$ rpki-client -vvf rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.mft File: 40024D9137B1E11B244B48E87E69634A33E200A3.mft (raw, json) Hash identifier: /3ew40l5yffC4icGt59u2otX9JUVBWIgdINW2wu5jbc= Subject key identifier: EA:3B:8A:81:3E:0B:1C:7D:09:32:56:A1:09:24:B5:86:2A:10:51:54 Authority key identifier: 40:02:4D:91:37:B1:E1:1B:24:4B:48:E8:7E:69:63:4A:33:E2:00:A3 Certificate issuer: /CN=40024D9137B1E11B244B48E87E69634A33E200A3 Certificate serial: 393ED90BD0F6B13F607131E2C79022F48FEAF5FF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40024D9137B1E11B244B48E87E69634A33E200A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.mft Manifest number: 0307 Signing time: Wed 05 Nov 2025 14:34:33 +0000 Manifest this update: Wed 05 Nov 2025 14:29:33 +0000 Manifest next update: Thu 06 Nov 2025 16:06:33 +0000 Files and hashes: 1: 40024D9137B1E11B244B48E87E69634A33E200A3.crl (hash: ih+FLU/x3dut1iulVCUWIdInhKMW5AzWMnTfYZnH4RA=) 2: 3139312e352e34382e302f32312d3234203d3e20323633353332.roa (hash: xwhiR8s2KXPoYmAj/BsNvhfcFgjUvWyfc1+EWR5Q9eE=) 3: 323830343a313336343a3a2f33322d3438203d3e20323633353332.roa (hash: /NlP/nFInfupYyPAIeeNmFEHxIgrARxYeJrMLAyFWfI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.crl rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40024D9137B1E11B244B48E87E69634A33E200A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 16:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:3e:d9:0b:d0:f6:b1:3f:60:71:31:e2:c7:90:22:f4:8f:ea:f5:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40024D9137B1E11B244B48E87E69634A33E200A3 Validity Not Before: Nov 5 14:29:33 2025 GMT Not After : Nov 6 16:06:33 2025 GMT Subject: CN=EA3B8A813E0B1C7D093256A10924B5862A105154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:66:eb:d9:f1:9c:0e:5c:97:6f:0f:23:32:76: 6e:78:9f:25:25:e8:75:19:da:8d:75:c0:36:4e:6f: 10:1d:89:18:5b:ba:f9:79:f9:57:23:5b:82:7e:79: ff:6a:d1:bf:3b:99:1b:f6:c2:1e:c8:84:bb:66:14: af:67:48:4a:1b:4f:19:e3:60:13:a1:d4:fa:0c:04: 77:21:91:ca:54:d3:a7:4b:67:fe:62:54:e6:21:fd: 2a:10:98:28:75:6f:70:7b:5e:4f:e4:ff:24:05:f8: 11:5c:4c:72:98:27:29:11:52:f5:d5:19:15:61:7c: 8f:d6:2c:8e:df:14:38:b7:05:0a:28:7f:5b:ac:c8: 44:7b:00:b1:ac:e7:32:83:de:b2:24:52:77:79:80: e4:b1:c3:c7:03:00:bf:a3:01:96:8f:b9:76:36:ec: 55:05:44:85:09:5e:f7:d8:70:c9:0b:0a:70:df:1e: ef:df:87:63:b3:77:cd:3e:3e:dc:a0:12:5d:a8:1c: 1c:b9:77:b5:53:a1:d3:6a:dd:bf:21:6b:31:85:d5: 84:74:a6:66:d5:02:0e:3c:0a:f0:e2:b8:09:47:7a: 54:62:93:07:9b:18:39:58:90:a0:f3:15:91:3b:d6: 94:7b:7b:1e:ca:71:58:62:8b:a8:b9:82:9e:ef:bf: 4c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3B:8A:81:3E:0B:1C:7D:09:32:56:A1:09:24:B5:86:2A:10:51:54 X509v3 Authority Key Identifier: keyid:40:02:4D:91:37:B1:E1:1B:24:4B:48:E8:7E:69:63:4A:33:E2:00:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40024D9137B1E11B244B48E87E69634A33E200A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c1:3e:66:8b:a9:58:1a:4a:79:2b:0d:6b:67:89:67:b7:4d: 50:e5:de:25:ee:cc:e7:a4:56:47:22:8b:80:06:2e:de:ca:99: 9d:f0:6a:44:5c:00:2d:d0:ee:0c:11:b7:65:be:ae:1e:18:ac: 43:0d:4f:5d:be:c0:7c:95:8e:73:69:bc:3e:d1:b5:75:bb:b9: 69:24:2f:1f:70:1f:ed:85:e6:62:5a:87:b1:14:b6:40:90:16: 5a:2b:52:6c:8c:3e:37:78:aa:e2:b5:4a:36:56:6f:d9:34:97: 9d:79:57:67:19:82:6b:d9:0c:ef:e8:56:f4:c5:d8:6a:69:19: 18:ac:6f:d7:dd:fd:21:53:00:5c:f2:9f:83:9d:60:9b:7c:3d: 37:de:2c:bd:ef:37:77:4a:0b:22:c6:23:6b:61:79:92:52:73: df:38:52:18:10:b9:3e:63:10:b9:30:87:1c:bd:21:90:f3:b8: a3:90:ec:e7:cb:1b:23:d3:c5:f0:ad:61:c1:ce:34:29:f6:85: 5f:ec:ab:54:19:05:00:7f:90:f7:5c:cb:a2:69:d1:5e:fe:0b: 4b:c4:42:e6:7c:22:6f:3d:69:e7:ca:a8:86:70:dc:09:9a:c0: 92:45:a3:d3:b3:cb:46:62:97:bf:fd:28:e0:e5:28:72:2f:13: 92:1e:af:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOT7ZC9D2sT9gcTHix5Ai9I/q9f8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAwMjREOTEzN0IxRTExQjI0NEI0OEU4N0U2OTYzNEEz M0UyMDBBMzAeFw0yNTExMDUxNDI5MzNaFw0yNTExMDYxNjA2MzNaMDMxMTAvBgNV BAMTKEVBM0I4QTgxM0UwQjFDN0QwOTMyNTZBMTA5MjRCNTg2MkExMDUxNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ZuvZ8ZwOXJdvDyMydm54nyUl 6HUZ2o11wDZObxAdiRhbuvl5+VcjW4J+ef9q0b87mRv2wh7IhLtmFK9nSEobTxnj YBOh1PoMBHchkcpU06dLZ/5iVOYh/SoQmCh1b3B7Xk/k/yQF+BFcTHKYJykRUvXV GRVhfI/WLI7fFDi3BQoof1usyER7ALGs5zKD3rIkUnd5gOSxw8cDAL+jAZaPuXY2 7FUFRIUJXvfYcMkLCnDfHu/fh2Ozd80+PtygEl2oHBy5d7VTodNq3b8hazGF1YR0 pmbVAg48CvDiuAlHelRikwebGDlYkKDzFZE71pR7ex7KcVhii6i5gp7vv0w5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6juKgT4LHH0JMlahCSS1hioQUVQwHwYDVR0j BBgwFoAUQAJNkTex4RskS0jofmljSjPiAKMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXBvdzd0eUR2UEE2MjFVN3JKcG9DaUVGRjZwV1Y1bTdjV2hUOW1zajRy VkgvMS80MDAyNEQ5MTM3QjFFMTFCMjQ0QjQ4RTg3RTY5NjM0QTMzRTIwMEEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwMDI0RDkxMzdCMUUxMUIy NDRCNDhFODdFNjk2MzRBMzNFMjAwQTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXBvdzd0eUR2UEE2MjFVN3JKcG9DaUVGRjZwV1Y1bTdjV2hUOW1zajRyVkgvMS80 MDAyNEQ5MTM3QjFFMTFCMjQ0QjQ4RTg3RTY5NjM0QTMzRTIwMEEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM8E+ZoupWBpKeSsNa2eJZ7dNUOXeJe7M56RWRyKLgAYu3sqZnfBqRFwALdDu DBG3Zb6uHhisQw1PXb7AfJWOc2m8PtG1dbu5aSQvH3Af7YXmYlqHsRS2QJAWWitS bIw+N3iq4rVKNlZv2TSXnXlXZxmCa9kM7+hW9MXYamkZGKxv1939IVMAXPKfg51g m3w9N94sve83d0oLIsYja2F5klJz3zhSGBC5PmMQuTCHHL0hkPO4o5Ds58sbI9PF 8K1hwc40KfaFX+yrVBkFAH+Q91zLomnRXv4LS8RC5nwibz1p58qohnDcCZrAkkWj 07PLRmKXv/0o4OUoci8Tkh6vQw== -----END CERTIFICATE-----Generated at Wed Nov 5 20:08:26 2025 by rpki-client