$ rpki-client -vvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.mft File: A601CC15A099E546A3DCBD53AF497300DAA65598.mft (raw, json) Hash identifier: Ychn2llzBHOW1dGeVFJc/6bWxwTo2M2RPXIjW9F6FHo= Subject key identifier: 8E:02:0D:DA:E2:34:C8:11:BA:C4:22:D2:5D:C5:00:FA:05:EC:71:FD Authority key identifier: A6:01:CC:15:A0:99:E5:46:A3:DC:BD:53:AF:49:73:00:DA:A6:55:98 Certificate issuer: /CN=A601CC15A099E546A3DCBD53AF497300DAA65598 Certificate serial: 4A43D14DEB3E6A64FF533FA5874EA32EC5B6651E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer Subject info access: rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.mft Manifest number: 0302 Signing time: Wed 05 Nov 2025 15:11:39 +0000 Manifest this update: Wed 05 Nov 2025 15:06:39 +0000 Manifest next update: Thu 06 Nov 2025 18:39:39 +0000 Files and hashes: 1: A601CC15A099E546A3DCBD53AF497300DAA65598.crl (hash: +qoMOcQGMz+4VXJiQMJbtMQSvI7EN6Jc77/vrW4P6S0=) 2: 323830343a6235343a3a2f33322d3438203d3e203532373635.roa (hash: 38mXIeA6gDD6kINv9tTGlOrmKBcV1t+K9YLKIquI5ew=) 3: 3137302e3233392e37322e302f32322d3234203d3e203532373635.roa (hash: YG8MK5i53pOtSjSF2swhO2zvKt0n8IMFMMP94C9iVgU=) 4: 3137372e33392e3132302e302f32312d3234203d3e203532373635.roa (hash: opY7h3WsRkaqXfV3NlGmTGs/HlokTSJ+NhDP3JYVlqI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.crl rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 18:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:43:d1:4d:eb:3e:6a:64:ff:53:3f:a5:87:4e:a3:2e:c5:b6:65:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A601CC15A099E546A3DCBD53AF497300DAA65598 Validity Not Before: Nov 5 15:06:39 2025 GMT Not After : Nov 6 18:39:39 2025 GMT Subject: CN=8E020DDAE234C811BAC422D25DC500FA05EC71FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:52:3f:72:02:2c:31:ac:57:b4:dd:c5:8a:af: da:01:e3:fe:f2:94:7c:cd:1d:f7:5a:fe:51:75:4b: e3:96:96:99:84:03:64:f6:3c:cc:01:ea:f9:88:3f: 94:eb:89:ff:d9:77:84:08:b8:a3:54:6d:4f:05:5c: bf:14:35:c6:f4:ab:ca:a1:b6:a1:62:19:e7:54:5b: 44:70:3a:f9:5d:8c:bf:94:0a:c5:7e:ad:06:88:9b: 97:32:b4:c7:b5:4b:26:5d:35:1a:01:2a:b4:ac:c1: d6:16:79:65:5a:5f:21:e3:5c:99:dc:28:5c:29:45: d6:44:a1:9b:43:ed:f9:2e:f0:49:8d:29:63:71:2d: f5:50:d4:b5:cf:0f:5d:c1:23:36:a9:1c:46:b3:ca: 34:2b:f7:3d:42:c7:cd:fa:9f:f8:51:77:46:6b:9f: b7:18:1f:a9:4c:74:03:6b:5a:25:54:b6:c8:08:ea: 8f:1d:0f:e7:4f:55:60:65:93:1c:b0:3e:ba:f0:7e: ae:61:b5:f0:99:dc:64:22:50:c6:7a:bd:27:45:59: c0:24:6c:86:83:91:b7:05:ac:ad:f5:29:7f:11:d3: e9:f4:b7:ea:6f:73:24:76:de:b5:91:cc:8a:eb:a0: 41:0e:18:25:16:23:68:db:dc:45:b4:68:63:76:3d: 62:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:02:0D:DA:E2:34:C8:11:BA:C4:22:D2:5D:C5:00:FA:05:EC:71:FD X509v3 Authority Key Identifier: keyid:A6:01:CC:15:A0:99:E5:46:A3:DC:BD:53:AF:49:73:00:DA:A6:55:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ac:9a:ac:02:f9:cd:7b:3a:c0:b4:64:d4:6f:95:73:41:6e: 59:58:c6:2d:f5:15:c1:af:14:83:15:de:a7:2e:8c:da:33:9a: a7:a5:9d:b0:1d:28:0e:19:13:d0:46:55:74:f6:69:4c:d5:63: 5c:35:68:32:9c:6e:22:17:33:6d:75:b2:c4:37:24:4b:29:55: c4:8a:83:47:47:fd:94:62:3d:60:9a:cb:88:da:d9:dd:09:ac: 30:fc:7f:74:29:4f:5e:f7:86:69:0a:5b:95:e9:6d:9d:54:54: 60:b4:41:a4:5b:d8:54:87:40:3d:a3:d7:32:ef:49:b7:46:0f: e6:86:63:1b:b4:ab:65:60:47:e1:07:7e:dd:7f:f6:63:ef:7b: fd:06:af:82:67:33:69:37:c8:44:21:5f:41:c6:20:d5:56:dc: 16:d0:f6:df:bf:3f:9b:90:53:c6:6f:9d:49:67:d2:0a:bc:d6: 9f:2c:2f:d9:61:ac:97:fb:21:54:ad:af:a1:9c:01:55:cc:8b: f3:d9:11:cf:46:e9:0e:7f:0c:26:ac:fe:cd:0e:73:52:06:83: df:88:cc:c2:e7:be:9e:56:ca:02:20:bd:9b:6f:17:8d:16:eb: e7:6f:d0:c4:82:2b:37:94:70:fa:ea:8c:10:e0:b6:f3:16:eb: be:74:ac:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSkPRTes+amT/Uz+lh06jLsW2ZR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwMUNDMTVBMDk5RTU0NkEzRENCRDUzQUY0OTczMDBE QUE2NTU5ODAeFw0yNTExMDUxNTA2MzlaFw0yNTExMDYxODM5MzlaMDMxMTAvBgNV BAMTKDhFMDIwRERBRTIzNEM4MTFCQUM0MjJEMjVEQzUwMEZBMDVFQzcxRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKUj9yAiwxrFe03cWKr9oB4/7y lHzNHfda/lF1S+OWlpmEA2T2PMwB6vmIP5Trif/Zd4QIuKNUbU8FXL8UNcb0q8qh tqFiGedUW0RwOvldjL+UCsV+rQaIm5cytMe1SyZdNRoBKrSswdYWeWVaXyHjXJnc KFwpRdZEoZtD7fku8EmNKWNxLfVQ1LXPD13BIzapHEazyjQr9z1Cx836n/hRd0Zr n7cYH6lMdANrWiVUtsgI6o8dD+dPVWBlkxywPrrwfq5htfCZ3GQiUMZ6vSdFWcAk bIaDkbcFrK31KX8R0+n0t+pvcyR23rWRzIrroEEOGCUWI2jb3EW0aGN2PWKrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjgIN2uI0yBG6xCLSXcUA+gXscf0wHwYDVR0j BBgwFoAUpgHMFaCZ5Uaj3L1Tr0lzANqmVZgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlJobXg3WWV1U1hOdjJITjNoOG4yYmFxM2l6bXlNOWZKSGhjeFNWVmFl U1kvMS9BNjAxQ0MxNUEwOTlFNTQ2QTNEQ0JENTNBRjQ5NzMwMERBQTY1NTk4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MDFDQzE1QTA5OUU1NDZB M0RDQkQ1M0FGNDk3MzAwREFBNjU1OTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QlJobXg3WWV1U1hOdjJITjNoOG4yYmFxM2l6bXlNOWZKSGhjeFNWVmFlU1kvMS9B NjAxQ0MxNUEwOTlFNTQ2QTNEQ0JENTNBRjQ5NzMwMERBQTY1NTk4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZKyarAL5zXs6wLRk1G+Vc0FuWVjGLfUVwa8UgxXepy6M2jOap6WdsB0oDhkT 0EZVdPZpTNVjXDVoMpxuIhczbXWyxDckSylVxIqDR0f9lGI9YJrLiNrZ3QmsMPx/ dClPXveGaQpbleltnVRUYLRBpFvYVIdAPaPXMu9Jt0YP5oZjG7SrZWBH4Qd+3X/2 Y+97/QavgmczaTfIRCFfQcYg1VbcFtD2378/m5BTxm+dSWfSCrzWnywv2WGsl/sh VK2voZwBVcyL89kRz0bpDn8MJqz+zQ5zUgaD34jMwue+nlbKAiC9m28XjRbr52/Q xIIrN5Rw+uqMEOC28xbrvnSsnQ== -----END CERTIFICATE-----Generated at Wed Nov 5 21:27:30 2025 by rpki-client