$ rpki-client -vvf rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft File: D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft (raw, json) Hash identifier: 4YRleimNmuu0tUurmfv8Cp0hHf5GLN3IYCfEcNg0NKk= Subject key identifier: 8C:0A:EF:0C:72:6E:87:2B:BA:0E:75:B7:D1:96:F4:11:44:F2:95:EC Authority key identifier: D3:92:D0:6D:AD:0B:A1:CB:86:08:89:04:3C:B2:7A:3A:E1:05:40:B3 Certificate issuer: /CN=D392D06DAD0BA1CB860889043CB27A3AE10540B3 Certificate serial: 0508C43C224204353E1C96827AC8A8300219047E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D392D06DAD0BA1CB860889043CB27A3AE10540B3.cer Subject info access: rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft Manifest number: FB Signing time: Mon 03 Nov 2025 10:58:12 +0000 Manifest this update: Mon 03 Nov 2025 10:53:12 +0000 Manifest next update: Tue 04 Nov 2025 12:32:12 +0000 Files and hashes: 1: 323830343a346133343a3a2f33322d3438203d3e20323637323234.roa (hash: qd8qZxi7tw5baLaDh+jLIXeBIbcnNo/pWA5jPR+866s=) 2: D392D06DAD0BA1CB860889043CB27A3AE10540B3.crl (hash: htvuHCCLpw6Hqx8x6KSm0e3x+/YKhNcjeA0tFN+zz60=) 3: 34352e3233312e3139322e302f32322d3234203d3e20323637323234.roa (hash: tDzwNLhp8MedGTGaNGLtT/Fw0Bl48ELMHEmcdqtlsd4=) 4: 3136382e3139372e302e302f32322d3234203d3e20323634343630.roa (hash: J5DuMAzhx4KoEFlX3DTQKywifQ6ZKpEHcvRsljmOZxs=) 5: 323830343a323030343a3a2f33322d3438203d3e20323634343630.roa (hash: rLhCpfojbkJSBkjdVakfqfdy5v+FGh8VNsiDkLgvf/U=) 6: 3133322e3235352e3130302e302f32322d3234203d3e20323634343630.roa (hash: 8KhBvEK0Q7b5QPyXOAPE1nYaZr6TvetPVI5C2wvYYr8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.crl rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D392D06DAD0BA1CB860889043CB27A3AE10540B3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:08:c4:3c:22:42:04:35:3e:1c:96:82:7a:c8:a8:30:02:19:04:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D392D06DAD0BA1CB860889043CB27A3AE10540B3 Validity Not Before: Nov 3 10:53:12 2025 GMT Not After : Nov 4 12:32:12 2025 GMT Subject: CN=8C0AEF0C726E872BBA0E75B7D196F41144F295EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:68:33:d6:88:02:36:cb:6b:44:ab:7b:6b:89: 95:b4:9f:5c:1f:7f:94:38:3c:b2:4e:c1:98:20:57: ee:06:5e:18:ff:14:3a:7b:db:7f:93:1a:cf:41:fd: 80:f4:07:e4:78:fd:9e:a5:16:f7:64:a8:ec:e4:2a: 1a:5e:84:15:b0:c5:6a:97:be:1d:bc:86:9c:3e:ca: 9a:54:31:32:87:8b:cb:05:22:3a:f6:ec:31:b9:ad: 7e:fe:fc:95:11:06:75:20:dc:a0:43:1c:28:1b:39: e0:e5:cb:5e:84:70:2a:1a:47:d3:d8:9e:f4:dc:71: 65:a0:84:f6:11:95:ba:8e:80:3b:47:2c:80:ba:b8: b5:ea:83:86:ee:d0:7e:52:0c:89:86:6b:76:32:4c: 08:ae:03:de:57:c2:9b:d5:89:b9:55:28:5a:c1:f8: 5a:4d:34:a8:94:17:c9:9f:c0:cf:dc:56:06:98:8e: b4:cd:dd:ce:8e:f7:cf:c0:bf:1e:58:0d:6f:05:30: ee:32:6d:dc:0d:da:f1:b4:aa:32:e1:89:f8:ff:e6: 16:39:c0:e3:b5:1f:dd:10:b8:2f:36:1c:a3:d2:1f: f3:d9:e9:45:55:39:41:89:6f:93:57:0f:24:eb:d7: 2e:f6:c8:59:50:0a:1d:8f:43:83:e7:e4:39:76:9a: 40:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0A:EF:0C:72:6E:87:2B:BA:0E:75:B7:D1:96:F4:11:44:F2:95:EC X509v3 Authority Key Identifier: keyid:D3:92:D0:6D:AD:0B:A1:CB:86:08:89:04:3C:B2:7A:3A:E1:05:40:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D392D06DAD0BA1CB860889043CB27A3AE10540B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:66:e2:03:af:55:b7:00:9c:20:0f:0f:a3:f5:92:1f:86:e4: d7:ab:f3:b5:23:ae:49:7a:10:29:bc:44:36:41:ae:d1:7c:0a: 84:e8:04:68:c0:c3:6b:bb:6b:a1:0e:86:81:f9:ea:30:9e:48: 26:22:0c:85:af:04:bb:8c:f8:60:ae:29:97:50:ec:b7:cb:51: a1:11:02:56:ad:0d:3e:c8:e2:5b:c0:5d:23:34:88:05:1f:31: 4a:d5:bc:22:4d:4f:ec:a6:90:9c:ae:93:e7:a8:09:b7:9a:8e: 20:2e:e9:d2:a0:75:2b:68:af:5a:5f:a0:23:65:41:1d:42:4f: bb:8b:25:c6:cb:ae:12:0b:d1:bc:97:31:e8:c3:b0:a0:5d:f9: 46:1e:7e:64:d8:98:a3:24:a7:28:c6:d3:bc:34:3e:f1:87:10: b2:01:c6:46:d8:1f:d1:72:75:c3:65:ed:7f:ec:32:70:9a:a9: 74:c0:3e:49:5c:51:10:cf:75:24:2d:c2:43:e8:ba:e9:b2:d3: 12:0c:0b:75:9c:26:4a:3f:10:0c:fd:7c:31:fc:4a:49:54:4c: b0:db:29:41:25:83:f8:b1:99:68:38:b3:a3:05:5c:c3:f3:61: d3:b0:27:73:24:34:3a:bb:40:0a:7d:b0:91:e0:d5:c8:7b:17: a4:70:6a:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBQjEPCJCBDU+HJaCesioMAIZBH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5MkQwNkRBRDBCQTFDQjg2MDg4OTA0M0NCMjdBM0FF MTA1NDBCMzAeFw0yNTExMDMxMDUzMTJaFw0yNTExMDQxMjMyMTJaMDMxMTAvBgNV BAMTKDhDMEFFRjBDNzI2RTg3MkJCQTBFNzVCN0QxOTZGNDExNDRGMjk1RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsaDPWiAI2y2tEq3triZW0n1wf f5Q4PLJOwZggV+4GXhj/FDp723+TGs9B/YD0B+R4/Z6lFvdkqOzkKhpehBWwxWqX vh28hpw+yppUMTKHi8sFIjr27DG5rX7+/JURBnUg3KBDHCgbOeDly16EcCoaR9PY nvTccWWghPYRlbqOgDtHLIC6uLXqg4bu0H5SDImGa3YyTAiuA95XwpvViblVKFrB +FpNNKiUF8mfwM/cVgaYjrTN3c6O98/Avx5YDW8FMO4ybdwN2vG0qjLhifj/5hY5 wOO1H90QuC82HKPSH/PZ6UVVOUGJb5NXDyTr1y72yFlQCh2PQ4Pn5Dl2mkAHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjArvDHJuhyu6DnW30Zb0EUTylewwHwYDVR0j BBgwFoAU05LQba0LocuGCIkEPLJ6OuEFQLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzdqRXdON2lQdWtUdVZVMkxFRXM0TG9rVVB4TVFaVlRUWlk2RzdjMU1Y YkYvMC9EMzkyRDA2REFEMEJBMUNCODYwODg5MDQzQ0IyN0EzQUUxMDU0MEIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzOTJEMDZEQUQwQkExQ0I4 NjA4ODkwNDNDQjI3QTNBRTEwNTQwQjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzdqRXdON2lQdWtUdVZVMkxFRXM0TG9rVVB4TVFaVlRUWlk2RzdjMU1YYkYvMC9E MzkyRDA2REFEMEJBMUNCODYwODg5MDQzQ0IyN0EzQUUxMDU0MEIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJGbiA69VtwCcIA8Po/WSH4bk16vztSOuSXoQKbxENkGu0XwKhOgEaMDDa7tr oQ6GgfnqMJ5IJiIMha8Eu4z4YK4pl1Dst8tRoRECVq0NPsjiW8BdIzSIBR8xStW8 Ik1P7KaQnK6T56gJt5qOIC7p0qB1K2ivWl+gI2VBHUJPu4slxsuuEgvRvJcx6MOw oF35Rh5+ZNiYoySnKMbTvDQ+8YcQsgHGRtgf0XJ1w2Xtf+wycJqpdMA+SVxREM91 JC3CQ+i66bLTEgwLdZwmSj8QDP18MfxKSVRMsNspQSWD+LGZaDizowVcw/Nh07An cyQ0OrtACn2wkeDVyHsXpHBq5A== -----END CERTIFICATE-----Generated at Mon Nov 3 12:32:51 2025 by rpki-client