$ rpki-client -vvf rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.mft File: 6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.mft (raw, json) Hash identifier: DK17WsOZNxKcO3pGG/rw7dojQlP4U8OXeun8l86ViHk= Subject key identifier: 03:49:39:EC:9D:F5:0D:0A:A0:16:14:03:37:A0:C5:10:AC:58:79:2B Authority key identifier: 6C:D8:14:79:2F:B1:67:2D:1A:DD:DB:89:AA:31:CD:78:ED:6B:64:2A Certificate issuer: /CN=6CD814792FB1672D1ADDDB89AA31CD78ED6B642A Certificate serial: 2C293775152707B375A2425A0EC456FCBFC97F3E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.cer Subject info access: rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.mft Manifest number: 0300 Signing time: Mon 03 Nov 2025 12:41:37 +0000 Manifest this update: Mon 03 Nov 2025 12:36:37 +0000 Manifest next update: Tue 04 Nov 2025 13:34:37 +0000 Files and hashes: 1: 323830343a363634383a3a2f33322d3332203d3e20323639353436.roa (hash: IQsB4trOqRiSwT/0zl8VAaHPB1ZonM4kRH5gkSbLqCk=) 2: 6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.crl (hash: GtfQvhlegSNijYkltahSzwXJBWRPGxM4vLm4kqQfPB4=) 3: 34352e3138372e35362e302f32322d3234203d3e20323639353436.roa (hash: XVIt/hY/e3kcnL0ZBkGUdXy28j+TynQ/5Mun/BCaU5A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.crl rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 13:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:29:37:75:15:27:07:b3:75:a2:42:5a:0e:c4:56:fc:bf:c9:7f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CD814792FB1672D1ADDDB89AA31CD78ED6B642A Validity Not Before: Nov 3 12:36:37 2025 GMT Not After : Nov 4 13:34:37 2025 GMT Subject: CN=034939EC9DF50D0AA016140337A0C510AC58792B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:fe:e3:17:6d:ee:90:fb:3e:5b:22:1b:01:cc: 46:90:0b:c4:2b:98:65:00:85:51:28:aa:dd:21:31: 2e:fa:11:f3:5e:26:61:14:91:7f:a7:d2:f5:b2:25: 59:63:18:a1:73:d5:59:a6:d7:ad:b0:78:ff:81:45: b9:73:4d:e8:c6:28:11:c4:e8:e8:67:27:06:88:b4: 49:4d:cf:03:a4:4e:b7:8e:e2:ad:24:c2:cd:6b:be: 91:5f:d2:db:96:16:95:71:4c:72:c1:38:5a:b0:a9: d4:ed:d9:00:dc:ad:24:d8:84:1e:29:cb:fa:34:a1: b5:08:88:ff:3a:60:6c:5e:d2:2a:97:9c:4b:51:e9: 53:ca:7a:f5:4f:f0:b3:81:9d:2c:66:e9:75:0d:ca: b3:11:11:e5:c2:85:54:8d:94:7b:68:2b:f7:10:a9: ba:72:94:45:a6:42:e9:a8:3f:09:a8:20:b8:f3:cb: b9:93:7f:41:7b:3a:0c:37:fa:39:e5:3f:e8:16:9a: 0f:a1:c8:bb:68:36:10:73:64:e6:5d:41:e5:f3:2d: fd:d2:73:16:00:44:5f:00:b8:20:75:db:4b:d1:90: 86:e1:d5:a4:c7:f9:d0:03:70:45:c8:c3:b6:1a:8b: e5:28:bb:fd:7d:be:73:a6:f1:0e:ff:9d:6b:2c:4d: 41:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:49:39:EC:9D:F5:0D:0A:A0:16:14:03:37:A0:C5:10:AC:58:79:2B X509v3 Authority Key Identifier: keyid:6C:D8:14:79:2F:B1:67:2D:1A:DD:DB:89:AA:31:CD:78:ED:6B:64:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:0b:ef:1a:e0:11:bb:28:10:9d:b3:5e:fd:78:bf:ee:f5:5c: 3f:1e:10:2b:6a:c3:b9:61:d1:a0:84:13:84:fc:5d:2d:66:48: 72:98:82:ba:2b:22:ad:69:fd:db:06:f6:2e:00:1f:15:88:72: 33:c1:ff:b6:8d:3d:33:7d:89:4c:ae:ab:e1:4f:7e:31:3f:14: 47:a1:56:dd:c7:12:61:74:61:b4:7a:32:9c:4e:e3:74:d1:ae: 65:0a:15:5c:fb:47:7f:f9:e9:38:ce:3f:10:20:d6:cf:ad:52: 70:af:4e:16:82:63:19:3e:74:fb:b2:e3:0b:5f:44:26:b6:ad: fa:cd:3e:75:62:e1:3f:0b:67:62:3a:f7:b9:6d:09:42:8a:90: 13:b5:2f:3f:7c:2c:39:c0:ea:9f:d7:fe:cf:c5:7a:79:bb:2f: bb:b0:88:f6:29:4f:14:4b:00:16:df:84:2a:49:84:de:42:50: e2:40:2f:d3:d1:78:9b:fd:e8:38:dd:82:98:7a:49:70:61:c2: de:79:5c:62:2b:cb:de:07:37:88:15:33:ab:8a:c4:5a:59:50: 5c:bd:aa:ae:4c:08:95:27:7b:51:31:d9:47:06:8c:b1:7d:1f: a9:4b:9b:6c:9e:2e:db:ff:ac:d8:0b:04:8a:a5:67:14:01:b5: 2d:dc:5d:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULCk3dRUnB7N1okJaDsRW/L/Jfz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNEODE0NzkyRkIxNjcyRDFBREREQjg5QUEzMUNENzhF RDZCNjQyQTAeFw0yNTExMDMxMjM2MzdaFw0yNTExMDQxMzM0MzdaMDMxMTAvBgNV BAMTKDAzNDkzOUVDOURGNTBEMEFBMDE2MTQwMzM3QTBDNTEwQUM1ODc5MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr/uMXbe6Q+z5bIhsBzEaQC8Qr mGUAhVEoqt0hMS76EfNeJmEUkX+n0vWyJVljGKFz1Vmm162weP+BRblzTejGKBHE 6OhnJwaItElNzwOkTreO4q0kws1rvpFf0tuWFpVxTHLBOFqwqdTt2QDcrSTYhB4p y/o0obUIiP86YGxe0iqXnEtR6VPKevVP8LOBnSxm6XUNyrMREeXChVSNlHtoK/cQ qbpylEWmQumoPwmoILjzy7mTf0F7Ogw3+jnlP+gWmg+hyLtoNhBzZOZdQeXzLf3S cxYARF8AuCB120vRkIbh1aTH+dADcEXIw7Yai+Uou/19vnOm8Q7/nWssTUFHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUA0k57J31DQqgFhQDN6DFEKxYeSswHwYDVR0j BBgwFoAUbNgUeS+xZy0a3duJqjHNeO1rZCowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzhQRHZaZ3BuNXdQelZlVWU3bUp4NlZXNEduUUVreFVrOXRRclJ0QUZU OHEvMS82Q0Q4MTQ3OTJGQjE2NzJEMUFERERCODlBQTMxQ0Q3OEVENkI2NDJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDRDgxNDc5MkZCMTY3MkQx QUREREI4OUFBMzFDRDc4RUQ2QjY0MkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzhQRHZaZ3BuNXdQelZlVWU3bUp4NlZXNEduUUVreFVrOXRRclJ0QUZUOHEvMS82 Q0Q4MTQ3OTJGQjE2NzJEMUFERERCODlBQTMxQ0Q3OEVENkI2NDJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnAvvGuARuygQnbNe/Xi/7vVcPx4QK2rDuWHRoIQThPxdLWZIcpiCuisirWn9 2wb2LgAfFYhyM8H/to09M32JTK6r4U9+MT8UR6FW3ccSYXRhtHoynE7jdNGuZQoV XPtHf/npOM4/ECDWz61ScK9OFoJjGT50+7LjC19EJrat+s0+dWLhPwtnYjr3uW0J QoqQE7UvP3wsOcDqn9f+z8V6ebsvu7CI9ilPFEsAFt+EKkmE3kJQ4kAv09F4m/3o ON2CmHpJcGHC3nlcYivL3gc3iBUzq4rEWllQXL2qrkwIlSd7UTHZRwaMsX0fqUub bJ4u2/+s2AsEiqVnFAG1LdxdWQ== -----END CERTIFICATE-----Generated at Tue Nov 4 00:25:52 2025 by rpki-client