$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft File: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft (raw, json) Hash identifier: Fxi53NBMAFvStAOSV3p0+o6j94FnaLQd+P3wZfgZGpg= Subject key identifier: 75:84:23:61:D9:37:37:CC:6C:1F:52:5A:E7:28:17:7E:C3:50:ED:0B Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 Certificate issuer: /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Certificate serial: 54875A93878B5DF555F751CDFAA6766075AA41EF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject info access: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft Manifest number: 01A4 Signing time: Sun 02 Nov 2025 18:16:45 +0000 Manifest this update: Sun 02 Nov 2025 18:11:45 +0000 Manifest next update: Mon 03 Nov 2025 20:19:45 +0000 Files and hashes: 1: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (hash: uIh+Oz5wiODIMg7enOUna4NRPwYVYruwibBcWxdlN6k=) 2: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl (hash: uCjKizNQHVN98yEPJWxLQkba8sL0yZipDu9R0F0xmQY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 20:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:87:5a:93:87:8b:5d:f5:55:f7:51:cd:fa:a6:76:60:75:aa:41:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Validity Not Before: Nov 2 18:11:45 2025 GMT Not After : Nov 3 20:19:45 2025 GMT Subject: CN=75842361D93737CC6C1F525AE728177EC350ED0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:cf:31:7a:45:99:5f:26:87:e1:e2:5a:b6:d3: d8:76:19:0b:61:ff:ec:12:84:0c:15:a5:30:0a:49: d0:85:81:af:c7:51:7f:19:f1:4c:ed:7a:28:b9:05: 22:d9:22:af:21:6a:fd:2a:31:54:68:73:35:af:51: 81:19:1e:50:05:5d:b8:36:25:3d:8a:c9:f4:d0:f7: 1d:ec:14:7b:4b:34:9b:3d:1a:5a:9a:77:72:ed:9d: a8:7e:99:42:f2:31:7e:4b:e8:a5:6c:4c:6e:25:0d: 0c:75:9e:a0:77:e6:b3:48:36:ca:c4:26:e3:32:b3: 07:9c:86:62:a0:91:d7:4c:9e:7e:fe:24:cd:d5:4c: ac:9e:ad:c1:2e:1f:80:2b:d8:cd:86:ae:66:9c:f2: c3:c7:3c:36:5b:53:3f:ab:cf:28:16:df:29:3b:65: a5:a4:90:02:6d:a0:67:c1:ed:53:d9:0d:b4:63:f8: 09:f7:8c:1d:b5:ba:95:54:f6:d1:15:73:c1:23:90: 72:dd:43:ed:56:8b:18:02:c4:8d:ce:23:4a:b2:16: f2:9e:68:b5:48:e7:f1:80:c1:d6:6f:35:cc:ec:17: 95:5d:c4:2c:db:5c:52:73:cd:b6:52:19:31:b0:d0: 84:21:00:71:5f:f1:93:11:c1:03:9b:03:14:f3:56: da:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:84:23:61:D9:37:37:CC:6C:1F:52:5A:E7:28:17:7E:C3:50:ED:0B X509v3 Authority Key Identifier: keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d5:6e:9e:ba:9a:52:81:d7:42:19:c3:6c:ac:45:27:6f:9a: 4f:5c:e4:2a:4f:80:c7:19:d5:4b:59:c5:6a:eb:18:bb:3d:15: 8b:47:06:88:60:75:bb:56:c5:00:a0:74:96:49:3a:cd:e6:6e: d0:36:2b:c4:73:2f:be:a9:bd:ef:4a:a9:b0:ab:54:19:4d:2f: 4a:ee:8e:d4:43:4e:82:ab:8d:20:c9:53:6f:22:09:ed:1c:c0: 59:33:ad:1d:72:30:af:8b:71:14:2e:fa:e1:a0:0a:98:96:08: a3:e6:95:73:11:0e:c0:63:b5:73:5c:6d:b5:f4:8a:81:2e:7b: 53:09:8b:db:ac:fb:44:09:18:9b:4b:33:d3:4f:57:09:71:3c: 7c:f0:49:88:f3:6a:f0:20:56:c3:02:6f:3c:74:42:d8:82:87: 10:22:f2:f0:c7:bd:af:e0:05:5a:df:2c:87:f7:2f:86:bc:c5: 64:39:bd:f4:5b:50:96:a6:48:4c:52:46:7b:4b:1c:01:7b:f5: cc:d0:98:9d:94:1f:53:02:0f:36:8a:90:07:dc:81:76:ea:1f: 02:ee:0c:59:35:db:0d:36:8f:df:4b:ed:67:da:a1:6c:58:71: 5c:6b:96:fb:b1:f2:df:91:2b:f2:82:36:c8:ea:f1:8c:c3:ff: 47:24:ba:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVIdak4eLXfVV91HN+qZ2YHWqQe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM2RkNCMzFGMkMzM0Y4RTU3MEQzQ0EwMjc1NUJDQzUx QjIzRUEwMTAeFw0yNTExMDIxODExNDVaFw0yNTExMDMyMDE5NDVaMDMxMTAvBgNV BAMTKDc1ODQyMzYxRDkzNzM3Q0M2QzFGNTI1QUU3MjgxNzdFQzM1MEVEMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrzzF6RZlfJofh4lq209h2GQth /+wShAwVpTAKSdCFga/HUX8Z8Uzteii5BSLZIq8hav0qMVRoczWvUYEZHlAFXbg2 JT2KyfTQ9x3sFHtLNJs9Glqad3Ltnah+mULyMX5L6KVsTG4lDQx1nqB35rNINsrE JuMyswechmKgkddMnn7+JM3VTKyercEuH4Ar2M2Grmac8sPHPDZbUz+rzygW3yk7 ZaWkkAJtoGfB7VPZDbRj+An3jB21upVU9tEVc8EjkHLdQ+1WixgCxI3OI0qyFvKe aLVI5/GAwdZvNczsF5VdxCzbXFJzzbZSGTGw0IQhAHFf8ZMRwQObAxTzVtptAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdYQjYdk3N8xsH1Ja5ygXfsNQ7QswHwYDVR0j BBgwFoAUQ2/LMfLDP45XDTygJ1W8xRsj6gEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJI NGUvMC80MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNkZDQjMxRjJDMzNGOEU1 NzBEM0NBMDI3NTVCQ0M1MUIyM0VBMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJINGUvMC80 MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAitVunrqaUoHXQhnDbKxFJ2+aT1zkKk+AxxnVS1nFausYuz0Vi0cGiGB1u1bF AKB0lkk6zeZu0DYrxHMvvqm970qpsKtUGU0vSu6O1ENOgquNIMlTbyIJ7RzAWTOt HXIwr4txFC764aAKmJYIo+aVcxEOwGO1c1xttfSKgS57UwmL26z7RAkYm0sz009X CXE8fPBJiPNq8CBWwwJvPHRC2IKHECLy8Me9r+AFWt8sh/cvhrzFZDm99FtQlqZI TFJGe0scAXv1zNCYnZQfUwIPNoqQB9yBduofAu4MWTXbDTaP30vtZ9qhbFhxXGuW +7Hy35Er8oI2yOrxjMP/RyS6nw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:35:07 2025 by rpki-client