a:3e:94:b0:e5:95:01:6f:14:f9:cb:67: ec:21:04:70:dd:4f:b3:4c:0a:b3:d5:7f:0e:01:42: ff:65:66:8e:28:7a:23:7c:14:0d:4c:d1:a1:ef:53: 74:04:9f:42:3a:f8:43:f4:e2:58:ee:39:eb:88:38: 50:47:08:9d:39:54:fa:71:be:ef:4d:57:6d:d3:c0: 08:45:28:57:02:07:96:4d:35:ec:4b:a6:09:e5:d2: d1:d1:53:2f:a5:77:3e:d9:63:e7:b7:7a:c7:32:2c: 1a:65:b3:b3:24:49:79:b9:16:2e:9d:7d:77:55:84: e2:db:68:0b:b1:f2:b3:90:1f:39:b1:79:70:17:f2: d8:5f:36:d7:e6:df:1f:f3:21:f0:71:62:59:cf:15: a0:70:7b:d5:61:2c:bb:cc:2f:68:b4:75:4c:a8:6a: ec:82:95:e4:56:c6:8c:83:3c:70:12:4c:e5:20:45: 68:ac:8c:f4:ba:10:14:a0:a5:05:fc:74:35:76:52: b4:16:3d:80:59:16:3d:44:82:8b:cf:39:e6:44:8d: a3:56:67:e6:b4:12:87:ff:ed:b6:6e:de:9c:7d:be: e4:cb:5f:dc:9e:fa:63:5d:7e:da:61:90:e5:2d:40: de:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:65:88:9D:93:17:32:D6:42:AE:E8:C5:51:4E:60:18:C1:06:43:AC X509v3 Authority Key Identifier: keyid:98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ba:cb:ae:84:c7:ec:1e:7a:11:52:d4:b7:06:47:66:42:be: 8f:a6:5a:8c:0c:2d:19:a1:ea:e0:c4:68:5a:56:28:9f:c8:41: be:a6:71:07:ce:9b:04:ea:f6:77:63:81:2b:df:21:e1:89:5a: fb:d6:98:36:14:3c:de:51:dc:f5:3a:74:12:6b:3a:f2:df:de: 36:38:2c:ac:0d:bc:c0:2a:98:df:ee:5e:6c:f4:2e:e8:bf:be: 68:a0:18:a6:54:18:0a:00:4b:f1:dc:3e:92:16:86:c1:76:68: a3:15:3b:6c:fb:bd:2a:55:fc:d7:6c:a7:6e:62:fe:48:be:56: 7c:2b:a0:1c:48:15:a2:50:7d:b0:cc:e8:00:34:0d:8c:1f:e4: b9:10:c0:4d:6f:24:5e:7a:75:b0:2b:05:eb:a0:8f:a6:db:ff: 98:ed:be:f9:44:78:9b:71:42:4c:24:2d:e6:48:90:5a:9d:59: 99:c6:76:84:45:88:e0:d5:5f:69:e4:79:fb:f9:b2:9b:8e:da: bb:fc:d5:ea:b2:72:18:58:c1:44:72:51:0a:0d:16:2e:a1:85: c6:99:d1:7c:24:49:58:da:5d:55:0f:11:20:8f:90:db:33:0d: 21:42:93:52:0b:2b:08:dd:9a:d0:f9:e8:79:c3:81:dd:8c:a2: b7:84:d3:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEm2jbA18GkidQAb6s3Uesi1Cgs0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MjVGRjcwQkQ2N0M3OEMzNkJFMzE5MEUzNDYzMDk4 RTk1REYyQzAeFw0yNTExMDQyMzU1MjlaFw0yNTExMDYwMzI0MjlaMDMxMTAvBgNV BAMTKEZENjU4ODlEOTMxNzMyRDY0MkFFRThDNTUxNEU2MDE4QzEwNjQzQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDblKrI5Uhc5wyH2xeNH7KGUTo+ lLDllQFvFPnLZ+whBHDdT7NMCrPVfw4BQv9lZo4oeiN8FA1M0aHvU3QEn0I6+EP0 4ljuOeuIOFBHCJ05VPpxvu9NV23TwAhFKFcCB5ZNNexLpgnl0tHRUy+ldz7ZY+e3 escyLBpls7MkSXm5Fi6dfXdVhOLbaAux8rOQHzmxeXAX8thfNtfm3x/zIfBxYlnP FaBwe9VhLLvML2i0dUyoauyCleRWxoyDPHASTOUgRWisjPS6EBSgpQX8dDV2UrQW PYBZFj1EgovPOeZEjaNWZ+a0Eof/7bZu3px9vuTLX9ye+mNdftphkOUtQN7BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/WWInZMXMtZCrujFUU5gGMEGQ6wwHwYDVR0j BBgwFoAUmFJf9wvWfHjDa+MZDjRjCY6V3ywwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3duRE1ITTEydkZkZ1dDclVVUWVUeGk0c1ZBaTdId2h4WXVQYkVZSmM5 QjQvMS85ODUyNUZGNzBCRDY3Qzc4QzM2QkUzMTkwRTM0NjMwOThFOTVERjJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4NTI1RkY3MEJENjdDNzhD MzZCRTMxOTBFMzQ2MzA5OEU5NURGMkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N3duRE1ITTEydkZkZ1dDclVVUWVUeGk0c1ZBaTdId2h4WXVQYkVZSmM5QjQvMS85 ODUyNUZGNzBCRDY3Qzc4QzM2QkUzMTkwRTM0NjMwOThFOTVERjJDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjbrLroTH7B56EVLUtwZHZkK+j6ZajAwtGaHq4MRoWlYon8hBvqZxB86bBOr2 d2OBK98h4Yla+9aYNhQ83lHc9Tp0Ems68t/eNjgsrA28wCqY3+5ebPQu6L++aKAY plQYCgBL8dw+khaGwXZooxU7bPu9KlX812ynbmL+SL5WfCugHEgVolB9sMzoADQN jB/kuRDATW8kXnp1sCsF66CPptv/mO2++UR4m3FCTCQt5kiQWp1ZmcZ2hEWI4NVf aeR5+/mym47au/zV6rJyGFjBRHJRCg0WLqGFxpnRfCRJWNpdVQ8RII+Q2zMNIUKT UgsrCN2a0PnoecOB3Yyit4TTSw== -----END CERTIFICATE-----Generated at Wed Nov 5 15:49:34 2025 by rpki-client