$ rpki-client -vvf rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft File: 3170E59F647D12F2C01381F789FEA19B94A7EA94.mft (raw, json) Hash identifier: 7wyZ7NAIvV+VCuWT+jH5fpMxWu+Y7X7jwnnefkJku4g= Subject key identifier: 11:4E:87:74:5B:D6:AE:44:54:C0:4D:E9:C4:43:E2:F3:0E:D3:3D:10 Authority key identifier: 31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94 Certificate issuer: /CN=3170E59F647D12F2C01381F789FEA19B94A7EA94 Certificate serial: 21F9FB4A5E7858A821E44EF9EB60F89085BE64FE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer Subject info access: rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft Manifest number: 01ED Signing time: Mon 03 Nov 2025 11:00:05 +0000 Manifest this update: Mon 03 Nov 2025 10:55:05 +0000 Manifest next update: Tue 04 Nov 2025 14:22:05 +0000 Files and hashes: 1: 323830343a383236383a3a2f33322d3332203d3e20323732353138.roa (hash: q7R7XejhMA0V5vkWZy0ZIvhEZuHvs9Cr/UvYs4FlnAM=) 2: 3170E59F647D12F2C01381F789FEA19B94A7EA94.crl (hash: WH3BA6kjPuaHXZR8NC4zfzdAPAHwRjZ62v/tOb5t+Dc=) 3: 323830343a383236383a383030303a3a2f33342d3334203d3e20323732353138.roa (hash: dg++jRiYgNDqqn7koG7VCPM8YtEa8GnVfBh/0VMl//I=) 4: 323830343a383236383a343030303a3a2f33342d3334203d3e20323732353138.roa (hash: 4tOjqevwqLCbIHFMqiUCrC3QvIg8BgWmeIZlTS/cwMg=) 5: 323830343a383236383a3a2f33342d3334203d3e20323732353138.roa (hash: JRmzfNGpg/29BViI5J90w3B4mE9wS0FnfnNNBzvide4=) 6: 323830343a383236383a633030303a3a2f33342d3334203d3e20323732353138.roa (hash: lgKZpEMQXJgbbGxAppKdGMzEqXxmi5YjRfS1hmqnWqk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 14:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f9:fb:4a:5e:78:58:a8:21:e4:4e:f9:eb:60:f8:90:85:be:64:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3170E59F647D12F2C01381F789FEA19B94A7EA94 Validity Not Before: Nov 3 10:55:05 2025 GMT Not After : Nov 4 14:22:05 2025 GMT Subject: CN=114E87745BD6AE4454C04DE9C443E2F30ED33D10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bd:cc:9a:3d:0c:1d:16:7b:88:25:68:3f:51: 08:4b:aa:96:05:ee:33:5b:45:ef:61:ec:26:86:78: 0c:f6:83:1e:2f:1a:cd:81:9b:f1:d3:3c:cd:83:5d: 50:a1:61:28:8e:6a:a4:b6:a8:d2:0b:ed:aa:61:3d: 4f:4b:ea:c5:50:c2:0d:58:aa:50:cb:95:6a:86:9b: 0c:e2:c9:20:18:b7:63:5b:7d:47:85:a7:0c:de:e9: f5:c9:57:c6:27:0a:3b:a4:5f:50:10:28:1c:6d:f2: b8:34:c6:35:7c:b1:17:3f:2a:ea:51:34:9e:97:20: f2:92:e2:e5:9b:94:8f:37:7b:51:c3:87:70:a4:4d: 85:eb:52:48:87:fe:60:86:b8:7a:61:52:9b:38:6c: 3b:d9:18:a7:3d:fe:2e:8a:e0:31:3f:54:c6:c8:4b: fd:df:21:79:2f:87:73:7b:c7:71:ea:f2:b9:c2:33: 1a:50:36:af:c1:d1:56:ba:eb:3b:ab:15:1c:d7:fc: 34:80:84:74:3b:8a:95:ca:09:91:7f:1b:12:75:01: a2:bf:8a:3e:c1:9f:60:b6:48:f9:af:da:d4:88:86: b6:4c:20:c0:35:d8:e7:88:c5:98:ea:f5:ef:29:df: 5e:c7:e6:de:b2:6d:2c:82:9a:82:74:81:23:06:82: 61:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4E:87:74:5B:D6:AE:44:54:C0:4D:E9:C4:43:E2:F3:0E:D3:3D:10 X509v3 Authority Key Identifier: keyid:31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:43:60:db:8f:d4:dc:31:89:8a:41:48:81:e0:96:32:53:2c: 2f:77:69:11:d9:e4:1e:71:c6:df:e8:c2:5d:56:31:ac:4e:e6: 13:7a:74:0b:cc:91:96:6e:44:30:d7:13:ff:78:64:02:84:38: bc:2e:de:82:84:5d:f5:24:58:85:8e:51:0b:aa:19:96:55:00: be:59:8c:06:cb:1c:b2:4e:3b:a5:3f:af:d6:d1:1b:db:07:5c: 66:e0:eb:94:fb:de:d9:b4:10:5b:d7:2c:45:aa:2b:83:f2:4b: b6:d8:3c:11:06:34:58:b8:d0:5b:77:5b:54:ae:cc:5d:de:70: 60:c6:35:d2:fe:d4:eb:7e:f2:db:45:d5:70:8a:c6:e7:a2:d5: a9:e7:c3:a5:88:d6:1c:2c:78:9d:16:b0:86:58:53:77:16:dc: 0b:64:2a:4b:56:e6:fa:32:b3:45:0c:90:a4:f8:e5:21:b3:87: e3:c2:40:01:60:fa:a4:5a:c1:37:1a:3c:b0:03:73:67:e5:59: ce:e1:e6:44:bb:62:99:18:e3:e2:84:e1:a3:45:02:ce:5c:e3: 83:93:f1:c7:09:34:ce:ac:e9:b1:c8:8c:dd:99:94:01:f1:6b: e6:06:97:e3:78:77:67:0a:62:e2:b1:da:b9:a0:5b:56:31:df: c1:73:45:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIfn7Sl54WKgh5E7562D4kIW+ZP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE3MEU1OUY2NDdEMTJGMkMwMTM4MUY3ODlGRUExOUI5 NEE3RUE5NDAeFw0yNTExMDMxMDU1MDVaFw0yNTExMDQxNDIyMDVaMDMxMTAvBgNV BAMTKDExNEU4Nzc0NUJENkFFNDQ1NEMwNERFOUM0NDNFMkYzMEVEMzNEMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmvcyaPQwdFnuIJWg/UQhLqpYF 7jNbRe9h7CaGeAz2gx4vGs2Bm/HTPM2DXVChYSiOaqS2qNIL7aphPU9L6sVQwg1Y qlDLlWqGmwziySAYt2NbfUeFpwze6fXJV8YnCjukX1AQKBxt8rg0xjV8sRc/KupR NJ6XIPKS4uWblI83e1HDh3CkTYXrUkiH/mCGuHphUps4bDvZGKc9/i6K4DE/VMbI S/3fIXkvh3N7x3Hq8rnCMxpQNq/B0Va66zurFRzX/DSAhHQ7ipXKCZF/GxJ1AaK/ ij7Bn2C2SPmv2tSIhrZMIMA12OeIxZjq9e8p317H5t6ybSyCmoJ0gSMGgmFTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEU6HdFvWrkRUwE3pxEPi8w7TPRAwHwYDVR0j BBgwFoAUMXDln2R9EvLAE4H3if6hm5Sn6pQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUIyR1RpN3BZakVmR1d4WURhNkZqYUx0SmVzaFFGWEpzVTlTc1pnVkY2 eHQvMC8zMTcwRTU5RjY0N0QxMkYyQzAxMzgxRjc4OUZFQTE5Qjk0QTdFQTk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxNzBFNTlGNjQ3RDEyRjJD MDEzODFGNzg5RkVBMTlCOTRBN0VBOTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUIyR1RpN3BZakVmR1d4WURhNkZqYUx0SmVzaFFGWEpzVTlTc1pnVkY2eHQvMC8z MTcwRTU5RjY0N0QxMkYyQzAxMzgxRjc4OUZFQTE5Qjk0QTdFQTk0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANENg24/U3DGJikFIgeCWMlMsL3dpEdnkHnHG3+jCXVYxrE7mE3p0C8yRlm5E MNcT/3hkAoQ4vC7egoRd9SRYhY5RC6oZllUAvlmMBsscsk47pT+v1tEb2wdcZuDr lPve2bQQW9csRaorg/JLttg8EQY0WLjQW3dbVK7MXd5wYMY10v7U637y20XVcIrG 56LVqefDpYjWHCx4nRawhlhTdxbcC2QqS1bm+jKzRQyQpPjlIbOH48JAAWD6pFrB Nxo8sANzZ+VZzuHmRLtimRjj4oTho0UCzlzjg5Pxxwk0zqzpsciM3ZmUAfFr5gaX 43h3Zwpi4rHauaBbVjHfwXNFew== -----END CERTIFICATE-----Generated at Mon Nov 3 19:14:11 2025 by rpki-client