$ rpki-client -vvf rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/780D2A522A22ECFA9760DD7673746F9DF1038BC4.mft File: 780D2A522A22ECFA9760DD7673746F9DF1038BC4.mft (raw, json) Hash identifier: KI92+iwhOsWgp8tSiY+T55raDcF7CrEwnlXdtnwGG+4= Subject key identifier: BB:CA:9E:31:9B:D4:B1:A2:57:E7:CF:76:D0:F0:E8:3A:BC:27:9D:C1 Authority key identifier: 78:0D:2A:52:2A:22:EC:FA:97:60:DD:76:73:74:6F:9D:F1:03:8B:C4 Certificate issuer: /CN=780D2A522A22ECFA9760DD7673746F9DF1038BC4 Certificate serial: 6E4B7D83277048A2938307B258422D6CB36BCAB5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780D2A522A22ECFA9760DD7673746F9DF1038BC4.cer Subject info access: rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/780D2A522A22ECFA9760DD7673746F9DF1038BC4.mft Manifest number: 23 Signing time: Mon 03 Nov 2025 01:06:18 +0000 Manifest this update: Mon 03 Nov 2025 01:01:18 +0000 Manifest next update: Tue 04 Nov 2025 02:54:18 +0000 Files and hashes: 1: 323830343a343262633a3a2f33322d313238203d3e20323637353232.roa (hash: 8xzwPAo+FNvPmaSyZDxWwZvwCqYxVqGG1JlaWeQ5kt8=) 2: 3139322e3134312e3130302e302f32322d3332203d3e20323637353232.roa (hash: OYo2B691w5RR1OBR+a0NyKbjtpsgRd5TEWaF4s4opdg=) 3: 780D2A522A22ECFA9760DD7673746F9DF1038BC4.crl (hash: fX1jyCHMRgrBdatByB0NEHGKX2Ybf7nZ4HcVK+CWroo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/780D2A522A22ECFA9760DD7673746F9DF1038BC4.crl rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/780D2A522A22ECFA9760DD7673746F9DF1038BC4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780D2A522A22ECFA9760DD7673746F9DF1038BC4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 02:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:4b:7d:83:27:70:48:a2:93:83:07:b2:58:42:2d:6c:b3:6b:ca:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=780D2A522A22ECFA9760DD7673746F9DF1038BC4 Validity Not Before: Nov 3 01:01:18 2025 GMT Not After : Nov 4 02:54:18 2025 GMT Subject: CN=BBCA9E319BD4B1A257E7CF76D0F0E83ABC279DC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:e4:24:9b:0c:f0:a0:4f:a4:17:c0:55:4c: 03:38:be:c0:ef:b6:6d:3e:40:29:d9:c9:c5:88:e9: 5d:4a:bf:60:bf:ee:63:87:4c:48:48:53:1f:f7:7a: f5:7d:55:d5:87:4e:1d:07:6f:2b:67:88:1a:3e:a1: e1:55:ae:e9:83:0e:5a:46:f6:26:9e:46:61:a7:89: 01:d9:c5:be:0d:94:09:c1:a2:85:14:26:0d:c4:af: fc:6e:a1:92:0e:19:c8:8e:8a:e2:a7:73:d7:e9:22: 53:9e:14:65:bb:35:cd:e1:59:d3:fe:08:c1:f2:0d: ce:51:1c:f0:e3:4e:99:9c:3f:dc:06:05:78:79:7d: 59:e0:e8:79:f3:00:69:dc:f4:8d:a9:d3:b0:30:dc: 61:cd:23:72:76:8c:ce:4b:a9:ce:38:d2:23:98:b7: bb:89:23:59:d5:0a:e7:ee:66:10:0b:d0:ec:54:96: 93:43:29:49:fa:4c:b0:5e:d6:f5:65:f2:d6:c7:df: 2c:e3:43:65:bf:73:65:c7:b5:2e:73:36:fc:67:94: 00:80:c9:ca:d1:a1:fd:32:49:6b:e0:16:2e:8f:89: 74:4d:40:53:16:04:1d:73:94:29:2a:6a:21:51:c9: 68:75:84:4d:53:5b:49:ca:2e:0d:0b:17:b6:d7:32: f9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CA:9E:31:9B:D4:B1:A2:57:E7:CF:76:D0:F0:E8:3A:BC:27:9D:C1 X509v3 Authority Key Identifier: keyid:78:0D:2A:52:2A:22:EC:FA:97:60:DD:76:73:74:6F:9D:F1:03:8B:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/780D2A522A22ECFA9760DD7673746F9DF1038BC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780D2A522A22ECFA9760DD7673746F9DF1038BC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/780D2A522A22ECFA9760DD7673746F9DF1038BC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:7a:6f:08:a1:94:65:a9:79:80:ae:a4:0e:0f:52:e6:f2:d6: e6:19:7f:d7:02:a0:8c:c4:f7:a3:e4:77:5a:c8:f8:5f:6f:ab: e7:fd:a1:66:a7:e5:a8:9c:da:bd:6f:2c:4c:b1:e9:a4:6b:8f: 35:13:57:4e:44:58:30:93:b1:11:b3:f6:6b:94:e2:d7:0d:e3: b8:ef:fd:fd:ad:3e:65:4d:d7:38:64:12:81:a0:5c:40:be:6d: 9e:b7:5d:99:0a:8f:2a:14:96:41:dd:17:16:53:27:72:2e:a0: 61:6d:6d:f0:ad:7f:05:43:58:44:44:ba:97:72:55:6f:0f:38: 7b:f1:ed:70:99:3b:3e:74:22:ef:7d:4e:00:13:55:e1:45:d6: a4:b1:0a:60:8a:cc:8c:1e:b1:20:5b:2f:7c:f3:09:dc:7b:85: 33:5a:d1:e5:07:9b:35:4d:88:2a:e3:52:ec:df:44:5b:ad:81: e7:a1:4e:9e:ff:96:0e:86:64:09:4e:29:91:51:c4:d4:e9:31: 44:d3:22:0d:4b:f6:49:c5:aa:b9:58:93:6c:36:21:bc:a4:a6: 45:4d:c2:67:cc:0d:09:ca:19:bf:aa:46:57:9d:06:aa:b1:ff: 0d:34:a2:83:fe:07:b2:11:a3:dc:03:2c:30:b2:64:9e:3a:0a: 24:52:38:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbkt9gydwSKKTgweyWEItbLNryrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgwRDJBNTIyQTIyRUNGQTk3NjBERDc2NzM3NDZGOURG MTAzOEJDNDAeFw0yNTExMDMwMTAxMThaFw0yNTExMDQwMjU0MThaMDMxMTAvBgNV BAMTKEJCQ0E5RTMxOUJENEIxQTI1N0U3Q0Y3NkQwRjBFODNBQkMyNzlEQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr0eQkmwzwoE+kF8BVTAM4vsDv tm0+QCnZycWI6V1Kv2C/7mOHTEhIUx/3evV9VdWHTh0HbytniBo+oeFVrumDDlpG 9iaeRmGniQHZxb4NlAnBooUUJg3Er/xuoZIOGciOiuKnc9fpIlOeFGW7Nc3hWdP+ CMHyDc5RHPDjTpmcP9wGBXh5fVng6HnzAGnc9I2p07Aw3GHNI3J2jM5Lqc440iOY t7uJI1nVCufuZhAL0OxUlpNDKUn6TLBe1vVl8tbH3yzjQ2W/c2XHtS5zNvxnlACA ycrRof0ySWvgFi6PiXRNQFMWBB1zlCkqaiFRyWh1hE1TW0nKLg0LF7bXMvlzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUu8qeMZvUsaJX58920PDoOrwnncEwHwYDVR0j BBgwFoAUeA0qUioi7PqXYN12c3RvnfEDi8QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3JqcldoMXhTeEN5SnBFenZ6YWttNnd5azkxM0ZTWWlmZ2ozanp4emRS V1EvMC83ODBEMkE1MjJBMjJFQ0ZBOTc2MERENzY3Mzc0NkY5REYxMDM4QkM0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4MEQyQTUyMkEyMkVDRkE5 NzYwREQ3NjczNzQ2RjlERjEwMzhCQzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3JqcldoMXhTeEN5SnBFenZ6YWttNnd5azkxM0ZTWWlmZ2ozanp4emRSV1EvMC83 ODBEMkE1MjJBMjJFQ0ZBOTc2MERENzY3Mzc0NkY5REYxMDM4QkM0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiXpvCKGUZal5gK6kDg9S5vLW5hl/1wKgjMT3o+R3Wsj4X2+r5/2hZqflqJza vW8sTLHppGuPNRNXTkRYMJOxEbP2a5Ti1w3juO/9/a0+ZU3XOGQSgaBcQL5tnrdd mQqPKhSWQd0XFlMnci6gYW1t8K1/BUNYRES6l3JVbw84e/HtcJk7PnQi731OABNV 4UXWpLEKYIrMjB6xIFsvfPMJ3HuFM1rR5QebNU2IKuNS7N9EW62B56FOnv+WDoZk CU4pkVHE1OkxRNMiDUv2ScWquViTbDYhvKSmRU3CZ8wNCcoZv6pGV50GqrH/DTSi g/4HshGj3AMsMLJknjoKJFI42Q== -----END CERTIFICATE-----Generated at Mon Nov 3 12:08:15 2025 by rpki-client