$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft File: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft (raw, json) Hash identifier: 6A418K6kv2RLfE8dLBcQfGWmAdIIrAS6DyN+LckPsV8= Subject key identifier: 75:9F:52:D9:31:9A:20:46:60:9F:DE:D9:28:3F:48:D6:C7:81:DE:D3 Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 Certificate issuer: /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Certificate serial: 595EF80EFA646E726426F0695CCD9D130D95ED27 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft Manifest number: 0305 Signing time: Mon 03 Nov 2025 22:35:43 +0000 Manifest this update: Mon 03 Nov 2025 22:30:43 +0000 Manifest next update: Wed 05 Nov 2025 02:12:43 +0000 Files and hashes: 1: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl (hash: Cp3AJiZhkY9nQiVTe9PUMVaAq4GeiGsJZtx1hxPsBc4=) 2: 34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa (hash: uvDWAWwHQEIwaeCaS7oSbgW6akspuwjD8Bob8V00050=) 3: 323830343a346335633a3a2f33322d3438203d3e20323637333636.roa (hash: aBuDzalJjtN6QjODimHKIqdgYVt/ZmaeAC/ItTdnYZs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 02:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5e:f8:0e:fa:64:6e:72:64:26:f0:69:5c:cd:9d:13:0d:95:ed:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Validity Not Before: Nov 3 22:30:43 2025 GMT Not After : Nov 5 02:12:43 2025 GMT Subject: CN=759F52D9319A2046609FDED9283F48D6C781DED3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9c:6b:68:1c:b9:41:b2:ec:f3:5d:b6:3f:06: 70:e3:e8:a6:51:81:aa:1e:a8:e7:67:96:92:5d:3f: ad:4e:f5:5a:83:c8:93:c6:01:ce:40:6a:bf:0b:33: 11:78:11:b8:07:eb:61:c5:98:44:ae:88:ff:8e:f3: 1e:a1:29:e4:69:9b:a7:51:55:a0:d4:2d:f7:5a:34: 0d:10:f9:1e:66:85:df:ea:54:07:b1:a0:51:36:98: a8:7f:37:0b:5c:c3:73:ee:f8:45:10:27:97:01:95: c8:a5:f2:10:6d:3c:d2:4e:e1:89:47:88:f3:eb:82: e4:e2:42:cf:c6:08:15:58:6e:58:f5:00:31:9b:09: 40:ac:87:33:9f:30:8d:61:86:24:6c:a7:98:7f:f6: 74:44:6f:58:09:80:a2:6a:d9:6a:56:35:25:ac:82: 1f:01:4e:29:ef:4b:ad:ae:8d:63:90:e3:1c:db:f4: bb:7a:7a:a5:90:11:1e:9d:6a:8d:df:26:02:2a:b1: 0d:ea:a6:2e:06:4c:ce:d7:b1:34:ed:35:76:31:df: f0:4b:2c:32:6b:c2:6f:0e:dd:f1:06:fb:e0:e1:82: 0d:16:c8:15:82:bf:fc:74:a7:72:9d:22:db:7d:ba: bb:97:1c:8f:53:44:a4:a2:9d:0f:cf:d7:9c:20:22: d3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9F:52:D9:31:9A:20:46:60:9F:DE:D9:28:3F:48:D6:C7:81:DE:D3 X509v3 Authority Key Identifier: keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:1d:e0:13:be:e1:b9:f9:a2:55:8a:b2:15:c4:be:7b:36:ff: d3:eb:61:c2:ed:ac:ed:88:77:cd:42:5f:ea:75:31:32:1c:60: 74:ca:87:97:49:41:3b:39:8d:bd:32:70:df:1b:23:9e:6e:2e: eb:d6:6c:df:4d:51:2d:af:36:bf:79:19:39:c3:cb:12:0e:57: a5:91:f0:4b:84:7f:0d:74:11:14:54:65:3a:23:b3:77:ef:66: 42:48:f8:3d:ab:67:17:64:93:b1:37:bb:69:72:19:f9:60:c6: d6:80:fd:fc:65:6b:a7:90:c8:92:d1:db:69:86:d8:56:93:4c: 80:55:c9:80:7f:97:25:48:37:60:8c:47:eb:8a:9a:09:16:14: 73:e2:4c:bd:2d:bd:49:5c:47:36:ee:59:46:07:55:23:01:82: bf:3a:c8:12:23:e8:ad:a6:7a:21:a6:4f:f6:04:a2:37:ba:3e: f4:02:df:62:e0:1b:6d:d2:8c:38:bd:12:36:a2:18:00:dd:31: 5b:05:17:90:15:76:28:60:cb:32:ab:e6:33:a3:8d:b4:86:f5: bc:a6:e4:2b:6c:6d:5b:e2:7d:4a:01:28:93:42:e3:27:37:ae: 2b:0e:86:f8:9b:bb:02:45:fe:58:64:ac:d9:c0:2a:a3:e2:55: bb:85:36:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWV74DvpkbnJkJvBpXM2dEw2V7ScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMEFFNjNFRDk5MTI0RjdEM0YxNEI4RkE5QzFGRjM3 ODAwNjdDMjAeFw0yNTExMDMyMjMwNDNaFw0yNTExMDUwMjEyNDNaMDMxMTAvBgNV BAMTKDc1OUY1MkQ5MzE5QTIwNDY2MDlGREVEOTI4M0Y0OEQ2Qzc4MURFRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCinGtoHLlBsuzzXbY/BnDj6KZR gaoeqOdnlpJdP61O9VqDyJPGAc5Aar8LMxF4EbgH62HFmESuiP+O8x6hKeRpm6dR VaDULfdaNA0Q+R5mhd/qVAexoFE2mKh/Nwtcw3Pu+EUQJ5cBlcil8hBtPNJO4YlH iPPrguTiQs/GCBVYblj1ADGbCUCshzOfMI1hhiRsp5h/9nREb1gJgKJq2WpWNSWs gh8BTinvS62ujWOQ4xzb9Lt6eqWQER6dao3fJgIqsQ3qpi4GTM7XsTTtNXYx3/BL LDJrwm8O3fEG++Dhgg0WyBWCv/x0p3KdItt9uruXHI9TRKSinQ/P15wgItPfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdZ9S2TGaIEZgn97ZKD9I1seB3tMwHwYDVR0j BBgwFoAU9CCuY+2ZEk99PxS4+pwf83gAZ8IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhH MWYvMC9GNDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0MjBBRTYzRUQ5OTEyNEY3 RDNGMTRCOEZBOUMxRkYzNzgwMDY3QzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhHMWYvMC9G NDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIx3gE77hufmiVYqyFcS+ezb/0+thwu2s7Yh3zUJf6nUxMhxgdMqHl0lBOzmN vTJw3xsjnm4u69Zs301RLa82v3kZOcPLEg5XpZHwS4R/DXQRFFRlOiOzd+9mQkj4 PatnF2STsTe7aXIZ+WDG1oD9/GVrp5DIktHbaYbYVpNMgFXJgH+XJUg3YIxH64qa CRYUc+JMvS29SVxHNu5ZRgdVIwGCvzrIEiPoraZ6IaZP9gSiN7o+9ALfYuAbbdKM OL0SNqIYAN0xWwUXkBV2KGDLMqvmM6ONtIb1vKbkK2xtW+J9SgEok0LjJzeuKw6G +Ju7AkX+WGSs2cAqo+JVu4U2Qg== -----END CERTIFICATE-----Generated at Tue Nov 4 06:21:16 2025 by rpki-client