$ rpki-client -vvf rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft File: 43230BA37049255C04E85C87D9F4BDD3B9313605.mft (raw, json) Hash identifier: 6Pgc/8T/l8aicT984Lsa1IjUt/FzMxFtB2jIZOFUtVw= Subject key identifier: 1C:2B:3F:54:DF:8A:3F:89:90:34:C6:71:C8:AF:A1:D6:40:EA:BE:AD Authority key identifier: 43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05 Certificate issuer: /CN=43230BA37049255C04E85C87D9F4BDD3B9313605 Certificate serial: 4F0BB441C10267597DE4AD087445A4E6F4CEC764 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer Subject info access: rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft Manifest number: 0303 Signing time: Tue 04 Nov 2025 10:48:35 +0000 Manifest this update: Tue 04 Nov 2025 10:43:35 +0000 Manifest next update: Wed 05 Nov 2025 12:29:35 +0000 Files and hashes: 1: 323830343a313435303a3a2f33322d3438203d3e20323632383631.roa (hash: 5Q9tiHGVOVDCj3G898IWOLh8INUElXpH3eiyHIywpQs=) 2: 3139312e372e3136382e302f32312d3234203d3e20323632383631.roa (hash: 3UlOIp1JXcdTOtyXGjmZSygtLX1mH1cA31Z6zmF/6yE=) 3: 43230BA37049255C04E85C87D9F4BDD3B9313605.crl (hash: Jv2pP5c8hN/uHNDY5h5I2IDCm71ACLFWCEhw3FSZIxo=) 4: 3137372e31302e3232342e302f32312d3234203d3e20323632383631.roa (hash: yDvjRXifxWYJIZTut8sX9MAq2K/UFlRpCJxUt7efohI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 12:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:0b:b4:41:c1:02:67:59:7d:e4:ad:08:74:45:a4:e6:f4:ce:c7:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43230BA37049255C04E85C87D9F4BDD3B9313605 Validity Not Before: Nov 4 10:43:35 2025 GMT Not After : Nov 5 12:29:35 2025 GMT Subject: CN=1C2B3F54DF8A3F899034C671C8AFA1D640EABEAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:df:86:16:1c:df:d8:d2:a2:0a:91:df:c1:96: 3b:a1:82:65:8b:2c:e5:d7:85:a6:d2:5d:58:8f:c4: 03:f8:05:20:30:47:84:cb:31:c6:63:05:2e:04:c6: c7:aa:d4:05:ec:13:0c:dd:b0:8c:2d:40:67:ab:3a: 0f:65:40:62:61:72:8a:e5:7d:75:6b:eb:8d:3d:8d: 5c:f5:fa:74:1f:b8:51:b4:51:c6:e6:10:5c:79:c9: 32:58:f4:2e:24:69:c4:f3:97:6f:b3:63:19:48:ec: 01:2a:f0:7a:f1:e6:0f:58:ea:24:21:33:6c:56:d3: f4:5d:d1:64:d8:c7:fa:a7:5b:33:3e:c5:2b:e7:69: 97:54:cd:8d:f4:b8:fb:40:da:f2:34:8d:ba:6e:42: 21:35:e8:a0:c1:12:68:d5:e5:eb:ad:51:c2:43:45: b9:81:31:17:f7:6f:f2:db:cd:94:ab:af:69:c6:eb: 9f:99:6c:34:87:07:86:63:35:dc:f2:c3:51:f4:d7: 00:9f:27:e8:71:00:35:bc:c9:ea:8f:41:75:1e:f1: dc:f0:82:f2:ec:9b:03:92:ca:0f:6d:7e:0e:60:26: 99:ac:be:13:97:00:25:62:0d:bd:59:cf:74:e9:75: 09:5d:2d:c9:61:44:af:63:4e:d8:40:29:83:a0:ee: c0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2B:3F:54:DF:8A:3F:89:90:34:C6:71:C8:AF:A1:D6:40:EA:BE:AD X509v3 Authority Key Identifier: keyid:43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ec:fb:52:15:b3:4a:8c:9a:64:ec:60:8a:fd:d2:d2:52:20: 99:ce:6e:5a:66:74:30:a7:ca:51:8c:33:83:d0:41:df:47:de: 51:b6:a6:29:c1:b2:c7:62:84:80:15:5d:31:31:6b:6e:a7:5b: a3:51:b5:18:f4:df:02:40:92:31:93:67:38:65:6d:60:f9:4c: 45:2c:1e:08:45:e9:88:6d:3b:97:f0:5d:da:be:a3:81:9b:70: f3:01:03:1f:4d:0b:6d:b8:f0:72:8d:bb:89:7b:12:67:a6:50: 4e:4d:43:0c:fc:95:29:59:4b:e9:05:63:2f:60:1e:07:7e:3d: cb:8e:ec:21:aa:64:f3:66:40:a6:fe:f6:a0:c7:1f:5b:11:07: ce:db:ec:24:72:93:2e:7c:20:af:e6:1e:fa:c1:8c:d3:55:21: e1:82:fe:43:25:33:6c:2c:ef:ab:5f:3b:80:d3:73:8e:18:f5: 0b:71:9d:f5:ab:84:ae:32:98:f8:8b:b6:10:24:e3:4f:35:8b: 22:84:a4:12:86:23:21:d3:43:38:d6:b7:f1:0d:31:bf:e0:f2: 3c:62:4f:5c:87:76:59:cb:f8:68:7c:46:2d:47:ff:ee:a4:6c: 18:ca:bf:05:53:10:f7:0f:45:58:9a:3f:d7:2b:d6:2d:31:47: 63:c5:f6:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTwu0QcECZ1l95K0IdEWk5vTOx2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMyMzBCQTM3MDQ5MjU1QzA0RTg1Qzg3RDlGNEJERDNC OTMxMzYwNTAeFw0yNTExMDQxMDQzMzVaFw0yNTExMDUxMjI5MzVaMDMxMTAvBgNV BAMTKDFDMkIzRjU0REY4QTNGODk5MDM0QzY3MUM4QUZBMUQ2NDBFQUJFQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS34YWHN/Y0qIKkd/BljuhgmWL LOXXhabSXViPxAP4BSAwR4TLMcZjBS4Exseq1AXsEwzdsIwtQGerOg9lQGJhcorl fXVr6409jVz1+nQfuFG0UcbmEFx5yTJY9C4kacTzl2+zYxlI7AEq8Hrx5g9Y6iQh M2xW0/Rd0WTYx/qnWzM+xSvnaZdUzY30uPtA2vI0jbpuQiE16KDBEmjV5eutUcJD RbmBMRf3b/LbzZSrr2nG65+ZbDSHB4ZjNdzyw1H01wCfJ+hxADW8yeqPQXUe8dzw gvLsmwOSyg9tfg5gJpmsvhOXACViDb1Zz3TpdQldLclhRK9jTthAKYOg7sB7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHCs/VN+KP4mQNMZxyK+h1kDqvq0wHwYDVR0j BBgwFoAUQyMLo3BJJVwE6FyH2fS907kxNgUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHR3V0Rpa2R2UjFZWWpVTExCemtFMkJCQlFadVdITGdQdHgxTGgyWUpz cWcvMS80MzIzMEJBMzcwNDkyNTVDMDRFODVDODdEOUY0QkREM0I5MzEzNjA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzMjMwQkEzNzA0OTI1NUMw NEU4NUM4N0Q5RjRCREQzQjkzMTM2MDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHR3V0Rpa2R2UjFZWWpVTExCemtFMkJCQlFadVdITGdQdHgxTGgyWUpzcWcvMS80 MzIzMEJBMzcwNDkyNTVDMDRFODVDODdEOUY0QkREM0I5MzEzNjA1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIez7UhWzSoyaZOxgiv3S0lIgmc5uWmZ0MKfKUYwzg9BB30feUbamKcGyx2KE gBVdMTFrbqdbo1G1GPTfAkCSMZNnOGVtYPlMRSweCEXpiG07l/Bd2r6jgZtw8wED H00Lbbjwco27iXsSZ6ZQTk1DDPyVKVlL6QVjL2AeB349y47sIapk82ZApv72oMcf WxEHztvsJHKTLnwgr+Ye+sGM01Uh4YL+QyUzbCzvq187gNNzjhj1C3Gd9auErjKY +Iu2ECTjTzWLIoSkEoYjIdNDONa38Q0xv+DyPGJPXId2Wcv4aHxGLUf/7qRsGMq/ BVMQ9w9FWJo/1yvWLTFHY8X2pQ== -----END CERTIFICATE-----Generated at Wed Nov 5 01:57:46 2025 by rpki-client