$ rpki-client -vvf rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.mft File: D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.mft (raw, json) Hash identifier: 5Bxxwm4RefzwFAcgtnv4maya5X5WyUC1eUT7BM40G4k= Subject key identifier: EA:19:73:93:99:70:84:6D:C8:A8:C3:C2:B6:94:B1:33:83:37:09:A3 Authority key identifier: D4:03:E4:39:9F:D7:16:8A:8D:C0:FD:3F:3E:F6:D5:61:5F:6B:FD:4D Certificate issuer: /CN=D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D Certificate serial: 2BF0F691B457D071607572BBFB9079806627E998 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.cer Subject info access: rsync://rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.mft Manifest number: 0304 Signing time: Tue 04 Nov 2025 14:09:40 +0000 Manifest this update: Tue 04 Nov 2025 14:04:40 +0000 Manifest next update: Wed 05 Nov 2025 16:24:40 +0000 Files and hashes: 1: D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.crl (hash: nCf1KqcV/n0wE3uF56S7hIfS8zwZoAshjhaYu8EFAn8=) 2: 3134332e3230322e34302e302f32322d3234203d3e20323634343036.roa (hash: t1r8G72FxLD8L5y8ygSIaaXMSMdcGL1zmz5EInSNY70=) 3: 3133312e3232312e38342e302f32322d3234203d3e20323634343036.roa (hash: Gvsy+6oyKaCOk+uSBDAgNhC8AtiYnVAHKocHSx2aSMc=) 4: 323830343a316530383a3a2f33322d3438203d3e20323634343036.roa (hash: o2U6suTCQRZ7TodZ4jl3q7LpD3EoBTNmtT5PZsohc38=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.crl rsync://rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 16:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f0:f6:91:b4:57:d0:71:60:75:72:bb:fb:90:79:80:66:27:e9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D Validity Not Before: Nov 4 14:04:40 2025 GMT Not After : Nov 5 16:24:40 2025 GMT Subject: CN=EA1973939970846DC8A8C3C2B694B133833709A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:96:57:5c:44:35:03:94:a0:54:6b:20:c6:c0: 29:33:97:38:4b:a4:0b:e5:67:f1:26:33:80:53:cc: e4:19:ac:3a:55:82:0e:17:bf:21:6e:f9:ee:9b:d0: fa:c0:19:69:ff:f3:a0:f6:2e:9c:22:e5:b9:3a:5f: 1c:8b:a1:80:50:67:c3:86:2e:da:17:d3:32:be:36: 0b:bf:c1:ea:ad:d9:3b:1c:a7:9a:5b:73:81:52:17: d2:32:ce:5e:1e:3e:28:99:11:86:14:69:ea:63:50: 40:c7:0d:87:e0:68:dd:d5:11:7a:66:93:a0:9c:5b: f4:a5:77:65:52:d3:a4:73:9c:7d:c3:5b:e8:7e:a3: 51:05:b0:47:51:15:46:1f:8f:6c:67:1c:cf:d4:40: 92:d6:43:7d:fc:1f:8d:d9:f7:d9:b4:95:10:75:ed: 1f:fd:3f:cf:31:26:5d:78:f5:71:55:1d:69:9e:52: 15:be:20:aa:c1:da:84:f2:4b:2b:e3:13:b3:8a:45: 4b:9c:67:8f:89:85:05:60:56:43:ea:75:3d:11:d5: 9c:35:08:c2:fe:ef:66:8a:a6:9b:f2:5e:8f:68:72: 9b:d1:dd:80:de:24:93:d1:09:67:59:4a:2b:e4:ca: aa:80:29:fe:bb:07:f1:c1:28:ee:13:7d:83:9a:48: 8d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:19:73:93:99:70:84:6D:C8:A8:C3:C2:B6:94:B1:33:83:37:09:A3 X509v3 Authority Key Identifier: keyid:D4:03:E4:39:9F:D7:16:8A:8D:C0:FD:3F:3E:F6:D5:61:5F:6B:FD:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:94:ad:f6:27:bd:68:63:fd:f2:19:61:78:df:91:a9:cf:78: 03:46:2e:40:24:6d:4b:ae:92:8f:ec:bd:b7:6c:34:b9:94:e8: e7:28:2e:ff:f2:37:11:14:81:06:fe:0d:c9:8c:2f:08:d9:8e: af:9d:1f:da:4b:3f:61:e6:b5:50:59:40:1a:06:ec:6c:96:24: 58:1c:85:b9:ec:aa:9b:1e:c0:5a:a7:a6:47:d0:06:b9:94:fb: cc:5a:b4:40:a7:20:b7:0c:eb:62:00:18:f3:f4:5a:1b:b4:c0: 2c:82:88:19:4e:76:15:73:29:94:8f:bf:bd:50:07:f5:03:50: 14:9b:6f:0c:45:16:fb:db:c1:26:53:0b:3c:d8:85:c2:6e:d5: c6:4c:88:6a:e8:b8:23:88:16:aa:d8:29:e2:4d:d8:a1:d1:c0: df:c5:ca:96:4e:41:a4:8a:8f:41:31:f4:83:c6:43:23:aa:ff: 6d:97:aa:21:57:07:d7:00:90:28:1d:cd:35:7c:7f:b5:8e:e5: 42:ce:9c:72:06:62:0a:89:da:79:4b:14:f5:c9:9b:20:61:42: 8b:c1:45:39:2d:ee:b4:91:1f:2b:4d:0a:e2:97:90:28:d7:dc: 13:dc:12:9b:ed:4e:9f:9d:0d:cd:73:6c:e1:1f:89:fb:ef:66: 74:ba:73:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUK/D2kbRX0HFgdXK7+5B5gGYn6ZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQwM0U0Mzk5RkQ3MTY4QThEQzBGRDNGM0VGNkQ1NjE1 RjZCRkQ0RDAeFw0yNTExMDQxNDA0NDBaFw0yNTExMDUxNjI0NDBaMDMxMTAvBgNV BAMTKEVBMTk3MzkzOTk3MDg0NkRDOEE4QzNDMkI2OTRCMTMzODMzNzA5QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCllldcRDUDlKBUayDGwCkzlzhL pAvlZ/EmM4BTzOQZrDpVgg4XvyFu+e6b0PrAGWn/86D2Lpwi5bk6XxyLoYBQZ8OG LtoX0zK+Ngu/weqt2Tscp5pbc4FSF9Iyzl4ePiiZEYYUaepjUEDHDYfgaN3VEXpm k6CcW/Sld2VS06RznH3DW+h+o1EFsEdRFUYfj2xnHM/UQJLWQ338H43Z99m0lRB1 7R/9P88xJl149XFVHWmeUhW+IKrB2oTySyvjE7OKRUucZ4+JhQVgVkPqdT0R1Zw1 CML+72aKppvyXo9ocpvR3YDeJJPRCWdZSivkyqqAKf67B/HBKO4TfYOaSI0jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6hlzk5lwhG3IqMPCtpSxM4M3CaMwHwYDVR0j BBgwFoAU1APkOZ/XFoqNwP0/PvbVYV9r/U0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTZ0U2VYTUhGd2diaE5GaU1iSEdrQ1liZHF4TWtSdVc3OUF6Z1RpUVE1 MnIvMS9ENDAzRTQzOTlGRDcxNjhBOERDMEZEM0YzRUY2RDU2MTVGNkJGRDRELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0MDNFNDM5OUZENzE2OEE4 REMwRkQzRjNFRjZENTYxNUY2QkZENEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTZ0U2VYTUhGd2diaE5GaU1iSEdrQ1liZHF4TWtSdVc3OUF6Z1RpUVE1MnIvMS9E NDAzRTQzOTlGRDcxNjhBOERDMEZEM0YzRUY2RDU2MTVGNkJGRDRELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAapSt9ie9aGP98hlheN+Rqc94A0YuQCRtS66Sj+y9t2w0uZTo5ygu//I3ERSB Bv4NyYwvCNmOr50f2ks/Yea1UFlAGgbsbJYkWByFueyqmx7AWqemR9AGuZT7zFq0 QKcgtwzrYgAY8/RaG7TALIKIGU52FXMplI+/vVAH9QNQFJtvDEUW+9vBJlMLPNiF wm7VxkyIaui4I4gWqtgp4k3YodHA38XKlk5BpIqPQTH0g8ZDI6r/bZeqIVcH1wCQ KB3NNXx/tY7lQs6ccgZiConaeUsU9cmbIGFCi8FFOS3utJEfK00K4peQKNfcE9wS m+1On50NzXNs4R+J++9mdLpzGg== -----END CERTIFICATE-----Generated at Wed Nov 5 02:30:07 2025 by rpki-client