$ rpki-client -vvf rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/14965CE2206A073FBCD58BA22CB5BF760827E0AF.mft File: 14965CE2206A073FBCD58BA22CB5BF760827E0AF.mft (raw, json) Hash identifier: 5mlKpqeqJNBQIvZsZZCwU53hNOHGsekDNRFGM+gIguY= Subject key identifier: A1:C1:D2:0A:C3:7B:8E:88:8E:F9:89:A7:D2:A5:96:7A:97:28:81:63 Authority key identifier: 14:96:5C:E2:20:6A:07:3F:BC:D5:8B:A2:2C:B5:BF:76:08:27:E0:AF Certificate issuer: /CN=14965CE2206A073FBCD58BA22CB5BF760827E0AF Certificate serial: 6ADC52DF892D5C9B9D502B47A796BE2313877C74 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14965CE2206A073FBCD58BA22CB5BF760827E0AF.cer Subject info access: rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/14965CE2206A073FBCD58BA22CB5BF760827E0AF.mft Manifest number: 013A Signing time: Mon 03 Nov 2025 10:47:38 +0000 Manifest this update: Mon 03 Nov 2025 10:42:38 +0000 Manifest next update: Tue 04 Nov 2025 13:01:38 +0000 Files and hashes: 1: 3138312e3138392e36302e302f32322d3234203d3e20323731333435.roa (hash: 8Zu5Z//M7rudR/s7wz0d6xSIRORpRccODXHuO6XXd8o=) 2: 14965CE2206A073FBCD58BA22CB5BF760827E0AF.crl (hash: PKaJn8/aiTjQTcJi3A7IFkGHkjz9XKqFLVl4xwheACY=) 3: 323830343a376131303a3a2f33322d3438203d3e20323731333435.roa (hash: WkmIJ2q0SlgTYrCtFnO9ZR3QlUjidNDo41OrRg/lJ1c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/14965CE2206A073FBCD58BA22CB5BF760827E0AF.crl rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/14965CE2206A073FBCD58BA22CB5BF760827E0AF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14965CE2206A073FBCD58BA22CB5BF760827E0AF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:dc:52:df:89:2d:5c:9b:9d:50:2b:47:a7:96:be:23:13:87:7c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14965CE2206A073FBCD58BA22CB5BF760827E0AF Validity Not Before: Nov 3 10:42:38 2025 GMT Not After : Nov 4 13:01:38 2025 GMT Subject: CN=A1C1D20AC37B8E888EF989A7D2A5967A97288163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:95:d3:98:a1:c3:a1:99:b6:58:8e:54:c9: 0f:e6:c4:ce:b2:19:92:18:69:6f:98:28:a7:93:fe: 2f:14:34:f8:38:94:3e:23:87:a5:25:2e:23:e1:53: b3:52:94:9a:5e:61:d6:96:59:87:cf:34:b6:b5:ff: 34:30:91:59:b0:ff:6b:0d:60:98:6f:24:2e:0e:0d: b0:c8:2e:51:5a:57:90:44:57:4e:79:82:9a:1a:f2: fc:fd:96:41:7c:0d:b1:1f:70:15:7a:23:0e:e4:74: 31:01:13:6f:09:e0:1f:72:66:70:5a:78:ea:d0:25: f0:55:b5:ff:1b:f6:64:ff:18:e9:92:81:85:78:b4: e3:c1:fc:e4:72:5f:7f:92:ea:f5:c7:68:88:7c:08: 0c:37:28:13:f5:0a:e4:ea:e6:78:01:bb:e3:4b:b6: b9:06:d7:e9:3f:ff:e1:d4:f8:bc:7e:44:1d:22:3d: 9d:f7:e3:21:7d:3c:26:9d:a2:83:bd:80:e7:87:d9: 56:7f:58:2e:d1:93:68:a8:43:e1:29:6b:fc:94:fe: c1:c4:2e:9b:16:84:6c:d5:e3:65:b9:45:20:7a:bb: d2:0c:85:58:c3:4e:19:6a:36:3f:1d:f3:57:fc:de: f9:4d:1d:a5:57:a1:5b:4e:ec:4a:37:3f:55:d6:14: 9c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C1:D2:0A:C3:7B:8E:88:8E:F9:89:A7:D2:A5:96:7A:97:28:81:63 X509v3 Authority Key Identifier: keyid:14:96:5C:E2:20:6A:07:3F:BC:D5:8B:A2:2C:B5:BF:76:08:27:E0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/14965CE2206A073FBCD58BA22CB5BF760827E0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14965CE2206A073FBCD58BA22CB5BF760827E0AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/14965CE2206A073FBCD58BA22CB5BF760827E0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:52:f9:8e:d3:9a:5f:88:47:16:9f:5d:a3:eb:56:ec:40:ef: b4:73:f5:14:c8:d6:62:e8:88:8c:14:b0:31:4d:ec:ca:0d:e3: 1e:b7:0c:b8:58:61:bb:9d:4e:b1:20:f0:3a:1b:d9:96:ea:0c: 51:78:2f:67:8a:61:bc:47:7a:db:18:14:2f:69:6b:96:d9:f6: 55:9a:89:67:d3:29:cb:63:d7:5d:5f:e6:69:3d:c6:df:1c:d8: ba:31:a6:3a:00:18:a1:b3:33:0e:9e:74:94:9f:5f:93:c2:2f: 66:70:d0:de:9e:7d:c8:e7:25:18:fa:66:a2:a4:a3:b0:1b:e6: 9e:60:fc:b2:9c:2f:fd:93:cd:fa:b4:18:9f:fc:ce:41:d8:ff: 23:a4:54:ce:e7:a5:1a:5b:43:74:1a:09:43:f0:39:39:5e:b9: 66:54:a2:d5:e6:07:95:9d:c3:5a:dc:73:cb:b8:7a:a5:67:43: d5:76:1c:c4:ef:1c:0a:fd:bf:fc:83:bd:eb:cb:63:07:7d:13: d9:08:25:75:4c:c9:86:48:a2:de:4b:79:ce:72:c3:e7:cf:0a: e4:be:a5:7a:97:75:c0:f3:20:de:ae:de:76:20:69:c3:64:2b: b1:1e:8e:62:db:f8:bd:05:54:1d:06:94:9b:a3:c7:06:8b:2a: b8:2e:a3:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUatxS34ktXJudUCtHp5a+IxOHfHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5NjVDRTIyMDZBMDczRkJDRDU4QkEyMkNCNUJGNzYw ODI3RTBBRjAeFw0yNTExMDMxMDQyMzhaFw0yNTExMDQxMzAxMzhaMDMxMTAvBgNV BAMTKEExQzFEMjBBQzM3QjhFODg4RUY5ODlBN0QyQTU5NjdBOTcyODgxNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3O5XTmKHDoZm2WI5UyQ/mxM6y GZIYaW+YKKeT/i8UNPg4lD4jh6UlLiPhU7NSlJpeYdaWWYfPNLa1/zQwkVmw/2sN YJhvJC4ODbDILlFaV5BEV055gpoa8vz9lkF8DbEfcBV6Iw7kdDEBE28J4B9yZnBa eOrQJfBVtf8b9mT/GOmSgYV4tOPB/ORyX3+S6vXHaIh8CAw3KBP1CuTq5ngBu+NL trkG1+k//+HU+Lx+RB0iPZ334yF9PCadooO9gOeH2VZ/WC7Rk2ioQ+Epa/yU/sHE LpsWhGzV42W5RSB6u9IMhVjDThlqNj8d81f83vlNHaVXoVtO7Eo3P1XWFJwdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUocHSCsN7joiO+Ymn0qWWepcogWMwHwYDVR0j BBgwFoAUFJZc4iBqBz+81YuiLLW/dggn4K8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2ticXNQUTJ1UGJQcEZkWTc0V3FGNDVnUUNueWdiWHc3U2dTNFZYUE1Z SlkvMC8xNDk2NUNFMjIwNkEwNzNGQkNENThCQTIyQ0I1QkY3NjA4MjdFMEFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0OTY1Q0UyMjA2QTA3M0ZC Q0Q1OEJBMjJDQjVCRjc2MDgyN0UwQUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2ticXNQUTJ1UGJQcEZkWTc0V3FGNDVnUUNueWdiWHc3U2dTNFZYUE1ZSlkvMC8x NDk2NUNFMjIwNkEwNzNGQkNENThCQTIyQ0I1QkY3NjA4MjdFMEFGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaVL5jtOaX4hHFp9do+tW7EDvtHP1FMjWYuiIjBSwMU3syg3jHrcMuFhhu51O sSDwOhvZluoMUXgvZ4phvEd62xgUL2lrltn2VZqJZ9Mpy2PXXV/maT3G3xzYujGm OgAYobMzDp50lJ9fk8IvZnDQ3p59yOclGPpmoqSjsBvmnmD8spwv/ZPN+rQYn/zO Qdj/I6RUzuelGltDdBoJQ/A5OV65ZlSi1eYHlZ3DWtxzy7h6pWdD1XYcxO8cCv2/ /IO968tjB30T2QgldUzJhkii3kt5znLD588K5L6lepd1wPMg3q7ediBpw2QrsR6O Ytv4vQVUHQaUm6PHBosquC6jEQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:52 2025 by rpki-client