$ rpki-client -vvf rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft File: F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft (raw, json) Hash identifier: Vy/KU3VwltBlVgyJ3/qki+pI+W3ovSDXWEsUe7WA5yo= Subject key identifier: 11:6B:D1:86:4A:53:D4:12:52:3F:80:AD:E3:96:53:F3:D7:DA:37:DC Authority key identifier: F6:85:5C:37:8F:9C:9C:A3:71:CE:AA:34:0A:9F:CB:F4:8F:C9:DF:A2 Certificate issuer: /CN=F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2 Certificate serial: 03E8D27DB09899BEB13C791C3AF9016B7032B171 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer Subject info access: rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft Manifest number: 020B Signing time: Sun 02 Nov 2025 19:10:41 +0000 Manifest this update: Sun 02 Nov 2025 19:05:41 +0000 Manifest next update: Mon 03 Nov 2025 19:44:41 +0000 Files and hashes: 1: F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl (hash: nhjRiwQj5uIr5zeX+aWbrihaxOvXJeh6ZvsvsTnNSTo=) 2: 3138392e33392e39362e302f32302d3332203d3e203238333035.roa (hash: VDrfAwL3Ri73wmHCCBTJ8HFlRF9Bay2CAlDSTwJLpoI=) 3: 323830343a323839383a3a2f33322d313238203d3e203238333035.roa (hash: QgzU9rceU0pX2SIMJeO4ViSomBaMzkZwR8ail6IEh6I=) 4: 3138392e38352e3134342e302f32302d3332203d3e203238333035.roa (hash: CX/cj410Z6WPwJMrud8he6flcqEqe568hjn5TZSbfVs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 19:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:e8:d2:7d:b0:98:99:be:b1:3c:79:1c:3a:f9:01:6b:70:32:b1:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2 Validity Not Before: Nov 2 19:05:41 2025 GMT Not After : Nov 3 19:44:41 2025 GMT Subject: CN=116BD1864A53D412523F80ADE39653F3D7DA37DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:53:b5:c8:ea:16:2b:7a:72:c0:87:f4:5b: da:01:2e:4c:a0:85:24:90:78:c0:0f:28:a9:23:bf: bb:53:51:ed:be:2d:a0:ba:07:05:2a:99:ca:67:ad: 91:54:04:71:6c:94:55:82:14:19:a0:de:03:9f:9e: 45:6d:da:33:67:32:60:e6:92:f7:f3:d6:2f:79:c9: e6:d6:13:00:10:79:71:df:8e:f0:d0:e1:19:56:26: ea:f8:c6:e1:94:9f:f0:6f:10:bf:61:95:15:92:55: 03:07:b8:d7:3e:eb:62:f2:ed:9e:ae:a7:c2:10:0b: 4e:10:6c:30:f7:af:b8:42:da:29:90:4f:69:54:7a: 86:c4:b6:ee:a3:e0:fc:e9:67:fc:bc:fc:3f:79:ab: b2:f2:96:7b:ee:b1:bd:a9:b5:0a:9f:83:c2:c5:94: fc:b4:f8:09:06:1b:eb:2a:27:13:6f:e5:23:0d:8a: ce:0f:9c:64:55:a2:ac:4a:2d:5a:23:3e:22:24:a8: d3:32:12:23:de:52:df:04:e9:34:12:a7:f2:7e:a1: ef:00:43:32:65:e6:7d:d6:56:82:a0:33:70:05:e8: a4:86:09:63:8c:fe:49:48:22:56:f9:a1:e3:a8:2e: 8f:0b:b9:fd:27:ba:c1:24:3e:94:52:9b:2c:39:33: 1e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6B:D1:86:4A:53:D4:12:52:3F:80:AD:E3:96:53:F3:D7:DA:37:DC X509v3 Authority Key Identifier: keyid:F6:85:5C:37:8F:9C:9C:A3:71:CE:AA:34:0A:9F:CB:F4:8F:C9:DF:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:e5:1b:8a:ee:e3:70:ed:67:d3:c6:1b:bd:c2:37:92:e7:36: 38:e4:41:e4:2b:97:05:a0:4c:7a:3d:9e:24:53:2c:4f:44:41: 2b:3f:9e:79:0e:f9:1f:81:1d:1c:7a:36:58:9a:c1:9f:37:db: 69:43:6d:1d:4d:90:3f:b4:a9:4e:de:66:91:35:8e:6f:00:e9: 78:46:75:a2:de:a3:b3:94:d4:82:e7:5d:b8:49:bb:4c:db:b2: f9:d8:c5:0d:53:17:63:c2:3e:b4:4d:c0:56:1c:e0:74:82:45: f3:a9:b1:b4:bf:d5:95:84:a2:bc:c2:c1:bd:67:2f:e5:47:49: 1f:e8:d0:74:e5:55:72:d5:b6:fd:60:8b:e9:c2:4c:af:b3:a1: 3d:e2:75:bb:29:d4:74:c6:3a:fc:b4:e3:35:18:bc:94:0f:60: b9:49:cd:65:95:f5:5c:ce:4d:a7:22:ca:9f:51:5c:bc:6a:e8: ff:f1:9a:a5:52:ec:8e:95:06:a7:09:74:49:67:0d:ac:08:08: 40:bc:30:fd:09:44:bf:69:6a:fc:23:e1:cb:12:3b:ae:f7:a8: 23:c5:49:cf:4f:1b:d8:40:35:6a:6f:f9:ae:60:ad:1d:1d:7a: 38:e2:e8:f3:ea:8f:c5:fa:10:3f:b6:fb:d4:24:03:12:51:a6: 2f:4c:94:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA+jSfbCYmb6xPHkcOvkBa3AysXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY4NTVDMzc4RjlDOUNBMzcxQ0VBQTM0MEE5RkNCRjQ4 RkM5REZBMjAeFw0yNTExMDIxOTA1NDFaFw0yNTExMDMxOTQ0NDFaMDMxMTAvBgNV BAMTKDExNkJEMTg2NEE1M0Q0MTI1MjNGODBBREUzOTY1M0YzRDdEQTM3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLFO1yOoWK3pywIf0W9oBLkyg hSSQeMAPKKkjv7tTUe2+LaC6BwUqmcpnrZFUBHFslFWCFBmg3gOfnkVt2jNnMmDm kvfz1i95yebWEwAQeXHfjvDQ4RlWJur4xuGUn/BvEL9hlRWSVQMHuNc+62Ly7Z6u p8IQC04QbDD3r7hC2imQT2lUeobEtu6j4PzpZ/y8/D95q7Lylnvusb2ptQqfg8LF lPy0+AkGG+sqJxNv5SMNis4PnGRVoqxKLVojPiIkqNMyEiPeUt8E6TQSp/J+oe8A QzJl5n3WVoKgM3AF6KSGCWOM/klIIlb5oeOoLo8Luf0nusEkPpRSmyw5Mx7nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEWvRhkpT1BJSP4Ct45ZT89faN9wwHwYDVR0j BBgwFoAU9oVcN4+cnKNxzqo0Cp/L9I/J36IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOW1XUURSWG82Y2QyeDhLc2VkZG5rdktraG0zVUFLek56b3ZDWUU4Vnpo NUcvMC9GNjg1NUMzNzhGOUM5Q0EzNzFDRUFBMzQwQTlGQ0JGNDhGQzlERkEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2ODU1QzM3OEY5QzlDQTM3 MUNFQUEzNDBBOUZDQkY0OEZDOURGQTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OW1XUURSWG82Y2QyeDhLc2VkZG5rdktraG0zVUFLek56b3ZDWUU4VnpoNUcvMC9G Njg1NUMzNzhGOUM5Q0EzNzFDRUFBMzQwQTlGQ0JGNDhGQzlERkEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMuUbiu7jcO1n08YbvcI3kuc2OORB5CuXBaBMej2eJFMsT0RBKz+eeQ75H4Ed HHo2WJrBnzfbaUNtHU2QP7SpTt5mkTWObwDpeEZ1ot6js5TUgudduEm7TNuy+djF DVMXY8I+tE3AVhzgdIJF86mxtL/VlYSivMLBvWcv5UdJH+jQdOVVctW2/WCL6cJM r7OhPeJ1uynUdMY6/LTjNRi8lA9guUnNZZX1XM5NpyLKn1FcvGro//GapVLsjpUG pwl0SWcNrAgIQLww/QlEv2lq/CPhyxI7rveoI8VJz08b2EA1am/5rmCtHR16OOLo 8+qPxfoQP7b71CQDElGmL0yUnA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:32:39 2025 by rpki-client