$ rpki-client -vvf rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.mft File: 6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.mft (raw, json) Hash identifier: PDYyjBvYEfwYIJrodsM/5RYtcmoOUZ5LqGLMcQTrngA= Subject key identifier: 44:3E:95:1B:7E:59:7A:12:0B:0B:79:10:F5:B8:EC:BC:3B:0A:65:9D Authority key identifier: 6F:6A:82:1A:1D:5F:FC:AF:75:0D:DC:AB:46:26:E1:A4:1F:4E:0C:BF Certificate issuer: /CN=6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF Certificate serial: 4075A0A797D45D1A40748C6D47C8C31EDC9D4378 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.cer Subject info access: rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.mft Manifest number: 27 Signing time: Tue 04 Nov 2025 11:57:54 +0000 Manifest this update: Tue 04 Nov 2025 11:52:54 +0000 Manifest next update: Wed 05 Nov 2025 14:08:54 +0000 Files and hashes: 1: 3137372e36362e33322e302f32312d3234203d3e203532393939.roa (hash: npQO42+08CTJp3KYyIyirEqZJUDgnxI3c+1BtLKZdh4=) 2: 3138362e3231362e3231362e302f32312d3234203d3e203532393939.roa (hash: +ffUnLzfzrDB8ghOAGykzV6xu9kH558Jjg6IGkAIhU8=) 3: 3138362e3232362e39362e302f32302d3234203d3e203532393939.roa (hash: Nd5KTzZtBqOOLe6PajY6vRM53BrBye+YzzOKYD+nuCw=) 4: 6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.crl (hash: iQsheA3EvZP0tCUi5E/4wqMNj0DG9JKQIHIT+L2BFpQ=) 5: 3136382e3139352e36382e302f32322d3234203d3e203532393939.roa (hash: /D4w2a7/dncBqnx/QIIJ2J0r7zMmIHfBFEFVCUeCVJo=) 6: 323830343a3530383a3a2f33322d3438203d3e203532393939.roa (hash: mRECBfRrDH8bvMoFsHn2KICHjXH6rdRrCTm5pRn2YRI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.crl rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 14:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:75:a0:a7:97:d4:5d:1a:40:74:8c:6d:47:c8:c3:1e:dc:9d:43:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF Validity Not Before: Nov 4 11:52:54 2025 GMT Not After : Nov 5 14:08:54 2025 GMT Subject: CN=443E951B7E597A120B0B7910F5B8ECBC3B0A659D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b6:9c:02:93:2f:26:a4:f2:30:0f:3e:86:ad: 5e:24:4b:53:ef:d6:87:d9:69:e2:b5:b1:f9:73:63: e4:77:d9:71:00:4b:63:e3:0e:97:5a:be:18:20:6e: db:01:4d:2d:da:11:39:28:02:ef:22:b0:e9:bb:a6: b5:af:b2:f2:72:4f:41:2c:fa:2b:92:80:a0:40:5c: a5:3e:58:e8:ab:af:b8:fa:23:be:40:28:bf:63:d3: 32:c8:64:61:43:a1:b7:34:36:17:21:38:51:87:cc: 77:db:7d:15:11:e0:a6:4f:fe:11:94:19:10:75:8e: 4c:27:91:5e:b3:bf:06:5d:11:6c:fc:95:0d:e8:4e: ea:8d:be:a1:f8:13:68:0d:90:4a:81:fd:45:bd:f2: b3:1f:80:b6:97:51:ae:c3:b7:db:ba:79:f8:0f:57: 22:bb:da:ad:32:69:72:af:86:67:f6:b6:93:d3:ff: d6:08:0f:c2:cc:98:b3:d1:53:0c:1b:a0:70:4c:b6: 51:f4:1e:54:e2:39:fa:19:30:ab:68:98:1d:f7:08: f7:ea:1d:34:56:49:51:e2:6d:68:a3:24:7c:86:1b: 53:9b:78:07:40:fb:ae:6d:56:35:fd:7f:3f:3b:5f: 2e:50:b5:50:cf:ec:f8:60:4f:0d:c2:86:45:da:f7: 8e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3E:95:1B:7E:59:7A:12:0B:0B:79:10:F5:B8:EC:BC:3B:0A:65:9D X509v3 Authority Key Identifier: keyid:6F:6A:82:1A:1D:5F:FC:AF:75:0D:DC:AB:46:26:E1:A4:1F:4E:0C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/6F6A821A1D5FFCAF750DDCAB4626E1A41F4E0CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a1:13:05:00:13:73:eb:a9:b6:84:29:06:01:4b:86:15:6c: 43:be:95:19:b6:f3:3f:89:cc:e8:d8:7d:4f:08:e8:e3:82:40: cf:56:25:3e:8a:ca:9e:d2:c2:f7:68:d7:3d:35:bb:dd:e6:c3: 10:99:f4:db:ac:de:f9:cc:d1:a5:96:4a:b0:ab:f0:e1:e8:f6: ec:a2:48:a1:79:b0:1b:76:fb:c1:68:00:87:6f:9b:41:2a:54: c1:25:1f:d5:86:16:71:50:26:43:99:05:6f:58:c2:f9:47:a0: 8a:9a:80:6e:00:84:33:20:63:60:0f:b5:7b:c2:fc:8f:fe:99: 28:2d:f7:b4:86:17:83:14:31:62:bd:e6:d3:1d:e8:a7:b5:2f: 1b:d6:7d:40:ff:ad:5a:27:aa:ad:e0:88:ee:f6:a4:5c:38:5b: e8:bf:fa:a5:26:07:74:94:70:ac:53:49:0f:5d:b9:fe:b8:3b: cf:7d:50:19:c5:f5:49:33:0e:c2:ec:b2:e2:b1:7c:88:25:92: 74:c1:8a:87:de:09:32:86:19:8f:3b:e0:16:bb:b9:2b:98:3e: 78:05:a1:3e:e5:d3:da:43:72:12:76:d4:2e:b9:bd:82:b9:03: e6:3f:68:ef:e0:00:94:5c:a9:5e:c4:81:87:c0:e2:cb:68:f0: c4:d0:fe:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQHWgp5fUXRpAdIxtR8jDHtydQ3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY2QTgyMUExRDVGRkNBRjc1MEREQ0FCNDYyNkUxQTQx RjRFMENCRjAeFw0yNTExMDQxMTUyNTRaFw0yNTExMDUxNDA4NTRaMDMxMTAvBgNV BAMTKDQ0M0U5NTFCN0U1OTdBMTIwQjBCNzkxMEY1QjhFQ0JDM0IwQTY1OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKtpwCky8mpPIwDz6GrV4kS1Pv 1ofZaeK1sflzY+R32XEAS2PjDpdavhggbtsBTS3aETkoAu8isOm7prWvsvJyT0Es +iuSgKBAXKU+WOirr7j6I75AKL9j0zLIZGFDobc0NhchOFGHzHfbfRUR4KZP/hGU GRB1jkwnkV6zvwZdEWz8lQ3oTuqNvqH4E2gNkEqB/UW98rMfgLaXUa7Dt9u6efgP VyK72q0yaXKvhmf2tpPT/9YID8LMmLPRUwwboHBMtlH0HlTiOfoZMKtomB33CPfq HTRWSVHibWijJHyGG1ObeAdA+65tVjX9fz87Xy5QtVDP7PhgTw3ChkXa944zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURD6VG35ZehILC3kQ9bjsvDsKZZ0wHwYDVR0j BBgwFoAUb2qCGh1f/K91DdyrRibhpB9ODL8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOTdybzJoUXdFbnY2blV0eWpTR3NBR1FvdEpHMmJUQWpQVW55OEZKd0pT Y3EvMC82RjZBODIxQTFENUZGQ0FGNzUwRERDQUI0NjI2RTFBNDFGNEUwQ0JGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGNkE4MjFBMUQ1RkZDQUY3 NTBERENBQjQ2MjZFMUE0MUY0RTBDQkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OTdybzJoUXdFbnY2blV0eWpTR3NBR1FvdEpHMmJUQWpQVW55OEZKd0pTY3EvMC82 RjZBODIxQTFENUZGQ0FGNzUwRERDQUI0NjI2RTFBNDFGNEUwQ0JGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM6ETBQATc+uptoQpBgFLhhVsQ76VGbbzP4nM6Nh9Twjo44JAz1YlPorKntLC 92jXPTW73ebDEJn026ze+czRpZZKsKvw4ej27KJIoXmwG3b7wWgAh2+bQSpUwSUf 1YYWcVAmQ5kFb1jC+UegipqAbgCEMyBjYA+1e8L8j/6ZKC33tIYXgxQxYr3m0x3o p7UvG9Z9QP+tWieqreCI7vakXDhb6L/6pSYHdJRwrFNJD125/rg7z31QGcX1STMO wuyy4rF8iCWSdMGKh94JMoYZjzvgFru5K5g+eAWhPuXT2kNyEnbULrm9grkD5j9o 7+AAlFypXsSBh8Diy2jwxND+TA== -----END CERTIFICATE-----Generated at Wed Nov 5 03:47:48 2025 by rpki-client