$ rpki-client -vvf rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft File: 406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft (raw, json) Hash identifier: 8aGaN80DVy6bcgvTh/NUqiQ4NSoq3DPnMOijbDxPfsc= Subject key identifier: 0D:37:71:21:E9:23:4E:B6:65:72:F2:76:1D:2C:AC:85:1D:5C:3D:B1 Authority key identifier: 40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3 Certificate issuer: /CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3 Certificate serial: 0DD8E30C6541058F4CEC245355AB84B2EEC316D6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft Manifest number: 0305 Signing time: Mon 03 Nov 2025 19:04:20 +0000 Manifest this update: Mon 03 Nov 2025 18:59:20 +0000 Manifest next update: Tue 04 Nov 2025 21:56:20 +0000 Files and hashes: 1: 406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl (hash: LNwbkmSX3QHlqQj2KRBVphlaciFAo7hKl5ZoZp+tVG8=) 2: 323830343a386566303a343a3a2f34372d3437203d3e20323733343537.roa (hash: SUmLEg8kb6XKx6NKYqf3IeVCbffV6D4xIgJGrq8TI6A=) 3: 323830343a386566303a323a3a2f34372d3437203d3e20323733343537.roa (hash: dqdT0Z2X2ujGOU5wllrriRCiSwGcK/M1ZPuIhoxu7I0=) 4: 323830343a386566303a3a2f33322d3430203d3e20323733343537.roa (hash: cijZiORTQj8pw+Vial1gPDZ9Wbm7UefB7xwRnVBMG3A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d8:e3:0c:65:41:05:8f:4c:ec:24:53:55:ab:84:b2:ee:c3:16:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3 Validity Not Before: Nov 3 18:59:20 2025 GMT Not After : Nov 4 21:56:20 2025 GMT Subject: CN=0D377121E9234EB66572F2761D2CAC851D5C3DB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:8a:61:1f:ac:e2:12:06:fb:9c:df:c5:72: 35:6a:a1:77:3a:fd:23:aa:71:8c:35:f4:b4:51:61: 9b:54:e4:e3:4d:9a:70:2c:73:f7:77:f7:6f:8a:fe: d3:c7:b8:ef:88:ec:7d:9a:3c:18:d3:cb:3d:40:19: a6:0e:02:62:f0:8d:c5:48:c7:cc:26:6c:7a:b0:c4: d2:b5:82:76:ea:55:3d:23:4f:7a:04:c6:9e:81:b8: cf:78:26:c3:cd:10:2a:2b:7d:e0:0f:3c:cb:a2:8f: 7a:54:f4:78:0e:d7:cd:75:bf:57:56:5a:d0:35:90: 22:51:63:8b:68:3e:f7:c2:89:b2:ce:2c:5b:19:7e: 28:1f:57:7b:26:35:55:1a:79:59:07:ff:34:08:d8: 22:c8:d0:4b:a9:0e:79:c7:79:ba:78:95:11:4c:46: aa:35:ca:70:99:b7:b8:79:3f:a7:93:b4:1d:e4:34: 35:5e:4e:cd:b5:c3:cb:37:22:00:46:c8:9a:fc:af: 51:e0:fe:ea:dc:f1:94:ea:58:b9:2b:bb:fe:3f:8e: 1c:a4:20:cd:52:fb:b1:bf:cf:7e:0f:74:e7:7b:0e: 65:02:33:0d:b9:6f:4b:05:47:a5:8f:14:c5:67:82: 69:29:78:04:ca:8f:3f:00:90:a0:27:fc:a0:f3:3d: 5e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:37:71:21:E9:23:4E:B6:65:72:F2:76:1D:2C:AC:85:1D:5C:3D:B1 X509v3 Authority Key Identifier: keyid:40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:8e:df:45:56:61:14:32:a8:3d:9a:70:89:26:c2:ca:ec:54: c6:de:36:a9:df:f2:4c:35:ae:62:e9:d5:43:19:7a:f6:0b:62: 14:bf:42:fd:fb:c3:6a:76:67:6b:82:e3:05:3a:5a:33:05:49: 58:72:ed:43:d5:2d:90:b6:b6:67:52:74:47:08:59:6b:b6:8e: 4e:c7:07:c3:7f:cc:04:64:5f:82:ea:e1:5f:3d:c6:f9:44:86: fd:0c:3a:ba:cd:7b:81:2e:ec:5d:c0:0b:98:25:f2:1b:7e:da: 51:61:ee:d3:9f:d8:37:c8:89:96:3a:0a:17:89:66:5e:8a:6b: 66:56:a2:03:f5:44:94:30:74:24:0d:b1:39:df:b1:d0:e6:26: b7:69:b6:7a:a2:48:93:85:48:99:81:e0:e0:dc:72:e7:e4:71: 1c:f2:ce:9d:4b:86:98:69:ca:c5:aa:89:33:42:6f:92:69:fd: aa:e7:49:9b:c1:56:9f:ed:f6:31:95:84:03:c5:9f:d5:9f:98: ee:39:16:10:55:6e:28:a7:7d:31:58:e8:2c:b7:ef:65:f5:c1: 84:d3:eb:76:aa:b5:84:6a:12:47:55:16:2e:70:48:e3:17:bb: 8a:65:e2:8e:98:37:3f:fc:2b:4a:be:ce:f7:c2:92:8c:e7:d5: 1f:21:17:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDdjjDGVBBY9M7CRTVauEsu7DFtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA2QjAwRDVCNjYwRjZFRUM1Qzg0MTRGQTBGMEI3RkYz RUM1NzZBMzAeFw0yNTExMDMxODU5MjBaFw0yNTExMDQyMTU2MjBaMDMxMTAvBgNV BAMTKDBEMzc3MTIxRTkyMzRFQjY2NTcyRjI3NjFEMkNBQzg1MUQ1QzNEQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCupophH6ziEgb7nN/FcjVqoXc6 /SOqcYw19LRRYZtU5ONNmnAsc/d392+K/tPHuO+I7H2aPBjTyz1AGaYOAmLwjcVI x8wmbHqwxNK1gnbqVT0jT3oExp6BuM94JsPNECorfeAPPMuij3pU9HgO1811v1dW WtA1kCJRY4toPvfCibLOLFsZfigfV3smNVUaeVkH/zQI2CLI0EupDnnHebp4lRFM Rqo1ynCZt7h5P6eTtB3kNDVeTs21w8s3IgBGyJr8r1Hg/urc8ZTqWLkru/4/jhyk IM1S+7G/z34PdOd7DmUCMw25b0sFR6WPFMVngmkpeATKjz8AkKAn/KDzPV63AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDTdxIekjTrZlcvJ2HSyshR1cPbEwHwYDVR0j BBgwFoAUQGsA1bZg9u7FyEFPoPC3/z7FdqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWRQZnVSRVBUQnR0TXFRb3BUeXRwbmlLaEUzTEhkRnN6YXZEWk1CYzUy VW0vMS80MDZCMDBENUI2NjBGNkVFQzVDODQxNEZBMEYwQjdGRjNFQzU3NkEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwNkIwMEQ1QjY2MEY2RUVD NUM4NDE0RkEwRjBCN0ZGM0VDNTc2QTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWRQZnVSRVBUQnR0TXFRb3BUeXRwbmlLaEUzTEhkRnN6YXZEWk1CYzUyVW0vMS80 MDZCMDBENUI2NjBGNkVFQzVDODQxNEZBMEYwQjdGRjNFQzU3NkEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvo7fRVZhFDKoPZpwiSbCyuxUxt42qd/yTDWuYunVQxl69gtiFL9C/fvDanZn a4LjBTpaMwVJWHLtQ9UtkLa2Z1J0RwhZa7aOTscHw3/MBGRfgurhXz3G+USG/Qw6 us17gS7sXcALmCXyG37aUWHu05/YN8iJljoKF4lmXoprZlaiA/VElDB0JA2xOd+x 0OYmt2m2eqJIk4VImYHg4Nxy5+RxHPLOnUuGmGnKxaqJM0Jvkmn9qudJm8FWn+32 MZWEA8Wf1Z+Y7jkWEFVuKKd9MVjoLLfvZfXBhNPrdqq1hGoSR1UWLnBI4xe7imXi jpg3P/wrSr7O98KSjOfVHyEXrQ== -----END CERTIFICATE-----Generated at Tue Nov 4 05:06:34 2025 by rpki-client