$ rpki-client -vvf rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft File: 43897DFF118E56C31A35958D9EA818504B130E11.mft (raw, json) Hash identifier: dVnlX/Ra/G4aO8b4CBrtYHHYci6oJBeELhs65AbI87g= Subject key identifier: A1:85:BD:86:C4:A3:07:99:00:9D:38:AA:CD:90:A6:D0:74:24:72:3F Authority key identifier: 43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11 Certificate issuer: /CN=43897DFF118E56C31A35958D9EA818504B130E11 Certificate serial: 45C7EECBECAE624019CEE5B25B10930DD182231A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer Subject info access: rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft Manifest number: 02E3 Signing time: Mon 03 Nov 2025 02:16:05 +0000 Manifest this update: Mon 03 Nov 2025 02:11:05 +0000 Manifest next update: Tue 04 Nov 2025 04:28:05 +0000 Files and hashes: 1: 43897DFF118E56C31A35958D9EA818504B130E11.crl (hash: H1AW9Oex57gZ5Hlr8Rv5a3TO/sPEBvzmfou1rsIpOS0=) 2: 323830343a363935633a3a2f33322d3430203d3e20323730323635.roa (hash: 7dYPTrKAi61IYALwp4StVtHMzIcECDDN9J/7R5yuyAg=) 3: 3230302e3130382e3136342e302f32322d3234203d3e20323730323635.roa (hash: /O80p7I/BsID3L+7Tx/zgFUSWMrzsJTiDGJmySOhPvQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 04:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c7:ee:cb:ec:ae:62:40:19:ce:e5:b2:5b:10:93:0d:d1:82:23:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43897DFF118E56C31A35958D9EA818504B130E11 Validity Not Before: Nov 3 02:11:05 2025 GMT Not After : Nov 4 04:28:05 2025 GMT Subject: CN=A185BD86C4A30799009D38AACD90A6D07424723F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5b:96:6e:4c:20:0e:44:f7:a6:01:67:23:f5: f3:4f:6e:bd:77:df:29:c7:1d:7a:c7:4f:e5:20:aa: db:7f:c8:87:d1:53:df:06:98:8f:9d:c9:55:ea:25: 22:a5:f5:d4:4e:5f:e5:8e:b1:c9:75:34:87:25:f9: e9:36:6d:d1:69:08:61:56:c0:95:01:50:ab:db:c6: 5c:4a:2b:fb:61:5b:0a:88:85:3c:d6:cf:b8:ef:48: 8b:70:9d:bf:45:f8:9d:be:37:89:be:0f:b2:46:a9: 53:05:05:9c:14:61:aa:ba:3e:1a:f9:a6:49:fe:bb: 8d:65:f5:ed:bf:59:b5:02:65:b9:9c:dc:50:7a:29: 9a:58:1a:77:2c:e7:41:47:9d:0a:4c:0e:56:77:16: 7a:26:3f:2b:4d:03:ae:4f:da:ab:9c:ee:1e:0e:32: 55:02:c1:42:d8:78:a8:2d:21:03:5d:ef:e3:09:1c: 99:6c:72:38:e2:5e:00:3f:17:14:bc:42:15:2d:28: 2e:88:39:25:a9:c8:df:75:9d:5d:42:30:af:54:94: 82:bc:54:53:d2:10:83:2e:60:48:f3:af:39:e4:9f: c9:a2:e4:02:54:b3:f6:6e:26:c3:3b:de:81:b0:49: 56:8a:0b:cd:0f:65:38:3a:ae:b1:ef:a5:5c:1e:fe: 7d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:85:BD:86:C4:A3:07:99:00:9D:38:AA:CD:90:A6:D0:74:24:72:3F X509v3 Authority Key Identifier: keyid:43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:33:40:92:f1:bf:22:21:b0:8b:39:de:46:8b:4f:f2:3d:32: 18:5a:b7:9b:71:5e:49:57:6c:1e:b9:bc:92:d7:ae:d9:bf:d0: 07:03:b6:06:07:17:18:5f:1c:7d:04:a6:74:fc:3e:c7:85:b1: cd:e5:0a:88:10:78:17:7c:b1:1c:1d:09:f5:ba:c6:98:b8:f9: 06:6d:d9:3f:b6:38:f5:40:86:88:f7:fe:0e:65:17:78:1b:2e: 2f:77:93:d1:5e:92:9d:57:ba:2c:4e:cb:4d:59:57:91:0c:2f: 06:bd:8a:05:d3:87:ff:57:7f:80:5b:0d:f4:f5:74:49:96:71: 6f:b8:33:26:fc:84:bb:68:ca:9e:f3:91:fe:7a:0b:cf:df:90: a6:71:7a:d4:80:02:6c:da:13:aa:73:5d:d7:fe:dc:7b:8f:34: b7:98:dc:aa:11:b8:0c:21:f0:e2:d2:60:62:ce:4d:df:35:f0: 0e:f1:7d:f4:ae:2f:3d:db:0d:b8:78:fe:69:d6:70:9d:8e:19: 33:03:55:0b:03:4b:43:d6:6e:ab:e8:fd:fe:cb:12:07:eb:bb: af:c8:3d:46:ae:cb:3f:bf:ad:d4:b7:3a:65:f4:0d:ad:30:f7: ba:04:59:eb:78:d7:02:06:34:d3:43:1d:10:19:ca:ca:7a:d2: 5d:7e:21:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURcfuy+yuYkAZzuWyWxCTDdGCIxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM4OTdERkYxMThFNTZDMzFBMzU5NThEOUVBODE4NTA0 QjEzMEUxMTAeFw0yNTExMDMwMjExMDVaFw0yNTExMDQwNDI4MDVaMDMxMTAvBgNV BAMTKEExODVCRDg2QzRBMzA3OTkwMDlEMzhBQUNEOTBBNkQwNzQyNDcyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3W5ZuTCAORPemAWcj9fNPbr13 3ynHHXrHT+Ugqtt/yIfRU98GmI+dyVXqJSKl9dROX+WOscl1NIcl+ek2bdFpCGFW wJUBUKvbxlxKK/thWwqIhTzWz7jvSItwnb9F+J2+N4m+D7JGqVMFBZwUYaq6Phr5 pkn+u41l9e2/WbUCZbmc3FB6KZpYGncs50FHnQpMDlZ3FnomPytNA65P2quc7h4O MlUCwULYeKgtIQNd7+MJHJlscjjiXgA/FxS8QhUtKC6IOSWpyN91nV1CMK9UlIK8 VFPSEIMuYEjzrznkn8mi5AJUs/ZuJsM73oGwSVaKC80PZTg6rrHvpVwe/n2FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoYW9hsSjB5kAnTiqzZCm0HQkcj8wHwYDVR0j BBgwFoAUQ4l9/xGOVsMaNZWNnqgYUEsTDhEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzlSM0NWdEVxZUdRRkRLM1I3QjVIZVZMajRhSFRxUXRVTTVyOFNWb2tp ZTIvMC80Mzg5N0RGRjExOEU1NkMzMUEzNTk1OEQ5RUE4MTg1MDRCMTMwRTExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzODk3REZGMTE4RTU2QzMx QTM1OTU4RDlFQTgxODUwNEIxMzBFMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzlSM0NWdEVxZUdRRkRLM1I3QjVIZVZMajRhSFRxUXRVTTVyOFNWb2tpZTIvMC80 Mzg5N0RGRjExOEU1NkMzMUEzNTk1OEQ5RUE4MTg1MDRCMTMwRTExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdTNAkvG/IiGwizneRotP8j0yGFq3m3FeSVdsHrm8kteu2b/QBwO2BgcXGF8c fQSmdPw+x4WxzeUKiBB4F3yxHB0J9brGmLj5Bm3ZP7Y49UCGiPf+DmUXeBsuL3eT 0V6SnVe6LE7LTVlXkQwvBr2KBdOH/1d/gFsN9PV0SZZxb7gzJvyEu2jKnvOR/noL z9+QpnF61IACbNoTqnNd1/7ce480t5jcqhG4DCHw4tJgYs5N3zXwDvF99K4vPdsN uHj+adZwnY4ZMwNVCwNLQ9Zuq+j9/ssSB+u7r8g9Rq7LP7+t1Lc6ZfQNrTD3ugRZ 63jXAgY000MdEBnKynrSXX4hKQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:08 2025 by rpki-client