$ rpki-client -vvf rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft File: 98525FF70BD67C78C36BE3190E3463098E95DF2C.mft (raw, json) Hash identifier: ESlTWI4H5frrTifjIiFgjiy/iqF78WDbiPLK+kD4DXk= Subject key identifier: E4:25:E1:1D:F4:B2:F0:58:CE:37:DC:30:3C:0B:FA:78:EA:26:D1:BB Authority key identifier: 98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C Certificate issuer: /CN=98525FF70BD67C78C36BE3190E3463098E95DF2C Certificate serial: 21351C5B9086D254FD850739BB901AB25CCEF840 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer Subject info access: rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft Manifest number: 0303 Signing time: Mon 03 Nov 2025 10:33:01 +0000 Manifest this update: Mon 03 Nov 2025 10:28:01 +0000 Manifest next update: Tue 04 Nov 2025 12:38:01 +0000 Files and hashes: 1: 98525FF70BD67C78C36BE3190E3463098E95DF2C.crl (hash: PrzbYBvg4agnREgqZAD25z2LdDoxXKA5pIXC9yiv3To=) 2: 34352e342e3130342e302f32322d3234203d3e20323636303633.roa (hash: YqZ3SJPT6Xcqs9peUTXMNxMHIB0EzaAQ68UaAdgZNVs=) 3: 323830343a333966633a3a2f33322d3438203d3e20323636303633.roa (hash: uZx6MKqpTg13sIPZCAlz9trqbeJwgRlXEg00ldqRU1M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:35:1c:5b:90:86:d2:54:fd:85:07:39:bb:90:1a:b2:5c:ce:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98525FF70BD67C78C36BE3190E3463098E95DF2C Validity Not Before: Nov 3 10:28:01 2025 GMT Not After : Nov 4 12:38:01 2025 GMT Subject: CN=E425E11DF4B2F058CE37DC303C0BFA78EA26D1BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:37:68:da:d4:c8:e2:74:8d:23:35:8b:ff: ab:77:54:1e:0a:51:8d:46:05:c8:66:31:b7:c2:b8: 2c:07:b8:e4:df:7a:d9:de:1a:87:72:f9:75:a3:32: 69:63:f5:c7:9f:15:89:5d:c4:46:6b:82:2d:bc:f2: 17:49:68:e4:61:6a:8f:a3:fb:2e:95:df:cd:43:c8: b1:1c:06:19:95:a7:2f:25:8a:2f:12:f4:d7:0d:bd: 41:ea:94:c2:f0:f1:3e:49:5b:25:e1:de:d0:32:53: 38:61:c2:ce:13:67:a9:8a:3c:7f:eb:c9:a6:e7:87: c5:0a:c2:d1:36:66:a5:54:74:61:2b:63:be:36:53: b8:c2:7d:dc:77:2f:f0:9c:90:ca:e7:f1:22:0b:b5: 3a:39:ca:70:62:55:fb:b7:1a:4d:22:95:3b:52:b7: e2:ef:9c:05:a0:93:56:69:a4:e2:32:64:cb:f9:d7: e7:2a:31:22:ca:22:8d:a1:59:45:d1:0e:1c:4c:ab: 2e:45:d9:7c:bc:0d:5d:a9:38:73:b1:9e:0d:65:36: 80:dd:eb:68:33:ae:d2:3c:4c:2d:47:60:39:40:0d: 1e:0f:23:1c:8d:e2:c6:77:42:80:29:24:20:38:09: 76:15:df:a5:b3:7f:21:9b:a6:b1:e4:db:63:90:bf: a4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:25:E1:1D:F4:B2:F0:58:CE:37:DC:30:3C:0B:FA:78:EA:26:D1:BB X509v3 Authority Key Identifier: keyid:98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:1b:6b:21:63:b1:bf:c1:8c:f6:5f:f8:56:59:df:21:a8:78: 10:20:fe:f9:3e:32:dc:1a:91:f5:55:6e:0b:9d:d8:f9:6d:1c: 44:ac:bd:4e:95:27:73:b5:82:e2:32:bb:14:e7:1d:5c:da:bb: d9:60:30:9a:70:07:1f:39:3a:13:11:49:e1:19:e7:4a:e0:4d: c0:b8:4a:3d:28:61:86:f2:38:78:90:ca:e5:09:36:4f:01:af: 2d:cc:e1:6e:00:94:a4:1c:37:76:5b:11:02:2c:f9:9d:01:cc: c9:94:83:25:08:ff:57:20:b3:4a:39:ab:ec:b8:5c:a3:eb:3b: cb:47:e9:cf:b1:d6:b6:21:53:1d:a6:4e:6c:da:e7:8a:73:ac: c1:92:9c:94:b0:ab:3b:80:92:ef:4c:05:99:ab:a8:62:d3:0e: 01:84:0c:f6:54:15:31:f7:48:32:d1:b4:af:2a:fb:61:43:80: 71:e1:f0:6e:85:69:bb:9e:00:09:8e:cd:10:8b:26:ef:99:96: 85:5a:44:68:70:12:cb:58:59:ed:48:7a:be:54:5c:7d:9c:cf: 37:17:e7:68:8a:4a:67:fa:8e:02:94:bc:65:5a:05:ba:eb:af: 08:9b:a9:ad:23:f9:39:bd:ae:fc:c6:41:76:e2:88:60:7b:95: 58:d0:fc:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUITUcW5CG0lT9hQc5u5AaslzO+EAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MjVGRjcwQkQ2N0M3OEMzNkJFMzE5MEUzNDYzMDk4 RTk1REYyQzAeFw0yNTExMDMxMDI4MDFaFw0yNTExMDQxMjM4MDFaMDMxMTAvBgNV BAMTKEU0MjVFMTFERjRCMkYwNThDRTM3REMzMDNDMEJGQTc4RUEyNkQxQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLJzdo2tTI4nSNIzWL/6t3VB4K UY1GBchmMbfCuCwHuOTfetneGody+XWjMmlj9cefFYldxEZrgi288hdJaORhao+j +y6V381DyLEcBhmVpy8lii8S9NcNvUHqlMLw8T5JWyXh3tAyUzhhws4TZ6mKPH/r yabnh8UKwtE2ZqVUdGErY742U7jCfdx3L/CckMrn8SILtTo5ynBiVfu3Gk0ilTtS t+LvnAWgk1ZppOIyZMv51+cqMSLKIo2hWUXRDhxMqy5F2Xy8DV2pOHOxng1lNoDd 62gzrtI8TC1HYDlADR4PIxyN4sZ3QoApJCA4CXYV36WzfyGbprHk22OQv6TZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5CXhHfSy8FjON9wwPAv6eOom0bswHwYDVR0j BBgwFoAUmFJf9wvWfHjDa+MZDjRjCY6V3ywwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3duRE1ITTEydkZkZ1dDclVVUWVUeGk0c1ZBaTdId2h4WXVQYkVZSmM5 QjQvMS85ODUyNUZGNzBCRDY3Qzc4QzM2QkUzMTkwRTM0NjMwOThFOTVERjJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4NTI1RkY3MEJENjdDNzhD MzZCRTMxOTBFMzQ2MzA5OEU5NURGMkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N3duRE1ITTEydkZkZ1dDclVVUWVUeGk0c1ZBaTdId2h4WXVQYkVZSmM5QjQvMS85 ODUyNUZGNzBCRDY3Qzc4QzM2QkUzMTkwRTM0NjMwOThFOTVERjJDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASBtrIWOxv8GM9l/4VlnfIah4ECD++T4y3BqR9VVuC53Y+W0cRKy9TpUnc7WC 4jK7FOcdXNq72WAwmnAHHzk6ExFJ4RnnSuBNwLhKPShhhvI4eJDK5Qk2TwGvLczh bgCUpBw3dlsRAiz5nQHMyZSDJQj/VyCzSjmr7Lhco+s7y0fpz7HWtiFTHaZObNrn inOswZKclLCrO4CS70wFmauoYtMOAYQM9lQVMfdIMtG0ryr7YUOAceHwboVpu54A CY7NEIsm75mWhVpEaHASy1hZ7Uh6vlRcfZzPNxfnaIpKZ/qOApS8ZVoFuuuvCJup rSP5Ob2u/MZBduKIYHuVWND8fg== -----END CERTIFICATE-----Generated at Mon Nov 3 19:39:05 2025 by rpki-client