$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft File: 947E29F37C387A9590C135AE83DBF68B102E9E57.mft (raw, json) Hash identifier: Owez1JSJ9gjO9wF1DbwbBYYvjfJNApQyBlkyp4jHLbE= Subject key identifier: 86:FD:06:D5:E4:DB:E4:E1:CF:FF:24:28:51:7D:44:A0:ED:94:97:E4 Authority key identifier: 94:7E:29:F3:7C:38:7A:95:90:C1:35:AE:83:DB:F6:8B:10:2E:9E:57 Certificate issuer: /CN=947E29F37C387A9590C135AE83DBF68B102E9E57 Certificate serial: 21B89CD4CD567C30F2F3E221F6D8EE523D7C434D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer Subject info access: rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft Manifest number: 3C Signing time: Tue 04 Nov 2025 17:30:51 +0000 Manifest this update: Tue 04 Nov 2025 17:25:51 +0000 Manifest next update: Wed 05 Nov 2025 19:50:51 +0000 Files and hashes: 1: 323830343a323930343a3a2f33322d313238203d3e20323632353838.roa (hash: Ql6MXz7sNhTEaV2AQIKeVREm8sq9lGZYeq9HnqYoCt0=) 2: 3137302e38332e3133322e302f32322d3332203d3e20323632353838.roa (hash: 9rOtV+9PL/YX2ts7D12ytVbYuXEy8nUL3xSV2wPxy7g=) 3: 3137372e37352e34382e302f32302d3332203d3e20323632353838.roa (hash: g+BQjnshu/T89iCxLxgBpkKWO5lfsmAPBro5ZFYgeKs=) 4: 947E29F37C387A9590C135AE83DBF68B102E9E57.crl (hash: xrJUnF34mfAJhDJPAzLgCB9Az67w8BeNHL6uNuLCriQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.crl rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b8:9c:d4:cd:56:7c:30:f2:f3:e2:21:f6:d8:ee:52:3d:7c:43:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=947E29F37C387A9590C135AE83DBF68B102E9E57 Validity Not Before: Nov 4 17:25:51 2025 GMT Not After : Nov 5 19:50:51 2025 GMT Subject: CN=86FD06D5E4DBE4E1CFFF2428517D44A0ED9497E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2e:87:93:e0:2d:c3:e2:ec:a8:c2:23:5b:53: fe:56:45:83:a9:85:c5:91:13:29:76:75:d7:63:9d: ce:91:2c:3c:22:7f:c4:57:a8:6b:77:2c:05:8f:3c: 80:3b:f7:f9:b7:a8:02:cc:6d:fb:ac:ff:e5:74:02: da:3e:62:84:a2:40:76:b3:34:73:97:f6:64:9a:51: 07:e6:65:a9:72:b1:db:79:36:39:06:3f:10:68:06: 87:3d:6e:ec:4b:7d:df:fc:f1:25:df:d1:2a:82:44: 9e:ed:9c:a5:cf:48:93:e2:e6:ee:37:63:2c:c2:a9: 17:37:59:8b:1b:d3:28:5f:be:9a:54:6f:d6:06:cf: da:fc:48:0b:f0:5c:fe:fb:dc:c1:7f:b5:af:9f:86: 5c:b3:03:c5:04:97:d5:ba:bf:af:2f:a7:9a:63:69: f4:45:4a:90:53:54:66:8d:96:c2:aa:2a:b2:59:dd: 5f:d0:c4:0e:c4:e6:1c:6d:9d:ca:42:92:57:34:6c: 0b:ae:02:92:46:ad:58:23:b8:94:71:16:7a:a4:d8: db:98:7f:4d:a8:86:f0:68:e2:cb:63:fa:a1:aa:b8: 28:5c:c8:1e:ef:67:d7:f0:56:e0:40:47:f3:c3:f7: 9f:94:f3:2f:91:58:92:3e:2f:85:f1:ec:83:59:95: 55:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FD:06:D5:E4:DB:E4:E1:CF:FF:24:28:51:7D:44:A0:ED:94:97:E4 X509v3 Authority Key Identifier: keyid:94:7E:29:F3:7C:38:7A:95:90:C1:35:AE:83:DB:F6:8B:10:2E:9E:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a0:3d:b7:6f:a7:07:0b:d5:4e:c7:be:0e:4a:d6:b4:5b:c2: d5:db:2e:e0:50:aa:82:23:92:3c:42:db:ca:32:0f:c3:35:4d: b0:19:d5:50:b6:4f:6b:79:3c:03:21:10:d2:32:15:5e:b1:e5: 1e:a6:d6:b3:75:d9:e4:44:02:fa:11:df:e6:59:72:07:d0:fe: d1:cc:65:b2:97:b8:12:c4:57:8c:f4:67:42:57:dc:29:68:72: a6:df:96:ad:e5:61:bf:f3:65:99:cb:b9:4d:34:35:ce:63:e6: 2c:91:f9:aa:70:45:5e:1a:ea:b9:76:d6:b7:c8:00:5b:ae:ad: dc:00:59:1b:8f:53:00:7d:a8:3a:0c:64:91:3d:52:21:8a:82: a6:21:cc:a4:e4:28:be:3f:3f:ae:3e:ab:c7:a1:bf:3d:81:e4: e5:57:57:c4:95:31:35:29:d9:89:99:73:98:c1:65:5e:0c:33: 51:47:7a:cb:d8:d3:ee:76:41:93:ee:ec:34:89:15:1d:7f:b2: d9:87:40:b1:8a:e4:9f:00:b0:13:55:8c:ed:10:98:3b:62:0d: 00:f9:ac:c1:1b:51:6f:cf:19:65:05:7d:73:7f:4f:26:b5:69: 5f:fc:cc:de:6a:32:fa:d3:fc:c5:90:32:5d:d3:fa:ea:4f:d0: b2:5f:95:69 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUIbic1M1WfDDy8+Ih9tjuUj18Q00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ3RTI5RjM3QzM4N0E5NTkwQzEzNUFFODNEQkY2OEIx MDJFOUU1NzAeFw0yNTExMDQxNzI1NTFaFw0yNTExMDUxOTUwNTFaMDMxMTAvBgNV BAMTKDg2RkQwNkQ1RTREQkU0RTFDRkZGMjQyODUxN0Q0NEEwRUQ5NDk3RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLoeT4C3D4uyowiNbU/5WRYOp hcWREyl2dddjnc6RLDwif8RXqGt3LAWPPIA79/m3qALMbfus/+V0Ato+YoSiQHaz NHOX9mSaUQfmZalysdt5NjkGPxBoBoc9buxLfd/88SXf0SqCRJ7tnKXPSJPi5u43 YyzCqRc3WYsb0yhfvppUb9YGz9r8SAvwXP773MF/ta+fhlyzA8UEl9W6v68vp5pj afRFSpBTVGaNlsKqKrJZ3V/QxA7E5hxtncpCklc0bAuuApJGrVgjuJRxFnqk2NuY f02ohvBo4stj+qGquChcyB7vZ9fwVuBAR/PD95+U8y+RWJI+L4Xx7INZlVXLAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUhv0G1eTb5OHP/yQoUX1EoO2Ul+QwHwYDVR0j BBgwFoAUlH4p83w4epWQwTWug9v2ixAunlcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9BR1M0eGZENXFQNUpCWGJLS1RrZUpacDlWNE5ESnVLVHI1M0I4ZEpZanRB LzAvOTQ3RTI5RjM3QzM4N0E5NTkwQzEzNUFFODNEQkY2OEIxMDJFOUU1Ny5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85NDdFMjlGMzdDMzg3QTk1OTBD MTM1QUU4M0RCRjY4QjEwMkU5RTU3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FH UzR4ZkQ1cVA1SkJYYktLVGtlSlpwOVY0TkRKdUtUcjUzQjhkSllqdEEvMC85NDdF MjlGMzdDMzg3QTk1OTBDMTM1QUU4M0RCRjY4QjEwMkU5RTU3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA fqA9t2+nBwvVTse+DkrWtFvC1dsu4FCqgiOSPELbyjIPwzVNsBnVULZPa3k8AyEQ 0jIVXrHlHqbWs3XZ5EQC+hHf5llyB9D+0cxlspe4EsRXjPRnQlfcKWhypt+WreVh v/Nlmcu5TTQ1zmPmLJH5qnBFXhrquXbWt8gAW66t3ABZG49TAH2oOgxkkT1SIYqC piHMpOQovj8/rj6rx6G/PYHk5VdXxJUxNSnZiZlzmMFlXgwzUUd6y9jT7nZBk+7s NIkVHX+y2YdAsYrknwCwE1WM7RCYO2INAPmswRtRb88ZZQV9c39PJrVpX/zM3moy +tP8xZAyXdP66k/Qsl+VaQ== -----END CERTIFICATE-----Generated at Wed Nov 5 02:14:11 2025 by rpki-client