$ rpki-client -vvf rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.mft File: D72D3F46524FD32B12A8857ADA6A36351587C90E.mft (raw, json) Hash identifier: 5f6VHRJrdzGeCGbh2h9x2XxqAQDxHtGyJGBjjcJQCvA= Subject key identifier: E6:5D:D3:F0:AF:48:D0:37:24:D6:94:1E:F7:D7:29:AC:FA:71:96:71 Authority key identifier: D7:2D:3F:46:52:4F:D3:2B:12:A8:85:7A:DA:6A:36:35:15:87:C9:0E Certificate issuer: /CN=D72D3F46524FD32B12A8857ADA6A36351587C90E Certificate serial: 29258A3E870DA3A45BCF64A0C42B9001CFC66C65 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D72D3F46524FD32B12A8857ADA6A36351587C90E.cer Subject info access: rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.mft Manifest number: F4 Signing time: Mon 03 Nov 2025 09:07:30 +0000 Manifest this update: Mon 03 Nov 2025 09:02:30 +0000 Manifest next update: Tue 04 Nov 2025 09:50:30 +0000 Files and hashes: 1: 323830343a313334383a3a2f33322d3438203d3e20323633353236.roa (hash: 4IqY6bCQyoXzC2os25yTR1czK6/VXqAkjmT52V5zXn0=) 2: 3136382e3232372e3133362e302f32322d3234203d3e20323633353236.roa (hash: wxO2HWruIc267ooUXcBOclGbDVuFfgiJr4HNWI0zXcc=) 3: 3139312e3235332e32302e302f32322d3234203d3e20323633353236.roa (hash: 8VduWI6q3z2//+F/2lXJ91+usvdBT+2WkfCrAhcQiQc=) 4: D72D3F46524FD32B12A8857ADA6A36351587C90E.crl (hash: xag+rqZoX6UbdKlF6Tc7EzkwHJI3b8ITTHmj6kFYZ+o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.crl rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D72D3F46524FD32B12A8857ADA6A36351587C90E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:25:8a:3e:87:0d:a3:a4:5b:cf:64:a0:c4:2b:90:01:cf:c6:6c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D72D3F46524FD32B12A8857ADA6A36351587C90E Validity Not Before: Nov 3 09:02:30 2025 GMT Not After : Nov 4 09:50:30 2025 GMT Subject: CN=E65DD3F0AF48D03724D6941EF7D729ACFA719671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:80:ee:48:b8:d5:d0:a5:e4:60:f3:94:30:ef: 27:65:ab:0d:2f:b9:ee:6e:91:6e:be:c2:df:71:a7: 1b:30:36:46:e1:ba:8a:2f:d4:e5:5d:47:ff:15:34: 5a:6a:d8:52:a7:4f:46:2d:74:1d:24:4e:40:ad:1a: 43:62:9a:83:5f:2d:2e:dd:20:58:c0:54:d0:d1:f0: 7c:ac:64:8d:4d:85:38:1b:f1:02:0a:de:ac:dc:4b: 62:cb:0e:2e:81:cc:cf:77:2d:08:71:17:56:6d:72: 85:ab:b7:2b:14:f1:93:69:73:78:1e:0d:14:7f:19: e6:b4:3b:c0:78:38:c2:cb:92:40:c8:c3:fb:bc:0a: 2f:05:13:f6:60:d0:a9:7f:7f:9b:6b:28:78:f9:61: 52:09:5b:d4:90:a7:ff:aa:73:94:3f:aa:ca:50:b4: f4:6d:69:e4:da:21:d0:bd:b6:0a:98:35:42:12:f6: 5d:6d:20:13:f6:92:55:ee:ce:79:b9:16:32:3e:9d: 3f:9e:4e:0a:96:f0:cf:ce:5d:4d:e3:b1:d5:76:4d: 02:86:3a:79:16:c6:1b:a8:22:a9:7e:86:07:dc:20: c4:a9:73:81:df:6d:1a:f4:2c:62:d0:4b:73:e9:bc: 3e:ac:0a:c1:29:e7:da:e2:7b:70:18:1c:0f:ad:0b: cb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5D:D3:F0:AF:48:D0:37:24:D6:94:1E:F7:D7:29:AC:FA:71:96:71 X509v3 Authority Key Identifier: keyid:D7:2D:3F:46:52:4F:D3:2B:12:A8:85:7A:DA:6A:36:35:15:87:C9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D72D3F46524FD32B12A8857ADA6A36351587C90E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ac:a9:43:ff:bc:a2:e1:1a:28:ea:69:50:20:c5:7d:a2:2b: 60:b6:68:62:73:ba:b9:2d:75:7f:d7:2a:6b:e2:4c:76:8b:e0: 00:d9:da:11:55:03:ae:d5:35:cd:0d:57:4c:a2:98:68:11:8d: 07:55:d6:00:a8:bc:8d:55:e2:8b:1b:49:80:10:25:c2:8d:7c: 08:52:bb:bf:44:08:3b:d0:4b:87:59:01:f1:8d:48:93:d9:e5: 3b:5d:88:31:69:96:49:a6:73:4a:7f:60:72:f7:ff:53:c7:63: b7:15:12:b1:19:35:7b:44:fe:2b:91:bc:16:8d:a6:d3:da:bb: fc:f3:f2:19:7d:b5:c0:cd:dd:12:d9:8f:3c:63:6f:b9:c2:98: fc:45:86:73:84:c5:b0:f3:46:12:c4:6b:ab:fe:f5:8f:ac:03: 65:ea:64:3d:f3:76:3d:38:5f:88:cb:72:9a:59:af:3e:8f:bc: e6:d3:b4:8a:4c:10:ce:b4:b0:61:4d:34:04:5b:f5:dd:49:67: da:b9:de:25:d1:8b:3f:cf:13:f5:1c:7a:9f:b8:07:30:9f:dd: e7:ce:17:03:d6:dc:6a:27:f0:53:a7:31:a4:21:a9:d0:7e:89: 8e:b3:85:80:b4:ce:47:94:91:3c:c1:36:27:e1:44:09:12:3a: 62:c8:f1:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKSWKPocNo6Rbz2SgxCuQAc/GbGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcyRDNGNDY1MjRGRDMyQjEyQTg4NTdBREE2QTM2MzUx NTg3QzkwRTAeFw0yNTExMDMwOTAyMzBaFw0yNTExMDQwOTUwMzBaMDMxMTAvBgNV BAMTKEU2NUREM0YwQUY0OEQwMzcyNEQ2OTQxRUY3RDcyOUFDRkE3MTk2NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtgO5IuNXQpeRg85Qw7ydlqw0v ue5ukW6+wt9xpxswNkbhuoov1OVdR/8VNFpq2FKnT0YtdB0kTkCtGkNimoNfLS7d IFjAVNDR8HysZI1NhTgb8QIK3qzcS2LLDi6BzM93LQhxF1ZtcoWrtysU8ZNpc3ge DRR/Gea0O8B4OMLLkkDIw/u8Ci8FE/Zg0Kl/f5trKHj5YVIJW9SQp/+qc5Q/qspQ tPRtaeTaIdC9tgqYNUIS9l1tIBP2klXuznm5FjI+nT+eTgqW8M/OXU3jsdV2TQKG OnkWxhuoIql+hgfcIMSpc4HfbRr0LGLQS3PpvD6sCsEp59rie3AYHA+tC8thAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5l3T8K9I0Dck1pQe99cprPpxlnEwHwYDVR0j BBgwFoAU1y0/RlJP0ysSqIV62mo2NRWHyQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWpqZk14cUtVTUs0NmVieWRWQWpyVFhUZXhpRUduSGpCaEdWYVVXVnBj YXEvMC9ENzJEM0Y0NjUyNEZEMzJCMTJBODg1N0FEQTZBMzYzNTE1ODdDOTBFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3MkQzRjQ2NTI0RkQzMkIx MkE4ODU3QURBNkEzNjM1MTU4N0M5MEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWpqZk14cUtVTUs0NmVieWRWQWpyVFhUZXhpRUduSGpCaEdWYVVXVnBjYXEvMC9E NzJEM0Y0NjUyNEZEMzJCMTJBODg1N0FEQTZBMzYzNTE1ODdDOTBFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIqypQ/+8ouEaKOppUCDFfaIrYLZoYnO6uS11f9cqa+JMdovgANnaEVUDrtU1 zQ1XTKKYaBGNB1XWAKi8jVXiixtJgBAlwo18CFK7v0QIO9BLh1kB8Y1Ik9nlO12I MWmWSaZzSn9gcvf/U8djtxUSsRk1e0T+K5G8Fo2m09q7/PPyGX21wM3dEtmPPGNv ucKY/EWGc4TFsPNGEsRrq/71j6wDZepkPfN2PThfiMtymlmvPo+85tO0ikwQzrSw YU00BFv13Uln2rneJdGLP88T9Rx6n7gHMJ/d584XA9bcaifwU6cxpCGp0H6JjrOF gLTOR5SRPME2J+FECRI6Ysjxyg== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:55 2025 by rpki-client