$ rpki-client -vvf rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.mft File: 697580E8392CC653843C7008AA3115A37A09736A.mft (raw, json) Hash identifier: D9N8d6BuBWJ+/rrIVJmb7LdwYBomPj1g90Pgzled90M= Subject key identifier: E9:AC:AE:5B:B6:E8:CB:16:82:1F:C9:58:FA:7A:B8:95:19:AF:A7:15 Authority key identifier: 69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A Certificate issuer: /CN=697580E8392CC653843C7008AA3115A37A09736A Certificate serial: 561E0B6406CC272AAA9622CB2DAC61C0A73B4002 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer Subject info access: rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.mft Manifest number: 0311 Signing time: Wed 05 Nov 2025 04:50:07 +0000 Manifest this update: Wed 05 Nov 2025 04:45:07 +0000 Manifest next update: Thu 06 Nov 2025 05:49:07 +0000 Files and hashes: 1: 323830343a353636343a3a2f33322d313238203d3e20323637393935.roa (hash: yBJLVY573oMtFcz0CjlfuteQ1wYsu7OGqA7L4vjCAB4=) 2: 34352e3136372e34382e302f32322d3332203d3e20323637393935.roa (hash: 434vOAaxYJM+S1hInfX5jD5BKunos58ASuWuBDgfyNo=) 3: 697580E8392CC653843C7008AA3115A37A09736A.crl (hash: LXq0t4fJjlvgqzm4RdBYFZLQhVvYAHx5WMMctQLhXpM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 05:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:1e:0b:64:06:cc:27:2a:aa:96:22:cb:2d:ac:61:c0:a7:3b:40:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=697580E8392CC653843C7008AA3115A37A09736A Validity Not Before: Nov 5 04:45:07 2025 GMT Not After : Nov 6 05:49:07 2025 GMT Subject: CN=E9ACAE5BB6E8CB16821FC958FA7AB89519AFA715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d5:a0:1d:0e:34:f1:df:8f:07:e6:00:4b:ec: 02:13:53:e3:9c:b5:35:09:c5:85:86:95:c8:d3:05: 7d:4b:4e:c3:10:70:52:6e:35:3c:6f:37:75:36:3c: 29:13:04:43:5a:e0:d7:af:a6:77:41:32:0e:9e:9f: 60:30:11:40:a0:c2:a5:26:98:70:72:04:d9:ab:8b: a7:96:3c:af:a9:fe:9e:a3:e3:00:72:06:17:27:5f: df:c9:67:a2:fb:17:cf:95:cd:1e:53:74:11:2b:56: 4c:bb:70:d1:25:33:06:c5:c3:e5:d3:8b:9f:1f:24: 18:9f:2f:28:9d:85:c8:71:11:04:7c:46:11:22:2f: a2:b8:4a:4c:88:e8:6a:d9:89:8d:78:5d:a8:37:b8: 9d:e4:eb:79:c2:74:0c:28:99:67:a6:87:49:81:b1: ab:5d:86:4d:e3:44:65:3a:e4:03:fb:5e:bc:af:bf: 94:58:97:f8:21:97:48:2f:2b:4d:e0:f5:e7:d0:e9: 73:84:ab:60:de:4f:fd:87:9b:fd:fd:8e:f5:ce:75: 99:48:22:04:e5:f8:00:14:67:fa:6a:a1:59:99:43: d4:e7:6c:68:5b:42:74:cb:2a:e1:b4:cc:17:db:f9: f3:73:4a:06:6f:66:fe:ea:ed:8e:eb:15:15:e2:52: d5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AC:AE:5B:B6:E8:CB:16:82:1F:C9:58:FA:7A:B8:95:19:AF:A7:15 X509v3 Authority Key Identifier: keyid:69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:45:2a:7e:cc:0d:88:01:7d:1a:e4:e7:ca:43:d0:4b:dd:bd: d3:cc:3b:da:b3:bb:bc:39:5e:07:d6:f6:17:72:39:23:fe:a1: 3c:32:f3:f6:ad:e4:a1:ef:20:44:8f:15:bc:7d:01:f6:6f:31: e3:56:ab:c6:3a:ee:ec:f5:22:cc:12:1a:4a:d0:00:cb:46:cb: a0:45:7c:bf:d3:af:f6:cb:ad:c7:af:47:74:de:7e:63:a8:a7: 02:08:ba:94:71:06:19:4a:9b:81:61:e6:79:8f:51:36:7d:07: d6:2b:fd:5a:a8:26:11:68:72:ec:9d:dc:b4:36:a5:b8:6e:2f: 72:b0:0f:f7:f8:c1:9c:09:48:8e:9f:81:57:a7:a5:a7:e9:f5: 24:99:52:5f:50:dc:3d:96:d5:fe:03:3b:a9:7f:e5:b5:c2:c3: 35:ca:b1:3d:c8:2c:86:4b:4e:04:20:7c:34:99:15:fe:af:30: 29:c4:d3:fc:08:85:be:9e:7f:02:73:2e:98:73:4b:4b:f7:19: 45:09:3f:e5:b9:7e:47:2e:76:0b:27:16:61:8e:9c:81:cc:16: 41:ab:92:65:e0:e6:f4:27:a8:52:7b:ce:08:53:cf:2f:c3:e6: 5d:44:93:05:8c:59:96:9f:a6:bb:5c:59:f9:b0:b9:31:46:b7: ac:04:07:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVh4LZAbMJyqqliLLLaxhwKc7QAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk3NTgwRTgzOTJDQzY1Mzg0M0M3MDA4QUEzMTE1QTM3 QTA5NzM2QTAeFw0yNTExMDUwNDQ1MDdaFw0yNTExMDYwNTQ5MDdaMDMxMTAvBgNV BAMTKEU5QUNBRTVCQjZFOENCMTY4MjFGQzk1OEZBN0FCODk1MTlBRkE3MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy1aAdDjTx348H5gBL7AITU+Oc tTUJxYWGlcjTBX1LTsMQcFJuNTxvN3U2PCkTBENa4NevpndBMg6en2AwEUCgwqUm mHByBNmri6eWPK+p/p6j4wByBhcnX9/JZ6L7F8+VzR5TdBErVky7cNElMwbFw+XT i58fJBifLyidhchxEQR8RhEiL6K4SkyI6GrZiY14Xag3uJ3k63nCdAwomWemh0mB satdhk3jRGU65AP7Xryvv5RYl/ghl0gvK03g9efQ6XOEq2DeT/2Hm/39jvXOdZlI IgTl+AAUZ/pqoVmZQ9TnbGhbQnTLKuG0zBfb+fNzSgZvZv7q7Y7rFRXiUtVtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6ayuW7boyxaCH8lY+nq4lRmvpxUwHwYDVR0j BBgwFoAUaXWA6DksxlOEPHAIqjEVo3oJc2owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR1B4b1hhQ2JVZzR6djJKdlI3QW1HU3B2R2ZCOTExRW15NVFqbUJQcWRM ZUgvMS82OTc1ODBFODM5MkNDNjUzODQzQzcwMDhBQTMxMTVBMzdBMDk3MzZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NzU4MEU4MzkyQ0M2NTM4 NDNDNzAwOEFBMzExNUEzN0EwOTczNkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R1B4b1hhQ2JVZzR6djJKdlI3QW1HU3B2R2ZCOTExRW15NVFqbUJQcWRMZUgvMS82 OTc1ODBFODM5MkNDNjUzODQzQzcwMDhBQTMxMTVBMzdBMDk3MzZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALUUqfswNiAF9GuTnykPQS92908w72rO7vDleB9b2F3I5I/6hPDLz9q3koe8g RI8VvH0B9m8x41arxjru7PUizBIaStAAy0bLoEV8v9Ov9sutx69HdN5+Y6inAgi6 lHEGGUqbgWHmeY9RNn0H1iv9WqgmEWhy7J3ctDaluG4vcrAP9/jBnAlIjp+BV6el p+n1JJlSX1DcPZbV/gM7qX/ltcLDNcqxPcgshktOBCB8NJkV/q8wKcTT/AiFvp5/ AnMumHNLS/cZRQk/5bl+Ry52CycWYY6cgcwWQauSZeDm9CeoUnvOCFPPL8PmXUST BYxZlp+mu1xZ+bC5MUa3rAQHGw== -----END CERTIFICATE-----Generated at Wed Nov 5 11:15:13 2025 by rpki-client