$ rpki-client -vvf rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/FF491384C83663A7F928ABDCFC348DF90A2CEFE1.mft File: FF491384C83663A7F928ABDCFC348DF90A2CEFE1.mft (raw, json) Hash identifier: F8r7s8Ij6iB0dG9CgQiDvx+LwXbO9+dHiNinfWDeaus= Subject key identifier: 06:91:83:CB:F1:F8:9C:C2:28:9C:36:DF:1C:F9:62:06:8A:A5:1A:B7 Authority key identifier: FF:49:13:84:C8:36:63:A7:F9:28:AB:DC:FC:34:8D:F9:0A:2C:EF:E1 Certificate issuer: /CN=FF491384C83663A7F928ABDCFC348DF90A2CEFE1 Certificate serial: 705F80194452A4F741A5915673E9CF489E3F1A8E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF491384C83663A7F928ABDCFC348DF90A2CEFE1.cer Subject info access: rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/FF491384C83663A7F928ABDCFC348DF90A2CEFE1.mft Manifest number: 73 Signing time: Wed 05 Nov 2025 13:56:09 +0000 Manifest this update: Wed 05 Nov 2025 13:51:09 +0000 Manifest next update: Thu 06 Nov 2025 15:38:09 +0000 Files and hashes: 1: 3138372e3132312e3233322e302f32322d3332203d3e20323634313139.roa (hash: P5AtxLgsRF2mTpH7I1hpcCoQOn00XKj68FPsfs0QqAg=) 2: FF491384C83663A7F928ABDCFC348DF90A2CEFE1.crl (hash: huXPXqng+hfzWluzfoFtoWSDoW6yZInakNl7HPd1jXI=) 3: 323830343a323262633a3a2f33322d313238203d3e20323634313139.roa (hash: PoaHg4ZvaTS5hjEfLC9kKpF6iQYKojlPAJZj7UNC/5g=) 4: 3133382e35392e3231362e302f32322d3332203d3e20323634313139.roa (hash: ROEJQGz+F109sV2OhVKcCdMH8z9QoriDUC/c6yrKxnA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/FF491384C83663A7F928ABDCFC348DF90A2CEFE1.crl rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/FF491384C83663A7F928ABDCFC348DF90A2CEFE1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF491384C83663A7F928ABDCFC348DF90A2CEFE1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 15:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:5f:80:19:44:52:a4:f7:41:a5:91:56:73:e9:cf:48:9e:3f:1a:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF491384C83663A7F928ABDCFC348DF90A2CEFE1 Validity Not Before: Nov 5 13:51:09 2025 GMT Not After : Nov 6 15:38:09 2025 GMT Subject: CN=069183CBF1F89CC2289C36DF1CF962068AA51AB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a7:49:07:9d:b1:af:11:46:d1:51:41:5e:df: 64:2f:40:cb:a0:77:f7:a3:87:da:e4:5c:54:cc:bb: ca:2d:01:30:a9:f4:a1:27:6e:93:41:85:4e:80:3f: 78:f2:83:ef:41:46:22:d2:22:61:08:e8:93:08:f1: 83:34:39:9c:7d:d9:a5:40:32:13:0e:ef:25:ca:ff: 73:97:0e:c8:4d:93:38:d4:33:d8:d1:2e:68:1f:2f: e7:7b:c5:ba:a5:d5:05:73:18:ba:90:7f:06:63:d8: dc:3d:1f:83:b5:3d:80:a6:44:82:b0:64:6c:4d:33: 54:68:43:54:ef:8b:cb:2b:f8:2a:b6:bd:56:64:c9: da:7f:42:22:74:60:53:20:b8:2e:0e:1d:8a:ce:c2: 7c:48:dc:b0:fd:80:38:fa:c0:6b:a2:be:2f:e6:02: 46:f9:45:24:9a:79:ff:96:5d:e7:c4:78:5a:40:51: f6:b0:f5:25:f5:6f:df:d3:e1:73:9e:48:53:09:fd: 93:41:5e:8a:be:82:4f:9f:4c:46:58:bd:c5:98:a1: 78:00:c9:5a:c6:69:52:e0:2e:4c:dd:fd:62:62:29: ea:12:ac:ef:81:10:7f:92:04:40:6d:aa:04:c6:9e: d3:92:91:af:44:cd:f7:c3:43:e3:32:21:90:49:cf: c3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:91:83:CB:F1:F8:9C:C2:28:9C:36:DF:1C:F9:62:06:8A:A5:1A:B7 X509v3 Authority Key Identifier: keyid:FF:49:13:84:C8:36:63:A7:F9:28:AB:DC:FC:34:8D:F9:0A:2C:EF:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/FF491384C83663A7F928ABDCFC348DF90A2CEFE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF491384C83663A7F928ABDCFC348DF90A2CEFE1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/FF491384C83663A7F928ABDCFC348DF90A2CEFE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:af:a2:ea:bd:a9:c6:ad:e0:0d:31:18:16:a9:e2:71:b6:ca: 15:25:54:f1:20:9d:60:d5:bc:13:f3:28:80:61:f7:19:98:ea: cd:0d:df:af:d4:c7:ca:01:b3:25:2e:37:75:36:91:d3:2d:e6: 15:77:d7:a2:43:2f:4d:f7:c2:97:50:e1:9a:91:aa:31:bc:17: e5:04:ef:87:7e:73:24:01:ce:5e:8e:df:62:17:c1:a6:82:1a: dc:c7:90:4d:1d:fd:0f:eb:95:f3:a3:6d:86:b7:92:0d:11:f6: b5:98:86:f3:78:1a:f1:74:9e:ce:41:1e:2c:f0:53:38:9a:8a: 1f:f7:f0:2e:86:1f:af:a1:48:4c:5c:e1:93:1c:f9:a1:50:19: 66:ef:b8:fe:01:56:61:44:23:a1:68:ec:df:e2:14:ec:00:36: 0a:b0:c3:78:2e:bc:97:23:02:39:02:3e:aa:c3:07:8b:4b:ba: 6a:d8:9a:b6:31:30:80:f2:41:c1:c0:6b:8b:0b:86:ff:d3:73: 8f:d2:15:c3:a8:96:a0:94:20:0d:6a:26:9a:cc:57:35:b1:b4: 30:85:8d:93:ec:7a:d2:34:6b:a9:80:0b:d2:bb:6e:7e:a8:93: 86:2b:c3:9e:58:d5:20:db:c8:e1:73:75:9a:51:60:3c:34:21: 38:0a:70:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcF+AGURSpPdBpZFWc+nPSJ4/Go4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0OTEzODRDODM2NjNBN0Y5MjhBQkRDRkMzNDhERjkw QTJDRUZFMTAeFw0yNTExMDUxMzUxMDlaFw0yNTExMDYxNTM4MDlaMDMxMTAvBgNV BAMTKDA2OTE4M0NCRjFGODlDQzIyODlDMzZERjFDRjk2MjA2OEFBNTFBQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVp0kHnbGvEUbRUUFe32QvQMug d/ejh9rkXFTMu8otATCp9KEnbpNBhU6AP3jyg+9BRiLSImEI6JMI8YM0OZx92aVA MhMO7yXK/3OXDshNkzjUM9jRLmgfL+d7xbql1QVzGLqQfwZj2Nw9H4O1PYCmRIKw ZGxNM1RoQ1Tvi8sr+Cq2vVZkydp/QiJ0YFMguC4OHYrOwnxI3LD9gDj6wGuivi/m Akb5RSSaef+WXefEeFpAUfaw9SX1b9/T4XOeSFMJ/ZNBXoq+gk+fTEZYvcWYoXgA yVrGaVLgLkzd/WJiKeoSrO+BEH+SBEBtqgTGntOSka9EzffDQ+MyIZBJz8MXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBpGDy/H4nMIonDbfHPliBoqlGrcwHwYDVR0j BBgwFoAU/0kThMg2Y6f5KKvc/DSN+Qos7+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzZTWXlBeGFVYlh5Q3hjWXJSQ1R4eXIxTEVvam5GM3ZyOWVnbjVDQzlV bmovMC9GRjQ5MTM4NEM4MzY2M0E3RjkyOEFCRENGQzM0OERGOTBBMkNFRkUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNDkxMzg0QzgzNjYzQTdG OTI4QUJEQ0ZDMzQ4REY5MEEyQ0VGRTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzZTWXlBeGFVYlh5Q3hjWXJSQ1R4eXIxTEVvam5GM3ZyOWVnbjVDQzlVbmovMC9G RjQ5MTM4NEM4MzY2M0E3RjkyOEFCRENGQzM0OERGOTBBMkNFRkUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHq+i6r2pxq3gDTEYFqnicbbKFSVU8SCdYNW8E/MogGH3GZjqzQ3fr9THygGz JS43dTaR0y3mFXfXokMvTffCl1DhmpGqMbwX5QTvh35zJAHOXo7fYhfBpoIa3MeQ TR39D+uV86NthreSDRH2tZiG83ga8XSezkEeLPBTOJqKH/fwLoYfr6FITFzhkxz5 oVAZZu+4/gFWYUQjoWjs3+IU7AA2CrDDeC68lyMCOQI+qsMHi0u6atiatjEwgPJB wcBriwuG/9Nzj9IVw6iWoJQgDWommsxXNbG0MIWNk+x60jRrqYAL0rtufqiThivD nljVINvI4XN1mlFgPDQhOApw8g== -----END CERTIFICATE-----Generated at Thu Nov 6 07:28:28 2025 by rpki-client