$ rpki-client -vvf rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft File: A1E6749C09E9E32D11C15678D45C1B936D525291.mft (raw, json) Hash identifier: Hg2EB+higFBp0vCm2Y+5o5D5GZZs24CyZ3qdE0OFtDg= Subject key identifier: 37:F6:29:E5:0B:29:E3:2C:C1:9D:16:7D:26:57:75:F9:E9:07:B3:78 Authority key identifier: A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91 Certificate issuer: /CN=A1E6749C09E9E32D11C15678D45C1B936D525291 Certificate serial: 37A71885BA8A40D807304F71B4DB46CF86442F97 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft Manifest number: 02DF Signing time: Wed 05 Nov 2025 02:51:01 +0000 Manifest this update: Wed 05 Nov 2025 02:46:01 +0000 Manifest next update: Thu 06 Nov 2025 04:23:01 +0000 Files and hashes: 1: 34352e3138302e3235322e302f32322d3234203d3e20323633323530.roa (hash: ORMMmfGrpHZXNdiWY4NkF0L84UkSb+i4s3EBcHiCyW8=) 2: A1E6749C09E9E32D11C15678D45C1B936D525291.crl (hash: WYnuk0v7Pc82LVkC5WlMcyxYJz7cDXbkXY0hD2mzYiw=) 3: 323830343a313763343a3a2f33322d3438203d3e20323633323530.roa (hash: CYHN9rK1skgLKugPUzgZGszwHwGA3WFLBGl49tYzvoY=) 4: 3137372e3233342e3136302e302f31392d3234203d3e20323633323530.roa (hash: wlPnqD7qa81i/u0GABiCUaJGTeP2DvD2cJaBWTo4WcI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 04:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a7:18:85:ba:8a:40:d8:07:30:4f:71:b4:db:46:cf:86:44:2f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1E6749C09E9E32D11C15678D45C1B936D525291 Validity Not Before: Nov 5 02:46:01 2025 GMT Not After : Nov 6 04:23:01 2025 GMT Subject: CN=37F629E50B29E32CC19D167D265775F9E907B378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:be:cd:94:d5:c0:5c:ce:99:2d:e8:5a:81:c1: ba:e6:96:27:40:63:d5:06:09:42:d5:ba:78:67:af: 2e:be:aa:7e:e8:87:92:c7:0c:a6:41:9b:fd:1b:d4: ec:e3:84:78:2b:5e:23:8d:35:75:a7:ae:00:97:81: f5:87:e3:07:91:39:c4:ee:59:53:48:b7:be:16:13: bb:08:09:bd:6f:be:ce:b2:2e:c6:ea:1b:8d:85:52: 86:7a:7d:75:40:72:ee:4a:7f:ff:af:94:45:66:6b: 1b:23:22:b8:36:43:7a:04:32:dc:97:c7:b1:1a:79: 05:c7:04:0b:2b:35:86:48:1b:a3:41:55:c0:8c:65: df:bc:5a:c6:d1:f3:d0:78:5d:4f:c5:a2:d2:de:ac: 9b:10:71:da:82:fd:21:3b:4c:13:32:97:23:c3:a9: c3:02:1d:ff:ea:40:68:70:24:0b:fb:86:70:ce:c4: 66:85:3b:12:b5:c8:d6:d3:a9:5c:c8:0d:c1:f4:3b: 20:a3:5c:c6:c9:ef:31:e3:9a:64:70:07:50:91:b6: 5a:66:19:9c:e4:95:82:db:a4:15:9a:c7:d0:5f:e3: f1:36:53:5e:12:ac:5c:30:c5:0c:1d:12:8f:fb:64: 72:87:48:ea:5f:3d:44:1f:8f:9f:26:c5:99:b4:55: e6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F6:29:E5:0B:29:E3:2C:C1:9D:16:7D:26:57:75:F9:E9:07:B3:78 X509v3 Authority Key Identifier: keyid:A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:9e:53:d2:21:9c:48:ec:70:4c:80:33:26:d7:66:62:71:fc: e5:2b:5c:c1:16:3b:db:5b:83:55:6f:1f:9f:79:41:29:19:2b: 63:8f:5a:0b:f3:36:cf:9a:fc:16:af:50:6f:0e:38:d9:85:6c: 67:62:78:d3:98:a0:ad:d3:3a:8f:27:51:09:3c:de:4a:fb:38: 6b:f7:a3:57:fa:b4:73:9b:e2:85:50:80:f7:a5:aa:c0:95:95: 5c:5f:3c:65:13:0c:32:c3:1f:8a:ef:cb:f5:59:21:49:46:af: 61:24:8a:03:37:59:5d:d8:cd:ca:d3:db:74:9d:18:1e:c2:d6: ea:c5:d6:6e:a5:88:89:60:a9:40:f5:76:5a:fd:87:3d:77:d6: d4:f2:d1:7a:d9:ad:e9:b9:9a:79:5c:45:b8:d0:0f:1b:7d:1e: 73:83:ff:47:62:42:a4:f3:76:f9:c7:84:0c:ad:f8:d4:47:fc: 7f:42:10:bc:ac:e9:65:98:88:15:ab:00:c1:86:3b:47:55:bb: 08:40:04:9a:d4:74:6d:0a:cf:e6:07:d6:17:d5:4f:1a:a6:2b: 42:9b:2c:27:e3:80:cc:58:8c:0d:99:f5:3b:1b:61:32:f7:bd: 1c:76:55:aa:7a:ae:10:4c:4b:42:2f:71:4d:73:e1:25:49:87: 7e:c2:0a:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN6cYhbqKQNgHME9xtNtGz4ZEL5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFNjc0OUMwOUU5RTMyRDExQzE1Njc4RDQ1QzFCOTM2 RDUyNTI5MTAeFw0yNTExMDUwMjQ2MDFaFw0yNTExMDYwNDIzMDFaMDMxMTAvBgNV BAMTKDM3RjYyOUU1MEIyOUUzMkNDMTlEMTY3RDI2NTc3NUY5RTkwN0IzNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vs2U1cBczpkt6FqBwbrmlidA Y9UGCULVunhnry6+qn7oh5LHDKZBm/0b1OzjhHgrXiONNXWnrgCXgfWH4weROcTu WVNIt74WE7sICb1vvs6yLsbqG42FUoZ6fXVAcu5Kf/+vlEVmaxsjIrg2Q3oEMtyX x7EaeQXHBAsrNYZIG6NBVcCMZd+8WsbR89B4XU/FotLerJsQcdqC/SE7TBMylyPD qcMCHf/qQGhwJAv7hnDOxGaFOxK1yNbTqVzIDcH0OyCjXMbJ7zHjmmRwB1CRtlpm GZzklYLbpBWax9Bf4/E2U14SrFwwxQwdEo/7ZHKHSOpfPUQfj58mxZm0VeZLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUN/Yp5Qsp4yzBnRZ9Jld1+ekHs3gwHwYDVR0j BBgwFoAUoeZ0nAnp4y0RwVZ41Fwbk21SUpEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFlkMmlKOW5VMnRoU1ZRb2dwQ1o2ZkphZGFnRGpHOUFjczlZdFc4Y05B UFgvMC9BMUU2NzQ5QzA5RTlFMzJEMTFDMTU2NzhENDVDMUI5MzZENTI1MjkxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExRTY3NDlDMDlFOUUzMkQx MUMxNTY3OEQ0NUMxQjkzNkQ1MjUyOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFlkMmlKOW5VMnRoU1ZRb2dwQ1o2ZkphZGFnRGpHOUFjczlZdFc4Y05BUFgvMC9B MUU2NzQ5QzA5RTlFMzJEMTFDMTU2NzhENDVDMUI5MzZENTI1MjkxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfZ5T0iGcSOxwTIAzJtdmYnH85StcwRY721uDVW8fn3lBKRkrY49aC/M2z5r8 Fq9Qbw442YVsZ2J405igrdM6jydRCTzeSvs4a/ejV/q0c5vihVCA96WqwJWVXF88 ZRMMMsMfiu/L9VkhSUavYSSKAzdZXdjNytPbdJ0YHsLW6sXWbqWIiWCpQPV2Wv2H PXfW1PLRetmt6bmaeVxFuNAPG30ec4P/R2JCpPN2+ceEDK341Ef8f0IQvKzpZZiI FasAwYY7R1W7CEAEmtR0bQrP5gfWF9VPGqYrQpssJ+OAzFiMDZn1OxthMve9HHZV qnquEExLQi9xTXPhJUmHfsIKRQ== -----END CERTIFICATE-----Generated at Wed Nov 5 04:29:04 2025 by rpki-client