$ rpki-client -vvf rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft File: 71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft (raw, json) Hash identifier: MtlJpG9U4IzV8ewwqM41JjnVUILERsbRDrBqzEYNe0U= Subject key identifier: 9D:3A:C7:53:8A:48:2F:AE:90:90:32:75:3D:C9:F8:FD:E7:FD:43:55 Authority key identifier: 71:D3:A2:DE:C8:BA:E6:67:5D:BB:BA:B3:FB:77:3E:6D:CF:4A:6F:B9 Certificate issuer: /CN=71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9 Certificate serial: 534355384770B804B671AFE45B89650D9B916969 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.cer Subject info access: rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft Manifest number: 96 Signing time: Sun 02 Nov 2025 20:50:48 +0000 Manifest this update: Sun 02 Nov 2025 20:45:48 +0000 Manifest next update: Mon 03 Nov 2025 22:29:48 +0000 Files and hashes: 1: 323830343a393363343a3a2f33322d3332203d3e20323734373939.roa (hash: Lg2xMCDUflfzYLEqDuILPmwVidL9vHQP1G7+KLc+SfE=) 2: 71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.crl (hash: WBRqfzxz1szvcrU/YREHHCV/754QvKCHnCDrZzlt9CQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.crl rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 22:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:43:55:38:47:70:b8:04:b6:71:af:e4:5b:89:65:0d:9b:91:69:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9 Validity Not Before: Nov 2 20:45:48 2025 GMT Not After : Nov 3 22:29:48 2025 GMT Subject: CN=9D3AC7538A482FAE909032753DC9F8FDE7FD4355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:5a:b7:d5:5f:c9:e8:72:84:2a:c3:c1:00:c0: 1c:d2:06:2b:f8:78:4f:5b:32:87:17:40:b9:37:11: 06:07:66:86:a0:72:fd:d0:57:c5:1d:ad:ac:ea:21: dd:97:bc:66:52:0a:2c:34:b1:14:ec:66:3a:e0:76: f9:ee:a6:62:b3:1a:73:4a:6f:22:8b:b3:a8:7e:e5: c1:a9:92:d1:db:6e:a4:4b:d9:35:5f:f1:df:82:0c: f4:91:f0:4a:20:66:5b:d4:1d:2d:fc:03:65:28:a3: 65:54:e8:ec:05:45:f8:b0:41:93:4e:13:32:85:b9: 08:36:6e:72:2f:d8:06:0f:60:68:73:38:db:8c:f8: 78:cf:aa:d5:e0:c6:ef:8a:eb:59:0d:53:ed:50:72: dd:05:36:cc:34:e3:2f:c1:b9:98:82:40:84:4b:1b: 54:1a:e3:ea:41:c5:a3:07:2d:d4:e5:29:e4:5e:ff: 37:38:62:42:d7:5e:8a:f3:82:54:40:4d:cb:13:b9: c3:f7:11:b0:45:0e:52:e2:9c:67:93:a1:d1:de:13: 19:b2:4a:cf:da:16:f8:56:16:d9:97:31:d3:cd:0e: e5:b4:3b:e2:8c:82:35:9c:d9:4f:56:0e:4f:a8:4e: 0e:e5:4e:02:91:14:18:9f:9e:5e:d6:37:4d:52:6c: 59:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3A:C7:53:8A:48:2F:AE:90:90:32:75:3D:C9:F8:FD:E7:FD:43:55 X509v3 Authority Key Identifier: keyid:71:D3:A2:DE:C8:BA:E6:67:5D:BB:BA:B3:FB:77:3E:6D:CF:4A:6F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/71D3A2DEC8BAE6675DBBBAB3FB773E6DCF4A6FB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:26:ce:9c:b5:61:ef:61:50:4f:18:de:40:71:6a:e3:ba:bb: 37:d9:7c:8e:e2:7c:60:df:77:26:ec:d9:36:a2:77:18:54:7c: e0:da:cf:cb:ce:76:17:e7:0e:bd:15:ce:b4:f2:f5:3a:5b:6c: 00:8f:5e:94:42:aa:49:f8:50:6d:3c:b5:e8:f9:53:36:62:67: f1:eb:b3:53:5d:7d:a6:61:39:d5:2f:aa:b5:23:1b:a4:d7:56: 58:05:9e:c2:b6:6a:41:45:ca:87:4c:79:0d:df:6c:3a:55:d8: 74:0f:ca:24:ad:14:0f:50:5d:6f:25:e2:5e:98:b1:5d:c8:14: 82:cb:5f:46:2b:11:ac:c6:2f:9e:68:f0:7d:4d:27:2a:d7:09: 49:7b:0a:98:f1:09:be:1a:64:63:c4:86:6a:f9:9c:3a:33:d8: 6e:85:9b:71:e8:62:5e:9a:c7:5a:f7:99:40:e3:ac:a1:68:c9: d7:64:2d:8a:e8:a5:e0:36:32:f7:c0:90:a5:5e:58:7f:e0:1f: ec:4e:2d:d4:a6:95:7f:9b:0c:41:99:ca:cb:3d:f8:d8:67:8c: 99:27:b8:cb:28:ed:97:f1:e3:b0:73:a6:e1:75:75:ca:3f:37: bd:9a:12:a1:6d:31:98:3b:70:6a:e6:37:fd:b8:f4:60:a1:ad: 5f:cc:b9:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUU0NVOEdwuAS2ca/kW4llDZuRaWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFEM0EyREVDOEJBRTY2NzVEQkJCQUIzRkI3NzNFNkRD RjRBNkZCOTAeFw0yNTExMDIyMDQ1NDhaFw0yNTExMDMyMjI5NDhaMDMxMTAvBgNV BAMTKDlEM0FDNzUzOEE0ODJGQUU5MDkwMzI3NTNEQzlGOEZERTdGRDQzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzWrfVX8nocoQqw8EAwBzSBiv4 eE9bMocXQLk3EQYHZoagcv3QV8UdrazqId2XvGZSCiw0sRTsZjrgdvnupmKzGnNK byKLs6h+5cGpktHbbqRL2TVf8d+CDPSR8EogZlvUHS38A2Uoo2VU6OwFRfiwQZNO EzKFuQg2bnIv2AYPYGhzONuM+HjPqtXgxu+K61kNU+1Qct0FNsw04y/BuZiCQIRL G1Qa4+pBxaMHLdTlKeRe/zc4YkLXXorzglRATcsTucP3EbBFDlLinGeTodHeExmy Ss/aFvhWFtmXMdPNDuW0O+KMgjWc2U9WDk+oTg7lTgKRFBifnl7WN01SbFmXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnTrHU4pIL66QkDJ1Pcn4/ef9Q1UwHwYDVR0j BBgwFoAUcdOi3si65mddu7qz+3c+bc9Kb7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkZLMlo1Q0R2bjc0TlJzaUZ2NzIzUHBTY2h0TUZocUpQZVJBVDZTRWoy c1kvMC83MUQzQTJERUM4QkFFNjY3NURCQkJBQjNGQjc3M0U2RENGNEE2RkI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxRDNBMkRFQzhCQUU2Njc1 REJCQkFCM0ZCNzczRTZEQ0Y0QTZGQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NkZLMlo1Q0R2bjc0TlJzaUZ2NzIzUHBTY2h0TUZocUpQZVJBVDZTRWoyc1kvMC83 MUQzQTJERUM4QkFFNjY3NURCQkJBQjNGQjc3M0U2RENGNEE2RkI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnSbOnLVh72FQTxjeQHFq47q7N9l8juJ8YN93JuzZNqJ3GFR84NrPy852F+cO vRXOtPL1OltsAI9elEKqSfhQbTy16PlTNmJn8euzU119pmE51S+qtSMbpNdWWAWe wrZqQUXKh0x5Dd9sOlXYdA/KJK0UD1BdbyXiXpixXcgUgstfRisRrMYvnmjwfU0n KtcJSXsKmPEJvhpkY8SGavmcOjPYboWbcehiXprHWveZQOOsoWjJ12Qtiuil4DYy 98CQpV5Yf+Af7E4t1KaVf5sMQZnKyz342GeMmSe4yyjtl/HjsHOm4XV1yj83vZoS oW0xmDtwauY3/bj0YKGtX8y5gg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:13:17 2025 by rpki-client