$ rpki-client -vvf rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft File: 0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft (raw, json) Hash identifier: X3C3rNyCleFx+ZhM02rHv87n/2/NDbnUbte99QUzYh0= Subject key identifier: 37:0B:3D:BF:97:05:77:D3:85:4F:C5:A6:02:46:A2:44:FB:56:F9:D6 Authority key identifier: 0A:6C:E4:13:14:DE:D3:33:26:65:E6:9E:87:FF:0E:48:E9:50:B3:A3 Certificate issuer: /CN=0A6CE41314DED3332665E69E87FF0E48E950B3A3 Certificate serial: 0CA542848635D4805751EF00C6F60C03DA3BB80E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft Manifest number: 0301 Signing time: Wed 05 Nov 2025 13:22:28 +0000 Manifest this update: Wed 05 Nov 2025 13:17:28 +0000 Manifest next update: Thu 06 Nov 2025 15:09:28 +0000 Files and hashes: 1: 3230302e3136302e31362e302f32302d3234203d3e203232313438.roa (hash: 7E5vUvNwbvGRD3amrlIDwIFLBLtnwrGhSNKkBs7Mcfg=) 2: 0A6CE41314DED3332665E69E87FF0E48E950B3A3.crl (hash: XuBm74iqD1/92v5J9nTFbxVxewV8vy/i94kT0e79G3M=) 3: 3230302e3136302e31362e302f32302d3234203d3e20313938393439.roa (hash: DlzpjHAgYMSl612O/GXshm7oH8PSv3q9rGm5d9oNZCc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.crl rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 15:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a5:42:84:86:35:d4:80:57:51:ef:00:c6:f6:0c:03:da:3b:b8:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A6CE41314DED3332665E69E87FF0E48E950B3A3 Validity Not Before: Nov 5 13:17:28 2025 GMT Not After : Nov 6 15:09:28 2025 GMT Subject: CN=370B3DBF970577D3854FC5A60246A244FB56F9D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6e:d8:4e:69:1d:e0:1c:4d:d5:30:9c:cb:ba: fc:d3:ba:51:15:ea:1b:ac:81:36:b7:e2:00:dd:29: 5a:28:3c:37:e3:2f:2c:94:a0:92:3a:7d:9e:38:30: 68:1d:18:9f:28:cc:19:f6:3f:bf:bd:8d:04:a6:35: d0:a7:04:62:c9:20:2e:5b:74:c3:0b:32:ff:f1:16: 34:7c:b6:b5:20:7d:48:f5:bb:c4:36:9f:a5:46:70: 1b:2a:9f:f0:62:6e:e8:f1:06:35:63:70:eb:a4:08: 84:62:3b:fe:50:1f:c4:f6:b4:1a:84:70:dd:ab:f3: da:0b:2a:d5:d6:76:5f:90:aa:da:c4:99:f8:b7:b9: 35:7d:24:3a:fc:7f:81:23:ab:d3:2f:86:16:95:61: 99:5a:04:e1:d8:1f:8e:f2:08:e4:3c:5b:96:c7:a5: b4:32:3d:ec:79:40:c6:a0:f4:76:41:42:7d:54:ec: 6a:2c:7d:2d:37:f3:11:d5:24:52:53:5b:e7:6e:6c: 75:2b:ad:2a:57:27:87:d0:02:90:0e:e6:b2:71:64: ff:c1:f1:38:ee:c6:66:e9:df:69:59:97:ab:99:2d: ba:60:45:72:c7:45:4d:19:c0:91:17:64:3a:c0:e6: 5b:b0:a3:e1:5f:e1:88:d3:f8:5e:11:14:47:6d:4f: 02:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0B:3D:BF:97:05:77:D3:85:4F:C5:A6:02:46:A2:44:FB:56:F9:D6 X509v3 Authority Key Identifier: keyid:0A:6C:E4:13:14:DE:D3:33:26:65:E6:9E:87:FF:0E:48:E9:50:B3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f2:54:fd:55:4e:82:ad:74:2d:c9:96:3e:f4:dc:7c:72:64: af:2f:1d:1b:3c:3d:a8:bf:fc:57:cf:77:38:dc:d2:e2:2c:1f: a6:4a:57:be:b3:4c:e0:8f:b4:fc:d7:e5:04:c2:ad:82:a6:e8: 42:40:d8:7c:90:2d:32:88:7b:4b:b5:ce:b2:b4:40:d8:53:a5: 99:ef:e4:8c:4c:38:11:e4:db:97:69:8d:7b:5c:f1:2a:69:c2: 90:a9:1d:0d:02:ee:10:25:95:31:6d:e4:6c:bd:32:45:82:1a: bb:78:11:d3:02:b2:53:9e:8c:be:e0:f3:0b:4a:06:c3:7a:65: 7f:8d:b2:bb:98:60:e2:d8:30:67:b1:e9:2e:0e:b6:39:d5:fd: b6:75:d7:74:6a:bb:fa:c4:5d:3e:e5:f1:48:3c:96:0d:de:ad: bd:60:c5:3f:21:9b:fb:4a:5f:ef:aa:ee:2d:7f:7d:6c:ca:ab: e7:84:3e:ce:3d:b3:87:dc:5a:32:b9:77:ba:22:db:ca:97:72: 39:57:03:e8:3f:81:f2:be:14:fe:67:50:38:44:32:bd:11:67: 6b:16:94:17:04:14:e1:b8:d7:38:b5:04:07:e1:00:02:b0:db: 99:bd:a8:5b:4b:cc:9b:d6:47:df:6d:22:83:5d:fb:75:8a:c7: 5f:a4:73:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDKVChIY11IBXUe8AxvYMA9o7uA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE2Q0U0MTMxNERFRDMzMzI2NjVFNjlFODdGRjBFNDhF OTUwQjNBMzAeFw0yNTExMDUxMzE3MjhaFw0yNTExMDYxNTA5MjhaMDMxMTAvBgNV BAMTKDM3MEIzREJGOTcwNTc3RDM4NTRGQzVBNjAyNDZBMjQ0RkI1NkY5RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCibthOaR3gHE3VMJzLuvzTulEV 6husgTa34gDdKVooPDfjLyyUoJI6fZ44MGgdGJ8ozBn2P7+9jQSmNdCnBGLJIC5b dMMLMv/xFjR8trUgfUj1u8Q2n6VGcBsqn/BibujxBjVjcOukCIRiO/5QH8T2tBqE cN2r89oLKtXWdl+QqtrEmfi3uTV9JDr8f4Ejq9MvhhaVYZlaBOHYH47yCOQ8W5bH pbQyPex5QMag9HZBQn1U7GosfS038xHVJFJTW+dubHUrrSpXJ4fQApAO5rJxZP/B 8Tjuxmbp32lZl6uZLbpgRXLHRU0ZwJEXZDrA5luwo+Ff4YjT+F4RFEdtTwJjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNws9v5cFd9OFT8WmAkaiRPtW+dYwHwYDVR0j BBgwFoAUCmzkExTe0zMmZeaeh/8OSOlQs6MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDNBUWtROXdObjdnZG1TV0F4SGpjN0NqcGlSbWJrTDNRako5eG1pdXdE b3AvMS8wQTZDRTQxMzE0REVEMzMzMjY2NUU2OUU4N0ZGMEU0OEU5NTBCM0EzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBNkNFNDEzMTRERUQzMzMy NjY1RTY5RTg3RkYwRTQ4RTk1MEIzQTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDNBUWtROXdObjdnZG1TV0F4SGpjN0NqcGlSbWJrTDNRako5eG1pdXdEb3AvMS8w QTZDRTQxMzE0REVEMzMzMjY2NUU2OUU4N0ZGMEU0OEU5NTBCM0EzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN/JU/VVOgq10LcmWPvTcfHJkry8dGzw9qL/8V893ONzS4iwfpkpXvrNM4I+0 /NflBMKtgqboQkDYfJAtMoh7S7XOsrRA2FOlme/kjEw4EeTbl2mNe1zxKmnCkKkd DQLuECWVMW3kbL0yRYIau3gR0wKyU56MvuDzC0oGw3plf42yu5hg4tgwZ7HpLg62 OdX9tnXXdGq7+sRdPuXxSDyWDd6tvWDFPyGb+0pf76ruLX99bMqr54Q+zj2zh9xa Mrl3uiLbypdyOVcD6D+B8r4U/mdQOEQyvRFnaxaUFwQU4bjXOLUEB+EAArDbmb2o W0vMm9ZH320ig137dYrHX6RzIA== -----END CERTIFICATE-----Generated at Wed Nov 5 15:24:51 2025 by rpki-client