$ rpki-client -vvf rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft File: 849A24446B9E3C80503AA50B35CDFE864B50F299.mft (raw, json) Hash identifier: xWWJQEZNmND+n0hVPDhvhofisnrfpZc6wvnEcp2SJhg= Subject key identifier: 10:D5:FF:F9:01:42:BF:B3:A7:F2:2B:01:4C:2D:B2:5E:00:FA:90:E3 Authority key identifier: 84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99 Certificate issuer: /CN=849A24446B9E3C80503AA50B35CDFE864B50F299 Certificate serial: 520E4DB9AD9B7A0DC7371A2CC5985F1DFDD803BA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer Subject info access: rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft Manifest number: 0308 Signing time: Wed 05 Nov 2025 09:34:53 +0000 Manifest this update: Wed 05 Nov 2025 09:29:53 +0000 Manifest next update: Thu 06 Nov 2025 11:03:53 +0000 Files and hashes: 1: 3133382e3138362e3137322e302f32322d3332203d3e20323633383737.roa (hash: F+6Q3rR9mW/bBvV3KMqzfE04ygqDKYoVUaMdkKLEkhA=) 2: 849A24446B9E3C80503AA50B35CDFE864B50F299.crl (hash: 3zbghksgdM/5w3c0PAZvnKtBFKEL2EPYCj2PbXADzc4=) 3: 3137302e3234362e3231322e302f32322d3332203d3e20323633383737.roa (hash: EW0bF1u4bur/zPzPb4/jkaTrzF2NSPUcuwmp/N5eHog=) 4: 323830343a323731633a3a2f33322d313238203d3e20323633383737.roa (hash: 9czPyLHsQNqWtZD0T0xfr5722IdYCGLe69IPEwzSaLE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 11:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:0e:4d:b9:ad:9b:7a:0d:c7:37:1a:2c:c5:98:5f:1d:fd:d8:03:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849A24446B9E3C80503AA50B35CDFE864B50F299 Validity Not Before: Nov 5 09:29:53 2025 GMT Not After : Nov 6 11:03:53 2025 GMT Subject: CN=10D5FFF90142BFB3A7F22B014C2DB25E00FA90E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:93:95:f2:c6:74:9c:ca:ab:9a:ac:43:4f:59: 41:c0:3d:7a:1d:81:7b:a8:d2:b6:e4:3f:c1:96:ec: cd:f5:47:eb:73:21:58:e4:db:46:18:2b:08:00:60: 64:1e:74:77:36:58:04:8f:db:f4:e3:2e:2e:7f:e3: 08:39:16:53:50:8d:a3:55:46:26:42:93:ca:23:a4: 4e:f7:e8:dc:ae:68:0e:47:05:85:02:e3:09:e0:41: 05:44:56:76:18:47:08:be:16:5f:93:6b:f3:d0:c8: 78:da:86:ea:a0:2f:4f:72:20:08:34:34:6e:20:b7: 4d:6e:94:bc:4b:d3:be:fb:cc:95:f9:67:78:ef:b0: 08:9f:79:88:8c:74:25:9b:15:1b:76:22:0c:a3:97: ce:40:e6:ab:fe:7c:75:bb:4b:46:37:b1:40:69:bd: 85:f4:02:f8:99:8d:56:15:1b:76:ff:fa:29:58:d4: 2c:a4:f1:5f:22:73:fe:43:f9:dd:aa:6f:5c:8c:0b: ca:f2:f0:79:fb:32:a2:46:74:1f:ba:91:95:29:3f: 9b:93:c1:8a:36:25:4f:a1:8f:84:6d:22:5e:27:86: 6b:6f:70:8b:27:fa:97:85:a8:2f:d2:b3:df:32:0e: ae:ec:93:6f:f7:bd:2b:91:b4:b8:5d:7d:9c:d3:33: ae:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D5:FF:F9:01:42:BF:B3:A7:F2:2B:01:4C:2D:B2:5E:00:FA:90:E3 X509v3 Authority Key Identifier: keyid:84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:32:95:68:b9:cc:bd:9c:e9:23:f1:e2:ab:fc:0a:c4:d6:f9: 50:74:fe:db:5d:f1:09:1e:be:ba:73:90:df:82:71:98:a9:89: 81:79:37:62:f6:45:e8:8f:b5:02:89:95:72:4a:b0:ee:7c:e8: 3a:de:94:48:d3:69:ab:40:92:8a:ae:b0:a9:fe:66:58:f5:a3: 0f:23:54:bf:85:0d:d4:6f:7b:1d:f3:3f:2b:91:30:31:d4:0b: 04:b1:1e:b7:1c:01:f8:26:27:ff:23:5d:5c:50:3d:e6:71:4a: 4f:2a:16:c8:6b:84:a5:1e:a3:4f:aa:9c:73:f2:f8:d9:69:7d: ed:fd:99:5b:c4:73:f5:b5:78:19:fc:19:c0:13:55:74:56:8f: 76:2f:3f:a4:7a:b7:cf:2e:ff:c6:c3:6f:0e:d0:8e:58:15:2f: c0:46:91:63:62:9a:28:ea:11:9f:78:db:08:80:e4:2d:b9:e4: 46:66:e5:5a:b6:3d:25:63:1a:9c:97:dd:db:c6:00:cd:00:68: fb:b1:b6:0d:e2:d4:d6:db:43:dd:25:3b:a4:fc:d5:a9:65:af: 51:e1:72:03:24:9b:39:53:d0:2d:3a:57:c6:4d:ea:cf:c5:e1: 7b:dc:1c:d0:64:37:9c:ef:62:17:ca:04:5c:16:47:01:53:13: fe:32:f4:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUg5Nua2beg3HNxosxZhfHf3YA7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5QTI0NDQ2QjlFM0M4MDUwM0FBNTBCMzVDREZFODY0 QjUwRjI5OTAeFw0yNTExMDUwOTI5NTNaFw0yNTExMDYxMTAzNTNaMDMxMTAvBgNV BAMTKDEwRDVGRkY5MDE0MkJGQjNBN0YyMkIwMTRDMkRCMjVFMDBGQTkwRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0k5XyxnScyquarENPWUHAPXod gXuo0rbkP8GW7M31R+tzIVjk20YYKwgAYGQedHc2WASP2/TjLi5/4wg5FlNQjaNV RiZCk8ojpE736NyuaA5HBYUC4wngQQVEVnYYRwi+Fl+Ta/PQyHjahuqgL09yIAg0 NG4gt01ulLxL0777zJX5Z3jvsAifeYiMdCWbFRt2Igyjl85A5qv+fHW7S0Y3sUBp vYX0AviZjVYVG3b/+ilY1Cyk8V8ic/5D+d2qb1yMC8ry8Hn7MqJGdB+6kZUpP5uT wYo2JU+hj4RtIl4nhmtvcIsn+peFqC/Ss98yDq7sk2/3vSuRtLhdfZzTM64vAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUENX/+QFCv7On8isBTC2yXgD6kOMwHwYDVR0j BBgwFoAUhJokRGuePIBQOqULNc3+hktQ8pkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHVEZXQzZmthUGhiMUY1dEdmMTg4dXJZOUJETmt4b0RpSkRnVThCQTFy YzkvMS84NDlBMjQ0NDZCOUUzQzgwNTAzQUE1MEIzNUNERkU4NjRCNTBGMjk5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0OUEyNDQ0NkI5RTNDODA1 MDNBQTUwQjM1Q0RGRTg2NEI1MEYyOTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHVEZXQzZmthUGhiMUY1dEdmMTg4dXJZOUJETmt4b0RpSkRnVThCQTFyYzkvMS84 NDlBMjQ0NDZCOUUzQzgwNTAzQUE1MEIzNUNERkU4NjRCNTBGMjk5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkDKVaLnMvZzpI/Hiq/wKxNb5UHT+213xCR6+unOQ34JxmKmJgXk3YvZF6I+1 AomVckqw7nzoOt6USNNpq0CSiq6wqf5mWPWjDyNUv4UN1G97HfM/K5EwMdQLBLEe txwB+CYn/yNdXFA95nFKTyoWyGuEpR6jT6qcc/L42Wl97f2ZW8Rz9bV4GfwZwBNV dFaPdi8/pHq3zy7/xsNvDtCOWBUvwEaRY2KaKOoRn3jbCIDkLbnkRmblWrY9JWMa nJfd28YAzQBo+7G2DeLU1ttD3SU7pPzVqWWvUeFyAySbOVPQLTpXxk3qz8Xhe9wc 0GQ3nO9iF8oEXBZHAVMT/jL0Ow== -----END CERTIFICATE-----Generated at Wed Nov 5 10:29:37 2025 by rpki-client