$ rpki-client -vvf rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.mft File: 20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.mft (raw, json) Hash identifier: Qf68ngDapk870HAEtJuCfmBlXPzb0eyz41iem8H8Nh4= Subject key identifier: F6:12:23:0F:3B:51:28:78:5D:41:44:46:5A:17:E6:3C:0C:63:27:61 Authority key identifier: 20:45:3D:F9:CB:CD:59:10:7B:DF:91:EC:0F:DE:EE:8A:86:7A:03:1B Certificate issuer: /CN=20453DF9CBCD59107BDF91EC0FDEEE8A867A031B Certificate serial: 3346A663CBFCCC89420DDAD85CE6B0915F93069A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.cer Subject info access: rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.mft Manifest number: 0307 Signing time: Tue 04 Nov 2025 09:15:22 +0000 Manifest this update: Tue 04 Nov 2025 09:10:22 +0000 Manifest next update: Wed 05 Nov 2025 11:58:22 +0000 Files and hashes: 1: 3138372e38352e34382e302f32312d3234203d3e20323632373237.roa (hash: 84MZhLQzIn2BWsnHfJXMg5Wfx8x6fNRb6spHNwvUo0U=) 2: 20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.crl (hash: XZW/7S/oAsPjq/gP9faidGdu9f5egQnmsyZfdTj9Pxg=) 3: 3138392e3131332e35362e302f32312d3234203d3e20323632373237.roa (hash: n7chMqoUOmhPka1TuUB5DkX3RDTNyCJIuyGAlWeViCY=) 4: 3138362e3139322e36342e302f32302d3234203d3e20323632373237.roa (hash: lI/YZy3V43NnAzsfqJunrGgRp/PEYktxD6ceXNuRQos=) 5: 323830343a6131633a3a2f33322d3438203d3e20323632373237.roa (hash: 9NJqoCplEFI6mtWVxC1p48urbNYyOZzNQYkH1nFU11s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.crl rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 11:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:46:a6:63:cb:fc:cc:89:42:0d:da:d8:5c:e6:b0:91:5f:93:06:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20453DF9CBCD59107BDF91EC0FDEEE8A867A031B Validity Not Before: Nov 4 09:10:22 2025 GMT Not After : Nov 5 11:58:22 2025 GMT Subject: CN=F612230F3B5128785D4144465A17E63C0C632761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:01:a3:4c:98:3f:a3:11:cf:41:8b:55:48:9d: c7:f5:33:c8:59:b0:10:fc:11:eb:cf:77:b1:2b:1b: 24:bc:fa:78:0e:f3:55:2d:76:59:dc:00:34:e8:4f: cf:f6:e2:5d:08:37:6d:4f:a1:c2:1f:f2:2d:7a:c2: 22:10:71:4c:35:f7:ae:5c:5f:54:55:45:26:38:09: 09:9a:af:96:b5:bd:f4:a4:e6:63:b5:9d:c6:a4:da: 2d:22:65:c5:35:a8:ff:22:fb:26:26:b5:89:d5:58: 5c:10:ff:81:76:a2:5b:91:d6:be:7b:64:55:c3:11: ac:ad:f9:b2:89:ca:c9:db:e4:1a:b5:69:5c:5e:84: f1:22:07:43:26:c0:69:b5:f8:24:9a:80:b9:fd:6d: f4:5c:ca:bb:63:40:36:d5:c5:a0:54:4a:cf:cb:cc: 66:59:3b:1e:1f:c6:82:5d:77:2c:30:b9:42:71:3f: f6:e1:1e:d1:34:a6:8f:c1:b1:fa:d3:df:b2:d9:8c: 28:cd:cc:0e:da:3e:1e:46:92:a8:94:0b:8c:72:5a: bc:db:5e:44:c4:41:7f:dd:38:a1:b2:f8:d4:d2:f5: 2f:76:18:ca:92:4e:44:39:35:96:ae:a3:5f:f5:b0: a0:2d:87:55:19:08:12:aa:b2:36:4c:02:d0:40:e0: cc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:12:23:0F:3B:51:28:78:5D:41:44:46:5A:17:E6:3C:0C:63:27:61 X509v3 Authority Key Identifier: keyid:20:45:3D:F9:CB:CD:59:10:7B:DF:91:EC:0F:DE:EE:8A:86:7A:03:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:28:dd:78:fa:7d:35:53:5a:7e:32:78:7e:b5:c3:92:bf:86: 6a:c5:09:43:74:7e:09:83:43:0f:57:cd:4e:90:6d:ef:f7:f7: 9d:bd:26:04:61:85:c1:33:cc:9b:4f:f0:86:35:58:2f:9b:9f: 8b:ac:8c:ef:b8:1d:13:7d:ac:b6:48:32:36:cc:9d:6e:9b:37: 23:56:79:36:67:49:16:e0:31:ca:08:e4:4c:9c:f6:ae:92:93: 8a:b6:8c:f4:df:7a:7c:57:15:8f:a0:a2:ee:8f:77:f9:f4:7c: 39:a3:b9:e9:d0:93:ec:df:77:69:ad:c6:2e:a4:c3:78:3b:aa: e9:58:69:78:ce:97:80:d0:0a:35:ee:46:de:72:6d:28:5a:58: 8e:86:72:60:be:44:1b:e9:1d:6d:50:88:47:3a:c9:d9:2d:fc: 01:12:9a:43:2f:fc:f3:4a:97:ab:4e:ac:2a:ca:10:fe:d1:a3: 08:4b:78:6e:39:05:de:c1:29:40:ed:f4:83:d3:b1:5f:ee:6f: 4f:45:49:07:69:64:58:96:fa:d6:ea:0d:a2:78:63:36:c2:65: 4a:0b:1c:dc:f9:ed:c2:cf:42:5f:d0:c6:0c:e4:67:cc:cb:99: c6:69:9c:bc:7d:b9:2c:58:fe:68:47:92:8d:85:12:93:58:b8: b7:0e:7c:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUM0amY8v8zIlCDdrYXOawkV+TBpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA0NTNERjlDQkNENTkxMDdCREY5MUVDMEZERUVFOEE4 NjdBMDMxQjAeFw0yNTExMDQwOTEwMjJaFw0yNTExMDUxMTU4MjJaMDMxMTAvBgNV BAMTKEY2MTIyMzBGM0I1MTI4Nzg1RDQxNDQ0NjVBMTdFNjNDMEM2MzI3NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsAaNMmD+jEc9Bi1VIncf1M8hZ sBD8EevPd7ErGyS8+ngO81UtdlncADToT8/24l0IN21PocIf8i16wiIQcUw1965c X1RVRSY4CQmar5a1vfSk5mO1ncak2i0iZcU1qP8i+yYmtYnVWFwQ/4F2oluR1r57 ZFXDEayt+bKJysnb5Bq1aVxehPEiB0MmwGm1+CSagLn9bfRcyrtjQDbVxaBUSs/L zGZZOx4fxoJddywwuUJxP/bhHtE0po/BsfrT37LZjCjNzA7aPh5GkqiUC4xyWrzb XkTEQX/dOKGy+NTS9S92GMqSTkQ5NZauo1/1sKAth1UZCBKqsjZMAtBA4MzxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9hIjDztRKHhdQURGWhfmPAxjJ2EwHwYDVR0j BBgwFoAUIEU9+cvNWRB735HsD97uioZ6AxswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkIzV1g0YUNtTHJCaGhRdFRGQ1VHN2Q2M2pwVmtvWDRGa0REbmdMS29y Z1QvMS8yMDQ1M0RGOUNCQ0Q1OTEwN0JERjkxRUMwRkRFRUU4QTg2N0EwMzFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwNDUzREY5Q0JDRDU5MTA3 QkRGOTFFQzBGREVFRThBODY3QTAzMUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkIzV1g0YUNtTHJCaGhRdFRGQ1VHN2Q2M2pwVmtvWDRGa0REbmdMS29yZ1QvMS8y MDQ1M0RGOUNCQ0Q1OTEwN0JERjkxRUMwRkRFRUU4QTg2N0EwMzFCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiSjdePp9NVNafjJ4frXDkr+GasUJQ3R+CYNDD1fNTpBt7/f3nb0mBGGFwTPM m0/whjVYL5ufi6yM77gdE32stkgyNsydbps3I1Z5NmdJFuAxygjkTJz2rpKTiraM 9N96fFcVj6Ci7o93+fR8OaO56dCT7N93aa3GLqTDeDuq6VhpeM6XgNAKNe5G3nJt KFpYjoZyYL5EG+kdbVCIRzrJ2S38ARKaQy/880qXq06sKsoQ/tGjCEt4bjkF3sEp QO30g9OxX+5vT0VJB2lkWJb61uoNonhjNsJlSgsc3Pntws9CX9DGDORnzMuZxmmc vH25LFj+aEeSjYUSk1i4tw58NQ== -----END CERTIFICATE-----Generated at Wed Nov 5 00:51:22 2025 by rpki-client