$ rpki-client -vvf rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft File: 289C0FA8F74E8A496A1CF040353916504C4E789F.mft (raw, json) Hash identifier: BIFijARyW6UFfP+O2ZNkIIiAtJv/leXBTX0XzGvAr7k= Subject key identifier: 1B:BD:DC:21:3B:23:8A:A7:18:9D:D5:DF:A0:6C:F7:FD:62:2B:01:60 Authority key identifier: 28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F Certificate issuer: /CN=289C0FA8F74E8A496A1CF040353916504C4E789F Certificate serial: 6E9BEE0A764889166D16F0825DB5389290D47EAD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer Subject info access: rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft Manifest number: 02EA Signing time: Sun 02 Nov 2025 17:55:41 +0000 Manifest this update: Sun 02 Nov 2025 17:50:41 +0000 Manifest next update: Mon 03 Nov 2025 21:47:41 +0000 Files and hashes: 1: 289C0FA8F74E8A496A1CF040353916504C4E789F.crl (hash: /EZXml6pi2hXUMyKDF1sFLjJAARlg1cXUc+YMV6u1S4=) 2: 323830343a343764303a3a2f33322d313238203d3e20323637303738.roa (hash: +gP3s6w113DB3ZyjXxmKKAlbxghpSVPSj8Lqa0WGlnI=) 3: 34352e3232382e3134382e302f32322d3234203d3e20323637303738.roa (hash: v1wrjfYs/XN4AL+meICElKQP9scnXquXOc/B2Xkm9JI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.crl rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 21:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:9b:ee:0a:76:48:89:16:6d:16:f0:82:5d:b5:38:92:90:d4:7e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289C0FA8F74E8A496A1CF040353916504C4E789F Validity Not Before: Nov 2 17:50:41 2025 GMT Not After : Nov 3 21:47:41 2025 GMT Subject: CN=1BBDDC213B238AA7189DD5DFA06CF7FD622B0160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e8:ad:33:20:4f:c9:43:e1:7b:73:95:f4:55: da:9f:32:a8:57:ac:04:b9:af:90:d9:75:6c:15:bd: e0:a8:54:2c:92:f2:84:a1:e0:fe:73:eb:88:f5:56: 41:19:35:6f:cd:09:26:75:a1:98:98:18:c1:0e:9a: 83:66:07:23:be:2a:ff:b0:b7:05:4b:fc:72:df:c2: b5:45:bc:15:c2:dc:dd:99:72:8f:da:b9:8e:61:76: 3d:80:94:04:b0:49:44:07:7c:c8:30:28:7c:13:a7: 7f:0e:b4:5b:07:25:6b:d4:24:7e:cc:f2:1e:f2:1d: cd:81:de:58:47:46:48:46:93:a5:ab:98:ee:20:48: 62:7c:b4:37:e0:64:d9:6a:3f:78:d7:a0:09:81:fd: cf:16:42:be:ea:63:03:6c:9c:31:97:6f:aa:da:48: 41:2d:f6:66:c7:8b:59:4d:ae:82:e1:8b:7a:aa:d1: f5:c5:44:af:f2:89:6f:fc:6d:01:20:32:ee:ce:0e: aa:df:bf:3a:71:c5:e5:9a:b5:a9:fe:b4:bb:c1:ff: 38:8e:42:5a:06:7a:a2:d8:01:62:6c:81:33:28:cf: 8f:20:f3:79:47:d5:3e:a6:a2:75:67:73:2a:43:7b: 80:9b:d9:7f:56:ec:28:d9:33:39:7c:0c:4e:a6:1d: 5e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BD:DC:21:3B:23:8A:A7:18:9D:D5:DF:A0:6C:F7:FD:62:2B:01:60 X509v3 Authority Key Identifier: keyid:28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:9e:13:b8:16:aa:08:01:78:bd:4c:5b:4c:01:73:0e:ff:89: c4:c5:29:74:ff:95:3e:ba:a9:34:4b:2c:40:ab:91:44:2d:de: 80:3f:f9:a8:72:30:6d:bd:54:b4:e9:31:2d:7e:45:67:1d:ad: b1:b9:29:9f:56:89:52:ae:80:e9:92:df:4a:6d:39:66:fb:af: f4:b5:de:33:a5:12:42:bd:ca:43:ea:b9:53:d8:7d:5b:5e:49: 95:17:0a:2b:71:ed:96:10:29:f8:51:45:0b:14:b9:76:ae:aa: 5e:ef:58:c2:f5:cb:5d:24:e8:b7:4b:cc:9d:df:d8:db:7f:78: 1a:42:2c:a3:ee:45:d4:3f:12:b3:e4:50:98:93:37:27:26:a5: 1f:04:50:81:0c:e1:5f:45:2f:54:01:0c:cb:d2:59:bf:be:d3: ae:2b:69:a0:10:3b:63:50:ad:14:72:f3:b6:85:9b:a9:f7:44: 3c:36:fd:c7:43:d0:21:88:03:25:96:fe:49:e4:92:de:3d:a1: 48:12:88:80:af:e9:61:8b:1c:ae:8c:1a:e7:a2:6a:25:24:5d: 44:54:ef:67:7d:3f:2e:79:0e:b8:f3:d1:36:44:a1:c8:32:d5: 06:48:a2:d1:0f:42:d1:c3:bf:f2:24:b2:36:c2:6d:64:f8:7d: 71:96:fa:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbpvuCnZIiRZtFvCCXbU4kpDUfq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5QzBGQThGNzRFOEE0OTZBMUNGMDQwMzUzOTE2NTA0 QzRFNzg5RjAeFw0yNTExMDIxNzUwNDFaFw0yNTExMDMyMTQ3NDFaMDMxMTAvBgNV BAMTKDFCQkREQzIxM0IyMzhBQTcxODlERDVERkEwNkNGN0ZENjIyQjAxNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC56K0zIE/JQ+F7c5X0VdqfMqhX rAS5r5DZdWwVveCoVCyS8oSh4P5z64j1VkEZNW/NCSZ1oZiYGMEOmoNmByO+Kv+w twVL/HLfwrVFvBXC3N2Zco/auY5hdj2AlASwSUQHfMgwKHwTp38OtFsHJWvUJH7M 8h7yHc2B3lhHRkhGk6WrmO4gSGJ8tDfgZNlqP3jXoAmB/c8WQr7qYwNsnDGXb6ra SEEt9mbHi1lNroLhi3qq0fXFRK/yiW/8bQEgMu7ODqrfvzpxxeWatan+tLvB/ziO QloGeqLYAWJsgTMoz48g83lH1T6monVncypDe4Cb2X9W7CjZMzl8DE6mHV5nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUG73cITsjiqcYndXfoGz3/WIrAWAwHwYDVR0j BBgwFoAUKJwPqPdOiklqHPBANTkWUExOeJ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNTFwV05zeWkxc3pIbVJ5aDlxRG5leWlZSFBubktIZGpYU2k3MVBSeTJq YWMvMC8yODlDMEZBOEY3NEU4QTQ5NkExQ0YwNDAzNTM5MTY1MDRDNEU3ODlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4OUMwRkE4Rjc0RThBNDk2 QTFDRjA0MDM1MzkxNjUwNEM0RTc4OUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NTFwV05zeWkxc3pIbVJ5aDlxRG5leWlZSFBubktIZGpYU2k3MVBSeTJqYWMvMC8y ODlDMEZBOEY3NEU4QTQ5NkExQ0YwNDAzNTM5MTY1MDRDNEU3ODlGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApZ4TuBaqCAF4vUxbTAFzDv+JxMUpdP+VPrqpNEssQKuRRC3egD/5qHIwbb1U tOkxLX5FZx2tsbkpn1aJUq6A6ZLfSm05Zvuv9LXeM6USQr3KQ+q5U9h9W15JlRcK K3HtlhAp+FFFCxS5dq6qXu9YwvXLXSTot0vMnd/Y2394GkIso+5F1D8Ss+RQmJM3 JyalHwRQgQzhX0UvVAEMy9JZv77TritpoBA7Y1CtFHLztoWbqfdEPDb9x0PQIYgD JZb+SeSS3j2hSBKIgK/pYYscrowa56JqJSRdRFTvZ30/LnkOuPPRNkShyDLVBkii 0Q9C0cO/8iSyNsJtZPh9cZb6Ug== -----END CERTIFICATE-----Generated at Mon Nov 3 12:37:00 2025 by rpki-client