$ rpki-client -vvf rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.mft File: E11F8ABED7D76E5375A8436FD1F79955FF2FE223.mft (raw, json) Hash identifier: s75Zu8kEVC49Drb5gXECMZy4MonLcIZaFkb5aO6rnS4= Subject key identifier: 84:92:98:DC:2E:C7:BC:CE:BE:81:AF:43:D7:9B:6D:BC:D6:F4:17:8F Authority key identifier: E1:1F:8A:BE:D7:D7:6E:53:75:A8:43:6F:D1:F7:99:55:FF:2F:E2:23 Certificate issuer: /CN=E11F8ABED7D76E5375A8436FD1F79955FF2FE223 Certificate serial: 48EC85F5687782D4788CA6DBFADE3AEFAFBB5979 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.cer Subject info access: rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.mft Manifest number: 0245 Signing time: Mon 03 Nov 2025 12:14:27 +0000 Manifest this update: Mon 03 Nov 2025 12:09:27 +0000 Manifest next update: Tue 04 Nov 2025 15:05:27 +0000 Files and hashes: 1: 34352e37312e3132302e302f32322d3234203d3e20323637363139.roa (hash: GpQZkLwXG54lHOHQzGAKznEEd+6AMx8gO62nnVu5jhE=) 2: E11F8ABED7D76E5375A8436FD1F79955FF2FE223.crl (hash: 3zPghFa4udscbfGeqZr0ph2onTadXaTW9WSGjQ2vKDM=) 3: 323830343a343431303a3a2f33322d3438203d3e20323637363139.roa (hash: VSSVyl3TEf6TYDtC7eJ00zjTr9caCfIiX+mXtC3UJkg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.crl rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 15:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ec:85:f5:68:77:82:d4:78:8c:a6:db:fa:de:3a:ef:af:bb:59:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E11F8ABED7D76E5375A8436FD1F79955FF2FE223 Validity Not Before: Nov 3 12:09:27 2025 GMT Not After : Nov 4 15:05:27 2025 GMT Subject: CN=849298DC2EC7BCCEBE81AF43D79B6DBCD6F4178F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:53:41:d7:b4:8d:4c:19:00:72:11:34:37:6e: 34:7f:10:32:e7:02:d0:08:f7:84:e7:d3:56:ef:03: 63:5d:b0:52:43:a6:f3:66:d1:b1:6c:00:7b:db:f6: c0:be:12:da:86:1f:bb:71:24:67:fa:d7:18:49:46: 70:bb:45:e2:a1:d6:65:f3:92:cd:e9:40:3d:82:ba: 8e:08:7c:69:ab:3e:b3:41:89:f2:49:96:c9:40:22: 17:2d:1c:6a:ca:b2:32:bc:a2:14:60:d1:3b:a2:5d: be:3e:92:f5:b3:2f:fc:f9:a0:14:9a:2d:11:6c:67: 88:ed:bf:3c:00:6d:01:79:e8:38:f6:4d:5a:b3:9a: c3:8b:0b:84:34:d1:c4:43:51:5d:42:d2:68:94:6f: 86:b5:83:3c:cd:3f:bf:4d:54:e5:5a:90:2f:0e:14: d5:51:22:80:99:1d:e2:f0:44:dd:67:13:f4:ae:a9: 0a:c9:cd:d6:a3:26:2e:37:1c:ea:ff:61:88:45:b9: 10:9a:43:a7:8c:11:8d:93:32:25:e4:9d:8f:bd:20: 01:20:94:f5:7d:9b:e9:bc:2c:67:9a:89:c5:dc:87: a4:30:a9:80:e0:4f:2b:02:06:08:34:60:60:7a:dd: 0e:d2:dc:94:74:f7:22:a7:1f:8f:8c:26:2c:f7:22: bf:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:92:98:DC:2E:C7:BC:CE:BE:81:AF:43:D7:9B:6D:BC:D6:F4:17:8F X509v3 Authority Key Identifier: keyid:E1:1F:8A:BE:D7:D7:6E:53:75:A8:43:6F:D1:F7:99:55:FF:2F:E2:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:23:d1:fb:de:6a:1c:aa:f6:51:5a:7f:54:6a:41:60:74:04: 56:dc:71:dd:3f:9b:0e:f7:44:9f:29:5d:35:da:f9:00:1c:c1: 39:09:00:90:d9:c5:d2:0a:41:22:7f:33:bb:1d:60:b7:18:65: 66:fd:94:aa:7c:80:12:f1:8c:4e:3b:f8:da:19:c2:15:bb:e7: 33:1b:cd:86:71:d5:76:b3:8a:f3:f2:82:76:8e:a9:b1:ed:73: 3a:19:bb:c3:00:d7:38:dd:9f:6c:ba:2f:a9:f4:2a:e4:f6:02: e1:2c:91:89:90:ac:9b:37:f8:a4:0e:b8:e2:30:53:c2:c1:cd: bd:d4:ff:49:3c:ee:1d:d3:e1:b4:43:2d:67:06:6c:cd:ff:34: 55:ad:22:33:d9:f7:c9:7e:83:60:4f:32:d5:78:68:5d:60:a2: 4f:09:ce:60:ea:b9:b2:35:84:22:b7:8f:31:68:fa:31:13:ef: e6:4c:8b:f5:9b:df:f4:26:bc:9a:79:38:de:0b:9f:f2:5f:fc: 79:79:4f:26:4a:36:d1:ca:85:2c:d5:78:91:38:87:c1:ce:6e: 3a:69:b6:c0:92:1f:2f:c9:a8:06:b0:cc:7d:27:a4:a4:7e:d7: 58:3f:4e:b5:30:d7:f4:80:13:70:f4:40:d3:4f:37:7a:7f:bf: 82:4a:03:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSOyF9Wh3gtR4jKbb+t4676+7WXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTExRjhBQkVEN0Q3NkU1Mzc1QTg0MzZGRDFGNzk5NTVG RjJGRTIyMzAeFw0yNTExMDMxMjA5MjdaFw0yNTExMDQxNTA1MjdaMDMxMTAvBgNV BAMTKDg0OTI5OERDMkVDN0JDQ0VCRTgxQUY0M0Q3OUI2REJDRDZGNDE3OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkU0HXtI1MGQByETQ3bjR/EDLn AtAI94Tn01bvA2NdsFJDpvNm0bFsAHvb9sC+EtqGH7txJGf61xhJRnC7ReKh1mXz ks3pQD2Cuo4IfGmrPrNBifJJlslAIhctHGrKsjK8ohRg0TuiXb4+kvWzL/z5oBSa LRFsZ4jtvzwAbQF56Dj2TVqzmsOLC4Q00cRDUV1C0miUb4a1gzzNP79NVOVakC8O FNVRIoCZHeLwRN1nE/SuqQrJzdajJi43HOr/YYhFuRCaQ6eMEY2TMiXknY+9IAEg lPV9m+m8LGeaicXch6QwqYDgTysCBgg0YGB63Q7S3JR09yKnH4+MJiz3Ir//AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhJKY3C7HvM6+ga9D15ttvNb0F48wHwYDVR0j BBgwFoAU4R+KvtfXblN1qENv0feZVf8v4iMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEdIaFBkM1d0clhzcTlzZ3ZqSFRpaFk4MzRSR1laTVp4elM0M3lDS1dG b3UvMC9FMTFGOEFCRUQ3RDc2RTUzNzVBODQzNkZEMUY3OTk1NUZGMkZFMjIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxMUY4QUJFRDdENzZFNTM3 NUE4NDM2RkQxRjc5OTU1RkYyRkUyMjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEdIaFBkM1d0clhzcTlzZ3ZqSFRpaFk4MzRSR1laTVp4elM0M3lDS1dGb3UvMC9F MTFGOEFCRUQ3RDc2RTUzNzVBODQzNkZEMUY3OTk1NUZGMkZFMjIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxCPR+95qHKr2UVp/VGpBYHQEVtxx3T+bDvdEnyldNdr5ABzBOQkAkNnF0gpB In8zux1gtxhlZv2UqnyAEvGMTjv42hnCFbvnMxvNhnHVdrOK8/KCdo6pse1zOhm7 wwDXON2fbLovqfQq5PYC4SyRiZCsmzf4pA644jBTwsHNvdT/STzuHdPhtEMtZwZs zf80Va0iM9n3yX6DYE8y1XhoXWCiTwnOYOq5sjWEIrePMWj6MRPv5kyL9Zvf9Ca8 mnk43guf8l/8eXlPJko20cqFLNV4kTiHwc5uOmm2wJIfL8moBrDMfSekpH7XWD9O tTDX9IATcPRA0083en+/gkoDLg== -----END CERTIFICATE-----Generated at Tue Nov 4 05:04:28 2025 by rpki-client