$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft File: 42361EAB494B759A64EFEB313189F9E2DF6603C8.mft (raw, json) Hash identifier: LGhV4vsU2Gn8rJeqqS2O1MN6qrVZxt0HbStfVm8zL8k= Subject key identifier: CD:E5:E8:F8:3B:B2:8B:BE:6E:D2:97:EE:DC:99:7C:A3:78:A9:C2:B8 Authority key identifier: 42:36:1E:AB:49:4B:75:9A:64:EF:EB:31:31:89:F9:E2:DF:66:03:C8 Certificate issuer: /CN=42361EAB494B759A64EFEB313189F9E2DF6603C8 Certificate serial: 43E02E14F4CE13B3A4B2A23E31D0F9D05B3560AA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft Manifest number: 0307 Signing time: Tue 04 Nov 2025 13:21:36 +0000 Manifest this update: Tue 04 Nov 2025 13:16:36 +0000 Manifest next update: Wed 05 Nov 2025 16:34:36 +0000 Files and hashes: 1: 323830343a323366633a3a2f33322d3438203d3e20323634313936.roa (hash: ENkngCJgmku9h/YUGevS0xZQjyUztj3jNjafQ8PFgic=) 2: 42361EAB494B759A64EFEB313189F9E2DF6603C8.crl (hash: P29bHj2RSRfsEqw8IbUApFKAHTjHgfQq6MwPkmQPko0=) 3: 3133382e39372e3230342e302f32322d3234203d3e20323634313936.roa (hash: IYklB/U3RfE/oKJVLy/Xsr2JbD+zmVsGt59LebpV5y4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.crl rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 16:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:e0:2e:14:f4:ce:13:b3:a4:b2:a2:3e:31:d0:f9:d0:5b:35:60:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42361EAB494B759A64EFEB313189F9E2DF6603C8 Validity Not Before: Nov 4 13:16:36 2025 GMT Not After : Nov 5 16:34:36 2025 GMT Subject: CN=CDE5E8F83BB28BBE6ED297EEDC997CA378A9C2B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fe:41:d9:66:08:76:72:29:f2:e9:a1:de:8a: 9c:1b:45:56:ff:41:c6:1e:e6:0e:42:3e:04:ed:63: fe:27:f5:6e:2e:a2:ba:cd:fa:67:a5:35:54:7f:33: f2:73:94:62:d2:c9:9a:91:a6:85:a4:d9:62:10:8b: 70:46:3e:f7:ff:15:f8:25:c8:39:a1:b1:5d:fa:82: 13:53:0f:0e:92:c1:01:74:57:09:b7:87:4e:4d:f8: dd:ff:90:9b:31:0d:bd:eb:24:f3:23:96:f8:33:f6: 5a:a0:93:13:63:b3:cc:fd:74:3c:3d:63:ff:5b:61: 6b:09:9c:38:2d:02:72:28:4a:32:a5:38:9b:02:29: 54:9b:81:5e:5c:89:22:89:db:98:fb:31:e2:de:f8: ad:42:44:c2:4c:4a:e2:1b:fb:39:d9:b8:29:fa:42: d7:dd:6c:a1:1d:73:2c:4a:b3:b2:82:95:57:f7:2a: 3a:ec:6b:20:a5:2c:18:5c:1b:6c:29:58:4f:7e:90: 89:02:86:d5:ff:66:e4:39:83:12:c7:ac:26:d2:3d: da:ce:a9:26:32:cd:25:8f:fc:30:52:6e:0b:9b:48: b3:48:db:ad:79:57:12:3e:9e:a3:ea:51:52:19:47: bd:02:8f:0f:a6:39:1d:d2:73:ff:57:47:a2:c0:9e: d8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E5:E8:F8:3B:B2:8B:BE:6E:D2:97:EE:DC:99:7C:A3:78:A9:C2:B8 X509v3 Authority Key Identifier: keyid:42:36:1E:AB:49:4B:75:9A:64:EF:EB:31:31:89:F9:E2:DF:66:03:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:8e:9a:61:fe:0e:b7:40:fa:27:f2:0e:ea:e1:44:4d:52:95: d7:16:da:c1:c8:99:ce:2e:d0:3e:b9:fb:f6:91:8e:09:72:32: 5c:f3:6a:ad:77:9b:b9:78:a1:75:17:03:7d:91:b8:cc:e0:79: 94:b8:98:27:0a:7a:5c:51:13:93:74:09:48:5c:1f:89:94:4c: 48:18:1b:52:91:16:63:58:b8:fb:33:ce:40:a2:20:92:9b:6f: 9c:09:59:dd:47:a8:66:1f:b8:e6:ff:01:04:cd:5f:cb:39:5d: 9d:ce:0b:14:46:5e:5a:1c:73:fb:f1:1a:af:bb:4e:b7:77:be: 53:70:87:cc:86:16:f3:39:61:89:73:1b:1f:b3:35:73:40:0e: aa:80:09:b7:91:f9:b6:67:79:81:2d:37:56:bc:e1:bb:57:d3: 13:75:5e:2b:83:ea:ae:be:d4:3b:29:86:11:81:48:ba:f7:e6: 66:f2:5c:7c:fb:6b:b7:c7:fa:2e:55:4c:a8:ea:e8:21:88:02: 16:cc:44:66:88:94:11:db:a3:8e:08:f8:83:32:31:ae:f7:da: fc:f0:14:f6:81:87:49:e0:af:c7:09:e8:eb:b7:0e:5d:db:f5: 92:33:31:3f:1a:3a:7c:73:c3:6e:3c:64:a5:ff:5b:0e:1d:d0: 04:dd:bc:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ+AuFPTOE7OksqI+MdD50Fs1YKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIzNjFFQUI0OTRCNzU5QTY0RUZFQjMxMzE4OUY5RTJE RjY2MDNDODAeFw0yNTExMDQxMzE2MzZaFw0yNTExMDUxNjM0MzZaMDMxMTAvBgNV BAMTKENERTVFOEY4M0JCMjhCQkU2RUQyOTdFRURDOTk3Q0EzNzhBOUMyQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/kHZZgh2ciny6aHeipwbRVb/ QcYe5g5CPgTtY/4n9W4uorrN+melNVR/M/JzlGLSyZqRpoWk2WIQi3BGPvf/Ffgl yDmhsV36ghNTDw6SwQF0Vwm3h05N+N3/kJsxDb3rJPMjlvgz9lqgkxNjs8z9dDw9 Y/9bYWsJnDgtAnIoSjKlOJsCKVSbgV5ciSKJ25j7MeLe+K1CRMJMSuIb+znZuCn6 QtfdbKEdcyxKs7KClVf3KjrsayClLBhcG2wpWE9+kIkChtX/ZuQ5gxLHrCbSPdrO qSYyzSWP/DBSbgubSLNI2615VxI+nqPqUVIZR70Cjw+mOR3Sc/9XR6LAnthnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzeXo+Duyi75u0pfu3Jl8o3ipwrgwHwYDVR0j BBgwFoAUQjYeq0lLdZpk7+sxMYn54t9mA8gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGg4TEs4Rlpxa0ZNbndhVGE5aGd2RkpRTmNIOGhRRXhQamViazR4ZVpD a2cvMS80MjM2MUVBQjQ5NEI3NTlBNjRFRkVCMzEzMTg5RjlFMkRGNjYwM0M4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyMzYxRUFCNDk0Qjc1OUE2 NEVGRUIzMTMxODlGOUUyREY2NjAzQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGg4TEs4Rlpxa0ZNbndhVGE5aGd2RkpRTmNIOGhRRXhQamViazR4ZVpDa2cvMS80 MjM2MUVBQjQ5NEI3NTlBNjRFRkVCMzEzMTg5RjlFMkRGNjYwM0M4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARo6aYf4Ot0D6J/IO6uFETVKV1xbawciZzi7QPrn79pGOCXIyXPNqrXebuXih dRcDfZG4zOB5lLiYJwp6XFETk3QJSFwfiZRMSBgbUpEWY1i4+zPOQKIgkptvnAlZ 3UeoZh+45v8BBM1fyzldnc4LFEZeWhxz+/Ear7tOt3e+U3CHzIYW8zlhiXMbH7M1 c0AOqoAJt5H5tmd5gS03Vrzhu1fTE3VeK4Pqrr7UOymGEYFIuvfmZvJcfPtrt8f6 LlVMqOroIYgCFsxEZoiUEdujjgj4gzIxrvfa/PAU9oGHSeCvxwno67cOXdv1kjMx Pxo6fHPDbjxkpf9bDh3QBN28QA== -----END CERTIFICATE-----Generated at Wed Nov 5 07:37:04 2025 by rpki-client