$ rpki-client -vvf rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft File: 1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft (raw, json) Hash identifier: LIxrt8uslIYEY4YoXh9/bVFXVM9IBv88GU5N40UEw4E= Subject key identifier: 78:CC:F8:D6:62:91:CB:57:50:98:82:45:40:01:95:1C:6D:A2:24:A6 Authority key identifier: 1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55 Certificate issuer: /CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555 Certificate serial: 7057E409C20B741E513E08A2746238F0F8FE55B1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft Manifest number: 0306 Signing time: Tue 04 Nov 2025 22:48:26 +0000 Manifest this update: Tue 04 Nov 2025 22:43:26 +0000 Manifest next update: Wed 05 Nov 2025 23:07:26 +0000 Files and hashes: 1: 1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl (hash: NXJ5K5G4J+g9Qp+v9mCGSSm/x/QBBh4CQvSsnnfgYnM=) 2: 3136382e302e3234302e302f32322d3234203d3e20323632343038.roa (hash: nc1KYLiIl6MQ2cB8LAaJ1Ei9pNJhoTR2e/w7ESX0VCI=) 3: 3137372e33382e3136302e302f32312d3234203d3e20323632343038.roa (hash: WWQDaPRjLqL6gxa8oKBNJP8aA85LM8dmmWOF68n+4eM=) 4: 323830343a326430633a3a2f33322d3332203d3e20323632343038.roa (hash: I/xjLRtE0sns2aDZvy2RT2f40WrXsCM4pXsxx+HtLKQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 23:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:57:e4:09:c2:0b:74:1e:51:3e:08:a2:74:62:38:f0:f8:fe:55:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555 Validity Not Before: Nov 4 22:43:26 2025 GMT Not After : Nov 5 23:07:26 2025 GMT Subject: CN=78CCF8D66291CB57509882454001951C6DA224A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:27:de:5b:fa:7e:9c:87:d4:68:7a:80:b0:95: 1c:cc:2e:f7:76:77:23:f9:4a:b1:71:08:c9:a3:ce: 9b:c6:9b:8a:e0:7d:9f:c8:81:89:25:81:40:67:06: 29:0f:a6:41:a6:96:18:79:a1:6b:7f:17:22:31:96: 55:25:87:37:4d:fc:f4:4f:2d:4b:da:c6:d9:52:10: 88:fd:84:c6:b9:83:61:69:c0:0f:62:40:81:fe:3b: f2:de:fb:ba:f1:5a:76:c4:9e:2f:12:a5:1f:7d:c6: bf:ef:9a:ec:e1:53:14:12:7a:9d:35:95:13:a6:cf: 0a:93:c9:3d:76:c6:68:9f:ca:08:c9:56:28:3d:8b: 18:93:75:0c:e3:03:6b:0c:a5:23:a2:76:6a:5f:16: bf:74:0d:60:54:a1:a9:d5:af:38:69:d3:a1:9f:a6: 1a:ac:eb:56:45:c6:0d:28:89:7a:1e:7e:15:a6:79: 90:cf:c6:fb:fd:a7:86:3c:ce:9b:01:24:78:4b:f1: 58:7c:a9:cb:2a:7f:13:0b:75:c2:55:64:d2:0d:a9: 71:91:47:97:b8:99:fc:db:58:ab:66:33:54:8c:17: fd:9c:08:e9:37:83:49:84:13:d1:6b:42:e3:91:5d: 7a:d2:bd:95:e8:23:81:26:43:49:fb:c6:c3:19:e8: 28:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CC:F8:D6:62:91:CB:57:50:98:82:45:40:01:95:1C:6D:A2:24:A6 X509v3 Authority Key Identifier: keyid:1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:8e:34:93:8d:01:f8:06:b2:41:09:30:5e:5d:81:25:d5:b2: e2:e9:ad:66:30:f5:30:15:cb:32:85:ae:f9:e2:29:e4:21:09: 5c:2e:40:9b:d2:7b:bd:41:d4:ad:d8:41:2d:30:c2:4a:44:c1: e0:ef:26:aa:4e:32:78:a7:d2:9c:46:76:52:6c:09:f2:d6:0b: 01:8f:a5:d6:e5:cb:df:d6:b6:26:b0:d4:48:4c:33:da:9f:a9: 96:4a:41:fb:59:bc:6a:98:73:19:13:30:45:dc:77:8d:82:3c: 37:50:7e:cf:cb:db:d3:b1:e9:4d:89:f9:94:0b:79:52:4e:f0: e1:f3:45:14:f6:22:b5:12:72:04:a4:1e:52:28:95:89:bd:2a: 1e:92:30:10:7a:89:da:62:1f:70:c3:2c:60:d1:e8:59:e0:c2: c5:97:9a:87:b7:ba:9c:62:48:49:02:7a:70:1d:a7:03:96:51: c3:97:d8:ca:8c:74:f4:fa:01:3a:fa:4a:6b:42:b6:f8:a2:77: e3:26:4f:cc:47:b1:89:71:e1:7f:9f:8a:2f:a3:db:38:82:74: 53:e1:87:20:5e:4a:59:13:08:70:14:91:50:f8:03:a7:42:2e: 61:9f:33:3f:0c:6f:62:58:23:1a:ce:52:d6:46:f3:54:3b:f9: ea:c3:1c:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcFfkCcILdB5RPgiidGI48Pj+VbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFGRkZGMUUzM0VBQkYyOThFOUIwNUYxNzcxNjZDOTZG MkMzQjU1NTAeFw0yNTExMDQyMjQzMjZaFw0yNTExMDUyMzA3MjZaMDMxMTAvBgNV BAMTKDc4Q0NGOEQ2NjI5MUNCNTc1MDk4ODI0NTQwMDE5NTFDNkRBMjI0QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4J95b+n6ch9RoeoCwlRzMLvd2 dyP5SrFxCMmjzpvGm4rgfZ/IgYklgUBnBikPpkGmlhh5oWt/FyIxllUlhzdN/PRP LUvaxtlSEIj9hMa5g2FpwA9iQIH+O/Le+7rxWnbEni8SpR99xr/vmuzhUxQSep01 lROmzwqTyT12xmifygjJVig9ixiTdQzjA2sMpSOidmpfFr90DWBUoanVrzhp06Gf phqs61ZFxg0oiXoefhWmeZDPxvv9p4Y8zpsBJHhL8Vh8qcsqfxMLdcJVZNINqXGR R5e4mfzbWKtmM1SMF/2cCOk3g0mEE9FrQuORXXrSvZXoI4EmQ0n7xsMZ6CgZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUeMz41mKRy1dQmIJFQAGVHG2iJKYwHwYDVR0j BBgwFoAUGv//HjPqvymOmwXxdxZslvLDtVUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmQzU1p5cXhlc2pMTUQ1QTd5R3dYZlA0WHBiNDh0QmpRcEZwa2NiRWQx c0MvMS8xQUZGRkYxRTMzRUFCRjI5OEU5QjA1RjE3NzE2NkM5NkYyQzNCNTU1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBRkZGRjFFMzNFQUJGMjk4 RTlCMDVGMTc3MTY2Qzk2RjJDM0I1NTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmQzU1p5cXhlc2pMTUQ1QTd5R3dYZlA0WHBiNDh0QmpRcEZwa2NiRWQxc0MvMS8x QUZGRkYxRTMzRUFCRjI5OEU5QjA1RjE3NzE2NkM5NkYyQzNCNTU1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmI40k40B+AayQQkwXl2BJdWy4umtZjD1MBXLMoWu+eIp5CEJXC5Am9J7vUHU rdhBLTDCSkTB4O8mqk4yeKfSnEZ2UmwJ8tYLAY+l1uXL39a2JrDUSEwz2p+plkpB +1m8aphzGRMwRdx3jYI8N1B+z8vb07HpTYn5lAt5Uk7w4fNFFPYitRJyBKQeUiiV ib0qHpIwEHqJ2mIfcMMsYNHoWeDCxZeah7e6nGJISQJ6cB2nA5ZRw5fYyox09PoB OvpKa0K2+KJ34yZPzEexiXHhf5+KL6PbOIJ0U+GHIF5KWRMIcBSRUPgDp0IuYZ8z PwxvYlgjGs5S1kbzVDv56sMc0w== -----END CERTIFICATE-----Generated at Wed Nov 5 01:43:50 2025 by rpki-client