$ rpki-client -vvf rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft File: 3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft (raw, json) Hash identifier: EGJmaUbH+CwsDTQLMsZDB70UB5r6lx1MJPEtGpS6/tc= Subject key identifier: E8:A5:2E:F9:CB:C0:12:EB:9B:BD:6D:F3:86:08:00:E0:32:66:7E:F0 Authority key identifier: 35:02:23:1E:80:F0:11:7D:D8:B1:1A:5E:9D:1C:FD:0C:46:B2:78:59 Certificate issuer: /CN=3502231E80F0117DD8B11A5E9D1CFD0C46B27859 Certificate serial: 77033D5A2E1F6FC35E82A0A90B8DD9DD6FA29A52 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.cer Subject info access: rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft Manifest number: 4A Signing time: Wed 05 Nov 2025 00:16:09 +0000 Manifest this update: Wed 05 Nov 2025 00:11:09 +0000 Manifest next update: Thu 06 Nov 2025 02:59:09 +0000 Files and hashes: 1: 34352e3137322e35322e302f32322d3332203d3e20323638373530.roa (hash: /BDeZPrUv8+PcsdMOixik9++54jka+M6eyu4nPvnr5g=) 2: 3502231E80F0117DD8B11A5E9D1CFD0C46B27859.crl (hash: f6zyuW95Bvw+G74z+5t/o5h4dvRrqPEsAWnetyIuyCM=) 3: 34352e3137312e3130342e302f32322d3332203d3e20323638373530.roa (hash: FnqYyjRTYfkNNd38hYxVbI+10+vM4PYCwzmDz8TKA/4=) 4: 323830343a356132303a3a2f33322d313238203d3e20323638373530.roa (hash: KTpCP5+yYRNR+V93Ak7K+33CiAxupoTZH+z8ERWiROk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.crl rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 02:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:03:3d:5a:2e:1f:6f:c3:5e:82:a0:a9:0b:8d:d9:dd:6f:a2:9a:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3502231E80F0117DD8B11A5E9D1CFD0C46B27859 Validity Not Before: Nov 5 00:11:09 2025 GMT Not After : Nov 6 02:59:09 2025 GMT Subject: CN=E8A52EF9CBC012EB9BBD6DF3860800E032667EF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:43:18:45:b4:1f:13:bf:cc:55:a8:23:9f:eb: 88:47:11:15:79:1d:37:2e:bf:ba:aa:cd:98:eb:0b: 9f:4d:db:7d:87:b1:58:38:a0:7a:91:0a:d8:83:c3: 9c:de:ee:60:5e:8f:14:65:ce:99:73:6e:db:0d:02: a5:cf:10:a0:c5:bb:28:86:c5:a5:56:c2:62:08:35: 67:bf:5e:1b:fe:c6:be:70:6b:e2:f3:f1:e8:d4:4d: e3:25:46:e7:78:d3:bd:41:e6:46:1d:13:dc:0b:f5: 15:56:30:7c:7d:7b:d4:60:e7:41:b3:e4:41:41:22: 26:2c:0a:f3:26:cc:f4:07:27:7a:05:99:68:4a:4f: bd:2d:c3:91:c7:48:90:ac:7a:57:e7:90:4f:dd:df: 25:c4:2c:7c:b8:37:39:d9:b5:26:10:21:76:63:56: 20:6d:a4:1c:79:ac:c6:a3:fc:af:b3:e9:9e:90:12: c7:e9:47:00:2d:5b:a3:46:7a:94:cb:5f:cc:d6:94: 80:ff:90:09:92:3e:f1:3f:1b:bd:56:f0:e9:5e:65: 29:86:9a:18:78:0d:1a:78:55:50:70:2a:c4:9b:9c: e4:17:24:7e:b8:e6:4e:60:a7:4f:b1:fb:2a:08:de: cd:54:14:e6:dd:ce:23:e4:df:6e:10:20:ae:67:53: 30:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A5:2E:F9:CB:C0:12:EB:9B:BD:6D:F3:86:08:00:E0:32:66:7E:F0 X509v3 Authority Key Identifier: keyid:35:02:23:1E:80:F0:11:7D:D8:B1:1A:5E:9D:1C:FD:0C:46:B2:78:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ab:41:d9:5f:b3:09:65:99:e2:88:f2:d0:77:85:40:ae:94: 02:32:e7:5e:2d:25:0a:36:a6:dc:11:2f:a8:f2:06:de:fc:91: cf:b7:b0:b2:1d:6b:f4:02:c8:3f:1a:d5:b8:eb:8c:04:c9:6a: 1a:79:11:25:e6:a5:a0:a8:a5:b3:a1:78:4e:a3:a6:b6:4e:f9: ff:ed:cc:0b:24:f0:43:de:e4:5e:25:8e:da:dd:40:69:fa:1b: 8f:66:86:1c:d8:9e:8a:f8:06:5a:d6:70:ab:c9:d8:c2:10:a2: 67:ee:06:2d:c5:20:81:1e:33:3c:8f:63:9a:fa:c4:b7:b8:b5: c7:4c:6a:64:d9:0c:bc:ca:bf:ea:25:29:3f:a2:69:a0:43:52: df:9a:84:49:e1:34:24:26:0d:70:19:ac:15:4f:f0:cf:e8:7a: 9d:2e:ea:fb:64:b5:fb:1b:25:ad:22:9d:d2:27:f0:fa:0b:af: f3:d6:8e:a0:9c:9f:63:f9:9a:84:07:f0:73:8f:1a:ac:b9:3a: 67:db:9a:a6:12:1a:84:78:eb:45:4f:9d:b1:0a:f1:10:cd:2a: ec:a6:38:5a:89:02:1b:53:a6:53:8c:66:1e:3f:dd:a4:23:bc: de:c7:36:3e:99:ce:28:8a:77:e3:a7:46:f5:df:93:31:d1:1b: 57:8e:80:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdwM9Wi4fb8NegqCpC43Z3W+imlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwMjIzMUU4MEYwMTE3REQ4QjExQTVFOUQxQ0ZEMEM0 NkIyNzg1OTAeFw0yNTExMDUwMDExMDlaFw0yNTExMDYwMjU5MDlaMDMxMTAvBgNV BAMTKEU4QTUyRUY5Q0JDMDEyRUI5QkJENkRGMzg2MDgwMEUwMzI2NjdFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIQxhFtB8Tv8xVqCOf64hHERV5 HTcuv7qqzZjrC59N232HsVg4oHqRCtiDw5ze7mBejxRlzplzbtsNAqXPEKDFuyiG xaVWwmIINWe/Xhv+xr5wa+Lz8ejUTeMlRud4071B5kYdE9wL9RVWMHx9e9Rg50Gz 5EFBIiYsCvMmzPQHJ3oFmWhKT70tw5HHSJCselfnkE/d3yXELHy4NznZtSYQIXZj ViBtpBx5rMaj/K+z6Z6QEsfpRwAtW6NGepTLX8zWlID/kAmSPvE/G71W8OleZSmG mhh4DRp4VVBwKsSbnOQXJH645k5gp0+x+yoI3s1UFObdziPk324QIK5nUzA9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6KUu+cvAEuubvW3zhggA4DJmfvAwHwYDVR0j BBgwFoAUNQIjHoDwEX3YsRpenRz9DEayeFkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQjdpRGYybW51Rlk2b1Y0YWpLYk12eG5HTHg1MjZNS3Fic2J4UW1qYVlU WnYvMC8zNTAyMjMxRTgwRjAxMTdERDhCMTFBNUU5RDFDRkQwQzQ2QjI3ODU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1MDIyMzFFODBGMDExN0RE OEIxMUE1RTlEMUNGRDBDNDZCMjc4NTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QjdpRGYybW51Rlk2b1Y0YWpLYk12eG5HTHg1MjZNS3Fic2J4UW1qYVlUWnYvMC8z NTAyMjMxRTgwRjAxMTdERDhCMTFBNUU5RDFDRkQwQzQ2QjI3ODU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQatB2V+zCWWZ4ojy0HeFQK6UAjLnXi0lCjam3BEvqPIG3vyRz7ewsh1r9ALI PxrVuOuMBMlqGnkRJealoKils6F4TqOmtk75/+3MCyTwQ97kXiWO2t1Aafobj2aG HNieivgGWtZwq8nYwhCiZ+4GLcUggR4zPI9jmvrEt7i1x0xqZNkMvMq/6iUpP6Jp oENS35qESeE0JCYNcBmsFU/wz+h6nS7q+2S1+xslrSKd0ifw+guv89aOoJyfY/ma hAfwc48arLk6Z9uaphIahHjrRU+dsQrxEM0q7KY4WokCG1OmU4xmHj/dpCO83sc2 PpnOKIp346dG9d+TMdEbV46Aug== -----END CERTIFICATE-----Generated at Wed Nov 5 02:15:46 2025 by rpki-client