$ rpki-client -vvf rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft File: 01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft (raw, json) Hash identifier: HsExnEW5qiJ+igHI8wpyIJsWQfdfsR2VeZ9SDisbAQY= Subject key identifier: 32:3F:62:5B:A6:39:78:DE:97:FC:4B:26:9B:3C:18:5A:84:E1:7D:83 Authority key identifier: 01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C Certificate issuer: /CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C Certificate serial: 37D28A56472FDE0CA5635FF8EB214FD553784F5D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer Subject info access: rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft Manifest number: 0304 Signing time: Sun 02 Nov 2025 15:42:35 +0000 Manifest this update: Sun 02 Nov 2025 15:37:35 +0000 Manifest next update: Mon 03 Nov 2025 19:15:35 +0000 Files and hashes: 1: 01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl (hash: /vcRZ43y62eoCFqnNjpdGYTBHzVr8IgyuuUzG5OmcaI=) 2: 3137392e3130372e35322e302f32322d3234203d3e20323638383234.roa (hash: GXCJwGNSeovJEODltbl+tv+hc1YYl0zHS2TuTav4gew=) 3: 34352e3137322e3230302e302f32322d3234203d3e20323638383234.roa (hash: 0YsTjeqlNRVyQvgwlwqrsgilyPHmCf1iPKM6xbeuc78=) 4: 323830343a356233303a3a2f33322d3438203d3e20323638383234.roa (hash: 6f8pVuH01b1SF3mi0On+jZU5yb6oYEzn5QGJJ2ruw7o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 19:15:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d2:8a:56:47:2f:de:0c:a5:63:5f:f8:eb:21:4f:d5:53:78:4f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C Validity Not Before: Nov 2 15:37:35 2025 GMT Not After : Nov 3 19:15:35 2025 GMT Subject: CN=323F625BA63978DE97FC4B269B3C185A84E17D83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bd:fe:d7:2c:92:5a:ce:ad:bd:ac:86:42:91: 92:4c:ef:ce:47:1d:6e:0c:dd:53:6d:10:d1:60:8a: 69:cf:22:3d:39:59:ec:a1:ab:a7:69:bb:68:5b:d3: b2:2a:41:a6:80:97:a0:ac:4a:a0:7c:23:80:33:51: 78:53:b2:43:ad:33:cf:4c:e0:61:dd:1f:fc:12:db: 5d:7a:44:fe:36:e1:21:97:e3:fc:10:a6:78:bb:43: ab:5c:37:f8:9a:8c:6a:e9:fb:e6:b9:6c:ad:8c:ed: 9e:46:d5:17:cf:94:bb:52:a9:62:a4:d8:cf:0d:f5: d8:53:61:e4:3d:1d:59:df:40:58:a2:0f:01:30:44: 14:68:1b:31:c7:c9:7a:67:6c:1f:4f:fb:d7:c4:d8: 94:41:9a:08:30:02:b6:2a:9d:e1:93:85:32:b9:4e: a2:a4:2c:03:ea:9f:42:dc:b3:6a:1f:c6:33:ae:aa: 43:b3:2d:b5:d2:d6:4b:79:b5:78:12:83:01:41:93: 0f:bd:36:fc:78:9c:40:f3:27:fe:5d:48:7a:da:36: 10:05:c6:4a:36:c5:d7:85:9b:6d:85:9c:fc:af:57: 7b:a9:ac:6b:a6:71:9b:9c:62:0b:94:0b:d3:b2:53: b6:fa:53:f5:94:47:3d:05:bc:13:b0:4d:bc:a7:c3: fa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3F:62:5B:A6:39:78:DE:97:FC:4B:26:9B:3C:18:5A:84:E1:7D:83 X509v3 Authority Key Identifier: keyid:01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:22:d3:2b:91:d0:cb:0a:9e:1c:41:73:8e:1d:5f:5b:a7:b9: ca:43:cb:e1:a2:66:19:be:75:26:2b:43:50:dc:97:10:2a:1c: 95:4f:47:d2:90:fb:55:85:e7:cf:58:45:e2:21:24:ae:5e:8f: 04:e5:d3:ee:5c:78:70:fe:83:37:5d:88:d1:07:6f:bc:d2:43: 98:c9:c5:e0:95:86:12:87:49:77:87:74:b5:40:09:69:4f:33: 01:01:ac:01:33:7c:02:92:8a:6b:f8:6a:5b:cf:a5:0c:19:0e: f2:20:15:b0:59:74:9c:6c:83:d5:0e:3b:cc:c5:78:49:0e:dd: e3:5a:9c:d6:5f:03:a8:9a:ff:03:35:52:9d:21:bc:98:67:7c: f7:dc:7e:ba:f8:31:c6:da:cf:8a:a2:f1:9f:30:e2:3b:ab:8f: a0:cf:e4:1d:f1:29:5e:e6:47:15:3b:16:f2:77:5e:e1:d1:8e: 56:c7:dc:fa:43:05:46:b9:61:2f:cc:52:33:92:2b:5b:5d:0d: ad:de:e0:da:e4:91:bb:5c:60:cb:7c:5e:71:2a:1b:bd:4b:17: f5:67:dd:c4:a5:ea:55:de:26:a2:e9:3d:70:42:fe:36:e5:bd: d3:19:ce:51:57:58:c8:b0:13:99:3a:e1:00:4d:6e:b9:f2:4f: ab:7f:7f:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN9KKVkcv3gylY1/46yFP1VN4T10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFDQjcxMDhCQkNBMjlGNTU0RDQyMUFDRTAzMkI5NzdB QTFCRjY3QzAeFw0yNTExMDIxNTM3MzVaFw0yNTExMDMxOTE1MzVaMDMxMTAvBgNV BAMTKDMyM0Y2MjVCQTYzOTc4REU5N0ZDNEIyNjlCM0MxODVBODRFMTdEODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFvf7XLJJazq29rIZCkZJM785H HW4M3VNtENFgimnPIj05Weyhq6dpu2hb07IqQaaAl6CsSqB8I4AzUXhTskOtM89M 4GHdH/wS2116RP424SGX4/wQpni7Q6tcN/iajGrp++a5bK2M7Z5G1RfPlLtSqWKk 2M8N9dhTYeQ9HVnfQFiiDwEwRBRoGzHHyXpnbB9P+9fE2JRBmggwArYqneGThTK5 TqKkLAPqn0Lcs2ofxjOuqkOzLbXS1kt5tXgSgwFBkw+9Nvx4nEDzJ/5dSHraNhAF xko2xdeFm22FnPyvV3uprGumcZucYguUC9OyU7b6U/WURz0FvBOwTbynw/rHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMj9iW6Y5eN6X/EsmmzwYWoThfYMwHwYDVR0j BBgwFoAUActxCLvKKfVU1CGs4DK5d6ob9nwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUU0Y0d3elR1V21rTWhtakI0enBjV2d6V2JZVlRKRXlkNU02R2JGU2ZV aUIvMS8wMUNCNzEwOEJCQ0EyOUY1NTRENDIxQUNFMDMyQjk3N0FBMUJGNjdDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQ0I3MTA4QkJDQTI5RjU1 NEQ0MjFBQ0UwMzJCOTc3QUExQkY2N0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUU0Y0d3elR1V21rTWhtakI0enBjV2d6V2JZVlRKRXlkNU02R2JGU2ZVaUIvMS8w MUNCNzEwOEJCQ0EyOUY1NTRENDIxQUNFMDMyQjk3N0FBMUJGNjdDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABSLTK5HQywqeHEFzjh1fW6e5ykPL4aJmGb51JitDUNyXECoclU9H0pD7VYXn z1hF4iEkrl6PBOXT7lx4cP6DN12I0QdvvNJDmMnF4JWGEodJd4d0tUAJaU8zAQGs ATN8ApKKa/hqW8+lDBkO8iAVsFl0nGyD1Q47zMV4SQ7d41qc1l8DqJr/AzVSnSG8 mGd899x+uvgxxtrPiqLxnzDiO6uPoM/kHfEpXuZHFTsW8nde4dGOVsfc+kMFRrlh L8xSM5IrW10Nrd7g2uSRu1xgy3xecSobvUsX9WfdxKXqVd4mouk9cEL+NuW90xnO UVdYyLATmTrhAE1uufJPq39/Ng== -----END CERTIFICATE-----Generated at Mon Nov 3 12:08:50 2025 by rpki-client