$ rpki-client -vvf rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft File: 36ED969D92322E6C7F28A050D3ABC47947497160.mft (raw, json) Hash identifier: A/GBUOzV9WfqI+htLuZlqMNbtJ/7PvcueAPclb7FNzk= Subject key identifier: ED:8B:22:61:3C:C1:B6:7F:DA:25:91:8B:83:B8:15:FE:99:43:F9:F1 Authority key identifier: 36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60 Certificate issuer: /CN=36ED969D92322E6C7F28A050D3ABC47947497160 Certificate serial: 68FC147C2C646754DFA0BC10E6BAA3DDAF7513CF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer Subject info access: rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft Manifest number: 02CD Signing time: Wed 05 Nov 2025 07:19:33 +0000 Manifest this update: Wed 05 Nov 2025 07:14:33 +0000 Manifest next update: Thu 06 Nov 2025 09:22:33 +0000 Files and hashes: 1: 3230312e3135392e3135362e302f32322d3234203d3e203631383133.roa (hash: 5CT5iL8gd5WAum3xmmFF9XzujOAt6f3FH1Xw4sVTvko=) 2: 36ED969D92322E6C7F28A050D3ABC47947497160.crl (hash: 31UOM9C6KSKnAUzJrsPVZOVzukTK1xKKVwQ1hPnLH9g=) 3: 3133382e3132322e3139362e302f32322d3234203d3e203631383133.roa (hash: L+mPDM3MU8F2FyNxFY/rkbSqd8rt/zzx/y98BM3Dl2Y=) 4: 323830343a313962343a3a2f33322d3438203d3e203631383133.roa (hash: AM/mNLDTXwLh2g8b+r6l4a/01ThmpdyzXeaEjiNF0ZY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 09:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:fc:14:7c:2c:64:67:54:df:a0:bc:10:e6:ba:a3:dd:af:75:13:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ED969D92322E6C7F28A050D3ABC47947497160 Validity Not Before: Nov 5 07:14:33 2025 GMT Not After : Nov 6 09:22:33 2025 GMT Subject: CN=ED8B22613CC1B67FDA25918B83B815FE9943F9F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:44:6e:ae:62:73:de:f4:38:28:01:cd:a0:cb: c3:8a:04:7a:70:72:e1:a8:2e:75:c0:29:d9:56:a6: 64:94:6c:81:5e:9c:bd:f2:3d:7e:9a:d7:9e:45:3b: b0:d4:82:c2:e9:ff:6c:fc:6a:14:04:88:7d:ba:c3: e2:be:48:02:2e:46:9a:2e:11:ee:16:35:7c:c4:45: 30:f7:5b:1a:bd:b0:5c:05:2e:8a:11:16:fa:fc:e9: b0:7b:17:4f:48:c8:a2:73:d2:e0:2d:50:0d:48:69: 72:65:27:5c:33:a0:d2:67:0e:04:f2:56:e6:fd:c6: 3a:c5:f9:34:83:5c:6a:84:98:dc:84:59:04:bb:2b: a8:aa:71:63:b0:19:56:5a:dc:4b:19:52:28:9a:57: 22:aa:02:95:cb:cb:63:0b:7c:ba:66:fc:78:27:c0: 54:a6:b5:6d:de:5c:3d:74:8f:0e:36:d5:80:7d:5e: 67:5d:b5:c4:45:7b:35:42:3f:a3:cd:15:91:3e:fe: 4b:46:fd:20:07:c9:71:2c:f0:5b:ae:e8:85:8b:53: 94:02:8b:0c:90:5b:b3:fa:2b:b5:b2:fa:97:67:5e: 33:e1:c0:fe:bb:58:ed:56:71:e7:39:3f:36:87:8a: d9:7a:3f:c4:f0:12:51:7c:15:7c:f8:e2:41:c2:f8: 0c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8B:22:61:3C:C1:B6:7F:DA:25:91:8B:83:B8:15:FE:99:43:F9:F1 X509v3 Authority Key Identifier: keyid:36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:71:f5:a1:45:75:ee:29:23:e9:82:ad:68:03:5f:48:d3:3c: 9b:00:fe:b1:8e:27:ba:65:03:09:e2:06:15:c8:6c:64:6e:5e: 92:70:08:d4:e8:b0:23:54:24:dd:de:49:ef:24:93:5b:f8:17: cd:4b:f5:bd:55:cb:0f:8c:ba:ab:ae:ba:34:9e:6b:89:8a:3f: c3:85:22:62:cf:76:dc:76:39:40:a7:e2:6c:3e:48:80:43:95: 3a:2c:54:cf:c0:fe:3c:4b:21:43:c0:6e:f6:5f:47:c2:cd:52: e3:9b:fb:ae:b2:b1:a9:f7:9c:ec:52:07:9a:bc:53:54:fa:75: f2:17:d0:ce:72:8b:2e:fb:81:fe:5b:04:50:d7:50:89:e2:a4: 11:9f:94:42:6c:b9:43:30:fa:d1:a6:a0:a8:c1:89:d0:e9:62: 72:79:ac:07:6c:8f:f4:fe:e8:23:94:a7:c6:37:a5:32:ba:ae: 2c:38:2b:a5:44:f0:b4:09:4e:40:be:d1:aa:34:f2:e8:a0:d3: 7b:3d:11:97:14:ac:d9:d3:16:01:e1:55:09:cb:11:3d:25:de: 5c:51:4e:60:d6:d1:05:0d:f3:87:d8:d0:0f:19:24:e4:14:fb: 88:c6:6f:66:8b:f9:ef:e6:4a:74:df:4d:7a:06:f4:be:6f:c5: 9e:9e:8f:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaPwUfCxkZ1TfoLwQ5rqj3a91E88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZFRDk2OUQ5MjMyMkU2QzdGMjhBMDUwRDNBQkM0Nzk0 NzQ5NzE2MDAeFw0yNTExMDUwNzE0MzNaFw0yNTExMDYwOTIyMzNaMDMxMTAvBgNV BAMTKEVEOEIyMjYxM0NDMUI2N0ZEQTI1OTE4QjgzQjgxNUZFOTk0M0Y5RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqRG6uYnPe9DgoAc2gy8OKBHpw cuGoLnXAKdlWpmSUbIFenL3yPX6a155FO7DUgsLp/2z8ahQEiH26w+K+SAIuRpou Ee4WNXzERTD3Wxq9sFwFLooRFvr86bB7F09IyKJz0uAtUA1IaXJlJ1wzoNJnDgTy Vub9xjrF+TSDXGqEmNyEWQS7K6iqcWOwGVZa3EsZUiiaVyKqApXLy2MLfLpm/Hgn wFSmtW3eXD10jw421YB9XmddtcRFezVCP6PNFZE+/ktG/SAHyXEs8Fuu6IWLU5QC iwyQW7P6K7Wy+pdnXjPhwP67WO1Wcec5PzaHitl6P8TwElF8FXz44kHC+Ay/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7YsiYTzBtn/aJZGLg7gV/plD+fEwHwYDVR0j BBgwFoAUNu2WnZIyLmx/KKBQ06vEeUdJcWAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFhVeUYyVm00YVpXY0RjenMzSk1SaDRydUdCUzF0bk10UE5jdkNGZXQ2 emUvMC8zNkVEOTY5RDkyMzIyRTZDN0YyOEEwNTBEM0FCQzQ3OTQ3NDk3MTYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2RUQ5NjlEOTIzMjJFNkM3 RjI4QTA1MEQzQUJDNDc5NDc0OTcxNjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFhVeUYyVm00YVpXY0RjenMzSk1SaDRydUdCUzF0bk10UE5jdkNGZXQ2emUvMC8z NkVEOTY5RDkyMzIyRTZDN0YyOEEwNTBEM0FCQzQ3OTQ3NDk3MTYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiHH1oUV17ikj6YKtaANfSNM8mwD+sY4numUDCeIGFchsZG5eknAI1OiwI1Qk 3d5J7ySTW/gXzUv1vVXLD4y6q666NJ5riYo/w4UiYs923HY5QKfibD5IgEOVOixU z8D+PEshQ8Bu9l9Hws1S45v7rrKxqfec7FIHmrxTVPp18hfQznKLLvuB/lsEUNdQ ieKkEZ+UQmy5QzD60aagqMGJ0OlicnmsB2yP9P7oI5SnxjelMrquLDgrpUTwtAlO QL7RqjTy6KDTez0RlxSs2dMWAeFVCcsRPSXeXFFOYNbRBQ3zh9jQDxkk5BT7iMZv Zov57+ZKdN9Negb0vm/Fnp6PDQ== -----END CERTIFICATE-----Generated at Wed Nov 5 11:38:16 2025 by rpki-client