$ rpki-client -vvf rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft File: 4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft (raw, json) Hash identifier: FJGlN5v8EAwSq+4LhghCqG7KX/J13TilGXLQ0BBaeh8= Subject key identifier: 9B:63:0C:18:6A:7D:90:93:EF:E6:70:2E:B2:E4:E4:14:A5:46:9E:F2 Authority key identifier: 4F:3B:34:40:57:7D:0E:47:4F:F1:5D:DF:4D:E7:A4:78:CF:07:F3:FB Certificate issuer: /CN=4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB Certificate serial: 355822EFF38821C34561D07399BFEF9FFC6642F1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft Manifest number: 8F Signing time: Mon 03 Nov 2025 01:04:12 +0000 Manifest this update: Mon 03 Nov 2025 00:59:12 +0000 Manifest next update: Tue 04 Nov 2025 04:46:12 +0000 Files and hashes: 1: 4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.crl (hash: td0WfGz4DZDSDsrlmwvLMUj9nzNIzb5UOHDAyDk10J8=) 2: 323830343a393239303a3a2f33322d3438203d3e20323734373139.roa (hash: RA5I+vzoQlcGK0NMw5Qd6CqIjhtm9+nKDVEJJYgQHJ8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.crl rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 04:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:58:22:ef:f3:88:21:c3:45:61:d0:73:99:bf:ef:9f:fc:66:42:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB Validity Not Before: Nov 3 00:59:12 2025 GMT Not After : Nov 4 04:46:12 2025 GMT Subject: CN=9B630C186A7D9093EFE6702EB2E4E414A5469EF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5e:b7:07:df:69:d3:9b:9a:e5:77:4b:66:a1: 8d:2d:de:b6:d8:03:e3:5b:99:21:61:a5:1b:40:fd: 95:7c:a1:c4:4a:66:3e:5e:51:50:e9:c3:9a:d3:4c: 2c:02:98:85:6a:55:f0:00:54:73:74:db:50:c0:e2: 3b:09:39:14:9c:85:17:d6:57:cf:fb:d8:3d:e1:6a: 9f:45:84:bf:5b:d2:cc:e0:10:31:61:5e:c4:e1:75: bb:28:1b:75:05:b0:68:72:e6:5e:6f:3c:01:47:37: cb:e6:11:88:68:30:82:3c:3f:4f:f2:9f:b2:83:d8: 3b:42:17:1e:0b:ee:4c:92:31:f1:00:1f:06:91:dc: 69:a0:b7:db:57:35:5c:90:8d:6f:18:e6:86:3d:b3: cd:47:03:6e:c3:bc:5b:6e:40:94:75:70:48:bf:77: d3:b1:b1:42:a2:d8:45:05:50:43:78:dd:89:57:02: 46:12:a6:ff:2e:40:fb:d3:18:cc:e9:08:e7:44:28: d3:c9:d5:8a:81:d6:07:29:02:5f:75:8b:04:22:80: ae:46:e6:ef:ae:38:65:1c:f4:86:f3:f2:aa:26:60: ce:3c:4b:14:6d:e2:6d:b5:c7:52:ae:52:24:ff:e6: c2:36:92:b9:6f:59:0b:f6:70:92:cd:9f:bb:b8:c1: 2a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:63:0C:18:6A:7D:90:93:EF:E6:70:2E:B2:E4:E4:14:A5:46:9E:F2 X509v3 Authority Key Identifier: keyid:4F:3B:34:40:57:7D:0E:47:4F:F1:5D:DF:4D:E7:A4:78:CF:07:F3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b7:39:cb:dd:66:4c:6c:8c:91:87:ff:58:83:6f:21:f4:ed: 9a:e1:46:dc:ac:50:01:47:2e:d4:f9:3e:c9:5d:b6:a6:ec:0b: 42:1b:34:07:68:56:3d:bb:e2:35:83:05:d7:e6:2c:af:ba:fd: ad:73:38:b4:db:c1:a7:ad:b2:f8:3d:67:b9:8d:2c:88:85:81: 25:06:13:e7:c0:9d:a9:d4:7e:e7:8c:d4:06:4d:fe:a9:fd:06: 26:07:4d:bc:0b:ee:36:1c:44:3c:8f:27:10:e5:5f:f8:2c:29: 44:b2:89:81:a4:f3:b5:ad:4c:31:db:c3:f4:77:be:c7:c6:f4: 53:cc:36:b1:df:31:7c:31:4a:2a:47:f9:b7:c2:7c:48:9a:af: 4f:44:2d:bc:11:1d:7c:52:17:96:03:63:d7:fc:08:95:3a:0a: ef:36:73:8c:75:ff:6a:40:7a:26:89:aa:94:f2:83:95:76:a2: 2e:96:4f:98:39:a7:e1:c4:a2:2b:f3:e6:23:b8:bc:32:2e:cb: c8:f4:91:ef:a2:cf:4e:d4:e2:00:4c:5b:e5:fe:78:94:5c:48: d9:56:59:f0:88:07:a1:9f:90:55:6a:06:4f:b0:1f:b0:cc:15: 87:07:5a:30:83:27:f6:82:0e:ff:8d:f1:0b:72:10:c7:12:7b: 5c:03:b2:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNVgi7/OIIcNFYdBzmb/vn/xmQvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYzQjM0NDA1NzdEMEU0NzRGRjE1RERGNERFN0E0NzhD RjA3RjNGQjAeFw0yNTExMDMwMDU5MTJaFw0yNTExMDQwNDQ2MTJaMDMxMTAvBgNV BAMTKDlCNjMwQzE4NkE3RDkwOTNFRkU2NzAyRUIyRTRFNDE0QTU0NjlFRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7XrcH32nTm5rld0tmoY0t3rbY A+NbmSFhpRtA/ZV8ocRKZj5eUVDpw5rTTCwCmIVqVfAAVHN021DA4jsJORSchRfW V8/72D3hap9FhL9b0szgEDFhXsThdbsoG3UFsGhy5l5vPAFHN8vmEYhoMII8P0/y n7KD2DtCFx4L7kySMfEAHwaR3Gmgt9tXNVyQjW8Y5oY9s81HA27DvFtuQJR1cEi/ d9OxsUKi2EUFUEN43YlXAkYSpv8uQPvTGMzpCOdEKNPJ1YqB1gcpAl91iwQigK5G 5u+uOGUc9Ibz8qomYM48SxRt4m21x1KuUiT/5sI2krlvWQv2cJLNn7u4wSrdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUm2MMGGp9kJPv5nAusuTkFKVGnvIwHwYDVR0j BBgwFoAUTzs0QFd9DkdP8V3fTeekeM8H8/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmlrUGtRbU1FYlczdUtLbzdEMmlkMjhMVlY5NHRFQ3MxbUREeDhURnFo NWkvMC80RjNCMzQ0MDU3N0QwRTQ3NEZGMTVEREY0REU3QTQ3OENGMDdGM0ZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGM0IzNDQwNTc3RDBFNDc0 RkYxNURERjRERTdBNDc4Q0YwN0YzRkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NmlrUGtRbU1FYlczdUtLbzdEMmlkMjhMVlY5NHRFQ3MxbUREeDhURnFoNWkvMC80 RjNCMzQ0MDU3N0QwRTQ3NEZGMTVEREY0REU3QTQ3OENGMDdGM0ZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPbc5y91mTGyMkYf/WINvIfTtmuFG3KxQAUcu1Pk+yV22puwLQhs0B2hWPbvi NYMF1+Ysr7r9rXM4tNvBp62y+D1nuY0siIWBJQYT58CdqdR+54zUBk3+qf0GJgdN vAvuNhxEPI8nEOVf+CwpRLKJgaTzta1MMdvD9He+x8b0U8w2sd8xfDFKKkf5t8J8 SJqvT0QtvBEdfFIXlgNj1/wIlToK7zZzjHX/akB6JomqlPKDlXaiLpZPmDmn4cSi K/PmI7i8Mi7LyPSR76LPTtTiAExb5f54lFxI2VZZ8IgHoZ+QVWoGT7AfsMwVhwda MIMn9oIO/43xC3IQxxJ7XAOy3A== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:02 2025 by rpki-client