$ rpki-client -vvf rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft File: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft (raw, json) Hash identifier: 4z9oN89nYlsYb7C/aOp9npwz9ogdxV1/49/1AGGtvzM= Subject key identifier: A3:DC:31:8C:05:C6:08:FF:E2:E9:74:7E:46:E7:A5:6A:9C:DE:43:C2 Authority key identifier: D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB Certificate issuer: /CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB Certificate serial: 56DF46FCC34C001E8689E54156AB0B707DAB63EA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer Subject info access: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft Manifest number: CB Signing time: Tue 04 Nov 2025 14:37:35 +0000 Manifest this update: Tue 04 Nov 2025 14:32:35 +0000 Manifest next update: Wed 05 Nov 2025 18:35:35 +0000 Files and hashes: 1: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl (hash: 3SXpRWrygGKfBQc4helqEJ7aVH7pHNHg6Nv4kaJUc5Y=) 2: 323830343a343461303a3a2f33322d3438203d3e20323637363433.roa (hash: OhP4AfZLm8wKcC8NRb3lR5wasqSW+ZFcBQBWlmtzm+0=) 3: 34352e37312e3232302e302f32322d3234203d3e20323637363433.roa (hash: DphYCMXiIhOunJYgpxuGmI/F5WVwTY6x8muqbHvOLD0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 18:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:df:46:fc:c3:4c:00:1e:86:89:e5:41:56:ab:0b:70:7d:ab:63:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB Validity Not Before: Nov 4 14:32:35 2025 GMT Not After : Nov 5 18:35:35 2025 GMT Subject: CN=A3DC318C05C608FFE2E9747E46E7A56A9CDE43C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:af:db:72:31:cd:26:76:9d:7a:de:ad:33:74: b0:79:21:a5:89:43:29:50:ad:e5:ce:d6:d6:94:cb: c4:26:b3:b8:da:d7:60:3b:b4:9a:74:e8:e4:78:d8: ed:91:0b:fd:9a:72:45:e3:db:c8:df:25:f9:8d:a5: bb:c8:4b:ca:3e:5e:96:50:48:9c:03:7e:52:bf:be: 10:b4:66:e7:8d:4e:de:62:fd:3c:5a:44:a4:ba:e6: d8:13:e4:93:36:79:58:07:a8:e3:f9:8a:ff:c8:8a: 95:dd:96:dd:a7:03:9f:f3:d0:3a:37:a1:74:7c:6c: 27:90:d2:39:2d:08:8c:29:0c:21:6a:5f:35:8b:7b: 62:3f:16:cc:98:48:c0:60:b3:21:4c:d3:13:c2:21: fd:e0:b5:21:76:ca:56:75:8e:a5:6d:70:43:b4:33: 71:5f:61:4e:df:14:c9:d9:f1:c3:ce:61:72:3e:ac: f4:4d:7d:08:ac:12:9f:21:fc:e4:b0:f8:da:19:e0: 52:f0:af:63:f2:63:47:7a:cc:b2:c9:0c:56:c4:6b: 71:5f:4b:50:ba:11:7a:ef:69:e2:f3:a2:e7:b3:24: c2:c0:dc:66:04:1a:35:d9:22:7d:52:28:d8:8a:a6: fa:26:08:bc:7c:ab:f4:f6:94:93:5f:18:9c:2e:37: 33:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DC:31:8C:05:C6:08:FF:E2:E9:74:7E:46:E7:A5:6A:9C:DE:43:C2 X509v3 Authority Key Identifier: keyid:D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:12:eb:b5:60:0c:a2:90:de:eb:9e:34:7f:9f:64:f3:e9:01: 54:2f:de:2d:7e:7a:db:4c:80:81:34:31:2b:24:ea:27:4f:af: 76:1c:52:a8:c1:65:2c:5d:60:86:36:6d:1d:77:86:08:3e:d4: 9c:a9:5b:fb:4c:5d:99:69:9c:e1:8f:db:06:ba:95:50:ea:a8: 37:88:a8:94:ac:e8:74:16:ce:1b:8a:73:8a:d4:df:d8:b4:32: 14:c1:38:52:a1:bf:db:43:72:a9:74:c4:22:b4:33:ec:7c:78: d7:31:6b:86:2e:4a:ac:72:8c:ef:d0:fa:1a:36:d8:6f:1e:22: dd:a4:93:40:9e:ed:b9:21:78:45:cd:06:d6:f9:48:76:ee:a4: 29:9e:a2:b5:c9:57:68:3a:60:01:70:33:a5:9c:2c:dd:48:e3: 84:c5:5d:47:07:9c:00:2a:9c:5d:07:8d:8a:02:eb:ae:b4:f3: 27:b1:c5:fd:d0:4c:36:aa:5a:c2:04:aa:d5:d2:d0:e5:23:37: 17:9d:9e:e1:b7:c9:42:91:06:17:23:5e:62:42:fe:6d:7b:6f: e9:c3:1a:a5:f6:50:18:21:8a:ad:ff:3f:a3:cc:1c:91:eb:dc: b5:6f:bc:43:f5:51:37:2f:76:5d:4a:ab:60:d9:e1:5c:02:9f: eb:ad:45:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVt9G/MNMAB6GieVBVqsLcH2rY+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk3MEYxN0M4NkQ0RDVBOUM2Mzk1RTlFMkQxNjAxQkJE OUZBOEJEQjAeFw0yNTExMDQxNDMyMzVaFw0yNTExMDUxODM1MzVaMDMxMTAvBgNV BAMTKEEzREMzMThDMDVDNjA4RkZFMkU5NzQ3RTQ2RTdBNTZBOUNERTQzQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxr9tyMc0mdp163q0zdLB5IaWJ QylQreXO1taUy8Qms7ja12A7tJp06OR42O2RC/2ackXj28jfJfmNpbvIS8o+XpZQ SJwDflK/vhC0ZueNTt5i/TxaRKS65tgT5JM2eVgHqOP5iv/IipXdlt2nA5/z0Do3 oXR8bCeQ0jktCIwpDCFqXzWLe2I/FsyYSMBgsyFM0xPCIf3gtSF2ylZ1jqVtcEO0 M3FfYU7fFMnZ8cPOYXI+rPRNfQisEp8h/OSw+NoZ4FLwr2PyY0d6zLLJDFbEa3Ff S1C6EXrvaeLzouezJMLA3GYEGjXZIn1SKNiKpvomCLx8q/T2lJNfGJwuNzOpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUo9wxjAXGCP/i6XR+RuelapzeQ8IwHwYDVR0j BBgwFoAU2XDxfIbU1anGOV6eLRYBu9n6i9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzNDNHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhv dmIvMS9EOTcwRjE3Qzg2RDRENUE5QzYzOTVFOUUyRDE2MDFCQkQ5RkE4QkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NzBGMTdDODZENEQ1QTlD NjM5NUU5RTJEMTYwMUJCRDlGQThCREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzNDNHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhvdmIvMS9E OTcwRjE3Qzg2RDRENUE5QzYzOTVFOUUyRDE2MDFCQkQ5RkE4QkRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFBLrtWAMopDe6540f59k8+kBVC/eLX5620yAgTQxKyTqJ0+vdhxSqMFlLF1g hjZtHXeGCD7UnKlb+0xdmWmc4Y/bBrqVUOqoN4iolKzodBbOG4pzitTf2LQyFME4 UqG/20NyqXTEIrQz7Hx41zFrhi5KrHKM79D6GjbYbx4i3aSTQJ7tuSF4Rc0G1vlI du6kKZ6itclXaDpgAXAzpZws3UjjhMVdRwecACqcXQeNigLrrrTzJ7HF/dBMNqpa wgSq1dLQ5SM3F52e4bfJQpEGFyNeYkL+bXtv6cMapfZQGCGKrf8/o8wckevctW+8 Q/VRNy92XUqrYNnhXAKf661F9A== -----END CERTIFICATE-----Generated at Wed Nov 5 03:17:27 2025 by rpki-client