$ rpki-client -vvf rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft File: 7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft (raw, json) Hash identifier: 7YlOFZJL9Xi3R3I4zYdWle+bNPlvReH5lrKANqrEBCY= Subject key identifier: 30:29:16:41:1C:67:2B:85:29:C7:E5:55:3F:CF:6D:1C:B3:81:25:02 Authority key identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 Certificate issuer: /CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1 Certificate serial: 3B6ACA0086305DD37F4FF68E62770F354A4BB54E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer Subject info access: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft Manifest number: 0306 Signing time: Wed 05 Nov 2025 01:02:41 +0000 Manifest this update: Wed 05 Nov 2025 00:57:41 +0000 Manifest next update: Thu 06 Nov 2025 03:37:41 +0000 Files and hashes: 1: 3133382e39372e3130372e302f32342d3234203d3e203533313037.roa (hash: d37RWCzmBlHMXyTEoKWy+EnzDGvUsG4ci+hJH2k1A/Q=) 2: 3133382e39372e3130342e302f32322d3232203d3e203533313037.roa (hash: YxmutoTj6CF7MhqKkZWdp2PcBcnZPzoU+yCAdwcvIH8=) 3: 323830343a323363383a3a2f33322d3332203d3e20323634313832.roa (hash: 3F2e2/DDYn3RX1xMVmaKyyDfXDqpy3jTInAQP0qhGc4=) 4: 7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl (hash: VGcvehRVFECVW39GYLnxkoneFk4/FAJbBwPQxYgkiI0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:6a:ca:00:86:30:5d:d3:7f:4f:f6:8e:62:77:0f:35:4a:4b:b5:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1 Validity Not Before: Nov 5 00:57:41 2025 GMT Not After : Nov 6 03:37:41 2025 GMT Subject: CN=302916411C672B8529C7E5553FCF6D1CB3812502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c3:2e:a0:ad:af:00:71:33:ba:77:cf:47:2d: a1:44:80:0a:a0:de:18:83:6c:49:15:90:f8:28:92: 60:ae:29:6d:69:53:d5:96:b5:4a:38:96:5b:cc:cb: 11:ab:81:ac:f8:27:5d:7f:9d:61:96:f0:17:60:39: 15:ef:f1:5a:9b:5a:7f:7b:b3:89:c4:15:b3:d8:a2: a6:48:6a:26:bd:71:b3:57:46:c3:3d:cc:ea:ea:b0: 5d:e3:2b:04:69:ac:8d:96:42:d7:61:e8:ba:9e:07: cd:96:30:3a:e9:2b:6e:e9:39:42:f2:83:cf:7e:7a: e0:78:ec:c6:16:ec:0a:04:bd:e2:9c:c9:0f:87:f8: 34:fc:29:b0:c0:dc:84:fb:65:f7:dc:d6:89:32:79: e2:18:40:9c:c6:22:16:4a:53:5d:e5:0e:8f:23:3e: f0:1a:0e:a6:09:69:62:83:f5:fe:23:13:a9:f2:d5: 3f:f9:a5:a5:43:e9:52:9c:43:16:59:6f:7c:bd:f5: f6:8b:62:fe:24:c6:49:18:c1:f0:45:41:e3:05:95: 30:9c:03:fa:bd:0f:d4:1b:62:b0:16:46:7e:22:13: 70:c5:f2:e3:81:fd:6e:cb:e5:4f:f4:c2:80:c9:ab: 24:55:74:bf:0f:8d:0d:56:06:f7:41:b2:43:9f:6a: 39:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:29:16:41:1C:67:2B:85:29:C7:E5:55:3F:CF:6D:1C:B3:81:25:02 X509v3 Authority Key Identifier: keyid:71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:56:20:7c:53:65:3d:31:26:1c:5a:0c:c6:69:db:6a:f0:89: d6:12:5d:7a:81:9b:bf:1f:4f:ce:d5:04:f9:fd:e1:74:b7:4c: 93:60:12:a7:e1:ec:bf:d8:a1:e0:3e:a1:ec:4b:9c:c9:65:4f: 39:d0:e4:6a:90:96:62:eb:a5:98:e3:b4:9b:77:80:72:5f:14: 3f:7a:98:24:1a:e6:ea:d4:3b:b4:34:2c:1e:7a:88:07:bd:d3: 68:e9:77:64:10:8f:73:48:d7:a5:b0:62:61:36:15:09:c3:ce: 20:7d:a1:73:16:06:5d:69:c9:81:f5:45:a9:cb:80:9e:84:57: 2b:1c:b3:a5:6f:a3:be:e9:ad:d5:b9:79:8e:06:ca:64:e6:bb: d8:a4:51:54:8c:5f:ae:7c:8c:95:bc:5c:3c:0b:bf:65:d0:e6: e1:6c:aa:1d:1b:50:ab:06:01:19:fe:46:1c:5f:df:9b:2a:55: 4d:d5:53:29:56:b5:68:c5:42:7d:73:2d:c2:cb:71:3d:91:9e: ba:8f:6f:17:17:7f:d6:dc:e3:61:4c:3c:dc:24:c1:26:1d:02: eb:24:7e:f9:69:46:89:ed:96:37:d8:0e:e2:8f:86:4c:fe:3c: 84:6b:b6:17:77:8e:a6:ae:52:96:37:e2:ab:8a:54:c0:c3:d5: ea:c6:4a:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO2rKAIYwXdN/T/aOYncPNUpLtU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEyNUJFRERGRUMyOUMwQTRDRjU5MUU1RUI0MDgzOEJG RTNDN0FDMTAeFw0yNTExMDUwMDU3NDFaFw0yNTExMDYwMzM3NDFaMDMxMTAvBgNV BAMTKDMwMjkxNjQxMUM2NzJCODUyOUM3RTU1NTNGQ0Y2RDFDQjM4MTI1MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+wy6gra8AcTO6d89HLaFEgAqg 3hiDbEkVkPgokmCuKW1pU9WWtUo4llvMyxGrgaz4J11/nWGW8BdgORXv8VqbWn97 s4nEFbPYoqZIaia9cbNXRsM9zOrqsF3jKwRprI2WQtdh6LqeB82WMDrpK27pOULy g89+euB47MYW7AoEveKcyQ+H+DT8KbDA3IT7Zffc1okyeeIYQJzGIhZKU13lDo8j PvAaDqYJaWKD9f4jE6ny1T/5paVD6VKcQxZZb3y99faLYv4kxkkYwfBFQeMFlTCc A/q9D9QbYrAWRn4iE3DF8uOB/W7L5U/0woDJqyRVdL8PjQ1WBvdBskOfajnhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMCkWQRxnK4Upx+VVP89tHLOBJQIwHwYDVR0j BBgwFoAUcSW+3f7CnApM9ZHl60CDi/48esEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEhnSnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRi eksvMS83MTI1QkVEREZFQzI5QzBBNENGNTkxRTVFQjQwODM4QkZFM0M3QUMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxMjVCRURERkVDMjlDMEE0 Q0Y1OTFFNUVCNDA4MzhCRkUzQzdBQzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEhnSnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRieksvMS83 MTI1QkVEREZFQzI5QzBBNENGNTkxRTVFQjQwODM4QkZFM0M3QUMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk1YgfFNlPTEmHFoMxmnbavCJ1hJdeoGbvx9PztUE+f3hdLdMk2ASp+Hsv9ih 4D6h7EucyWVPOdDkapCWYuulmOO0m3eAcl8UP3qYJBrm6tQ7tDQsHnqIB73TaOl3 ZBCPc0jXpbBiYTYVCcPOIH2hcxYGXWnJgfVFqcuAnoRXKxyzpW+jvumt1bl5jgbK ZOa72KRRVIxfrnyMlbxcPAu/ZdDm4WyqHRtQqwYBGf5GHF/fmypVTdVTKVa1aMVC fXMtwstxPZGeuo9vFxd/1tzjYUw83CTBJh0C6yR++WlGie2WN9gO4o+GTP48hGu2 F3eOpq5Sljfiq4pUwMPV6sZK3w== -----END CERTIFICATE-----Generated at Wed Nov 5 09:19:15 2025 by rpki-client