$ rpki-client -vvf rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft File: D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft (raw, json) Hash identifier: a41VIKA000LaCbIDR7ThQNDhDImO+KLHSQRIFqnAd1I= Subject key identifier: 5A:4B:22:48:F1:E2:5E:3F:DD:BA:38:5F:22:73:75:B3:9E:E6:17:3A Authority key identifier: D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11 Certificate issuer: /CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211 Certificate serial: 437D409840F08B8A3AFCB40099D392934984C1A3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer Subject info access: rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft Manifest number: CC Signing time: Tue 04 Nov 2025 06:40:52 +0000 Manifest this update: Tue 04 Nov 2025 06:35:52 +0000 Manifest next update: Wed 05 Nov 2025 10:34:52 +0000 Files and hashes: 1: 323830343a386262633a3a2f33322d313238203d3e20323733373535.roa (hash: 3uQTnhhz7H1wtPzniSKTigXw3gRffdvQaJmnZ+hmrrA=) 2: D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl (hash: TLNnxMSpbSc2/cKOb3MpMzeuTVpqBh/9TNELy0ymENs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 10:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7d:40:98:40:f0:8b:8a:3a:fc:b4:00:99:d3:92:93:49:84:c1:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211 Validity Not Before: Nov 4 06:35:52 2025 GMT Not After : Nov 5 10:34:52 2025 GMT Subject: CN=5A4B2248F1E25E3FDDBA385F227375B39EE6173A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:4d:ec:64:83:f2:b6:be:1b:2a:99:b9:05: 17:b5:41:0b:d6:f2:7e:5d:3c:e2:96:2b:0f:3b:70: 2e:61:fb:d0:b7:ca:cd:c4:f7:08:be:28:92:94:9d: 31:ee:58:d4:e7:2f:bc:cc:9a:45:b4:95:0c:b9:8e: fa:e1:e6:23:52:95:50:97:aa:79:b5:57:a4:b9:19: 16:12:55:03:bc:a9:6d:57:99:fa:34:4d:12:82:1e: 86:c1:c2:bc:83:31:9c:df:57:e7:59:12:57:83:be: 4c:4c:74:7a:a2:49:7a:14:0f:5c:ca:3b:24:fe:2f: e0:75:c0:d8:4e:79:f9:52:ab:55:00:bd:70:68:07: 7b:c0:67:cf:e2:03:e0:56:72:02:2f:f1:ed:18:c0: cb:ae:d8:52:e7:fa:f5:49:12:31:b6:ed:d4:4c:0a: cf:0a:18:f9:27:df:08:51:71:53:12:93:7c:c0:c8: f9:02:77:97:18:6d:4f:50:9b:29:0c:64:e3:ff:87: b8:8a:8f:b6:3d:61:97:e7:7c:c7:8b:e0:65:e0:d0: 1f:ef:ad:e4:37:da:eb:c6:14:bc:3b:c2:12:e7:b5: c3:52:d4:e4:4c:c2:3d:e6:3e:57:eb:4e:11:7f:28: 25:9f:57:b5:6e:4f:e0:41:b4:8a:f7:ae:65:35:ab: 4c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4B:22:48:F1:E2:5E:3F:DD:BA:38:5F:22:73:75:B3:9E:E6:17:3A X509v3 Authority Key Identifier: keyid:D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:dc:4c:d8:a4:ea:05:10:1d:f9:d7:a2:59:ea:ba:77:07:1c: b1:ea:01:34:1e:b4:6d:c3:7a:24:eb:9e:7b:88:77:6b:52:1a: 98:07:88:f7:1f:a0:d5:3d:74:14:32:9a:ff:48:64:82:42:8f: 31:1c:41:20:4c:d6:ca:25:fa:ee:a4:db:30:17:11:73:1c:cc: be:ad:f2:fe:63:b0:df:c9:a8:7f:26:d7:c4:9b:71:4b:fa:bd: bf:da:0f:58:a3:2a:ac:83:ff:0c:ad:90:66:75:33:f5:c9:a0: f7:7b:02:20:43:dd:41:85:cd:bf:87:42:40:fa:9c:b3:37:98: 68:2a:df:46:96:27:57:03:61:61:81:5b:42:59:a6:69:ce:09: 65:8f:64:4e:66:4f:7c:9c:b0:34:0b:a0:62:74:41:cf:54:27: da:58:fb:c9:b9:73:e9:c2:b0:78:1b:f3:fe:44:90:63:73:d0: af:8e:e5:64:9d:d8:c2:2c:65:f2:53:82:7d:d6:bd:8e:a5:88: 07:36:6f:81:09:65:11:af:5a:02:68:47:08:57:26:a1:41:56: 9a:05:2a:31:00:df:4a:6c:15:cf:21:1e:f0:63:a4:e0:3d:09: b0:47:2a:ca:28:54:6c:40:18:63:55:74:89:bb:19:7b:77:a5: 54:0f:a0:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ31AmEDwi4o6/LQAmdOSk0mEwaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA3RDNFQUM3RDYwQ0FCN0JFODQxQUY1MkZFNUJEM0JF NzhEQjIxMTAeFw0yNTExMDQwNjM1NTJaFw0yNTExMDUxMDM0NTJaMDMxMTAvBgNV BAMTKDVBNEIyMjQ4RjFFMjVFM0ZEREJBMzg1RjIyNzM3NUIzOUVFNjE3M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCySk3sZIPytr4bKpm5BRe1QQvW 8n5dPOKWKw87cC5h+9C3ys3E9wi+KJKUnTHuWNTnL7zMmkW0lQy5jvrh5iNSlVCX qnm1V6S5GRYSVQO8qW1Xmfo0TRKCHobBwryDMZzfV+dZEleDvkxMdHqiSXoUD1zK OyT+L+B1wNhOeflSq1UAvXBoB3vAZ8/iA+BWcgIv8e0YwMuu2FLn+vVJEjG27dRM Cs8KGPkn3whRcVMSk3zAyPkCd5cYbU9QmykMZOP/h7iKj7Y9YZfnfMeL4GXg0B/v reQ32uvGFLw7whLntcNS1ORMwj3mPlfrThF/KCWfV7VuT+BBtIr3rmU1q0xrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWksiSPHiXj/dujhfInN1s57mFzowHwYDVR0j BBgwFoAU0H0+rH1gyre+hBr1L+W9O+eNshEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODZoa2llbWhEd2VQMUwxcGtQNzhMdUIyVVRUWWZFNnIzRVpQTGJ3M2ZR eDMvMC9EMDdEM0VBQzdENjBDQUI3QkU4NDFBRjUyRkU1QkQzQkU3OERCMjExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwN0QzRUFDN0Q2MENBQjdC RTg0MUFGNTJGRTVCRDNCRTc4REIyMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODZoa2llbWhEd2VQMUwxcGtQNzhMdUIyVVRUWWZFNnIzRVpQTGJ3M2ZReDMvMC9E MDdEM0VBQzdENjBDQUI3QkU4NDFBRjUyRkU1QkQzQkU3OERCMjExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG9xM2KTqBRAd+deiWeq6dwccseoBNB60bcN6JOuee4h3a1IamAeI9x+g1T10 FDKa/0hkgkKPMRxBIEzWyiX67qTbMBcRcxzMvq3y/mOw38mofybXxJtxS/q9v9oP WKMqrIP/DK2QZnUz9cmg93sCIEPdQYXNv4dCQPqcszeYaCrfRpYnVwNhYYFbQlmm ac4JZY9kTmZPfJywNAugYnRBz1Qn2lj7yblz6cKweBvz/kSQY3PQr47lZJ3Ywixl 8lOCfda9jqWIBzZvgQllEa9aAmhHCFcmoUFWmgUqMQDfSmwVzyEe8GOk4D0JsEcq yihUbEAYY1V0ibsZe3elVA+gpA== -----END CERTIFICATE-----Generated at Wed Nov 5 02:32:19 2025 by rpki-client