$ rpki-client -vvf rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft File: 99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft (raw, json) Hash identifier: iVCIpHnAYH2peAOjG2byZLD3rN4DYm56oDOJQ/SZJD4= Subject key identifier: 0A:18:BA:97:E1:02:91:25:47:74:6E:D0:97:0E:8D:34:A0:27:7D:D1 Authority key identifier: 99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54 Certificate issuer: /CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554 Certificate serial: 35754B21F91E1D5513D22BE50C1A51B10A5576F5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer Subject info access: rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft Manifest number: 0305 Signing time: Wed 05 Nov 2025 15:06:31 +0000 Manifest this update: Wed 05 Nov 2025 15:01:31 +0000 Manifest next update: Thu 06 Nov 2025 18:03:31 +0000 Files and hashes: 1: 3137392e3130372e34382e302f32322d3234203d3e20323633323834.roa (hash: 59L2ncly+4CTUTyhWleTXAijjeUxtcEeHxk7ZbQ1Y/o=) 2: 323830343a313635633a3a2f33322d3438203d3e20323633323834.roa (hash: 2PI5RKymGmz8mUp+uI2zB9l9pOFqFN2mMalTTIpWkw4=) 3: 99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl (hash: HY1Hreajrz3DFbY8Jyb1l8vvswT1XA6K/9//kR0cjlQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 17:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:75:4b:21:f9:1e:1d:55:13:d2:2b:e5:0c:1a:51:b1:0a:55:76:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554 Validity Not Before: Nov 5 15:01:31 2025 GMT Not After : Nov 6 18:03:31 2025 GMT Subject: CN=0A18BA97E102912547746ED0970E8D34A0277DD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ad:a4:c4:c3:08:02:c1:f6:63:cc:5c:2a:a0: f4:51:81:aa:e8:a3:6d:0f:d2:3b:b6:d1:08:42:41: 17:11:a1:dd:fc:17:ec:83:5b:1f:82:1b:3d:d7:fe: 9f:65:c5:d5:e3:11:55:54:96:8c:5e:82:90:60:a6: db:ae:b4:4d:c3:c3:d6:a7:5a:e6:7f:66:9c:47:ed: 0d:e4:a9:34:fc:30:37:0e:cd:13:18:b3:32:05:c3: 5f:a0:ac:20:0d:4c:2b:17:85:8e:4e:c6:ee:b0:2e: 4e:99:76:1c:5f:82:43:86:3c:9e:a9:9e:94:d8:31: e4:5a:77:11:42:3a:b1:ea:d8:61:ec:ea:82:5a:d9: 57:a4:43:07:1c:76:40:ef:88:f4:01:3b:d8:e2:a7: 68:57:c4:c5:fb:03:4d:12:50:27:39:d6:75:d3:ac: 7b:dc:d5:82:a2:c8:ad:30:b3:1c:92:be:23:f4:63: a8:89:31:ba:8f:af:27:91:d2:9f:5e:37:a8:7e:f7: 6e:c1:65:86:6d:45:c9:08:e9:64:5f:7b:01:17:01: ec:20:05:85:58:f4:c0:c7:ac:17:ef:cf:b8:de:28: b0:ad:44:15:26:5d:ac:81:a4:d0:11:be:9b:e8:7c: c7:77:4b:c7:b5:ff:76:fc:11:e9:96:f2:72:9f:55: a1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:18:BA:97:E1:02:91:25:47:74:6E:D0:97:0E:8D:34:A0:27:7D:D1 X509v3 Authority Key Identifier: keyid:99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:fa:76:2e:31:40:d9:0f:54:e3:e2:82:91:e2:29:f8:76:35: 56:29:e3:04:f6:90:f8:cd:64:11:0f:1a:c0:c6:71:c8:38:b6: 76:e2:fd:d2:83:3d:ca:12:37:fe:17:ba:c7:d8:38:bf:a1:16: 4f:d7:e0:48:5f:e8:f7:d6:d7:22:cd:f6:f8:3a:7c:95:3e:23: b3:24:73:e3:92:b9:5e:3b:3f:e2:8f:8b:93:ba:d5:cd:fa:1d: 16:d1:96:70:7c:4d:5e:80:a3:ff:73:7e:c8:67:c0:15:0d:40: 09:18:b5:f6:16:6c:62:e5:e7:56:7b:92:63:89:12:d1:db:72: ad:a2:26:6c:1d:73:2f:2f:15:cc:17:28:0e:58:bd:0f:2e:2b: 69:be:6f:0c:b3:e2:62:2a:c0:76:b1:31:bf:9f:ad:24:72:a0: 3a:43:36:a2:43:6d:04:f4:47:8a:73:a3:b4:db:a9:37:69:5b: 19:f7:3a:6c:17:af:39:aa:5a:ab:c9:80:a4:54:12:1e:b4:ef: 0c:aa:a0:97:8c:e2:44:48:b8:9a:5b:92:e2:f2:36:34:86:eb: f4:6b:42:d4:b3:79:dd:28:66:09:24:d1:e0:65:04:cb:44:96: cf:04:5f:d0:d3:f0:ce:be:dc:45:73:34:3b:c9:d4:29:58:7f: b6:23:b6:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNXVLIfkeHVUT0ivlDBpRsQpVdvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlBOEY1M0YzNDI2Qzk4M0NBODdENUQ3QUNGNkFCNUUx NDM3MTU1NDAeFw0yNTExMDUxNTAxMzFaFw0yNTExMDYxODAzMzFaMDMxMTAvBgNV BAMTKDBBMThCQTk3RTEwMjkxMjU0Nzc0NkVEMDk3MEU4RDM0QTAyNzdERDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbraTEwwgCwfZjzFwqoPRRgaro o20P0ju20QhCQRcRod38F+yDWx+CGz3X/p9lxdXjEVVUloxegpBgptuutE3Dw9an WuZ/ZpxH7Q3kqTT8MDcOzRMYszIFw1+grCANTCsXhY5Oxu6wLk6ZdhxfgkOGPJ6p npTYMeRadxFCOrHq2GHs6oJa2VekQwccdkDviPQBO9jip2hXxMX7A00SUCc51nXT rHvc1YKiyK0wsxySviP0Y6iJMbqPryeR0p9eN6h+927BZYZtRckI6WRfewEXAewg BYVY9MDHrBfvz7jeKLCtRBUmXayBpNARvpvofMd3S8e1/3b8EemW8nKfVaEpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUChi6l+ECkSVHdG7Qlw6NNKAnfdEwHwYDVR0j BBgwFoAUmaj1PzQmyYPKh9XXrParXhQ3FVQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR25HZUREMmJnYk5RSmdkRVp2a3dLTGRIcm9nc0poam16eng5NUVSSnRG aXUvMS85OUE4RjUzRjM0MjZDOTgzQ0E4N0Q1RDdBQ0Y2QUI1RTE0MzcxNTU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5QThGNTNGMzQyNkM5ODND QTg3RDVEN0FDRjZBQjVFMTQzNzE1NTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R25HZUREMmJnYk5RSmdkRVp2a3dLTGRIcm9nc0poam16eng5NUVSSnRGaXUvMS85 OUE4RjUzRjM0MjZDOTgzQ0E4N0Q1RDdBQ0Y2QUI1RTE0MzcxNTU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe/p2LjFA2Q9U4+KCkeIp+HY1VinjBPaQ+M1kEQ8awMZxyDi2duL90oM9yhI3 /he6x9g4v6EWT9fgSF/o99bXIs32+Dp8lT4jsyRz45K5Xjs/4o+Lk7rVzfodFtGW cHxNXoCj/3N+yGfAFQ1ACRi19hZsYuXnVnuSY4kS0dtyraImbB1zLy8VzBcoDli9 Dy4rab5vDLPiYirAdrExv5+tJHKgOkM2okNtBPRHinOjtNupN2lbGfc6bBevOapa q8mApFQSHrTvDKqgl4ziREi4mluS4vI2NIbr9GtC1LN53ShmCSTR4GUEy0SWzwRf 0NPwzr7cRXM0O8nUKVh/tiO26w== -----END CERTIFICATE-----Generated at Wed Nov 5 18:08:45 2025 by rpki-client