$ rpki-client -vvf rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.mft File: 883F9EED8D520E746FE5A46BDE2594C335F2E812.mft (raw, json) Hash identifier: +ThLZnAwIBAl66dKrpzzOlHZwHcpBNcZscMjqN5Xy3Y= Subject key identifier: E7:87:08:D6:8C:C4:F5:9C:83:35:64:E7:EE:EB:FF:6A:9A:B2:4E:15 Authority key identifier: 88:3F:9E:ED:8D:52:0E:74:6F:E5:A4:6B:DE:25:94:C3:35:F2:E8:12 Certificate issuer: /CN=883F9EED8D520E746FE5A46BDE2594C335F2E812 Certificate serial: 3F51CDE268A1A180D8C45E0754CCAF088F47C86B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/883F9EED8D520E746FE5A46BDE2594C335F2E812.cer Subject info access: rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.mft Manifest number: 0123 Signing time: Mon 03 Nov 2025 10:35:33 +0000 Manifest this update: Mon 03 Nov 2025 10:30:33 +0000 Manifest next update: Tue 04 Nov 2025 10:38:33 +0000 Files and hashes: 1: 323830343a3936343a3a2f33322d3634203d3e20323633303830.roa (hash: B0HrhdJpYTo2VYADD+2Ul9NZVStdBga+S+kuIKD5omA=) 2: 3138392e3230312e3230382e302f32302d3234203d3e20323633303830.roa (hash: Nls0y4Zm2DiLu/Zj4q9kms0N+iZxmgUscd9aftaApbU=) 3: 3138372e33332e34382e302f32312d3234203d3e20323633303830.roa (hash: mYE0cTsJ4b+O16hTXdYIKlsMEZPCXMwpI8c/O4aS7gI=) 4: 883F9EED8D520E746FE5A46BDE2594C335F2E812.crl (hash: cgzsyxEOQphyJr3kmHCL/r9CsWjxwJGR26zIfQ6SZB4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.crl rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/883F9EED8D520E746FE5A46BDE2594C335F2E812.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 10:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:51:cd:e2:68:a1:a1:80:d8:c4:5e:07:54:cc:af:08:8f:47:c8:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883F9EED8D520E746FE5A46BDE2594C335F2E812 Validity Not Before: Nov 3 10:30:33 2025 GMT Not After : Nov 4 10:38:33 2025 GMT Subject: CN=E78708D68CC4F59C833564E7EEEBFF6A9AB24E15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:db:c5:b9:3c:bd:b6:b1:46:ef:22:99:f6:47: 99:1c:f9:92:15:fb:c5:f8:82:4c:c5:2c:4a:66:f8: ec:a6:fb:79:7f:cb:5f:8c:00:06:36:a9:3f:4c:e7: 64:b7:e3:cb:80:00:31:f5:69:5b:28:dd:d1:e8:a7: c1:cf:fd:dd:d0:04:7f:b6:5a:0a:4f:80:03:ca:3d: e9:0f:ee:21:61:1c:7d:4b:dc:98:aa:48:4c:0b:f2: 65:71:e0:1b:22:4e:a5:6b:7d:6b:67:b5:07:cf:60: 95:1d:42:ba:e7:6e:f4:5f:a1:5c:2c:70:60:f8:ef: 5a:3a:4f:20:16:d3:db:9d:c9:b5:04:30:2d:e4:c0: 19:7c:fe:b2:64:b4:b2:79:a4:d3:d7:e6:0b:26:5b: 32:31:61:2e:25:64:7b:dd:a7:55:da:6c:60:0c:e9: 31:e4:c3:8e:e6:30:e3:bc:43:7d:1a:d0:d7:09:84: 6e:17:3d:42:59:fe:ca:74:bf:9c:c7:fc:ad:72:79: 32:e5:04:49:69:f2:85:0a:e4:89:bb:8b:71:da:81: 3a:43:41:d0:65:73:e4:a3:a1:97:78:b7:dd:46:69: 12:50:23:25:bf:fc:9d:e2:2f:b0:f4:f1:e5:ac:51: f9:d1:db:66:2a:23:f4:01:66:4f:21:36:ac:76:47: 93:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:87:08:D6:8C:C4:F5:9C:83:35:64:E7:EE:EB:FF:6A:9A:B2:4E:15 X509v3 Authority Key Identifier: keyid:88:3F:9E:ED:8D:52:0E:74:6F:E5:A4:6B:DE:25:94:C3:35:F2:E8:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/883F9EED8D520E746FE5A46BDE2594C335F2E812.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:b1:e7:51:ee:0c:98:65:bf:e3:5a:40:10:bc:30:5c:35:cf: 1c:78:42:c5:a6:04:cc:c3:dd:d9:2f:8c:20:93:a2:56:0c:66: 94:92:36:8f:17:17:9e:a6:3d:00:28:e8:2c:18:31:1c:a5:fb: b5:4c:bb:c3:78:3f:ce:53:19:9b:14:2e:0c:43:d4:96:50:47: d8:c1:3c:61:06:81:26:1b:89:f0:74:69:47:94:b8:3b:a9:eb: fd:04:eb:de:ed:07:32:1e:54:8e:3b:7c:36:e9:04:24:b7:9b: 50:7b:e5:17:89:47:d3:59:6b:f4:3d:dc:8f:7c:dd:8e:9f:4d: ae:39:16:ac:84:9b:9b:d6:0b:5e:18:40:b6:95:02:27:46:5a: f3:c7:93:04:97:7a:0b:7f:db:23:b9:76:6c:e8:0f:e2:3c:22: 83:27:2c:19:77:fb:16:3d:8e:0a:b7:21:12:74:e6:25:30:0a: f2:f6:55:79:a1:cd:c2:71:19:6b:61:00:3d:83:ce:07:13:f3: 3b:d2:8d:2d:39:08:d7:6b:77:4e:14:cf:bc:3b:69:d1:a0:c1: 36:bd:71:d3:65:52:93:74:59:39:2f:e9:77:4b:49:6e:d5:12: 7d:cc:46:31:c0:91:52:a4:b1:b7:ba:63:b5:f1:d6:93:c7:05: 40:49:e2:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP1HN4mihoYDYxF4HVMyvCI9HyGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgzRjlFRUQ4RDUyMEU3NDZGRTVBNDZCREUyNTk0QzMz NUYyRTgxMjAeFw0yNTExMDMxMDMwMzNaFw0yNTExMDQxMDM4MzNaMDMxMTAvBgNV BAMTKEU3ODcwOEQ2OENDNEY1OUM4MzM1NjRFN0VFRUJGRjZBOUFCMjRFMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCG28W5PL22sUbvIpn2R5kc+ZIV +8X4gkzFLEpm+Oym+3l/y1+MAAY2qT9M52S348uAADH1aVso3dHop8HP/d3QBH+2 WgpPgAPKPekP7iFhHH1L3JiqSEwL8mVx4BsiTqVrfWtntQfPYJUdQrrnbvRfoVws cGD471o6TyAW09udybUEMC3kwBl8/rJktLJ5pNPX5gsmWzIxYS4lZHvdp1XabGAM 6THkw47mMOO8Q30a0NcJhG4XPUJZ/sp0v5zH/K1yeTLlBElp8oUK5Im7i3HagTpD QdBlc+SjoZd4t91GaRJQIyW//J3iL7D08eWsUfnR22YqI/QBZk8hNqx2R5MtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU54cI1ozE9ZyDNWTn7uv/apqyThUwHwYDVR0j BBgwFoAUiD+e7Y1SDnRv5aRr3iWUwzXy6BIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkFCN1kzVGdTQk5EMVlmTUdDSmFMbUc1UmR3NnV6RWh3bW9Ca05LdnJR VFIvMC84ODNGOUVFRDhENTIwRTc0NkZFNUE0NkJERTI1OTRDMzM1RjJFODEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4M0Y5RUVEOEQ1MjBFNzQ2 RkU1QTQ2QkRFMjU5NEMzMzVGMkU4MTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkFCN1kzVGdTQk5EMVlmTUdDSmFMbUc1UmR3NnV6RWh3bW9Ca05LdnJRVFIvMC84 ODNGOUVFRDhENTIwRTc0NkZFNUE0NkJERTI1OTRDMzM1RjJFODEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvbHnUe4MmGW/41pAELwwXDXPHHhCxaYEzMPd2S+MIJOiVgxmlJI2jxcXnqY9 ACjoLBgxHKX7tUy7w3g/zlMZmxQuDEPUllBH2ME8YQaBJhuJ8HRpR5S4O6nr/QTr 3u0HMh5Ujjt8NukEJLebUHvlF4lH01lr9D3cj3zdjp9NrjkWrISbm9YLXhhAtpUC J0Za88eTBJd6C3/bI7l2bOgP4jwigycsGXf7Fj2OCrchEnTmJTAK8vZVeaHNwnEZ a2EAPYPOBxPzO9KNLTkI12t3ThTPvDtp0aDBNr1x02VSk3RZOS/pd0tJbtUSfcxG McCRUqSxt7pjtfHWk8cFQEniyw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:39:38 2025 by rpki-client