$ rpki-client -vvf rpki-repo.registro.br/repo/CTo7EoHYMuqfLAdkgBoj7BeuNknmSowvKkzBMP3qV7cH/0/1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.mft File: 1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.mft (raw, json) Hash identifier: Lp1kFvOzimYsliR/tjg9Gq9w1Qar0AWIpfV+nnd1bvE= Subject key identifier: 42:C5:87:E3:6F:1E:86:2B:92:8F:83:6F:EE:45:53:60:09:B3:1F:AC Authority key identifier: 1F:87:31:E7:DA:EA:B5:D2:F1:ED:5C:39:CD:F0:31:9D:E9:FB:6D:2A Certificate issuer: /CN=1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A Certificate serial: 52FFF517155340022C9E1FA3760EA490F46ECCB9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.cer Subject info access: rsync://rpki-repo.registro.br/repo/CTo7EoHYMuqfLAdkgBoj7BeuNknmSowvKkzBMP3qV7cH/0/1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.mft Manifest number: E2 Signing time: Wed 05 Nov 2025 03:37:59 +0000 Manifest this update: Wed 05 Nov 2025 03:32:59 +0000 Manifest next update: Thu 06 Nov 2025 04:16:59 +0000 Files and hashes: 1: 1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.crl (hash: IO0Z1/VZsCrYztXIps4J9kUXtMcMd8pLlWcw23+5234=) 2: 323830343a363966383a3a2f33322d313238203d3e20323730333033.roa (hash: cXbTN6ayHnkUiFsYLgqDsqyMsgibvcm9VMdF10NLtT4=) 3: 3230312e3231362e3131362e302f32322d3332203d3e20323730333033.roa (hash: U7UdLEedyHiWq1TaYqcmwi4pmNhRzMnuGXRZuIE9c5c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CTo7EoHYMuqfLAdkgBoj7BeuNknmSowvKkzBMP3qV7cH/0/1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.crl rsync://rpki-repo.registro.br/repo/CTo7EoHYMuqfLAdkgBoj7BeuNknmSowvKkzBMP3qV7cH/0/1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 04:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ff:f5:17:15:53:40:02:2c:9e:1f:a3:76:0e:a4:90:f4:6e:cc:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A Validity Not Before: Nov 5 03:32:59 2025 GMT Not After : Nov 6 04:16:59 2025 GMT Subject: CN=42C587E36F1E862B928F836FEE45536009B31FAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a7:5d:1d:d3:80:ef:90:66:d1:0f:93:36:f7: ff:52:7a:7c:7e:0e:cc:30:b7:5b:be:29:b3:c4:1c: 93:64:19:f2:fd:e4:d6:87:60:fc:42:84:73:4a:a6: 5b:bf:e3:15:35:02:54:af:13:83:ed:9c:be:b1:cc: e9:49:51:2d:fa:73:a8:48:fb:ea:22:8f:a8:7b:7b: e0:be:d1:e6:3b:c1:84:db:78:bd:df:7f:b2:12:32: d6:0b:38:4c:dc:67:c7:fd:66:1a:2b:f1:43:22:c6: 0d:cc:17:15:ef:11:77:d0:6d:95:ec:f8:7e:8f:90: 50:fe:72:85:22:52:8c:34:6a:3f:4a:42:f5:c8:37: ae:1c:36:71:0e:8c:8f:46:14:80:fc:77:1b:4e:ff: 73:b6:82:ee:f5:fb:62:05:0b:ee:a3:66:23:5d:c5: c2:be:ab:07:9b:42:06:fe:a4:d5:af:75:b4:c9:61: 69:b8:06:d8:8e:7f:25:45:a8:a3:50:9e:f6:94:da: c0:31:cb:94:8a:6c:23:cb:91:ff:3c:8a:9f:1b:57: 94:6e:06:c7:52:75:9c:67:f4:49:32:91:37:7e:bd: 5f:bd:01:26:d7:cb:85:5c:0d:bd:64:48:29:56:98: e7:5e:50:f0:72:04:87:1d:03:00:78:fc:e1:34:58: 82:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C5:87:E3:6F:1E:86:2B:92:8F:83:6F:EE:45:53:60:09:B3:1F:AC X509v3 Authority Key Identifier: keyid:1F:87:31:E7:DA:EA:B5:D2:F1:ED:5C:39:CD:F0:31:9D:E9:FB:6D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CTo7EoHYMuqfLAdkgBoj7BeuNknmSowvKkzBMP3qV7cH/0/1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTo7EoHYMuqfLAdkgBoj7BeuNknmSowvKkzBMP3qV7cH/0/1F8731E7DAEAB5D2F1ED5C39CDF0319DE9FB6D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:9c:2d:bc:94:62:1c:47:47:96:8e:27:f5:21:77:af:d5:27: 12:8c:2d:21:6f:76:13:3e:0f:4a:a0:70:5f:95:c7:d8:6a:ef: 36:5f:ce:19:f9:93:01:9a:95:27:11:08:c0:67:08:c1:62:53: f2:2e:72:c5:4f:f5:3f:c7:30:6e:cb:af:49:d4:be:39:2f:d6: 8f:57:6d:83:fa:fe:57:96:25:2b:6a:d2:7c:9b:94:0d:6d:31: 7b:a7:6a:d0:2f:83:1d:5e:62:05:78:94:af:65:a8:67:2c:1e: 31:cc:26:23:f6:6a:65:b7:13:37:29:2c:de:b5:c8:a4:d5:06: 1c:a1:21:10:ea:97:7a:b3:6f:57:e0:ee:db:4c:c1:c1:55:08: d6:47:57:01:74:6a:db:0e:89:7e:c1:e9:36:08:c6:e2:4e:b7: bc:69:1b:1c:a2:44:f4:e7:83:31:1f:5c:51:4b:bd:f0:07:d6: 7c:7e:83:d9:02:5f:7f:6b:86:6b:aa:e2:d3:a6:cd:02:4d:90: 22:0b:a8:bd:62:84:06:ad:e7:9f:22:d9:a3:07:27:25:ff:d1: ed:c7:09:9c:fc:a3:a5:13:6b:89:90:a0:35:d5:b8:f5:31:9b: 79:2d:25:9c:cf:b0:c5:39:b2:31:73:41:66:4a:a0:e4:c6:c4: 92:5e:57:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUv/1FxVTQAIsnh+jdg6kkPRuzLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY4NzMxRTdEQUVBQjVEMkYxRUQ1QzM5Q0RGMDMxOURF OUZCNkQyQTAeFw0yNTExMDUwMzMyNTlaFw0yNTExMDYwNDE2NTlaMDMxMTAvBgNV BAMTKDQyQzU4N0UzNkYxRTg2MkI5MjhGODM2RkVFNDU1MzYwMDlCMzFGQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKp10d04DvkGbRD5M29/9Senx+ Dswwt1u+KbPEHJNkGfL95NaHYPxChHNKplu/4xU1AlSvE4PtnL6xzOlJUS36c6hI ++oij6h7e+C+0eY7wYTbeL3ff7ISMtYLOEzcZ8f9Zhor8UMixg3MFxXvEXfQbZXs +H6PkFD+coUiUow0aj9KQvXIN64cNnEOjI9GFID8dxtO/3O2gu71+2IFC+6jZiNd xcK+qwebQgb+pNWvdbTJYWm4BtiOfyVFqKNQnvaU2sAxy5SKbCPLkf88ip8bV5Ru BsdSdZxn9EkykTd+vV+9ASbXy4VcDb1kSClWmOdeUPByBIcdAwB4/OE0WIJZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQsWH428ehiuSj4Nv7kVTYAmzH6wwHwYDVR0j BBgwFoAUH4cx59rqtdLx7Vw5zfAxnen7bSowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1RvN0VvSFlNdXFmTEFka2dCb2o3QmV1TmtubVNvd3ZLa3pCTVAzcVY3 Y0gvMC8xRjg3MzFFN0RBRUFCNUQyRjFFRDVDMzlDREYwMzE5REU5RkI2RDJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGODczMUU3REFFQUI1RDJG MUVENUMzOUNERjAzMTlERTlGQjZEMkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1RvN0VvSFlNdXFmTEFka2dCb2o3QmV1TmtubVNvd3ZLa3pCTVAzcVY3Y0gvMC8x Rjg3MzFFN0RBRUFCNUQyRjFFRDVDMzlDREYwMzE5REU5RkI2RDJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASJwtvJRiHEdHlo4n9SF3r9UnEowtIW92Ez4PSqBwX5XH2GrvNl/OGfmTAZqV JxEIwGcIwWJT8i5yxU/1P8cwbsuvSdS+OS/Wj1dtg/r+V5YlK2rSfJuUDW0xe6dq 0C+DHV5iBXiUr2WoZyweMcwmI/ZqZbcTNyks3rXIpNUGHKEhEOqXerNvV+Du20zB wVUI1kdXAXRq2w6JfsHpNgjG4k63vGkbHKJE9OeDMR9cUUu98AfWfH6D2QJff2uG a6ri06bNAk2QIguovWKEBq3nnyLZowcnJf/R7ccJnPyjpRNriZCgNdW49TGbeS0l nM+wxTmyMXNBZkqg5MbEkl5X1A== -----END CERTIFICATE-----Generated at Wed Nov 5 06:29:30 2025 by rpki-client