$ rpki-client -vvf rpki-repo.registro.br/repo/8V1M6Q9KDsC79NSrhgLwDix2xbMZMyJPr29LnKagidBv/0/F32C1ADF00925ECEE80940B1E23E6FE9FA09F237.mft File: F32C1ADF00925ECEE80940B1E23E6FE9FA09F237.mft (raw, json) Hash identifier: jd3rYMITfLdRFsGEDKIz1Ki4URh7U3lJh9BgXIOTy4o= Subject key identifier: 88:5C:43:DA:54:BE:42:C8:62:9C:06:BA:45:06:FF:1D:3A:A5:F4:29 Authority key identifier: F3:2C:1A:DF:00:92:5E:CE:E8:09:40:B1:E2:3E:6F:E9:FA:09:F2:37 Certificate issuer: /CN=F32C1ADF00925ECEE80940B1E23E6FE9FA09F237 Certificate serial: 4AF6EF9600C0487B64234DC3D2C79177D10D629E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F32C1ADF00925ECEE80940B1E23E6FE9FA09F237.cer Subject info access: rsync://rpki-repo.registro.br/repo/8V1M6Q9KDsC79NSrhgLwDix2xbMZMyJPr29LnKagidBv/0/F32C1ADF00925ECEE80940B1E23E6FE9FA09F237.mft Manifest number: 0148 Signing time: Mon 03 Nov 2025 08:10:18 +0000 Manifest this update: Mon 03 Nov 2025 08:05:18 +0000 Manifest next update: Tue 04 Nov 2025 10:50:18 +0000 Files and hashes: 1: F32C1ADF00925ECEE80940B1E23E6FE9FA09F237.crl (hash: surYFQ2fvoG57SZHPQtffaEpRmVgdV5BhnllMO+SU4E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8V1M6Q9KDsC79NSrhgLwDix2xbMZMyJPr29LnKagidBv/0/F32C1ADF00925ECEE80940B1E23E6FE9FA09F237.crl rsync://rpki-repo.registro.br/repo/8V1M6Q9KDsC79NSrhgLwDix2xbMZMyJPr29LnKagidBv/0/F32C1ADF00925ECEE80940B1E23E6FE9FA09F237.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F32C1ADF00925ECEE80940B1E23E6FE9FA09F237.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 10:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f6:ef:96:00:c0:48:7b:64:23:4d:c3:d2:c7:91:77:d1:0d:62:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F32C1ADF00925ECEE80940B1E23E6FE9FA09F237 Validity Not Before: Nov 3 08:05:18 2025 GMT Not After : Nov 4 10:50:18 2025 GMT Subject: CN=885C43DA54BE42C8629C06BA4506FF1D3AA5F429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d8:3d:9f:8d:1d:e5:06:71:1c:9d:fa:76:e2: 8e:0f:59:e7:2b:00:b7:37:3f:98:fa:ec:f9:53:27: e7:06:f4:c9:c8:db:a8:fa:11:47:e6:1f:dc:36:a1: 92:e8:ec:a2:80:9d:fd:fe:18:53:5c:95:2e:29:05: ce:ea:88:de:4e:5c:44:e6:88:4b:ae:0d:3b:7f:01: a1:47:89:9e:02:7a:14:54:da:87:ad:a3:e5:3c:90: a6:03:df:64:db:8a:4c:b0:13:2f:1e:fe:7b:bd:15: 09:ef:1a:e3:10:32:fe:91:93:ab:d1:a5:70:bc:59: 70:80:0f:8a:3a:d4:e8:c5:a8:04:96:0d:6e:1f:40: d0:86:9a:8e:46:5d:cf:3a:20:28:cb:36:36:5e:e3: a4:d9:6e:a7:cc:33:7c:cc:9e:ad:02:4d:55:18:d2: 4e:c2:1b:79:aa:74:0a:2f:64:cc:09:d1:90:65:e8: e7:af:db:25:39:e3:a4:8f:76:b3:fb:1e:3d:1f:fe: 88:1d:49:63:3d:de:ea:5b:68:9e:30:de:db:b5:10: bb:3f:81:15:2b:2b:04:e1:00:fb:55:b7:9b:17:e9: 0f:10:3d:c9:5e:f4:d3:e1:1e:18:42:6e:b7:53:95: db:3c:e7:11:de:b9:82:7f:bc:0c:25:b1:81:7b:7e: 71:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5C:43:DA:54:BE:42:C8:62:9C:06:BA:45:06:FF:1D:3A:A5:F4:29 X509v3 Authority Key Identifier: keyid:F3:2C:1A:DF:00:92:5E:CE:E8:09:40:B1:E2:3E:6F:E9:FA:09:F2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8V1M6Q9KDsC79NSrhgLwDix2xbMZMyJPr29LnKagidBv/0/F32C1ADF00925ECEE80940B1E23E6FE9FA09F237.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F32C1ADF00925ECEE80940B1E23E6FE9FA09F237.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8V1M6Q9KDsC79NSrhgLwDix2xbMZMyJPr29LnKagidBv/0/F32C1ADF00925ECEE80940B1E23E6FE9FA09F237.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:21:4c:81:d4:09:00:d4:3e:a1:d4:30:da:a1:b5:f7:e7:2c: b7:49:a6:46:09:76:3f:50:55:95:64:55:06:55:1a:63:e2:d1: a0:ce:0b:a9:4c:d8:c8:d3:3c:f0:ee:24:55:a1:e2:f8:9c:ee: ba:02:cf:07:b8:5d:0e:1d:d4:77:b8:04:1c:e0:96:e1:84:1f: fc:af:b1:91:cc:b0:cb:fb:a9:cf:03:91:95:24:eb:19:ed:b1: e4:5f:10:4d:1d:ba:0e:a3:4b:fa:27:41:02:99:a5:58:34:b6: 68:4d:29:34:f5:db:52:5e:82:95:97:c6:c4:f5:3a:dd:71:d5: 46:47:5f:a7:00:58:b1:df:4b:43:6a:db:68:b3:d1:07:fb:8a: c6:47:bf:82:a6:9b:a9:ec:f7:c0:81:7e:53:68:e7:1d:59:33: 8f:2e:56:b2:67:5c:bd:2d:8d:33:a9:b9:6c:83:98:83:bc:0e: ca:86:5b:1e:2b:6f:9f:24:c7:91:ae:46:3e:46:2c:23:a2:78: fb:d7:1b:c0:59:1d:18:01:cf:b1:8f:6f:10:2c:eb:e1:78:60: 11:af:b8:b4:25:57:78:4e:dd:16:a0:b8:c5:c7:8b:1f:69:d8: ac:95:9b:94:5a:4f:6b:69:f9:e1:32:b7:3c:66:a4:66:27:5b: d2:66:11:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSvbvlgDASHtkI03D0seRd9ENYp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyQzFBREYwMDkyNUVDRUU4MDk0MEIxRTIzRTZGRTlG QTA5RjIzNzAeFw0yNTExMDMwODA1MThaFw0yNTExMDQxMDUwMThaMDMxMTAvBgNV BAMTKDg4NUM0M0RBNTRCRTQyQzg2MjlDMDZCQTQ1MDZGRjFEM0FBNUY0MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW2D2fjR3lBnEcnfp24o4PWecr ALc3P5j67PlTJ+cG9MnI26j6EUfmH9w2oZLo7KKAnf3+GFNclS4pBc7qiN5OXETm iEuuDTt/AaFHiZ4CehRU2oeto+U8kKYD32TbikywEy8e/nu9FQnvGuMQMv6Rk6vR pXC8WXCAD4o61OjFqASWDW4fQNCGmo5GXc86ICjLNjZe46TZbqfMM3zMnq0CTVUY 0k7CG3mqdAovZMwJ0ZBl6Oev2yU546SPdrP7Hj0f/ogdSWM93upbaJ4w3tu1ELs/ gRUrKwThAPtVt5sX6Q8QPcle9NPhHhhCbrdTlds85xHeuYJ/vAwlsYF7fnHHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiFxD2lS+QshinAa6RQb/HTql9CkwHwYDVR0j BBgwFoAU8ywa3wCSXs7oCUCx4j5v6foJ8jcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFYxTTZROUtEc0M3OU5TcmhnTHdEaXgyeGJNWk15SlByMjlMbkthZ2lk QnYvMC9GMzJDMUFERjAwOTI1RUNFRTgwOTQwQjFFMjNFNkZFOUZBMDlGMjM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzMkMxQURGMDA5MjVFQ0VF ODA5NDBCMUUyM0U2RkU5RkEwOUYyMzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFYxTTZROUtEc0M3OU5TcmhnTHdEaXgyeGJNWk15SlByMjlMbkthZ2lkQnYvMC9G MzJDMUFERjAwOTI1RUNFRTgwOTQwQjFFMjNFNkZFOUZBMDlGMjM3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPyFMgdQJANQ+odQw2qG19+cst0mmRgl2P1BVlWRVBlUaY+LRoM4LqUzYyNM8 8O4kVaHi+JzuugLPB7hdDh3Ud7gEHOCW4YQf/K+xkcywy/upzwORlSTrGe2x5F8Q TR26DqNL+idBApmlWDS2aE0pNPXbUl6ClZfGxPU63XHVRkdfpwBYsd9LQ2rbaLPR B/uKxke/gqabqez3wIF+U2jnHVkzjy5WsmdcvS2NM6m5bIOYg7wOyoZbHitvnyTH ka5GPkYsI6J4+9cbwFkdGAHPsY9vECzr4XhgEa+4tCVXeE7dFqC4xceLH2nYrJWb lFpPa2n54TK3PGakZidb0mYR9g== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:59 2025 by rpki-client