$ rpki-client -vvf rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft File: F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft (raw, json) Hash identifier: 4MCfQMwld3FcgqQu+cmPtJ1GjFfNIxVlSqNxrMqpnK4= Subject key identifier: 8C:03:13:AE:DC:F2:70:49:66:85:87:6C:8E:CA:66:08:26:8B:E8:B4 Authority key identifier: F8:40:F3:A0:7A:5B:A8:A1:B8:C8:95:C5:96:26:D4:B9:07:A8:8F:7E Certificate issuer: /CN=F840F3A07A5BA8A1B8C895C59626D4B907A88F7E Certificate serial: 3A2773B4552A128BAE27BF4E3C05CF7192849480 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.cer Subject info access: rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft Manifest number: 0301 Signing time: Mon 03 Nov 2025 13:15:41 +0000 Manifest this update: Mon 03 Nov 2025 13:10:41 +0000 Manifest next update: Tue 04 Nov 2025 16:12:41 +0000 Files and hashes: 1: F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.crl (hash: s26tUTvHt6CdPo2INKzmluC1LAlmcmapX0SF99aJ66k=) 2: 3138392e33392e3138362e302f32342d3234203d3e20323730373932.roa (hash: WA3J0WguYs9zONV4TbORGUBacU9F5Nfbxix2CDq0vVM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.crl rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 16:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:27:73:b4:55:2a:12:8b:ae:27:bf:4e:3c:05:cf:71:92:84:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F840F3A07A5BA8A1B8C895C59626D4B907A88F7E Validity Not Before: Nov 3 13:10:41 2025 GMT Not After : Nov 4 16:12:41 2025 GMT Subject: CN=8C0313AEDCF270496685876C8ECA6608268BE8B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a9:d1:03:bb:34:f0:6b:1c:58:03:ca:0c:94: bf:cc:c9:5b:89:1d:ae:ae:d9:20:91:58:07:a5:b8: 36:48:ec:ef:75:65:db:9f:e9:54:4c:8d:9c:17:76: 0c:af:0c:af:d7:31:02:fc:15:ad:ec:58:44:8a:e1: fc:4f:39:38:39:54:3b:db:fa:19:2a:45:4a:be:93: 0b:9b:80:fa:e2:e9:37:93:0d:f6:53:da:10:2b:b6: 13:73:5b:c2:a5:c4:6b:c8:93:3d:47:10:bd:a3:f4: 60:29:e7:e8:f4:08:ae:3a:8c:78:11:04:b5:02:02: 00:d3:0f:82:b9:8f:01:44:06:1c:fa:05:81:9c:ab: eb:bc:4f:7b:97:a6:08:a1:17:f5:b1:73:92:51:3f: 32:f2:00:be:e6:20:3f:1b:da:91:4c:5c:5b:3b:68: fa:a1:35:7b:66:d5:ee:74:5c:95:9f:60:5b:b8:d5: 55:8b:6d:da:3d:3b:89:9b:7a:96:09:0e:d8:1c:f8: 58:4c:ce:eb:09:5e:12:d5:05:17:7f:9f:f7:74:a2: db:39:fc:31:96:3e:08:60:a0:b3:af:9d:79:f9:eb: dc:05:3d:f9:d9:bd:54:ab:e9:b8:7d:43:f5:79:8d: dc:e7:2c:64:e2:4b:37:8a:df:c4:b1:58:4f:1e:e5: 09:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:03:13:AE:DC:F2:70:49:66:85:87:6C:8E:CA:66:08:26:8B:E8:B4 X509v3 Authority Key Identifier: keyid:F8:40:F3:A0:7A:5B:A8:A1:B8:C8:95:C5:96:26:D4:B9:07:A8:8F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:c1:83:83:40:65:f1:22:b2:b8:30:e5:4c:03:6e:70:d0:65: b3:44:62:e9:98:8b:da:e7:5f:6d:7c:91:0f:20:1b:a0:9e:ec: 1d:0b:75:c0:41:38:a4:10:1c:98:61:d1:79:4a:46:cd:fe:17: f8:8c:90:6d:90:d5:ec:7c:3a:fd:a0:6d:16:73:56:c1:ba:2a: b1:af:37:60:1c:a0:42:cf:31:b0:d2:2c:3e:69:d9:b8:84:d9: 0a:e5:de:c0:9d:dd:6c:4e:62:e2:2b:0d:1d:f7:30:19:58:97: 23:6d:ba:cd:7e:68:6a:fd:f0:23:9e:ca:44:e4:1d:d5:df:32: 64:58:ea:d9:ed:82:3b:bb:74:a7:b4:f1:21:a2:35:56:8e:11: 03:c4:27:91:2d:60:62:45:d3:fb:63:39:3a:0e:20:a7:cf:dd: 89:85:d7:5c:73:a8:91:5c:ea:e7:e6:3c:03:4d:df:3c:fa:93: 4d:7b:8c:5c:9f:61:ed:2e:fc:9b:0e:18:eb:de:c1:50:39:8e: c9:d6:1f:a8:52:82:44:5e:4a:1f:cc:d5:53:23:95:7e:1d:fb: 34:8a:b6:84:ae:4a:3a:6b:f0:1c:9f:77:5b:3a:7b:f2:c2:0b: dc:e6:b4:c7:6b:ef:1b:88:1a:75:70:8e:e2:b0:cf:c2:71:4b: b1:4d:69:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOidztFUqEouuJ79OPAXPcZKElIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg0MEYzQTA3QTVCQThBMUI4Qzg5NUM1OTYyNkQ0Qjkw N0E4OEY3RTAeFw0yNTExMDMxMzEwNDFaFw0yNTExMDQxNjEyNDFaMDMxMTAvBgNV BAMTKDhDMDMxM0FFRENGMjcwNDk2Njg1ODc2QzhFQ0E2NjA4MjY4QkU4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoqdEDuzTwaxxYA8oMlL/MyVuJ Ha6u2SCRWAeluDZI7O91Zduf6VRMjZwXdgyvDK/XMQL8Fa3sWESK4fxPOTg5VDvb +hkqRUq+kwubgPri6TeTDfZT2hArthNzW8KlxGvIkz1HEL2j9GAp5+j0CK46jHgR BLUCAgDTD4K5jwFEBhz6BYGcq+u8T3uXpgihF/Wxc5JRPzLyAL7mID8b2pFMXFs7 aPqhNXtm1e50XJWfYFu41VWLbdo9O4mbepYJDtgc+FhMzusJXhLVBRd/n/d0ots5 /DGWPghgoLOvnXn569wFPfnZvVSr6bh9Q/V5jdznLGTiSzeK38SxWE8e5QlRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjAMTrtzycElmhYdsjspmCCaL6LQwHwYDVR0j BBgwFoAU+EDzoHpbqKG4yJXFlibUuQeoj34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOG5nQ0xyY1VWY2lyb3BRdFBpWGZBZWR6cnRHbXJ4ODlvaHpGb1hOY3VH d20vMS9GODQwRjNBMDdBNUJBOEExQjhDODk1QzU5NjI2RDRCOTA3QTg4RjdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4NDBGM0EwN0E1QkE4QTFC OEM4OTVDNTk2MjZENEI5MDdBODhGN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OG5nQ0xyY1VWY2lyb3BRdFBpWGZBZWR6cnRHbXJ4ODlvaHpGb1hOY3VHd20vMS9G ODQwRjNBMDdBNUJBOEExQjhDODk1QzU5NjI2RDRCOTA3QTg4RjdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAssGDg0Bl8SKyuDDlTANucNBls0Ri6ZiL2udfbXyRDyAboJ7sHQt1wEE4pBAc mGHReUpGzf4X+IyQbZDV7Hw6/aBtFnNWwboqsa83YBygQs8xsNIsPmnZuITZCuXe wJ3dbE5i4isNHfcwGViXI226zX5oav3wI57KROQd1d8yZFjq2e2CO7t0p7TxIaI1 Vo4RA8QnkS1gYkXT+2M5Og4gp8/diYXXXHOokVzq5+Y8A03fPPqTTXuMXJ9h7S78 mw4Y697BUDmOydYfqFKCRF5KH8zVUyOVfh37NIq2hK5KOmvwHJ93Wzp78sIL3Oa0 x2vvG4gadXCO4rDPwnFLsU1pVA== -----END CERTIFICATE-----Generated at Tue Nov 4 06:47:41 2025 by rpki-client