$ rpki-client -vvf rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.mft File: 0F0B8A867772B2436759E0F012765DC77C12ACB5.mft (raw, json) Hash identifier: mN2c/g6kLEz6dl7bvh1QOpsEj+Ge41JmEWjQ+oHXabE= Subject key identifier: EC:3E:22:56:13:54:CF:7A:E0:0A:D0:C2:F1:79:AE:53:16:3C:7F:B4 Authority key identifier: 0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5 Certificate issuer: /CN=0F0B8A867772B2436759E0F012765DC77C12ACB5 Certificate serial: 04A91C90F8DB32E93BA4C540AB39BB1611B35AF0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer Subject info access: rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.mft Manifest number: 02F8 Signing time: Mon 03 Nov 2025 09:15:43 +0000 Manifest this update: Mon 03 Nov 2025 09:10:43 +0000 Manifest next update: Tue 04 Nov 2025 09:22:43 +0000 Files and hashes: 1: 3133312e3232312e36302e302f32322d3234203d3e20323634343134.roa (hash: 8KeY5Gq3yZKw+IrAyQ4nBcjKExan/7utIpZ5Fql/6O8=) 2: 323830343a316533343a3a2f33322d3438203d3e20323634343134.roa (hash: RHzfWlmyT+GDNaub4ZdnDTBPhmfhXe6ZfuhuThBP/EE=) 3: 0F0B8A867772B2436759E0F012765DC77C12ACB5.crl (hash: F88jD1lLL8NncDgIX2jtNDug5W7xEzpsdVI2su9yOSI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.crl rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a9:1c:90:f8:db:32:e9:3b:a4:c5:40:ab:39:bb:16:11:b3:5a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F0B8A867772B2436759E0F012765DC77C12ACB5 Validity Not Before: Nov 3 09:10:43 2025 GMT Not After : Nov 4 09:22:43 2025 GMT Subject: CN=EC3E22561354CF7AE00AD0C2F179AE53163C7FB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:93:1e:a8:2d:59:7d:d2:bc:06:3e:9d:b9:07: d5:f9:e2:1f:59:17:03:d5:11:56:dc:bc:5f:28:99: 19:1e:b4:0d:29:c2:1b:7e:60:12:0b:29:db:f9:1d: aa:dd:7b:72:1d:cd:07:96:2c:bd:5e:ae:ab:64:b8: ff:83:a9:c7:8e:06:e1:5a:3c:bb:d1:1b:b1:4c:b3: 7a:c3:d8:6d:e7:50:d8:ff:28:dd:61:35:3a:a0:8f: f1:c6:e7:55:48:5e:4c:5a:7b:32:09:9f:80:c1:78: ec:2a:0a:cb:55:5f:8d:b6:ec:47:b1:39:94:d2:5c: 93:e4:fb:0e:0b:4a:16:ca:e1:c6:d1:9d:98:b6:63: 8c:80:a0:8b:f6:8b:bd:70:04:25:91:07:b0:c6:a9: 74:98:f6:e8:ec:bc:25:1b:d8:ff:bd:0e:a4:28:34: ad:4e:4a:c0:23:bf:bc:10:2c:0f:dc:ea:2d:e0:10: ce:af:71:6c:c4:cd:20:db:82:d8:f0:ee:ff:16:a8: 3d:f7:ef:13:db:06:b8:ac:13:db:02:95:12:cb:2a: 5a:78:cc:19:19:15:d5:5b:7e:e2:2c:f0:bd:1e:0d: 94:70:8b:e3:54:53:f9:8f:f0:a1:f5:85:39:30:88: 61:57:c0:6c:08:36:ea:5b:e2:e3:56:f5:f8:6f:a2: d7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3E:22:56:13:54:CF:7A:E0:0A:D0:C2:F1:79:AE:53:16:3C:7F:B4 X509v3 Authority Key Identifier: keyid:0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c2:38:fc:61:c9:7b:31:1c:4e:72:ad:05:d2:bd:c5:fe:97: de:37:36:15:41:1b:a5:77:6b:44:5c:e4:f8:19:d8:70:36:0c: 75:ce:cb:b7:c3:4d:0b:83:69:07:28:d6:58:50:85:3e:9c:3d: 1e:78:15:ae:cd:6a:ab:44:a1:8c:d9:0b:74:8a:5c:24:ad:78: 83:23:04:49:cf:e1:47:11:bd:19:36:2b:04:d6:8b:b8:1d:fe: 17:b7:72:ff:b8:9e:90:f1:82:c6:ba:62:22:54:31:a7:29:86: 8d:7d:1a:47:a7:dd:79:9a:34:15:b8:9e:0e:17:4a:78:34:50: 67:a1:8f:f1:e3:1c:0e:c2:ac:99:82:b5:00:7d:74:60:80:ce: cb:cd:51:23:f1:d1:de:85:e2:f3:90:b4:39:25:07:98:ed:59: fb:7d:61:f5:f5:c3:c9:8b:28:cb:1c:fd:b3:8e:93:b5:98:13: 19:d8:7b:0d:40:30:97:0e:10:92:20:fd:2b:41:c3:6c:6b:df: 95:5b:51:1a:05:6f:a8:ca:89:56:af:16:c4:45:45:4f:f0:56: ae:51:31:f4:88:21:1f:e8:a0:5f:2a:6d:4e:07:21:7b:c5:34: 4f:71:33:8e:b0:6c:f1:b3:b6:77:30:6b:20:25:a0:a2:9c:5a: d2:7f:54:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBKkckPjbMuk7pMVAqzm7FhGzWvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYwQjhBODY3NzcyQjI0MzY3NTlFMEYwMTI3NjVEQzc3 QzEyQUNCNTAeFw0yNTExMDMwOTEwNDNaFw0yNTExMDQwOTIyNDNaMDMxMTAvBgNV BAMTKEVDM0UyMjU2MTM1NENGN0FFMDBBRDBDMkYxNzlBRTUzMTYzQzdGQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzkx6oLVl90rwGPp25B9X54h9Z FwPVEVbcvF8omRketA0pwht+YBILKdv5Harde3IdzQeWLL1erqtkuP+DqceOBuFa PLvRG7FMs3rD2G3nUNj/KN1hNTqgj/HG51VIXkxaezIJn4DBeOwqCstVX4227Eex OZTSXJPk+w4LShbK4cbRnZi2Y4yAoIv2i71wBCWRB7DGqXSY9ujsvCUb2P+9DqQo NK1OSsAjv7wQLA/c6i3gEM6vcWzEzSDbgtjw7v8WqD337xPbBrisE9sClRLLKlp4 zBkZFdVbfuIs8L0eDZRwi+NUU/mP8KH1hTkwiGFXwGwINupb4uNW9fhvotfHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7D4iVhNUz3rgCtDC8XmuUxY8f7QwHwYDVR0j BBgwFoAUDwuKhndyskNnWeDwEnZdx3wSrLUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3RFemZZNG9tTXRKeDM0TEZ1eUtXb2prNDh0QnVEVE04d3RMakV4amZh OE0vMC8wRjBCOEE4Njc3NzJCMjQzNjc1OUUwRjAxMjc2NURDNzdDMTJBQ0I1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGMEI4QTg2Nzc3MkIyNDM2 NzU5RTBGMDEyNzY1REM3N0MxMkFDQjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3RFemZZNG9tTXRKeDM0TEZ1eUtXb2prNDh0QnVEVE04d3RMakV4amZhOE0vMC8w RjBCOEE4Njc3NzJCMjQzNjc1OUUwRjAxMjc2NURDNzdDMTJBQ0I1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdsI4/GHJezEcTnKtBdK9xf6X3jc2FUEbpXdrRFzk+BnYcDYMdc7Lt8NNC4Np ByjWWFCFPpw9HngVrs1qq0ShjNkLdIpcJK14gyMESc/hRxG9GTYrBNaLuB3+F7dy /7iekPGCxrpiIlQxpymGjX0aR6fdeZo0FbieDhdKeDRQZ6GP8eMcDsKsmYK1AH10 YIDOy81RI/HR3oXi85C0OSUHmO1Z+31h9fXDyYsoyxz9s46TtZgTGdh7DUAwlw4Q kiD9K0HDbGvflVtRGgVvqMqJVq8WxEVFT/BWrlEx9IghH+igXyptTgche8U0T3Ez jrBs8bO2dzBrICWgopxa0n9UYA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:59 2025 by rpki-client