$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft File: 0688357ED433C0A60770FB474BDB2C72796B78BD.mft (raw, json) Hash identifier: oA9AS/3yJv1RZJwNEcRtV6MRsRdjqzQPTh5IQNPqKDE= Subject key identifier: 0B:60:B6:DB:94:4D:D0:B5:FB:04:6B:10:6C:21:48:C0:07:98:C7:6B Authority key identifier: 06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD Certificate issuer: /CN=0688357ED433C0A60770FB474BDB2C72796B78BD Certificate serial: 6AF80CC610226FAA2EAB8BF482521F78FEB6A2F1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject info access: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft Manifest number: 010F Signing time: Mon 03 Nov 2025 11:05:17 +0000 Manifest this update: Mon 03 Nov 2025 11:00:16 +0000 Manifest next update: Tue 04 Nov 2025 13:50:16 +0000 Files and hashes: 1: 323830343a316165303a3a2f33322d3634203d3e203631363936.roa (hash: MNi0hCQVw5LiwCn26uDAV8DWpcneKIoS1bbRQFE26gw=) 2: 3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa (hash: IaTZ4i3zNgWw2pTgrax+ua0Htv3rIzLefPo79rSHOwM=) 3: 3133382e33362e3233322e302f32322d3332203d3e203631363936.roa (hash: 0PAGB5C8H6IcqwDv00MSTHzGTYgYIUYZIqOHywJKqvU=) 4: 0688357ED433C0A60770FB474BDB2C72796B78BD.crl (hash: I4cRSCZHgJ62XCC7CENxkoe2FWuHgq2Y65is8PZl1YQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 13:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f8:0c:c6:10:22:6f:aa:2e:ab:8b:f4:82:52:1f:78:fe:b6:a2:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0688357ED433C0A60770FB474BDB2C72796B78BD Validity Not Before: Nov 3 11:00:16 2025 GMT Not After : Nov 4 13:50:16 2025 GMT Subject: CN=0B60B6DB944DD0B5FB046B106C2148C00798C76B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d8:82:be:4f:49:9a:12:09:75:38:29:95:40: e1:33:8c:e2:b8:25:c0:53:8b:c0:9b:59:15:12:f5: 0d:a9:87:8d:c4:ee:b9:08:e6:be:e8:55:e2:fc:51: 39:f2:b0:44:5e:9d:d6:55:aa:f7:28:1f:09:ec:ac: 54:8f:68:ea:c1:98:d1:bb:9b:24:d2:dd:71:c5:c5: a2:28:b7:87:87:d1:35:31:bc:84:99:55:00:8a:0c: 3a:43:56:8b:a8:2f:2b:fe:03:1e:02:63:37:cd:c3: 26:59:01:6a:12:7e:27:c8:6e:14:30:88:0a:7c:c8: 9e:25:33:5a:86:00:f1:52:ab:4d:5e:1f:03:04:c7: 45:d0:e5:36:2d:11:32:40:dc:d9:08:fa:af:56:87: df:51:56:39:5b:5c:42:b7:68:e6:60:52:14:ea:3c: 35:2b:d9:a6:32:cb:72:e4:e2:05:37:fd:76:5a:af: b4:0d:63:9d:b4:3a:a3:96:9b:e0:30:bf:81:db:f9: 86:db:30:a1:f7:1e:85:38:84:62:c4:97:2d:ae:00: 47:86:b0:b4:a2:2e:e4:35:79:34:a3:bf:52:47:7d: f0:e3:7c:42:06:69:8f:80:d5:de:01:a9:a2:47:83: 45:de:dd:82:3b:54:3e:f2:cb:3a:e2:09:71:80:eb: 73:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:60:B6:DB:94:4D:D0:B5:FB:04:6B:10:6C:21:48:C0:07:98:C7:6B X509v3 Authority Key Identifier: keyid:06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ee:93:1d:a8:16:22:06:e6:3b:5e:5f:59:44:b7:67:bf:72: 22:a0:6d:c4:15:b4:7e:49:d9:ee:43:f6:77:fb:a1:f3:8e:41: 9b:cb:f2:e6:c7:25:e2:66:d5:ed:77:a4:5a:50:7d:e9:ee:e9: a2:03:ec:b0:04:de:80:9b:d6:39:dd:f9:2f:57:9b:87:54:c9: 57:29:50:9a:a0:b2:6f:89:9a:1f:fc:e3:71:4a:b3:04:69:78: 0b:2e:89:53:01:86:bb:3b:86:0f:43:25:26:74:eb:1f:09:35: b1:df:57:1b:91:8a:e2:c3:db:f8:3a:79:b8:c1:fa:a3:08:a2: 94:e2:d6:2d:37:12:f8:40:0e:b2:3c:d8:6d:08:78:7c:74:31: 2b:dd:e0:73:96:5e:eb:f4:07:6f:98:05:d6:48:ee:f9:25:a2: e6:b8:f1:cb:0b:6e:cd:89:c3:6a:cd:25:af:bd:a1:32:50:bf: 44:53:3a:ac:f1:47:7c:74:50:b4:7c:f3:07:17:9a:17:cd:50: fa:28:ef:25:42:ee:92:23:c9:1c:3f:e7:8e:e4:7c:3d:72:b5: 4a:09:15:85:2a:21:8b:b9:ba:b5:21:93:36:94:df:23:4d:7c: 08:bf:ea:7a:ef:4a:9f:74:f4:28:30:c7:d0:77:d9:eb:6f:95: 4d:07:97:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUavgMxhAib6ouq4v0glIfeP62ovEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4ODM1N0VENDMzQzBBNjA3NzBGQjQ3NEJEQjJDNzI3 OTZCNzhCRDAeFw0yNTExMDMxMTAwMTZaFw0yNTExMDQxMzUwMTZaMDMxMTAvBgNV BAMTKDBCNjBCNkRCOTQ0REQwQjVGQjA0NkIxMDZDMjE0OEMwMDc5OEM3NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD02IK+T0maEgl1OCmVQOEzjOK4 JcBTi8CbWRUS9Q2ph43E7rkI5r7oVeL8UTnysERendZVqvcoHwnsrFSPaOrBmNG7 myTS3XHFxaIot4eH0TUxvISZVQCKDDpDVouoLyv+Ax4CYzfNwyZZAWoSfifIbhQw iAp8yJ4lM1qGAPFSq01eHwMEx0XQ5TYtETJA3NkI+q9Wh99RVjlbXEK3aOZgUhTq PDUr2aYyy3Lk4gU3/XZar7QNY520OqOWm+Awv4Hb+YbbMKH3HoU4hGLEly2uAEeG sLSiLuQ1eTSjv1JHffDjfEIGaY+A1d4BqaJHg0Xe3YI7VD7yyzriCXGA63NhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUC2C225RN0LX7BGsQbCFIwAeYx2swHwYDVR0j BBgwFoAUBog1ftQzwKYHcPtHS9sscnlreL0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNX c3gvMC8wNjg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODgzNTdFRDQzM0MwQTYw NzcwRkI0NzRCREIyQzcyNzk2Qjc4QkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNXc3gvMC8w Njg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHe6THagWIgbmO15fWUS3Z79yIqBtxBW0fknZ7kP2d/uh845Bm8vy5scl4mbV 7XekWlB96e7pogPssATegJvWOd35L1ebh1TJVylQmqCyb4maH/zjcUqzBGl4Cy6J UwGGuzuGD0MlJnTrHwk1sd9XG5GK4sPb+Dp5uMH6owiilOLWLTcS+EAOsjzYbQh4 fHQxK93gc5Ze6/QHb5gF1kju+SWi5rjxywtuzYnDas0lr72hMlC/RFM6rPFHfHRQ tHzzBxeaF81Q+ijvJULukiPJHD/njuR8PXK1SgkVhSohi7m6tSGTNpTfI018CL/q eu9Kn3T0KDDH0HfZ62+VTQeXBQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:39:40 2025 by rpki-client