$ rpki-client -vvf rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.mft File: E3255E24DF417D9D2CF5A8A392C325F09432EA5E.mft (raw, json) Hash identifier: SaW4K6IHQAHw2L+sawsEyVu+8uk6jiejwwyhE/4CMqw= Subject key identifier: AC:96:1F:14:BF:76:B3:87:2A:9A:73:1E:85:D2:E0:37:B8:32:B0:C3 Authority key identifier: E3:25:5E:24:DF:41:7D:9D:2C:F5:A8:A3:92:C3:25:F0:94:32:EA:5E Certificate issuer: /CN=E3255E24DF417D9D2CF5A8A392C325F09432EA5E Certificate serial: 1094C1FBCA557F7ED6D11A1CF4AE7B6CF9658748 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.cer Subject info access: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.mft Manifest number: 71 Signing time: Wed 05 Nov 2025 15:24:37 +0000 Manifest this update: Wed 05 Nov 2025 15:19:37 +0000 Manifest next update: Thu 06 Nov 2025 18:23:37 +0000 Files and hashes: 1: E3255E24DF417D9D2CF5A8A392C325F09432EA5E.crl (hash: ZauPgi8aEE77H9pFqV3bflsfgk9sUN4/ZH6TuGzkD90=) 2: 3137372e38362e34382e302f32312d3332203d3e20323634323136.roa (hash: NvGUNNUTL+Xg6PVrRvuS3md8aJgENDZjmZ80pXSBIOQ=) 3: 323830343a323435383a3a2f33322d313238203d3e20323634323136.roa (hash: MZG1pWatGxwr0+bbifrxZdcTJXpxgFLz7Jve24qeGnY=) 4: 3133382e39392e3139362e302f32322d3332203d3e20323634323136.roa (hash: nUVURxtskxjRDB8bSX5dLhrxDC/gBSXxkl6Cfb+5c+E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.crl rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 18:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:94:c1:fb:ca:55:7f:7e:d6:d1:1a:1c:f4:ae:7b:6c:f9:65:87:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3255E24DF417D9D2CF5A8A392C325F09432EA5E Validity Not Before: Nov 5 15:19:37 2025 GMT Not After : Nov 6 18:23:37 2025 GMT Subject: CN=AC961F14BF76B3872A9A731E85D2E037B832B0C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:05:e4:7f:3c:d2:e3:88:81:a1:ec:fd:e4:29: dc:8e:bd:95:3e:fc:35:de:01:ae:a9:a5:c8:f7:bf: b3:8a:d5:1b:e9:3d:7b:0b:07:7b:ae:99:9d:e7:03: 5a:68:13:e3:7e:ce:8b:13:68:bf:e6:82:49:37:7b: b4:9d:7e:66:ad:71:77:95:c3:34:8e:09:4b:d5:29: e0:18:e8:6f:dd:19:ca:44:d8:bc:2b:ad:03:0e:13: 34:4b:42:36:a9:a0:7a:64:99:17:9a:4d:19:a0:b0: 91:4c:e3:3c:8a:0d:d2:b2:27:42:a4:8a:77:ea:5d: c8:38:32:68:64:6d:04:68:f4:a8:58:70:35:c3:14: 59:36:85:0d:55:6d:45:e3:5e:56:b9:19:76:c4:94: 60:aa:9f:fc:aa:4f:3c:2a:19:7e:cc:21:fb:a7:7a: bb:ef:15:94:f4:64:58:cd:f5:76:87:32:d5:fd:33: f7:3c:36:b8:db:05:41:0f:b6:e1:32:56:92:61:82: 31:38:98:85:66:ec:5f:fe:ef:9f:52:4c:d9:48:f0: 51:71:73:e0:88:3c:fe:98:a5:25:da:c9:0c:5f:fd: d9:62:8c:43:6e:76:08:e5:5c:3f:8d:00:af:f4:c9: 66:a4:4b:c3:52:4a:6d:ff:5a:14:aa:03:88:bf:52: 9d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:96:1F:14:BF:76:B3:87:2A:9A:73:1E:85:D2:E0:37:B8:32:B0:C3 X509v3 Authority Key Identifier: keyid:E3:25:5E:24:DF:41:7D:9D:2C:F5:A8:A3:92:C3:25:F0:94:32:EA:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:93:6d:08:c8:dd:da:24:7d:6c:d1:8f:3c:e0:b8:c3:0d:8c: 66:74:99:3f:38:af:e7:1c:25:0c:f2:c3:f6:fb:16:db:af:1b: cf:53:e4:7b:c1:f1:1e:39:8a:79:a2:87:e5:e9:3d:1b:64:56: f2:ee:de:16:67:44:9f:d3:46:02:1a:1e:96:c3:34:51:a1:f4: a6:af:c5:4a:03:af:0c:25:49:18:0d:00:0c:45:29:f8:da:bd: 96:49:81:5d:85:b6:35:c7:44:49:87:ee:ff:f3:01:c6:d8:3d: 52:40:b0:b9:83:66:56:63:6a:dc:fe:af:35:e9:1b:96:6f:b6: a8:47:21:7a:80:fd:b6:da:d1:dc:e3:a1:4d:a4:7e:f1:fc:dc: 5c:05:fc:87:be:12:fd:b4:28:ab:8f:27:85:7b:7f:6d:b0:51: dc:67:ee:d9:42:49:60:ec:8f:29:12:1e:17:68:90:21:8d:c3: e4:c4:c6:41:ec:8c:af:79:3c:4a:60:60:a3:95:87:fc:ac:fc: 28:9f:41:04:d5:40:1b:f2:ce:9c:f0:5a:b4:c1:68:05:8b:58: c0:32:8d:ec:46:8f:96:89:a1:44:01:c7:6b:50:02:01:e6:a9: 28:d1:bc:2a:f3:3c:5f:4e:16:fc:dc:9f:5e:17:4c:10:78:80: 40:2d:8e:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEJTB+8pVf37W0Roc9K57bPllh0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMyNTVFMjRERjQxN0Q5RDJDRjVBOEEzOTJDMzI1RjA5 NDMyRUE1RTAeFw0yNTExMDUxNTE5MzdaFw0yNTExMDYxODIzMzdaMDMxMTAvBgNV BAMTKEFDOTYxRjE0QkY3NkIzODcyQTlBNzMxRTg1RDJFMDM3QjgzMkIwQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbBeR/PNLjiIGh7P3kKdyOvZU+ /DXeAa6ppcj3v7OK1RvpPXsLB3uumZ3nA1poE+N+zosTaL/mgkk3e7SdfmatcXeV wzSOCUvVKeAY6G/dGcpE2LwrrQMOEzRLQjapoHpkmReaTRmgsJFM4zyKDdKyJ0Kk infqXcg4MmhkbQRo9KhYcDXDFFk2hQ1VbUXjXla5GXbElGCqn/yqTzwqGX7MIfun ervvFZT0ZFjN9XaHMtX9M/c8NrjbBUEPtuEyVpJhgjE4mIVm7F/+759STNlI8FFx c+CIPP6YpSXayQxf/dlijENudgjlXD+NAK/0yWakS8NSSm3/WhSqA4i/Up0fAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrJYfFL92s4cqmnMehdLgN7gysMMwHwYDVR0j BBgwFoAU4yVeJN9BfZ0s9aijksMl8JQy6l4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3dFZnV1VEhnUWNVeGlNWEVOV0t3amZZakxyenN5NVNZUFFhV2JudnJq U1MvMC9FMzI1NUUyNERGNDE3RDlEMkNGNUE4QTM5MkMzMjVGMDk0MzJFQTVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzMjU1RTI0REY0MTdEOUQy Q0Y1QThBMzkyQzMyNUYwOTQzMkVBNUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3dFZnV1VEhnUWNVeGlNWEVOV0t3amZZakxyenN5NVNZUFFhV2JudnJqU1MvMC9F MzI1NUUyNERGNDE3RDlEMkNGNUE4QTM5MkMzMjVGMDk0MzJFQTVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmJNtCMjd2iR9bNGPPOC4ww2MZnSZPziv5xwlDPLD9vsW268bz1Pke8HxHjmK eaKH5ek9G2RW8u7eFmdEn9NGAhoelsM0UaH0pq/FSgOvDCVJGA0ADEUp+Nq9lkmB XYW2NcdESYfu//MBxtg9UkCwuYNmVmNq3P6vNekblm+2qEcheoD9ttrR3OOhTaR+ 8fzcXAX8h74S/bQoq48nhXt/bbBR3Gfu2UJJYOyPKRIeF2iQIY3D5MTGQeyMr3k8 SmBgo5WH/Kz8KJ9BBNVAG/LOnPBatMFoBYtYwDKN7EaPlomhRAHHa1ACAeapKNG8 KvM8X04W/NyfXhdMEHiAQC2OVA== -----END CERTIFICATE-----Generated at Wed Nov 5 23:44:00 2025 by rpki-client