$ rpki-client -vvf rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft File: 085A4379FC02066399A7BABE986F2B930711F0E0.mft (raw, json) Hash identifier: +4bV7tYEA2iTT0kICryw5eWP5H+GmM359mwc7rbcoEo= Subject key identifier: 17:B9:5D:33:59:C8:46:12:D1:6E:7F:BE:A0:55:FE:C2:96:2F:CE:E2 Authority key identifier: 08:5A:43:79:FC:02:06:63:99:A7:BA:BE:98:6F:2B:93:07:11:F0:E0 Certificate issuer: /CN=085A4379FC02066399A7BABE986F2B930711F0E0 Certificate serial: 13B9124FE70CD826847CD22DDF8D5B20CCF718CC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer Subject info access: rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft Manifest number: 0158 Signing time: Mon 03 Nov 2025 23:24:41 +0000 Manifest this update: Mon 03 Nov 2025 23:19:41 +0000 Manifest next update: Wed 05 Nov 2025 01:29:41 +0000 Files and hashes: 1: 3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa (hash: +xOfTPOyg3oZBW1SRivjN46hBESQU5WWrM4vrLYmFGA=) 2: 323830343a336262633a3a2f33322d313238203d3e20323636313638.roa (hash: OyHPZjFM6nE6jESktIZHb4U9fXKswqrOu5Gkjq9t1u4=) 3: 085A4379FC02066399A7BABE986F2B930711F0E0.crl (hash: fgcjJFjVuqIDuhGVSWSLAjpPi72hapJRb48ylsLoV2c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.crl rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b9:12:4f:e7:0c:d8:26:84:7c:d2:2d:df:8d:5b:20:cc:f7:18:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=085A4379FC02066399A7BABE986F2B930711F0E0 Validity Not Before: Nov 3 23:19:41 2025 GMT Not After : Nov 5 01:29:41 2025 GMT Subject: CN=17B95D3359C84612D16E7FBEA055FEC2962FCEE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9a:fd:3c:a6:c8:9a:05:63:84:33:99:58:ea: 5f:e7:95:db:13:1f:5d:a7:37:49:c0:1f:c4:85:c2: 27:64:d8:fa:7b:9c:24:a7:82:41:22:a6:75:88:56: 5f:dd:19:43:9d:fd:f0:45:70:0a:3d:d1:ca:17:13: 6d:47:c6:b5:68:e2:8d:c2:41:ab:b3:cf:12:15:2a: 2f:2f:7d:1f:27:7f:15:78:96:f3:59:5a:97:78:f3: 2f:2c:20:15:ce:11:04:a8:28:16:ac:9f:d9:73:99: 0a:fe:72:dd:ab:6f:77:aa:31:2c:8a:0c:15:4a:12: 11:ac:69:52:72:6b:68:0a:70:31:c0:e2:d5:42:50: 45:2c:32:bb:b9:7e:47:f4:90:3b:52:ff:1f:7f:92: 73:c7:3b:37:41:89:4a:e8:f4:ec:2a:50:10:d7:f6: 35:5a:c5:4e:47:40:99:98:98:1f:02:c8:b3:44:49: 47:f7:50:f1:1c:25:9f:96:09:b2:b3:c5:9d:df:68: 49:32:d4:f5:ef:87:ee:c3:6d:f6:56:87:97:b5:cd: ad:bd:95:ab:ed:c9:f8:c3:8c:0f:ca:4a:03:2c:b7: 93:f6:23:fe:9e:23:9d:5e:28:1f:7b:52:a5:c1:6f: 82:df:df:27:20:94:b2:81:bf:70:33:43:aa:17:ab: 70:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B9:5D:33:59:C8:46:12:D1:6E:7F:BE:A0:55:FE:C2:96:2F:CE:E2 X509v3 Authority Key Identifier: keyid:08:5A:43:79:FC:02:06:63:99:A7:BA:BE:98:6F:2B:93:07:11:F0:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:83:e3:b2:e1:de:e4:b7:2d:eb:f0:24:d3:c0:00:eb:14:d8: 8e:a9:7f:18:a6:14:56:da:0a:c0:69:46:96:ab:3a:c9:53:15: 26:74:be:eb:e9:39:4a:ad:96:cc:6e:61:1e:6e:d2:3e:a1:92: 35:9f:10:76:53:a4:e8:79:58:91:00:90:20:9b:8a:c5:89:c5: 59:5d:b9:56:a9:4f:08:eb:20:d7:1d:91:df:d0:dd:7a:6c:2a: b6:7d:ac:53:c3:ff:01:22:09:d9:76:1c:f1:2c:66:58:f6:ae: 17:08:47:81:8e:5e:47:ca:8a:53:10:ba:33:d4:21:c1:fb:f8: 80:8c:6d:84:33:47:34:4f:39:67:7e:4c:d7:b5:52:b5:18:3c: 72:2b:80:55:06:57:fe:b5:9d:6f:5f:83:c9:55:9f:ff:87:63: 29:4f:ff:d1:a9:2f:50:68:cb:19:90:89:51:57:f5:43:97:ea: 7d:80:d5:7f:6f:dd:9d:5b:e8:31:ce:38:d2:b0:11:19:ae:5a: 87:43:ab:96:f7:e5:20:37:16:ed:8e:77:61:e3:db:ce:15:d1: 02:ce:92:39:70:1d:e5:f5:c0:dd:88:31:c5:cc:7a:48:f0:ef: 19:d6:ed:3a:f0:cc:ac:aa:c1:69:b4:23:d4:19:90:fc:f1:95: 80:e0:58:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUE7kST+cM2CaEfNIt341bIMz3GMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg1QTQzNzlGQzAyMDY2Mzk5QTdCQUJFOTg2RjJCOTMw NzExRjBFMDAeFw0yNTExMDMyMzE5NDFaFw0yNTExMDUwMTI5NDFaMDMxMTAvBgNV BAMTKDE3Qjk1RDMzNTlDODQ2MTJEMTZFN0ZCRUEwNTVGRUMyOTYyRkNFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMmv08psiaBWOEM5lY6l/nldsT H12nN0nAH8SFwidk2Pp7nCSngkEipnWIVl/dGUOd/fBFcAo90coXE21HxrVo4o3C QauzzxIVKi8vfR8nfxV4lvNZWpd48y8sIBXOEQSoKBasn9lzmQr+ct2rb3eqMSyK DBVKEhGsaVJya2gKcDHA4tVCUEUsMru5fkf0kDtS/x9/knPHOzdBiUro9OwqUBDX 9jVaxU5HQJmYmB8CyLNESUf3UPEcJZ+WCbKzxZ3faEky1PXvh+7DbfZWh5e1za29 lavtyfjDjA/KSgMst5P2I/6eI51eKB97UqXBb4Lf3ycglLKBv3AzQ6oXq3CvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUF7ldM1nIRhLRbn++oFX+wpYvzuIwHwYDVR0j BBgwFoAUCFpDefwCBmOZp7q+mG8rkwcR8OAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2habmRWczFTVnNBZXBkeVB3MnVpRURYUVdTNU02ejR5ZVlSeDZGWmc0 V1MvMC8wODVBNDM3OUZDMDIwNjYzOTlBN0JBQkU5ODZGMkI5MzA3MTFGMEUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4NUE0Mzc5RkMwMjA2NjM5 OUE3QkFCRTk4NkYyQjkzMDcxMUYwRTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2habmRWczFTVnNBZXBkeVB3MnVpRURYUVdTNU02ejR5ZVlSeDZGWmc0V1MvMC8w ODVBNDM3OUZDMDIwNjYzOTlBN0JBQkU5ODZGMkI5MzA3MTFGMEUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAloPjsuHe5Lct6/Ak08AA6xTYjql/GKYUVtoKwGlGlqs6yVMVJnS+6+k5Sq2W zG5hHm7SPqGSNZ8QdlOk6HlYkQCQIJuKxYnFWV25VqlPCOsg1x2R39Ddemwqtn2s U8P/ASIJ2XYc8SxmWPauFwhHgY5eR8qKUxC6M9Qhwfv4gIxthDNHNE85Z35M17VS tRg8ciuAVQZX/rWdb1+DyVWf/4djKU//0akvUGjLGZCJUVf1Q5fqfYDVf2/dnVvo Mc440rARGa5ah0OrlvflIDcW7Y53YePbzhXRAs6SOXAd5fXA3Ygxxcx6SPDvGdbt OvDMrKrBabQj1BmQ/PGVgOBYGw== -----END CERTIFICATE-----Generated at Tue Nov 4 18:34:50 2025 by rpki-client