$ rpki-client -vvf rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.mft File: 01CC4ED75252A6B3FCFC438848ADDD2DA638308B.mft (raw, json) Hash identifier: rBVOi5WyYRtV5JYrsJhO2VF+VUpWTohFDhlBrCGq64o= Subject key identifier: 82:7A:CA:2F:7A:C2:31:E4:8E:29:34:60:44:6E:1B:E6:9C:0F:6D:75 Authority key identifier: 01:CC:4E:D7:52:52:A6:B3:FC:FC:43:88:48:AD:DD:2D:A6:38:30:8B Certificate issuer: /CN=01CC4ED75252A6B3FCFC438848ADDD2DA638308B Certificate serial: 15A6378BE79D2A0DAE180BB4DC0FEF8412BBB837 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.cer Subject info access: rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.mft Manifest number: 025F Signing time: Wed 05 Nov 2025 03:43:10 +0000 Manifest this update: Wed 05 Nov 2025 03:38:10 +0000 Manifest next update: Thu 06 Nov 2025 06:35:10 +0000 Files and hashes: 1: 01CC4ED75252A6B3FCFC438848ADDD2DA638308B.crl (hash: 6MlqaDG0KExdiVjfzbiKuxAarzGqsWN7mUUS5MbDymI=) 2: 3139312e372e3131322e302f32322d3332203d3e20323634323638.roa (hash: cWavp23qLqgANEwbYyFMQ5YEM9gyFzdA+BDyQSRkIys=) 3: 323830343a323534303a3a2f33322d313238203d3e20323634323638.roa (hash: LtSf2zRxdt6ow6Vhlq6nj+Vq6G9d30OycVXO+ctOcNI=) 4: 3133382e3131382e3137362e302f32322d3332203d3e20323634323638.roa (hash: F1FeDqtmwoS6pmFJIV5oUEd5AGZfISt6MSy2uFXN8mE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.crl rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:a6:37:8b:e7:9d:2a:0d:ae:18:0b:b4:dc:0f:ef:84:12:bb:b8:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01CC4ED75252A6B3FCFC438848ADDD2DA638308B Validity Not Before: Nov 5 03:38:10 2025 GMT Not After : Nov 6 06:35:10 2025 GMT Subject: CN=827ACA2F7AC231E48E293460446E1BE69C0F6D75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f0:13:e1:74:22:95:01:b5:ce:98:10:6c:8b: 2a:49:94:62:10:fd:98:50:50:a6:36:f6:87:d4:33: 2b:ae:a3:06:6f:5f:4a:ee:97:32:19:02:25:1c:75: 0a:f7:79:6f:b2:46:b3:9d:2a:4d:e9:3c:ae:a8:62: f8:22:10:04:eb:9d:23:95:66:c1:3d:69:34:2e:96: 83:26:47:60:3b:98:05:49:c8:96:38:a9:01:d3:cc: 26:7e:35:c9:a1:1e:bb:82:e0:50:0c:57:a2:d2:f9: 3b:59:d8:de:2c:ac:c7:e8:f3:f6:26:8f:cf:e1:1b: ff:3b:fb:d3:69:96:38:74:cb:4c:77:9a:f3:1e:fc: 8c:13:f5:2d:f9:48:4a:1b:70:e0:e3:09:8d:c1:2d: 9f:3a:fe:26:8c:86:de:3a:97:dd:79:36:3c:45:d6: e1:0e:c1:5a:3f:0e:f7:63:9c:c7:67:ec:a1:9e:bf: 55:80:fe:8d:38:b3:82:a2:04:f4:0b:ca:ca:4e:3a: 61:81:0a:3f:24:56:b8:a0:72:d1:2e:81:9f:3a:f9: cf:bb:3e:73:62:21:4b:b2:79:fd:8d:8e:16:fd:c3: c1:55:6d:8c:85:2a:ca:f6:7b:57:6b:6c:08:14:8b: fb:50:65:9a:3c:5d:5b:82:a3:3e:02:0a:9c:6f:f3: e7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7A:CA:2F:7A:C2:31:E4:8E:29:34:60:44:6E:1B:E6:9C:0F:6D:75 X509v3 Authority Key Identifier: keyid:01:CC:4E:D7:52:52:A6:B3:FC:FC:43:88:48:AD:DD:2D:A6:38:30:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d8:cd:65:84:03:98:62:7a:f9:15:11:c9:47:c6:fe:47:59: 1f:2c:9b:94:79:46:2e:71:36:b8:5c:02:0f:66:e0:49:c1:f5: 81:35:b0:bb:89:b5:da:1d:24:c1:f7:1d:6d:2d:55:2c:72:e0: 6b:61:75:f5:09:97:4c:e8:96:f6:66:97:1f:82:b2:20:c7:07: 22:2c:33:04:3c:2b:f8:5b:06:24:a2:e6:d2:2f:56:a6:d5:a3: ad:7f:7c:f3:c9:59:7e:04:13:c1:a9:21:2b:4f:6d:99:93:9c: 5d:89:ed:4f:be:14:6f:6c:55:92:f4:e9:f0:ba:33:84:94:79: 4a:25:4b:78:11:de:26:55:32:4c:59:5d:09:1b:62:6f:d9:0e: d5:2d:28:a5:02:28:67:ac:26:6e:63:5f:f9:93:0f:b8:87:e7: 2f:81:02:bd:50:d0:4e:4d:0e:9a:ac:33:fa:2b:e6:f3:af:45: 53:34:a9:5b:75:a1:9b:7d:fc:cf:f5:e4:2b:db:1f:cc:9b:f3: a4:2c:4f:a1:e3:34:e7:51:91:d4:4d:db:36:cb:82:9a:7a:31: 2f:bf:80:c0:6d:52:10:9e:86:f1:45:2f:3c:85:f2:55:de:6c: 66:8d:04:9d:ca:48:db:40:1c:54:cd:9a:63:3f:14:32:8c:d9: 42:84:bc:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFaY3i+edKg2uGAu03A/vhBK7uDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFDQzRFRDc1MjUyQTZCM0ZDRkM0Mzg4NDhBREREMkRB NjM4MzA4QjAeFw0yNTExMDUwMzM4MTBaFw0yNTExMDYwNjM1MTBaMDMxMTAvBgNV BAMTKDgyN0FDQTJGN0FDMjMxRTQ4RTI5MzQ2MDQ0NkUxQkU2OUMwRjZENzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO8BPhdCKVAbXOmBBsiypJlGIQ /ZhQUKY29ofUMyuuowZvX0rulzIZAiUcdQr3eW+yRrOdKk3pPK6oYvgiEATrnSOV ZsE9aTQuloMmR2A7mAVJyJY4qQHTzCZ+NcmhHruC4FAMV6LS+TtZ2N4srMfo8/Ym j8/hG/87+9Npljh0y0x3mvMe/IwT9S35SEobcODjCY3BLZ86/iaMht46l915NjxF 1uEOwVo/DvdjnMdn7KGev1WA/o04s4KiBPQLyspOOmGBCj8kVrigctEugZ86+c+7 PnNiIUuyef2Njhb9w8FVbYyFKsr2e1drbAgUi/tQZZo8XVuCoz4CCpxv8+cjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgnrKL3rCMeSOKTRgRG4b5pwPbXUwHwYDVR0j BBgwFoAUAcxO11JSprP8/EOISK3dLaY4MIswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDd5aFVEZnVuNFhMRUFlcnk3MW51M2o4eVNjTG1FM2p3MmtKbXZSTnpi OGsvMC8wMUNDNEVENzUyNTJBNkIzRkNGQzQzODg0OEFEREQyREE2MzgzMDhCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQ0M0RUQ3NTI1MkE2QjNG Q0ZDNDM4ODQ4QURERDJEQTYzODMwOEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDd5aFVEZnVuNFhMRUFlcnk3MW51M2o4eVNjTG1FM2p3MmtKbXZSTnpiOGsvMC8w MUNDNEVENzUyNTJBNkIzRkNGQzQzODg0OEFEREQyREE2MzgzMDhCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAatjNZYQDmGJ6+RURyUfG/kdZHyyblHlGLnE2uFwCD2bgScH1gTWwu4m12h0k wfcdbS1VLHLga2F19QmXTOiW9maXH4KyIMcHIiwzBDwr+FsGJKLm0i9WptWjrX98 88lZfgQTwakhK09tmZOcXYntT74Ub2xVkvTp8LozhJR5SiVLeBHeJlUyTFldCRti b9kO1S0opQIoZ6wmbmNf+ZMPuIfnL4ECvVDQTk0Omqwz+ivm869FUzSpW3Whm338 z/XkK9sfzJvzpCxPoeM051GR1E3bNsuCmnoxL7+AwG1SEJ6G8UUvPIXyVd5sZo0E ncpI20AcVM2aYz8UMozZQoS8Yg== -----END CERTIFICATE-----Generated at Wed Nov 5 17:54:47 2025 by rpki-client