$ rpki-client -vvf rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft File: F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft (raw, json) Hash identifier: Ey+wU4/cY+Hn7CoMwN33epfUZNRQ+W6JhfVBCrARnUM= Subject key identifier: 33:E0:34:5F:12:28:1A:46:BE:48:66:81:F3:65:49:ED:CD:B9:E9:70 Authority key identifier: F8:40:F3:A0:7A:5B:A8:A1:B8:C8:95:C5:96:26:D4:B9:07:A8:8F:7E Certificate issuer: /CN=F840F3A07A5BA8A1B8C895C59626D4B907A88F7E Certificate serial: 65E1E60442E8B18210C7C4A8FA9343BFCBDA9D38 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.cer Subject info access: rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft Manifest number: 0303 Signing time: Wed 05 Nov 2025 02:05:58 +0000 Manifest this update: Wed 05 Nov 2025 02:00:58 +0000 Manifest next update: Thu 06 Nov 2025 05:20:58 +0000 Files and hashes: 1: 3138392e33392e3138362e302f32342d3234203d3e20323730373932.roa (hash: WA3J0WguYs9zONV4TbORGUBacU9F5Nfbxix2CDq0vVM=) 2: F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.crl (hash: 36xj2eeaWjhoVHldNbvCjL7p2Enn81dpYKIZpccG2T4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.crl rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 05:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e1:e6:04:42:e8:b1:82:10:c7:c4:a8:fa:93:43:bf:cb:da:9d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F840F3A07A5BA8A1B8C895C59626D4B907A88F7E Validity Not Before: Nov 5 02:00:58 2025 GMT Not After : Nov 6 05:20:58 2025 GMT Subject: CN=33E0345F12281A46BE486681F36549EDCDB9E970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:89:b8:23:cf:30:a4:a7:81:6d:17:90:60:f8: 2c:27:3c:e4:ea:6b:38:0c:9e:fb:d9:21:1f:e3:bb: d0:c3:7b:6d:19:0c:0b:96:2e:1f:c3:0d:f5:1b:cc: 1c:74:d1:c9:65:48:06:4c:3b:12:76:c6:1a:4a:b3: c6:22:16:69:e0:a5:94:1c:45:f4:1e:b5:3b:36:d6: 2d:d3:1b:9b:47:37:0d:aa:09:14:19:c2:37:f6:9b: c5:62:8d:ec:9d:a3:93:9d:40:81:bf:f2:55:38:ee: a7:2e:6b:ad:ef:bb:5e:36:39:6b:f7:4b:0e:98:35: 8a:b6:b5:44:99:f6:04:f0:7e:8c:60:5f:5b:b8:80: f6:d8:4a:8f:9e:99:71:c1:c7:76:2d:7e:52:9d:b8: ab:0f:79:c3:a4:e8:9e:3e:12:15:d7:a9:4a:ba:a6: 82:29:7a:a8:ee:91:49:1c:0f:93:46:22:94:1c:49: 0c:a6:68:5b:0e:8a:1d:f8:bf:2a:f8:3c:6d:47:d4: d1:2c:57:dc:0a:06:6a:36:55:79:2e:81:9e:ae:c4: cb:0e:58:3e:87:ee:04:ce:38:ea:b7:a0:9a:c4:5d: 58:62:34:af:24:55:eb:81:43:01:f7:aa:92:55:13: d6:a9:a1:bd:5e:a0:9c:eb:71:1b:9b:48:79:66:2e: 73:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E0:34:5F:12:28:1A:46:BE:48:66:81:F3:65:49:ED:CD:B9:E9:70 X509v3 Authority Key Identifier: keyid:F8:40:F3:A0:7A:5B:A8:A1:B8:C8:95:C5:96:26:D4:B9:07:A8:8F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9e:8c:e7:a4:b7:85:a6:7e:f4:24:24:7d:1c:94:d6:cb:31: 1f:69:dd:1d:1f:58:8f:4f:ae:98:a5:67:71:9d:00:d2:8a:6d: f7:f4:13:60:99:aa:48:23:c7:43:8e:37:fd:a7:a0:ec:1d:ba: 10:84:47:72:d2:af:6f:9d:a3:df:97:7a:9f:2a:02:e2:e2:fb: f3:d8:2c:55:59:ad:78:00:02:16:1b:ff:7b:27:6a:1d:65:e7: a5:27:00:ee:31:a8:3a:cc:4d:e3:c4:84:31:1c:37:3c:c2:de: 23:66:f8:fa:9b:74:1b:13:36:77:05:a1:14:ef:8a:5b:42:9f: dd:11:73:6e:71:b9:23:d0:74:c5:5e:ab:51:89:65:ca:84:ec: ca:1c:fd:48:b6:9c:ac:10:7c:9a:48:f8:a8:02:c0:65:a7:ea: b9:14:a0:ac:7b:82:ca:f4:17:94:42:3a:82:51:05:cd:7d:34: 88:ac:31:c3:8c:14:58:7c:5a:99:63:61:c9:a4:55:c6:ee:02: a2:e8:e2:02:5a:99:5b:35:1f:c0:12:bd:b0:ef:c9:0e:15:5c: 58:59:87:62:66:9f:8e:76:42:14:d1:d4:87:93:5d:c2:ee:f1: 73:1d:30:72:b3:41:f1:66:47:7d:ce:e5:d7:83:de:a4:02:94: 26:a2:7b:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZeHmBELosYIQx8So+pNDv8vanTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg0MEYzQTA3QTVCQThBMUI4Qzg5NUM1OTYyNkQ0Qjkw N0E4OEY3RTAeFw0yNTExMDUwMjAwNThaFw0yNTExMDYwNTIwNThaMDMxMTAvBgNV BAMTKDMzRTAzNDVGMTIyODFBNDZCRTQ4NjY4MUYzNjU0OUVEQ0RCOUU5NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIibgjzzCkp4FtF5Bg+CwnPOTq azgMnvvZIR/ju9DDe20ZDAuWLh/DDfUbzBx00cllSAZMOxJ2xhpKs8YiFmngpZQc RfQetTs21i3TG5tHNw2qCRQZwjf2m8Vijeydo5OdQIG/8lU47qcua63vu142OWv3 Sw6YNYq2tUSZ9gTwfoxgX1u4gPbYSo+emXHBx3YtflKduKsPecOk6J4+EhXXqUq6 poIpeqjukUkcD5NGIpQcSQymaFsOih34vyr4PG1H1NEsV9wKBmo2VXkugZ6uxMsO WD6H7gTOOOq3oJrEXVhiNK8kVeuBQwH3qpJVE9apob1eoJzrcRubSHlmLnM3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUM+A0XxIoGka+SGaB82VJ7c256XAwHwYDVR0j BBgwFoAU+EDzoHpbqKG4yJXFlibUuQeoj34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOG5nQ0xyY1VWY2lyb3BRdFBpWGZBZWR6cnRHbXJ4ODlvaHpGb1hOY3VH d20vMS9GODQwRjNBMDdBNUJBOEExQjhDODk1QzU5NjI2RDRCOTA3QTg4RjdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4NDBGM0EwN0E1QkE4QTFC OEM4OTVDNTk2MjZENEI5MDdBODhGN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OG5nQ0xyY1VWY2lyb3BRdFBpWGZBZWR6cnRHbXJ4ODlvaHpGb1hOY3VHd20vMS9G ODQwRjNBMDdBNUJBOEExQjhDODk1QzU5NjI2RDRCOTA3QTg4RjdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH56M56S3haZ+9CQkfRyU1ssxH2ndHR9Yj0+umKVncZ0A0opt9/QTYJmqSCPH Q443/aeg7B26EIRHctKvb52j35d6nyoC4uL789gsVVmteAACFhv/eydqHWXnpScA 7jGoOsxN48SEMRw3PMLeI2b4+pt0GxM2dwWhFO+KW0Kf3RFzbnG5I9B0xV6rUYll yoTsyhz9SLacrBB8mkj4qALAZafquRSgrHuCyvQXlEI6glEFzX00iKwxw4wUWHxa mWNhyaRVxu4CoujiAlqZWzUfwBK9sO/JDhVcWFmHYmafjnZCFNHUh5Ndwu7xcx0w crNB8WZHfc7l14PepAKUJqJ7vQ== -----END CERTIFICATE-----Generated at Wed Nov 5 11:34:23 2025 by rpki-client