$ rpki-client -vvf rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.mft File: 87B1C7EAED276157BEE841B04303FA76647D005D.mft (raw, json) Hash identifier: Meq/ZmkPyNYWr3sE2D1xF7tz51gNek4FLabw4/+kBTA= Subject key identifier: 36:03:9E:AB:25:2A:2A:21:00:47:DD:90:12:85:83:0F:41:1F:D3:3F Authority key identifier: 87:B1:C7:EA:ED:27:61:57:BE:E8:41:B0:43:03:FA:76:64:7D:00:5D Certificate issuer: /CN=87B1C7EAED276157BEE841B04303FA76647D005D Certificate serial: 5937606E1A5C781FE71EE87532AFE28EC139ED32 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B1C7EAED276157BEE841B04303FA76647D005D.cer Subject info access: rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.mft Manifest number: 0303 Signing time: Wed 05 Nov 2025 10:26:47 +0000 Manifest this update: Wed 05 Nov 2025 10:21:47 +0000 Manifest next update: Thu 06 Nov 2025 12:09:47 +0000 Files and hashes: 1: 323830343a313664633a3a2f33322d313238203d3e20323633313034.roa (hash: G5AAbv33pivu3vzNY7JPwifjM6uOhsc8wAeK1CMPE3k=) 2: 87B1C7EAED276157BEE841B04303FA76647D005D.crl (hash: cDoL+T5wWDssJrx9NksqmVNdW7nVrR6RupcCqhnCFRA=) 3: 3137392e3132342e34382e302f32312d3332203d3e20323633313034.roa (hash: Wjmu25vr0ifd6CGgL9MD2W5X0vThiTL0u/QKe7sB/Ds=) 4: 3137392e3132342e34392e302f32342d3234203d3e20323633313034.roa (hash: 8BO24ZXNAG9CfhwU6ckhsGa3X3uJqdCrxTlHNv9Btdo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.crl rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B1C7EAED276157BEE841B04303FA76647D005D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 11:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:37:60:6e:1a:5c:78:1f:e7:1e:e8:75:32:af:e2:8e:c1:39:ed:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87B1C7EAED276157BEE841B04303FA76647D005D Validity Not Before: Nov 5 10:21:47 2025 GMT Not After : Nov 6 12:09:47 2025 GMT Subject: CN=36039EAB252A2A210047DD901285830F411FD33F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1e:42:8e:6d:fc:bd:88:a1:9d:aa:7d:24:2a: 89:bc:8c:f6:21:c4:38:1a:95:b9:6d:e3:48:91:4d: 36:71:7e:05:df:95:06:a0:40:b4:73:55:9f:91:25: c7:e4:9f:ea:78:4e:52:cb:66:aa:b5:bc:c3:9b:5a: e4:37:ea:26:9d:55:f8:09:49:1c:1d:34:40:d8:92: fa:c5:d2:86:4e:93:fd:10:05:70:dc:dc:35:35:75: fe:d6:cb:b8:a5:d8:cd:0e:90:55:67:9e:2b:25:1d: 98:3b:6a:b8:14:76:c9:1f:6f:76:b2:58:d4:58:67: 11:b3:44:7e:b8:f7:a1:df:65:e0:04:ca:e8:45:e0: 3a:a6:ea:a1:db:1f:dd:fd:e5:17:f0:0b:4b:3c:fe: 00:68:1f:97:ac:8b:90:51:18:94:fe:29:21:a0:d7: 8c:94:43:72:84:6d:72:da:0b:6f:e2:44:37:91:22: 9c:b8:44:10:53:a6:1c:6e:68:95:c2:58:a2:bb:c2: a4:b1:dc:85:3d:17:1a:a9:71:85:2b:18:8e:2a:e0: be:95:d5:8b:8b:17:0f:ea:43:f1:b5:1d:36:01:cc: e6:8a:07:d4:10:dc:50:0b:36:9f:f5:4a:24:9d:0a: dd:07:c5:a4:b1:c9:f3:6d:f5:46:f6:74:5a:b8:ac: 7b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:03:9E:AB:25:2A:2A:21:00:47:DD:90:12:85:83:0F:41:1F:D3:3F X509v3 Authority Key Identifier: keyid:87:B1:C7:EA:ED:27:61:57:BE:E8:41:B0:43:03:FA:76:64:7D:00:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B1C7EAED276157BEE841B04303FA76647D005D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b0:cd:2b:3d:d3:c5:e0:e9:7a:b9:1d:ff:bf:49:96:78:b6: ad:e7:c2:c1:01:f2:96:12:e5:b1:3c:5a:2c:28:c7:7c:00:27: c1:dd:d3:7f:98:55:94:5a:6f:4b:ff:52:73:e6:96:67:cb:68: 59:c7:50:e0:16:b5:36:10:c2:59:67:bd:2e:cf:3a:ac:08:90: 35:e0:44:52:70:e9:23:9b:09:f6:99:b0:e4:bd:f3:2d:48:db: b9:94:c3:96:0c:d9:e5:59:38:3c:38:dc:72:e7:03:c3:e4:ee: 1e:35:aa:91:7b:07:f5:30:03:38:2a:65:f0:db:ad:5c:7a:63: 97:19:ef:94:c2:04:b4:e3:06:c3:57:c1:82:8b:7e:63:6a:a9: 3e:52:eb:55:b8:66:a3:db:7e:c4:24:49:50:7f:47:6f:c0:e3: cb:3e:d3:85:49:83:fa:e3:c7:33:e0:1a:43:25:fd:81:63:4a: a4:ed:3c:fa:6e:0c:7a:26:d6:90:2b:14:5e:8b:f0:63:b9:fe: af:4f:eb:a3:a1:d1:5b:d2:4f:ea:a8:b9:65:f4:ab:8b:bf:23: d7:e9:f7:7e:43:8c:ba:46:32:79:2e:f2:2f:11:ca:fe:0f:a4: 5f:03:63:c5:14:f2:d0:2e:c6:d7:22:8e:de:c3:c6:44:fb:9d: 91:4b:fd:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWTdgbhpceB/nHuh1Mq/ijsE57TIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdCMUM3RUFFRDI3NjE1N0JFRTg0MUIwNDMwM0ZBNzY2 NDdEMDA1RDAeFw0yNTExMDUxMDIxNDdaFw0yNTExMDYxMjA5NDdaMDMxMTAvBgNV BAMTKDM2MDM5RUFCMjUyQTJBMjEwMDQ3REQ5MDEyODU4MzBGNDExRkQzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWHkKObfy9iKGdqn0kKom8jPYh xDgalblt40iRTTZxfgXflQagQLRzVZ+RJcfkn+p4TlLLZqq1vMObWuQ36iadVfgJ SRwdNEDYkvrF0oZOk/0QBXDc3DU1df7Wy7il2M0OkFVnnislHZg7argUdskfb3ay WNRYZxGzRH6496HfZeAEyuhF4Dqm6qHbH9395RfwC0s8/gBoH5esi5BRGJT+KSGg 14yUQ3KEbXLaC2/iRDeRIpy4RBBTphxuaJXCWKK7wqSx3IU9FxqpcYUrGI4q4L6V 1YuLFw/qQ/G1HTYBzOaKB9QQ3FALNp/1SiSdCt0HxaSxyfNt9Ub2dFq4rHvZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNgOeqyUqKiEAR92QEoWDD0Ef0z8wHwYDVR0j BBgwFoAUh7HH6u0nYVe+6EGwQwP6dmR9AF0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHF3ZmpGdUJYNGtRNGdNVXpSeDFEOGZ2SzRLWUZmWFpvTkZaNkphNkFy R3IvMS84N0IxQzdFQUVEMjc2MTU3QkVFODQxQjA0MzAzRkE3NjY0N0QwMDVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QjFDN0VBRUQyNzYxNTdC RUU4NDFCMDQzMDNGQTc2NjQ3RDAwNUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHF3ZmpGdUJYNGtRNGdNVXpSeDFEOGZ2SzRLWUZmWFpvTkZaNkphNkFyR3IvMS84 N0IxQzdFQUVEMjc2MTU3QkVFODQxQjA0MzAzRkE3NjY0N0QwMDVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk7DNKz3TxeDperkd/79Jlni2refCwQHylhLlsTxaLCjHfAAnwd3Tf5hVlFpv S/9Sc+aWZ8toWcdQ4Ba1NhDCWWe9Ls86rAiQNeBEUnDpI5sJ9pmw5L3zLUjbuZTD lgzZ5Vk4PDjccucDw+TuHjWqkXsH9TADOCpl8NutXHpjlxnvlMIEtOMGw1fBgot+ Y2qpPlLrVbhmo9t+xCRJUH9Hb8Djyz7ThUmD+uPHM+AaQyX9gWNKpO08+m4MeibW kCsUXovwY7n+r0/ro6HRW9JP6qi5ZfSri78j1+n3fkOMukYyeS7yLxHK/g+kXwNj xRTy0C7G1yKO3sPGRPudkUv94Q== -----END CERTIFICATE-----Generated at Wed Nov 5 13:02:19 2025 by rpki-client