$ rpki-client -vvf rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.mft File: C164F89CAD164E696F5070A43F5B84BA8C3F610A.mft (raw, json) Hash identifier: Grw/2JGbhZNbR5VcO3FMhdlbRi+GTAoXRDZ+EiGFClQ= Subject key identifier: 2F:3B:45:79:68:5C:2D:53:D7:98:97:FE:76:9C:D4:1C:C7:AB:C9:E4 Authority key identifier: C1:64:F8:9C:AD:16:4E:69:6F:50:70:A4:3F:5B:84:BA:8C:3F:61:0A Certificate issuer: /CN=C164F89CAD164E696F5070A43F5B84BA8C3F610A Certificate serial: 7D8FFFC8CDE08CC6D89AD01EEC1E7FDF94A1D693 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C164F89CAD164E696F5070A43F5B84BA8C3F610A.cer Subject info access: rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.mft Manifest number: D2 Signing time: Wed 05 Nov 2025 05:49:57 +0000 Manifest this update: Wed 05 Nov 2025 05:44:57 +0000 Manifest next update: Thu 06 Nov 2025 06:36:57 +0000 Files and hashes: 1: C164F89CAD164E696F5070A43F5B84BA8C3F610A.crl (hash: BQU7idj+RvTU4uFK2wzOn5PhHwJ/oAaYi99zT5oSOjc=) 2: 34352e3136362e36372e302f32342d3234203d3e20323637393436.roa (hash: maS4nmFcdiHhy+ZX4S8/5wsNL5C7y3k1hxmjUU8OI0Q=) 3: 34352e3136362e36362e302f32342d3234203d3e20323637393436.roa (hash: RvTdvzlP0x9wP7y2jC1QFa8YosWand47IHE4NO7kAuA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.crl rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C164F89CAD164E696F5070A43F5B84BA8C3F610A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:8f:ff:c8:cd:e0:8c:c6:d8:9a:d0:1e:ec:1e:7f:df:94:a1:d6:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C164F89CAD164E696F5070A43F5B84BA8C3F610A Validity Not Before: Nov 5 05:44:57 2025 GMT Not After : Nov 6 06:36:57 2025 GMT Subject: CN=2F3B4579685C2D53D79897FE769CD41CC7ABC9E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:34:25:9b:1e:73:e4:94:15:52:ed:8f:b5:c6: 00:ac:a5:27:66:56:e1:a3:45:0c:a7:2d:e5:c4:15: 1d:b1:63:93:5e:b9:7b:19:b5:28:ab:b0:dd:55:c7: a5:ad:b0:bc:ec:f1:42:7d:20:8b:4c:ea:2f:2b:33: 05:8c:c4:3d:3f:6a:ea:c2:35:98:30:1b:70:eb:4f: f9:20:83:86:8f:8e:d0:e6:a2:53:1d:36:0e:61:51: 1d:ab:cf:2a:ed:43:55:9f:25:83:f0:71:f2:54:12: c5:f6:58:43:63:a9:4b:81:00:a1:a5:54:ef:39:66: fe:45:01:1f:26:ad:bd:68:19:57:14:5d:ec:e9:27: 15:a3:ac:a5:b1:df:98:77:92:36:f7:24:5d:10:7b: 11:e7:1e:b2:fa:be:57:b7:f8:55:75:85:e5:b2:62: ff:3b:db:3e:27:dd:80:a4:09:7f:c3:5f:13:de:10: 0e:2e:0c:4b:6e:22:1e:51:ea:62:2f:89:11:7f:0e: ea:35:ec:e2:ac:14:30:02:cf:e0:d9:b3:5c:96:c8: b7:80:41:e1:06:6c:de:95:75:0d:cc:06:5f:3c:7c: 7b:28:fc:8e:76:2d:d3:97:c9:f5:6e:cb:1c:31:dd: 77:6b:9b:14:dc:41:8d:82:05:21:f1:72:bd:33:d4: 1b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3B:45:79:68:5C:2D:53:D7:98:97:FE:76:9C:D4:1C:C7:AB:C9:E4 X509v3 Authority Key Identifier: keyid:C1:64:F8:9C:AD:16:4E:69:6F:50:70:A4:3F:5B:84:BA:8C:3F:61:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C164F89CAD164E696F5070A43F5B84BA8C3F610A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:23:12:c8:da:ce:68:05:49:39:d5:25:8c:e2:58:59:35:1f: 71:f6:9f:5e:09:c2:23:70:1d:9a:0a:4b:38:61:19:ac:16:b4: d8:c0:c4:35:33:5f:4d:3d:81:76:5f:9e:c0:a4:60:11:49:f7: df:df:47:54:b8:33:6d:9a:84:e3:5b:6e:69:de:47:27:02:f2: 59:1c:7b:57:9d:c2:60:bb:8a:97:d2:a9:23:bd:7a:fc:87:c8: 78:b7:57:d1:39:04:9e:d5:b8:33:f8:9b:5e:a1:2b:af:84:a7: 38:ad:d8:66:a3:2a:2b:4b:1d:2f:b1:ea:a0:e6:30:a8:ef:59: 51:c3:0c:69:08:ff:bc:d5:2e:1b:bc:64:ec:c8:21:4b:15:8a: f7:60:f8:da:58:fe:fd:e1:24:6e:b7:51:d3:34:3b:26:a9:70: db:3f:27:ee:21:df:b7:60:57:94:1e:b1:83:0b:c8:f9:74:8e: a1:0d:b9:c0:49:09:8d:b8:64:8a:15:55:d0:be:17:62:88:d4: cb:43:f4:a2:aa:69:4e:66:1c:3c:5b:1d:18:b9:78:6a:3f:44: 3b:6f:e1:cf:07:b6:40:22:42:26:c7:f9:3e:15:5d:c7:eb:b3: a8:a2:cf:07:2b:8b:93:89:53:b3:fd:b0:33:c3:3a:1f:9b:bb: 55:1a:2d:1d -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUfY//yM3gjMbYmtAe7B5/35Sh1pMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2NEY4OUNBRDE2NEU2OTZGNTA3MEE0M0Y1Qjg0QkE4 QzNGNjEwQTAeFw0yNTExMDUwNTQ0NTdaFw0yNTExMDYwNjM2NTdaMDMxMTAvBgNV BAMTKDJGM0I0NTc5Njg1QzJENTNENzk4OTdGRTc2OUNENDFDQzdBQkM5RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZNCWbHnPklBVS7Y+1xgCspSdm VuGjRQynLeXEFR2xY5NeuXsZtSirsN1Vx6WtsLzs8UJ9IItM6i8rMwWMxD0/aurC NZgwG3DrT/kgg4aPjtDmolMdNg5hUR2rzyrtQ1WfJYPwcfJUEsX2WENjqUuBAKGl VO85Zv5FAR8mrb1oGVcUXezpJxWjrKWx35h3kjb3JF0QexHnHrL6vle3+FV1heWy Yv872z4n3YCkCX/DXxPeEA4uDEtuIh5R6mIviRF/Duo17OKsFDACz+DZs1yWyLeA QeEGbN6VdQ3MBl88fHso/I52LdOXyfVuyxwx3XdrmxTcQY2CBSHxcr0z1ButAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQULztFeWhcLVPXmJf+dpzUHMeryeQwHwYDVR0j BBgwFoAUwWT4nK0WTmlvUHCkP1uEuow/YQowDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby94ZUhZV2hRR0o1TVBqRVp1WnRwWEF1WXQ0UzFia0pOTG9pWnkza29YbXNI LzAvQzE2NEY4OUNBRDE2NEU2OTZGNTA3MEE0M0Y1Qjg0QkE4QzNGNjEwQS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DMTY0Rjg5Q0FEMTY0RTY5NkY1 MDcwQTQzRjVCODRCQThDM0Y2MTBBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3hl SFlXaFFHSjVNUGpFWnVadHBYQXVZdDRTMWJrSk5Mb2laeTNrb1htc0gvMC9DMTY0 Rjg5Q0FEMTY0RTY5NkY1MDcwQTQzRjVCODRCQThDM0Y2MTBBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA qCMSyNrOaAVJOdUljOJYWTUfcfafXgnCI3AdmgpLOGEZrBa02MDENTNfTT2Bdl+e wKRgEUn3399HVLgzbZqE41tuad5HJwLyWRx7V53CYLuKl9KpI716/IfIeLdX0TkE ntW4M/ibXqErr4SnOK3YZqMqK0sdL7HqoOYwqO9ZUcMMaQj/vNUuG7xk7MghSxWK 92D42lj+/eEkbrdR0zQ7Jqlw2z8n7iHft2BXlB6xgwvI+XSOoQ25wEkJjbhkihVV 0L4XYojUy0P0oqppTmYcPFsdGLl4aj9EO2/hzwe2QCJCJsf5PhVdx+uzqKLPByuL k4lTs/2wM8M6H5u7VRotHQ== -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:25 2025 by rpki-client