$ rpki-client -vvf rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft File: 1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft (raw, json) Hash identifier: XkTiN9aA/eoCCNT+8PNZmaVJikWkD8NO0/6yUEOPeKs= Subject key identifier: 3E:9C:F4:C6:D2:B5:D7:71:E5:13:E1:82:64:74:CA:2D:1F:FD:7E:FA Authority key identifier: 1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14 Certificate issuer: /CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14 Certificate serial: 58B07AD5DD80F0CFFFCFA0BE8AF16E5BA30FB136 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer Subject info access: rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft Manifest number: 010B Signing time: Sun 02 Nov 2025 23:45:12 +0000 Manifest this update: Sun 02 Nov 2025 23:40:12 +0000 Manifest next update: Mon 03 Nov 2025 23:46:12 +0000 Files and hashes: 1: 3137302e38342e3139362e302f32322d3332203d3e20323635303138.roa (hash: GMqVz+pNv4jlVq8AM/MysXTepHhSdbVZyc7Np+Ty+wo=) 2: 1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl (hash: 40Wf0B4xtCoj7JGnHmHmItAEyKB6tD2Ar6znVtoZWjU=) 3: 323830343a333137633a3a2f33322d3634203d3e20323635303138.roa (hash: ez+ajbN41gMQLCvCNkwbbF7k57+fkGAT5m28gVygc5E=) 4: 3136302e3233382e3230302e302f32322d3332203d3e20323635303138.roa (hash: hv7rV0YAjf7OIxTmW4CmSIfCjHYfqZrGrG5y4H2smTY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 23:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:b0:7a:d5:dd:80:f0:cf:ff:cf:a0:be:8a:f1:6e:5b:a3:0f:b1:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14 Validity Not Before: Nov 2 23:40:12 2025 GMT Not After : Nov 3 23:46:12 2025 GMT Subject: CN=3E9CF4C6D2B5D771E513E1826474CA2D1FFD7EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:d7:86:2b:d4:4c:3f:c8:78:f4:c6:5d:74: c1:44:32:ad:28:8b:ea:24:15:7a:c5:4b:3d:9d:cc: 49:2e:97:65:8a:26:9d:ca:3f:25:f9:a5:68:28:37: 95:14:94:3e:95:ad:2e:13:21:c8:b5:38:0b:3d:6e: 75:5c:17:fd:9e:55:6f:20:ee:c1:2c:12:76:49:5e: ab:43:81:1c:32:28:9a:c0:56:1d:c7:9e:7b:66:b5: e5:cb:68:cd:4f:41:df:8d:94:f2:46:7a:2e:d2:f6: 2b:6a:7d:4f:6a:da:e6:0c:97:cf:c5:c5:cc:ad:18: 51:70:de:1d:75:15:bb:37:01:d5:cd:06:04:90:f9: be:1c:74:66:de:25:d0:53:48:88:42:80:1c:c9:d4: fa:e8:dc:ad:98:1c:ad:6b:26:28:fa:3a:66:a8:0b: fd:e7:35:74:fc:1f:c2:60:67:16:ca:8f:36:c9:35: 0c:1e:a5:1e:05:b8:a3:6c:0a:37:a7:ca:5c:b0:a1: a2:c4:5d:f2:9f:89:e4:4e:ce:cf:e1:30:a9:55:30: b2:77:0b:bc:6f:5c:df:c8:9f:6f:09:8a:90:80:4d: e3:9d:11:e3:d3:4c:6c:03:c3:13:d5:8f:f0:71:f2: 89:30:bc:9f:40:77:9c:13:18:3b:41:03:ce:97:6b: 1e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9C:F4:C6:D2:B5:D7:71:E5:13:E1:82:64:74:CA:2D:1F:FD:7E:FA X509v3 Authority Key Identifier: keyid:1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c0:29:b4:5e:b1:7d:95:89:19:bf:b4:44:32:0a:48:6b:a2: ad:52:98:4c:a7:48:75:5f:02:fa:8c:d5:d1:00:80:02:28:13: a9:c1:82:dc:48:a9:c8:fb:c2:bf:39:de:79:2c:ff:e9:54:00: 24:1e:05:37:b2:db:c4:11:3a:96:a4:8d:ab:f8:d9:4c:7e:89: 5c:86:fe:c4:f1:0b:f8:97:4f:41:3e:d1:3b:26:65:58:04:5f: 7b:ef:b0:a5:ac:97:12:6c:39:39:c0:5b:58:7d:ea:be:16:92: 97:c0:8c:55:e4:57:f3:a7:ea:e0:20:6f:68:26:32:a0:9c:05: db:1b:e3:14:56:59:96:6d:41:c6:a3:50:bb:31:a0:3e:2a:f4: ef:85:76:86:3a:54:4b:5d:8f:55:f3:d5:65:a6:c2:9f:a5:5d: c6:66:28:1f:e2:42:b5:06:71:72:90:f1:00:ff:13:a0:c2:f2: 2e:de:5e:31:a5:dd:de:40:bb:fe:9f:ec:13:3c:16:ad:f0:85: da:11:eb:ca:a1:65:b4:24:2b:25:fd:2b:90:e2:79:80:ec:81: 6d:9d:80:5c:22:0c:f8:34:8f:0f:b5:34:20:c2:42:42:1d:cf: e4:96:4a:47:99:a5:47:7e:52:ed:6f:33:45:f5:37:b2:46:3c: ce:ae:16:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWLB61d2A8M//z6C+ivFuW6MPsTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2MEZBNzY5MDUxOUE5M0RGNjlEQjhFQUNDOUVEQjAz ODBCMkIxNDAeFw0yNTExMDIyMzQwMTJaFw0yNTExMDMyMzQ2MTJaMDMxMTAvBgNV BAMTKDNFOUNGNEM2RDJCNUQ3NzFFNTEzRTE4MjY0NzRDQTJEMUZGRDdFRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0oNeGK9RMP8h49MZddMFEMq0o i+okFXrFSz2dzEkul2WKJp3KPyX5pWgoN5UUlD6VrS4TIci1OAs9bnVcF/2eVW8g 7sEsEnZJXqtDgRwyKJrAVh3HnntmteXLaM1PQd+NlPJGei7S9itqfU9q2uYMl8/F xcytGFFw3h11Fbs3AdXNBgSQ+b4cdGbeJdBTSIhCgBzJ1Pro3K2YHK1rJij6Omao C/3nNXT8H8JgZxbKjzbJNQwepR4FuKNsCjenylywoaLEXfKfieROzs/hMKlVMLJ3 C7xvXN/In28JipCATeOdEePTTGwDwxPVj/Bx8okwvJ9Ad5wTGDtBA86Xax53AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPpz0xtK113HlE+GCZHTKLR/9fvowHwYDVR0j BBgwFoAUHmD6dpBRmpPfaduOrMntsDgLKxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2p2WUFxOFlNN3JpUnR4bWJ6WVlzNVQ2MzY1aUVnOUFpZUVENmRVQTRH a1ovMC8xRTYwRkE3NjkwNTE5QTkzREY2OURCOEVBQ0M5RURCMDM4MEIyQjE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFNjBGQTc2OTA1MTlBOTNE RjY5REI4RUFDQzlFREIwMzgwQjJCMTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2p2WUFxOFlNN3JpUnR4bWJ6WVlzNVQ2MzY1aUVnOUFpZUVENmRVQTRHa1ovMC8x RTYwRkE3NjkwNTE5QTkzREY2OURCOEVBQ0M5RURCMDM4MEIyQjE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkcAptF6xfZWJGb+0RDIKSGuirVKYTKdIdV8C+ozV0QCAAigTqcGC3EipyPvC vzneeSz/6VQAJB4FN7LbxBE6lqSNq/jZTH6JXIb+xPEL+JdPQT7ROyZlWARfe++w payXEmw5OcBbWH3qvhaSl8CMVeRX86fq4CBvaCYyoJwF2xvjFFZZlm1BxqNQuzGg Pir074V2hjpUS12PVfPVZabCn6VdxmYoH+JCtQZxcpDxAP8ToMLyLt5eMaXd3kC7 /p/sEzwWrfCF2hHryqFltCQrJf0rkOJ5gOyBbZ2AXCIM+DSPD7U0IMJCQh3P5JZK R5mlR35S7W8zRfU3skY8zq4W0g== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:51 2025 by rpki-client