$ rpki-client -vvf rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft File: FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft (raw, json) Hash identifier: MpHYpohDZCJxRqThqh/5IgIsW1hruRK0lDzb7MKmlLc= Subject key identifier: 88:90:B6:3D:EC:66:CA:15:85:FB:C8:6C:A2:59:37:85:57:93:95:CB Authority key identifier: FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9 Certificate issuer: /CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9 Certificate serial: 4421287E77CC722A4A94EC114D557766E72A159A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer Subject info access: rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft Manifest number: 02FA Signing time: Mon 03 Nov 2025 01:50:39 +0000 Manifest this update: Mon 03 Nov 2025 01:45:39 +0000 Manifest next update: Tue 04 Nov 2025 01:55:39 +0000 Files and hashes: 1: 323830343a363938633a3a2f33322d3334203d3e20323730323737.roa (hash: J+wRwomABKCbVl4EP5JD2Yfly2BPeIoqIkLJ9ZSvj4s=) 2: 3230302e3132342e3136342e302f32322d3234203d3e20323730323737.roa (hash: 64d3manPGgk3wxr3C7+S75h3+f1uoBp0OnH1+QMNePE=) 3: FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl (hash: TGMZPMHPmAjKCnB70iEglzAFILeJE7Cb6vBBrx+u1+U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 01:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:21:28:7e:77:cc:72:2a:4a:94:ec:11:4d:55:77:66:e7:2a:15:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9 Validity Not Before: Nov 3 01:45:39 2025 GMT Not After : Nov 4 01:55:39 2025 GMT Subject: CN=8890B63DEC66CA1585FBC86CA2593785579395CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:46:61:65:9c:e2:f1:27:37:b6:d3:8a:3d:8b: 1b:d1:8e:6e:c4:ea:d5:52:3e:ea:af:cf:eb:8c:a2: 59:87:a1:a3:cf:d4:e3:65:be:81:27:10:b0:64:6f: 33:6b:fb:c1:c6:08:84:60:e6:e6:fe:77:62:77:4f: a2:3e:29:03:d8:ac:dc:4a:d3:6f:b9:0c:3f:33:f5: 6c:43:ec:d1:29:67:31:5a:c5:07:d2:51:45:85:80: 1a:2e:ea:91:b8:3c:c2:39:b8:aa:df:69:83:f4:fe: 44:9e:de:10:e5:14:18:41:34:28:46:75:44:67:7a: a7:d1:cc:65:af:27:d3:a9:d6:96:bf:ff:7a:a9:51: 60:21:1e:eb:eb:89:2f:26:be:b9:2b:07:6b:ec:03: c0:b3:a7:06:8e:49:f2:1f:e6:20:70:4d:29:7b:9e: 20:16:bf:f1:03:67:59:16:2c:df:db:57:b6:13:f2: 68:7e:ee:48:a8:c1:3a:7c:46:86:b1:19:39:bc:8f: 4f:36:35:f4:b6:6e:5b:c5:1e:02:d2:03:b8:f0:68: 9f:20:ba:6d:03:d5:d9:ba:7e:8c:18:bf:b3:4d:80: 51:ba:31:ad:53:da:85:de:c8:d4:ee:70:d6:74:64: bf:fe:d9:b9:0f:31:00:5b:16:b2:01:a9:b1:64:9d: 7a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:90:B6:3D:EC:66:CA:15:85:FB:C8:6C:A2:59:37:85:57:93:95:CB X509v3 Authority Key Identifier: keyid:FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:4d:6f:e3:17:fc:1e:ea:7e:8e:e6:d7:ab:8a:99:dd:74:c2: a4:b3:0c:10:82:24:fa:ab:cf:12:48:c6:26:89:25:89:6f:63: bc:d7:f1:8e:84:fe:c7:e4:6e:53:45:7c:e5:2b:da:1b:66:7b: 71:bc:07:b9:2b:ca:bd:dd:fb:e2:5a:98:74:49:e1:54:19:46: 60:17:1e:09:8c:00:80:d3:6d:61:e0:6c:3a:5a:9c:92:01:8f: 47:03:35:61:e4:b7:5a:4c:e9:2f:3c:df:fa:27:a6:3b:c1:c4: 67:a9:e7:f9:ae:d9:6e:e1:67:6e:3b:01:f1:86:b2:ce:a7:b4: b3:06:fd:de:a9:bf:95:52:f3:dc:83:41:de:d9:91:a8:93:84: 19:c0:86:eb:57:e1:8f:22:03:6f:23:6a:ce:2f:ce:c4:6c:d7: 83:15:88:d3:9c:04:06:e0:ee:31:8a:c3:0c:a3:f6:c8:e9:84: 4c:81:db:45:b2:2e:f8:a8:85:22:52:c7:40:b7:d1:0c:16:c3: 6a:3f:58:d2:cb:e2:bb:31:f3:e8:16:02:d4:37:af:d8:0c:fb: f6:41:ba:d8:53:ae:29:fb:63:9b:ba:76:6e:b4:bd:ad:3a:5b: 77:55:ed:82:b4:78:b5:5b:b3:ba:6b:07:b5:43:bc:71:b4:37: 07:d6:3c:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURCEofnfMcipKlOwRTVV3ZucqFZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzQzg0NjQzQ0YwQ0ZERUMzRjMyREU1QUU2M0U4OEJD RkE5RjdDOTAeFw0yNTExMDMwMTQ1MzlaFw0yNTExMDQwMTU1MzlaMDMxMTAvBgNV BAMTKDg4OTBCNjNERUM2NkNBMTU4NUZCQzg2Q0EyNTkzNzg1NTc5Mzk1Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjRmFlnOLxJze204o9ixvRjm7E 6tVSPuqvz+uMolmHoaPP1ONlvoEnELBkbzNr+8HGCIRg5ub+d2J3T6I+KQPYrNxK 02+5DD8z9WxD7NEpZzFaxQfSUUWFgBou6pG4PMI5uKrfaYP0/kSe3hDlFBhBNChG dURneqfRzGWvJ9Op1pa//3qpUWAhHuvriS8mvrkrB2vsA8CzpwaOSfIf5iBwTSl7 niAWv/EDZ1kWLN/bV7YT8mh+7kiowTp8RoaxGTm8j082NfS2blvFHgLSA7jwaJ8g um0D1dm6fowYv7NNgFG6Ma1T2oXeyNTucNZ0ZL/+2bkPMQBbFrIBqbFknXpPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiJC2PexmyhWF+8hsolk3hVeTlcswHwYDVR0j BBgwFoAU/TyEZDzwz97D8y3lrmPoi8+p98kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUFrMzZXaVlNZjg4dHV5N1d0VkpCRXhrNlVvMm1iWUZHZ1lhQllMc1VF a3ovMS9GRDNDODQ2NDNDRjBDRkRFQzNGMzJERTVBRTYzRTg4QkNGQTlGN0M5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZEM0M4NDY0M0NGMENGREVD M0YzMkRFNUFFNjNFODhCQ0ZBOUY3QzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUFrMzZXaVlNZjg4dHV5N1d0VkpCRXhrNlVvMm1iWUZHZ1lhQllMc1VFa3ovMS9G RDNDODQ2NDNDRjBDRkRFQzNGMzJERTVBRTYzRTg4QkNGQTlGN0M5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABU1v4xf8Hup+jubXq4qZ3XTCpLMMEIIk+qvPEkjGJokliW9jvNfxjoT+x+Ru U0V85SvaG2Z7cbwHuSvKvd374lqYdEnhVBlGYBceCYwAgNNtYeBsOlqckgGPRwM1 YeS3WkzpLzzf+iemO8HEZ6nn+a7ZbuFnbjsB8Yayzqe0swb93qm/lVLz3INB3tmR qJOEGcCG61fhjyIDbyNqzi/OxGzXgxWI05wEBuDuMYrDDKP2yOmETIHbRbIu+KiF IlLHQLfRDBbDaj9Y0sviuzHz6BYC1Dev2Az79kG62FOuKftjm7p2brS9rTpbd1Xt grR4tVuzumsHtUO8cbQ3B9Y89g== -----END CERTIFICATE-----Generated at Mon Nov 3 12:13:23 2025 by rpki-client