$ rpki-client -vvf rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.mft File: FE287030880D0123AC89374793BF7EEEFC18D5AE.mft (raw, json) Hash identifier: sq8ODs76HX5+BUHVmArFssyhD87iPGjAiMtbZ/6mgT0= Subject key identifier: 20:B7:09:D7:03:6C:FA:E1:F6:0A:38:03:A7:E5:3B:13:D7:31:68:E3 Authority key identifier: FE:28:70:30:88:0D:01:23:AC:89:37:47:93:BF:7E:EE:FC:18:D5:AE Certificate issuer: /CN=FE287030880D0123AC89374793BF7EEEFC18D5AE Certificate serial: 212CCD2FCE925C6E7CC339F125A560816D2DF3B4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE287030880D0123AC89374793BF7EEEFC18D5AE.cer Subject info access: rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.mft Manifest number: 0117 Signing time: Sun 02 Nov 2025 20:05:48 +0000 Manifest this update: Sun 02 Nov 2025 20:00:48 +0000 Manifest next update: Mon 03 Nov 2025 20:30:48 +0000 Files and hashes: 1: FE287030880D0123AC89374793BF7EEEFC18D5AE.crl (hash: J/hc4JHV5yIs+7izTNeOEo6bvvj3+ks11VarFRU1XEQ=) 2: 3137302e38332e302e302f32322d3234203d3e20323636343534.roa (hash: 4TY68sdX+Mo5gHLGvqS9qr1JBZWuP4Ku2luvIw18w2s=) 3: 323830343a333831343a3a2f33322d3438203d3e20323636343534.roa (hash: O7R/lVZUvW+Vi4RO6lqsGeyEYmiPdFcPi2Zhc3vQX08=) 4: 3137392e302e3132342e302f32322d3234203d3e20323636343534.roa (hash: ucu5o+cbrrcpLJVtgJQ2wcvE1yU3O/AilPSThMPOcU8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.crl rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE287030880D0123AC89374793BF7EEEFC18D5AE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 20:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:2c:cd:2f:ce:92:5c:6e:7c:c3:39:f1:25:a5:60:81:6d:2d:f3:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE287030880D0123AC89374793BF7EEEFC18D5AE Validity Not Before: Nov 2 20:00:48 2025 GMT Not After : Nov 3 20:30:48 2025 GMT Subject: CN=20B709D7036CFAE1F60A3803A7E53B13D73168E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ce:6f:df:c6:7b:c0:5f:d0:5d:56:70:49:98: d6:eb:5a:e8:cc:26:f2:6c:33:29:1c:15:47:a0:4a: 61:f5:a1:a9:f8:a2:52:6c:f9:80:9b:3c:89:6e:ed: d0:40:9b:71:1f:cd:e9:eb:01:17:38:7d:0b:20:01: 62:6d:60:6a:9e:0a:1c:6b:48:fd:79:4f:f6:7f:f0: 6a:52:4a:02:6a:76:45:cd:9d:03:92:71:9e:32:c0: ef:1b:b7:45:fb:56:80:e1:c7:7f:19:c3:8a:25:76: 32:71:87:ef:2e:8b:fe:7d:14:cc:b4:ad:94:fe:68: f5:1e:96:62:b4:90:76:4d:8b:cd:c1:7c:5b:11:45: 7f:9e:b0:8d:46:3e:2a:8b:c7:b3:48:ad:35:d7:d9: 1d:c4:50:81:9e:af:a4:47:67:68:53:45:e8:28:13: 15:d7:61:23:e0:5e:29:66:f9:42:80:1a:f7:a7:1e: 6b:c7:18:d4:13:61:5e:97:0e:1b:4f:47:b5:a1:5c: d8:c5:cd:3c:52:dd:ff:58:b5:ab:22:34:a5:f2:45: c9:43:f7:58:6a:be:f5:ce:19:10:5b:35:de:49:42: bf:f3:7a:03:b6:60:ed:7b:67:b2:5e:7c:94:15:c4: e1:f8:8b:33:53:41:6f:a5:b9:dc:5c:66:cb:39:4d: a7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B7:09:D7:03:6C:FA:E1:F6:0A:38:03:A7:E5:3B:13:D7:31:68:E3 X509v3 Authority Key Identifier: keyid:FE:28:70:30:88:0D:01:23:AC:89:37:47:93:BF:7E:EE:FC:18:D5:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE287030880D0123AC89374793BF7EEEFC18D5AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2f:b2:17:f8:03:f7:8a:03:2c:00:e8:ed:65:e2:37:d7:61: 25:f4:83:a4:bc:12:d0:d1:49:fd:53:2c:ba:1b:ef:d0:c7:fb: cb:07:8a:a9:32:4c:23:07:45:65:a5:77:ea:d2:ed:fe:57:fb: 74:34:f0:9b:12:a7:35:85:a4:04:36:1d:29:ba:ce:c0:1d:67: a8:d4:ef:1d:b7:80:4c:42:32:16:ae:25:b8:bb:a2:88:02:63: 3d:0c:a7:7d:f0:e5:4a:9e:26:74:b8:16:0c:e8:cb:71:d9:f3: d3:9c:a6:a1:71:41:98:c6:b6:a2:e3:b7:a2:cf:96:66:e0:15: 43:d8:a5:b7:d1:5a:8f:20:e2:fd:46:c2:70:bd:03:50:92:ac: 26:98:7d:94:c8:3a:58:14:f6:0c:b2:49:35:03:43:3f:e4:82: 60:74:d3:f0:a7:aa:aa:6f:26:c0:8d:ce:b0:e7:87:ec:04:6c: c4:23:fd:0c:55:39:ff:db:7d:ce:16:db:a9:cc:c6:75:da:8b: b3:b2:5f:fb:1d:25:35:ee:dc:c0:ec:7f:95:da:fb:32:c6:c6: 18:16:bb:42:32:c6:42:20:dd:92:fb:d2:22:fc:17:e3:14:fd: 3f:b1:ea:21:3a:8c:a5:5e:7e:29:bd:3e:7d:46:6f:01:da:c4: 4d:1a:a6:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUISzNL86SXG58wznxJaVggW0t87QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkUyODcwMzA4ODBEMDEyM0FDODkzNzQ3OTNCRjdFRUVG QzE4RDVBRTAeFw0yNTExMDIyMDAwNDhaFw0yNTExMDMyMDMwNDhaMDMxMTAvBgNV BAMTKDIwQjcwOUQ3MDM2Q0ZBRTFGNjBBMzgwM0E3RTUzQjEzRDczMTY4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvzm/fxnvAX9BdVnBJmNbrWujM JvJsMykcFUegSmH1oan4olJs+YCbPIlu7dBAm3EfzenrARc4fQsgAWJtYGqeChxr SP15T/Z/8GpSSgJqdkXNnQOScZ4ywO8bt0X7VoDhx38Zw4oldjJxh+8ui/59FMy0 rZT+aPUelmK0kHZNi83BfFsRRX+esI1GPiqLx7NIrTXX2R3EUIGer6RHZ2hTRego ExXXYSPgXilm+UKAGvenHmvHGNQTYV6XDhtPR7WhXNjFzTxS3f9YtasiNKXyRclD 91hqvvXOGRBbNd5JQr/zegO2YO17Z7JefJQVxOH4izNTQW+ludxcZss5TadjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUILcJ1wNs+uH2CjgDp+U7E9cxaOMwHwYDVR0j BBgwFoAU/ihwMIgNASOsiTdHk79+7vwY1a4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlhwNWV3aURiQ25GZDN4bkMyVjVwcG1WYWt1WVVZeER3ZHZmWURtd2dk M1MvMC9GRTI4NzAzMDg4MEQwMTIzQUM4OTM3NDc5M0JGN0VFRUZDMThENUFFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFMjg3MDMwODgwRDAxMjNB Qzg5Mzc0NzkzQkY3RUVFRkMxOEQ1QUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlhwNWV3aURiQ25GZDN4bkMyVjVwcG1WYWt1WVVZeER3ZHZmWURtd2dkM1MvMC9G RTI4NzAzMDg4MEQwMTIzQUM4OTM3NDc5M0JGN0VFRUZDMThENUFFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaC+yF/gD94oDLADo7WXiN9dhJfSDpLwS0NFJ/VMsuhvv0Mf7yweKqTJMIwdF ZaV36tLt/lf7dDTwmxKnNYWkBDYdKbrOwB1nqNTvHbeATEIyFq4luLuiiAJjPQyn ffDlSp4mdLgWDOjLcdnz05ymoXFBmMa2ouO3os+WZuAVQ9ilt9FajyDi/UbCcL0D UJKsJph9lMg6WBT2DLJJNQNDP+SCYHTT8Keqqm8mwI3OsOeH7ARsxCP9DFU5/9t9 zhbbqczGddqLs7Jf+x0lNe7cwOx/ldr7MsbGGBa7QjLGQiDdkvvSIvwX4xT9P7Hq ITqMpV5+Kb0+fUZvAdrETRqmdw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:27:56 2025 by rpki-client