$ rpki-client -vvf rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.mft File: E7F1F0A299597CC5656B837D3DFD4B63C8649C47.mft (raw, json) Hash identifier: P4Lflq7W4+Y08pLeHtQH1Nfu2S873M1NHCOZ6YiXgwc= Subject key identifier: B8:6F:09:38:42:47:5D:D4:3C:D8:B7:63:BB:E0:3D:C9:F9:54:9E:12 Authority key identifier: E7:F1:F0:A2:99:59:7C:C5:65:6B:83:7D:3D:FD:4B:63:C8:64:9C:47 Certificate issuer: /CN=E7F1F0A299597CC5656B837D3DFD4B63C8649C47 Certificate serial: 7E842D5E3D1D5484AA783DE828C9733A68DE5AEE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.mft Manifest number: 01D4 Signing time: Tue 04 Nov 2025 17:30:10 +0000 Manifest this update: Tue 04 Nov 2025 17:25:10 +0000 Manifest next update: Wed 05 Nov 2025 20:53:10 +0000 Files and hashes: 1: 3139322e3134302e34382e302f32322d3234203d3e20323636323238.roa (hash: EMqow13CbQdebueQgakFAUrxBpF5ijZPNG7Cbdv/Tao=) 2: 323830343a336361633a3a2f33322d3332203d3e20323636323238.roa (hash: LTzZS+zGfk8qK6mI0RyVBIdrrFWI8+nrwOBWej7Y+Zo=) 3: E7F1F0A299597CC5656B837D3DFD4B63C8649C47.crl (hash: x16+XxM7Q/fq761sGTmn6Iz8OdkBlf33x1g8Ff3Q+ns=) 4: 3138312e3232342e37362e302f32322d3234203d3e20323636323238.roa (hash: ZJ/LoI9iuUkwhiSPL+4GxJbbcc6f13ljJ/5Qma5RsuU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.crl rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:84:2d:5e:3d:1d:54:84:aa:78:3d:e8:28:c9:73:3a:68:de:5a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7F1F0A299597CC5656B837D3DFD4B63C8649C47 Validity Not Before: Nov 4 17:25:10 2025 GMT Not After : Nov 5 20:53:10 2025 GMT Subject: CN=B86F093842475DD43CD8B763BBE03DC9F9549E12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a1:02:75:bd:a4:93:a8:82:fe:76:b5:bd:cf: e5:c4:0b:29:f0:d5:d2:c3:71:69:35:ee:3d:70:10: ff:1c:9a:0e:33:61:89:dd:bd:8c:58:0e:5f:04:53: 22:6c:ad:04:78:00:ad:f0:57:90:bf:88:74:b5:d1: f2:a9:7f:cd:c3:e6:b6:d0:d5:ec:5e:1b:1a:66:be: ad:00:93:da:06:78:21:e3:64:64:b8:ce:31:4a:2b: e4:c0:31:8e:5c:25:1e:49:fb:8b:8f:1f:4b:5c:ae: 25:4a:85:95:a8:03:b7:b0:43:e6:ee:36:ee:93:0a: d9:bc:c5:49:df:ba:36:2d:ca:ec:c9:a6:f0:19:52: 31:e2:2f:fa:19:46:03:2f:2b:ac:e8:7d:93:67:9f: 54:bd:af:a5:9b:88:c4:28:83:ac:fc:50:0c:9b:2e: d6:69:75:42:40:c2:12:69:4a:30:a0:db:7d:36:f6: a5:8d:b9:13:a2:ee:03:9f:86:ee:cb:f8:d6:7c:5d: 25:ca:7f:41:4a:29:6b:f1:5f:e1:75:fe:be:c6:e6: 2d:b1:b7:f6:f0:8b:9b:78:0e:19:fe:7c:97:82:de: cb:e3:e7:fb:23:2c:e4:af:88:cc:97:d6:58:b3:11: f9:c2:e6:07:0b:33:57:0d:be:d8:ca:44:1d:d0:c8: fd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6F:09:38:42:47:5D:D4:3C:D8:B7:63:BB:E0:3D:C9:F9:54:9E:12 X509v3 Authority Key Identifier: keyid:E7:F1:F0:A2:99:59:7C:C5:65:6B:83:7D:3D:FD:4B:63:C8:64:9C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:19:ad:5c:fd:2a:e2:61:4f:4c:3c:3e:65:ae:62:66:b0:3c: e1:04:18:d2:7a:11:a6:f2:7b:68:84:a2:ff:32:4c:1e:2e:8c: 0d:70:65:14:63:fc:42:60:79:d5:35:50:4b:87:f1:42:d2:e2: 1c:cc:45:80:70:ad:6a:b4:47:7f:5a:0e:bd:af:02:35:6b:37: 99:d2:44:e4:95:c0:e4:52:27:77:6b:c8:8f:e6:a2:77:73:58: 52:b5:87:73:4c:8c:e9:db:10:94:28:59:97:ed:c1:bc:98:2e: 53:d6:da:4c:6f:03:e3:a0:c1:35:c9:29:60:15:28:c4:1a:2d: 3d:a3:18:9f:7c:37:9b:d4:e3:5a:e7:5f:66:6e:25:21:68:e6: aa:5f:b5:14:13:a3:59:e6:2d:cd:23:12:31:f9:0d:aa:31:7c: 44:ce:70:6f:05:e4:c5:27:27:3e:cb:3e:86:40:ab:1e:8d:00: 67:d5:b0:44:20:0f:90:dd:53:8a:89:d3:07:2f:99:7b:d9:e0: 59:68:6a:bd:23:39:28:43:76:99:84:d8:aa:ac:a3:01:2e:13: 96:d8:e9:05:d8:18:d7:73:da:bc:c0:c8:68:1e:04:9d:40:eb: b6:a9:9a:e9:5c:73:9f:dd:b3:70:b3:ac:f6:18:8e:ad:1f:f3: f1:2e:ba:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfoQtXj0dVISqeD3oKMlzOmjeWu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdGMUYwQTI5OTU5N0NDNTY1NkI4MzdEM0RGRDRCNjND ODY0OUM0NzAeFw0yNTExMDQxNzI1MTBaFw0yNTExMDUyMDUzMTBaMDMxMTAvBgNV BAMTKEI4NkYwOTM4NDI0NzVERDQzQ0Q4Qjc2M0JCRTAzREM5Rjk1NDlFMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYoQJ1vaSTqIL+drW9z+XECynw 1dLDcWk17j1wEP8cmg4zYYndvYxYDl8EUyJsrQR4AK3wV5C/iHS10fKpf83D5rbQ 1exeGxpmvq0Ak9oGeCHjZGS4zjFKK+TAMY5cJR5J+4uPH0tcriVKhZWoA7ewQ+bu Nu6TCtm8xUnfujYtyuzJpvAZUjHiL/oZRgMvK6zofZNnn1S9r6WbiMQog6z8UAyb LtZpdUJAwhJpSjCg23029qWNuROi7gOfhu7L+NZ8XSXKf0FKKWvxX+F1/r7G5i2x t/bwi5t4Dhn+fJeC3svj5/sjLOSviMyX1lizEfnC5gcLM1cNvtjKRB3QyP0ZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuG8JOEJHXdQ82Ldju+A9yflUnhIwHwYDVR0j BBgwFoAU5/HwoplZfMVla4N9Pf1LY8hknEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ244dTVuU1JtNm9TdVZObmtKZ2hZQmNyWURac0JnYktDNENSWHNTU28y dzkvMC9FN0YxRjBBMjk5NTk3Q0M1NjU2QjgzN0QzREZENEI2M0M4NjQ5QzQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3RjFGMEEyOTk1OTdDQzU2 NTZCODM3RDNERkQ0QjYzQzg2NDlDNDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q244dTVuU1JtNm9TdVZObmtKZ2hZQmNyWURac0JnYktDNENSWHNTU28ydzkvMC9F N0YxRjBBMjk5NTk3Q0M1NjU2QjgzN0QzREZENEI2M0M4NjQ5QzQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZBmtXP0q4mFPTDw+Za5iZrA84QQY0noRpvJ7aISi/zJMHi6MDXBlFGP8QmB5 1TVQS4fxQtLiHMxFgHCtarRHf1oOva8CNWs3mdJE5JXA5FInd2vIj+aid3NYUrWH c0yM6dsQlChZl+3BvJguU9baTG8D46DBNckpYBUoxBotPaMYn3w3m9TjWudfZm4l IWjmql+1FBOjWeYtzSMSMfkNqjF8RM5wbwXkxScnPss+hkCrHo0AZ9WwRCAPkN1T ionTBy+Ze9ngWWhqvSM5KEN2mYTYqqyjAS4TltjpBdgY13PavMDIaB4EnUDrtqma 6Vxzn92zcLOs9hiOrR/z8S66Wg== -----END CERTIFICATE-----Generated at Wed Nov 5 05:15:51 2025 by rpki-client