$ rpki-client -vvf rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.mft File: B91DF15E0342DBD1AB58797AF188E016532F7C4E.mft (raw, json) Hash identifier: lFL663U/dQ507y77bhM9iBmBinRfGW6mM184+Gzzoig= Subject key identifier: 0D:B5:3C:71:62:8C:1A:CF:A4:78:E1:40:4A:29:FC:08:31:9D:B9:D9 Authority key identifier: B9:1D:F1:5E:03:42:DB:D1:AB:58:79:7A:F1:88:E0:16:53:2F:7C:4E Certificate issuer: /CN=B91DF15E0342DBD1AB58797AF188E016532F7C4E Certificate serial: 3061A7C0D090367DA5CE131AD68C125A36522F71 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.cer Subject info access: rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.mft Manifest number: 0303 Signing time: Wed 05 Nov 2025 04:55:58 +0000 Manifest this update: Wed 05 Nov 2025 04:50:58 +0000 Manifest next update: Thu 06 Nov 2025 06:41:58 +0000 Files and hashes: 1: B91DF15E0342DBD1AB58797AF188E016532F7C4E.crl (hash: iygAWcyuH2XD6gkbesHGHiKUSp2x7eU8I3+NpQL2gMQ=) 2: 3138372e38342e3132372e302f32342d3234203d3e20323731303333.roa (hash: 3bmEBpuiUnKim8NmMh/PgUVQqKur+c74VzBnlVaevm0=) 3: 3138372e38342e3132362e302f32342d3234203d3e20323731303333.roa (hash: hV4JjPwXo9Ndi/y2NP50rEvDUj9kspp/2cHR4zVBfxA=) 4: 3138372e38342e3132342e302f32342d3234203d3e20323731303333.roa (hash: s9mjxvAHEFRx4whqI63z3tZbT38ZZmApAt9oOrnPBsQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.crl rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:61:a7:c0:d0:90:36:7d:a5:ce:13:1a:d6:8c:12:5a:36:52:2f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B91DF15E0342DBD1AB58797AF188E016532F7C4E Validity Not Before: Nov 5 04:50:58 2025 GMT Not After : Nov 6 06:41:58 2025 GMT Subject: CN=0DB53C71628C1ACFA478E1404A29FC08319DB9D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:57:3c:9f:6c:76:05:7d:61:cc:12:ee:cf:f4: 32:80:3a:b2:9d:3f:3c:0e:3e:fb:a1:17:1b:70:32: a0:67:92:62:05:24:70:e1:61:d9:b6:c9:6d:ff:9b: 5f:d8:cd:ec:43:f5:ca:43:87:6a:6d:27:f9:00:3a: 6c:db:1e:5b:a6:72:e8:0b:47:e5:ff:91:f5:86:29: 46:1c:3e:7b:89:6a:62:5b:a9:73:09:90:23:8c:ea: 65:99:e5:13:6f:ce:13:54:c3:26:31:47:02:54:1d: d6:e3:b2:ee:bf:10:3b:a6:74:67:2d:76:41:c3:6d: f7:da:67:d8:af:25:0c:67:4e:a1:02:33:d5:7d:02: ac:61:09:22:d6:2c:1c:b5:61:ac:0d:53:24:78:59: 0b:95:11:fe:c3:a2:70:b8:76:1b:8d:72:bc:94:c0: 9a:09:41:71:73:52:f1:92:08:26:fd:a3:54:9c:ef: 85:b2:21:a4:d8:e4:66:f4:c8:2d:2f:de:6e:22:c3: 53:79:0f:c3:f4:56:2b:a1:35:f4:1c:17:c8:3b:bd: 20:51:af:2b:d8:de:ea:7e:43:2c:60:19:52:db:4c: 72:f4:b0:95:de:2a:05:de:01:e0:8c:6f:43:d7:d3: 2a:93:b4:c6:cd:42:32:88:ea:e8:96:93:d9:ca:4f: ae:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B5:3C:71:62:8C:1A:CF:A4:78:E1:40:4A:29:FC:08:31:9D:B9:D9 X509v3 Authority Key Identifier: keyid:B9:1D:F1:5E:03:42:DB:D1:AB:58:79:7A:F1:88:E0:16:53:2F:7C:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:bc:7b:4e:b4:08:9d:03:d2:1d:f2:9b:26:3f:f0:78:a3:d1: 80:bf:2c:51:c6:21:10:15:d4:b8:97:1b:88:82:04:d9:03:82: 56:89:86:9a:9e:61:a6:b1:e7:a6:aa:8a:f4:74:04:22:99:b1: 3f:4f:7d:ba:f9:f2:c9:3c:a2:f7:20:f3:85:12:98:37:67:8c: cc:f1:f0:80:2b:87:d1:3d:e5:90:d4:85:40:b8:9f:ac:96:2f: 34:38:1e:b9:49:73:7d:30:f1:d8:87:a2:68:14:43:6e:d7:4d: f0:7a:83:56:d5:97:14:6e:c4:38:41:4b:db:db:e5:7c:45:ce: 5b:1f:0a:44:84:0b:21:c4:f9:aa:12:ee:29:d4:f6:04:6e:56: e2:f3:bd:a7:b5:79:62:95:19:8b:05:7a:99:84:41:05:b3:2c: ed:60:37:08:b9:da:ea:9e:8b:ba:b2:ee:d1:83:63:c4:00:a5: b1:3b:cd:59:eb:fb:5e:97:e3:8f:b3:b5:bd:cc:fd:ed:8b:f7: 0c:1b:fc:6b:ee:f3:20:f7:91:d8:59:61:17:c1:b4:40:40:5e: 8d:be:1f:51:a2:77:94:6e:31:35:91:c7:1a:f6:b5:88:69:fb: d5:2c:f3:9e:d5:b7:82:5a:c0:21:e4:5c:25:99:f5:23:73:82: 40:2a:cc:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMGGnwNCQNn2lzhMa1owSWjZSL3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxREYxNUUwMzQyREJEMUFCNTg3OTdBRjE4OEUwMTY1 MzJGN0M0RTAeFw0yNTExMDUwNDUwNThaFw0yNTExMDYwNjQxNThaMDMxMTAvBgNV BAMTKDBEQjUzQzcxNjI4QzFBQ0ZBNDc4RTE0MDRBMjlGQzA4MzE5REI5RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0VzyfbHYFfWHMEu7P9DKAOrKd PzwOPvuhFxtwMqBnkmIFJHDhYdm2yW3/m1/YzexD9cpDh2ptJ/kAOmzbHlumcugL R+X/kfWGKUYcPnuJamJbqXMJkCOM6mWZ5RNvzhNUwyYxRwJUHdbjsu6/EDumdGct dkHDbffaZ9ivJQxnTqECM9V9AqxhCSLWLBy1YawNUyR4WQuVEf7DonC4dhuNcryU wJoJQXFzUvGSCCb9o1Sc74WyIaTY5Gb0yC0v3m4iw1N5D8P0ViuhNfQcF8g7vSBR ryvY3up+QyxgGVLbTHL0sJXeKgXeAeCMb0PX0yqTtMbNQjKI6uiWk9nKT65VAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDbU8cWKMGs+keOFASin8CDGdudkwHwYDVR0j BBgwFoAUuR3xXgNC29GrWHl68YjgFlMvfE4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFhMbUtHcWd0WnYzVEptcEJ0OHhuN01GOXRmRTRYTkRrcXZSNEcxYVly Z3UvMS9COTFERjE1RTAzNDJEQkQxQUI1ODc5N0FGMTg4RTAxNjUzMkY3QzRFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5MURGMTVFMDM0MkRCRDFB QjU4Nzk3QUYxODhFMDE2NTMyRjdDNEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFhMbUtHcWd0WnYzVEptcEJ0OHhuN01GOXRmRTRYTkRrcXZSNEcxYVlyZ3UvMS9C OTFERjE1RTAzNDJEQkQxQUI1ODc5N0FGMTg4RTAxNjUzMkY3QzRFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATLx7TrQInQPSHfKbJj/weKPRgL8sUcYhEBXUuJcbiIIE2QOCVomGmp5hprHn pqqK9HQEIpmxP099uvnyyTyi9yDzhRKYN2eMzPHwgCuH0T3lkNSFQLifrJYvNDge uUlzfTDx2IeiaBRDbtdN8HqDVtWXFG7EOEFL29vlfEXOWx8KRIQLIcT5qhLuKdT2 BG5W4vO9p7V5YpUZiwV6mYRBBbMs7WA3CLna6p6LurLu0YNjxAClsTvNWev7Xpfj j7O1vcz97Yv3DBv8a+7zIPeR2FlhF8G0QEBejb4fUaJ3lG4xNZHHGva1iGn71Szz ntW3glrAIeRcJZn1I3OCQCrMuA== -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:11 2025 by rpki-client