$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft File: 120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft (raw, json) Hash identifier: dFKerw5gG5DlZTDkRdoqo2mewRNNfy/zmAXemQMD5R0= Subject key identifier: 8A:B0:21:04:4C:EA:1C:75:CC:71:5F:73:7E:8C:EC:E5:44:84:6A:DC Authority key identifier: 12:0F:03:9C:87:2F:A2:AE:7F:DC:D1:D4:49:9C:40:11:CE:1A:5B:9E Certificate issuer: /CN=120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E Certificate serial: 6E00524420139567338D816A3E6929276B296CC7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer Subject info access: rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft Manifest number: 01B1 Signing time: Mon 03 Nov 2025 06:41:37 +0000 Manifest this update: Mon 03 Nov 2025 06:36:37 +0000 Manifest next update: Tue 04 Nov 2025 08:05:37 +0000 Files and hashes: 1: 3138372e3130392e3131322e302f32322d3234203d3e20323732373533.roa (hash: w0qqFPXS1q1NP5A7+SdrqOfHPoWk++ZYHhgDw9+ls14=) 2: 120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.crl (hash: gAMRzdGA9tk37+2+xZSimZBX9YjFkOzVknMKCpdyOUc=) 3: 323830343a383832343a3a2f33322d3332203d3e20323732373533.roa (hash: Z1e00J+pj3xgDu7l+bTC4iqXuYLvr6iGTUsPSS+TEdc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.crl rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 08:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:00:52:44:20:13:95:67:33:8d:81:6a:3e:69:29:27:6b:29:6c:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E Validity Not Before: Nov 3 06:36:37 2025 GMT Not After : Nov 4 08:05:37 2025 GMT Subject: CN=8AB021044CEA1C75CC715F737E8CECE544846ADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1f:62:cd:92:d3:fc:11:a7:5a:85:30:44:a9: c7:c7:ea:6c:f3:16:07:4a:a9:18:a0:2f:0f:b3:8c: b0:cd:af:8e:7e:2a:35:1a:b8:71:76:fc:6f:ac:fd: 92:93:28:22:0b:fc:19:9a:39:23:d5:46:ae:ab:4c: 45:d6:0d:41:f1:3f:36:e9:46:f2:35:fe:c0:a7:66: 07:f6:10:b9:08:66:0e:41:13:42:7b:84:04:05:5c: 3c:cb:5e:7a:a3:0c:f4:dd:3a:96:4e:98:72:b9:50: e3:da:0b:7a:b8:b2:85:96:04:26:4d:32:71:c2:d7: 0c:0c:80:ac:dd:02:e9:e2:47:34:4e:4e:ea:ae:82: 47:9c:eb:30:c5:0d:2e:8a:84:73:a4:8a:2e:39:de: 7c:7e:5b:83:c9:48:be:19:f0:2c:4c:12:4e:85:8e: cc:25:f9:0f:a7:f0:54:1e:d6:4f:10:29:b0:42:37: 63:17:ec:ee:3b:af:6d:6c:e7:24:c4:40:28:36:14: 96:9f:46:c5:4c:67:3a:c9:00:d8:de:eb:16:f6:5f: 6f:45:e2:4f:e4:42:e7:31:3f:8b:cd:e0:0a:32:d4: 5b:4f:2d:52:44:d2:4f:a8:87:26:35:af:2b:ed:79: 41:a2:b2:53:7d:5d:92:65:36:95:ce:f2:64:25:45: f6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B0:21:04:4C:EA:1C:75:CC:71:5F:73:7E:8C:EC:E5:44:84:6A:DC X509v3 Authority Key Identifier: keyid:12:0F:03:9C:87:2F:A2:AE:7F:DC:D1:D4:49:9C:40:11:CE:1A:5B:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f8:f8:cb:fb:07:23:25:19:ee:b1:4c:46:74:df:49:82:6c: b5:a0:23:f4:4e:f3:ac:34:58:f8:04:c9:9b:37:bf:48:e5:b0: 7d:10:86:30:a3:15:86:86:50:b1:80:0d:aa:4b:7e:d8:83:1f: 02:1a:b3:02:f2:7d:1f:37:d0:f2:c5:a0:6e:56:b7:f9:99:43: 0c:52:0b:53:b2:08:b8:7b:ca:ab:41:f2:51:50:80:5c:13:82: ed:e7:c8:4d:9c:a9:9a:12:f2:c5:95:cd:91:f7:bf:2a:20:61: 36:fa:4a:9c:d5:bc:93:c0:7d:79:fe:36:6e:39:69:4a:65:27: 38:3e:cb:49:19:91:af:aa:69:ca:8a:db:91:57:b8:36:01:f3: 64:61:4c:9a:81:89:4b:41:59:1c:e8:40:52:01:0d:d0:c3:fc: 5f:9c:df:0c:4d:17:7c:9e:9c:2e:e2:4c:97:16:b9:13:b4:ad: d7:27:45:60:0e:72:0f:5d:50:08:53:89:1a:cf:8b:1c:8f:76: 2e:1e:9a:c3:d4:ba:0c:57:ed:cd:40:5c:e7:83:3c:42:4c:ea: f1:ed:51:82:e4:13:3a:6b:61:62:d1:75:8e:88:a0:7f:2a:82: cc:70:48:26:84:0b:5f:1e:70:0f:e1:3c:ae:a3:f9:eb:6c:94: c8:80:b3:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbgBSRCATlWczjYFqPmkpJ2spbMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIwRjAzOUM4NzJGQTJBRTdGRENEMUQ0NDk5QzQwMTFD RTFBNUI5RTAeFw0yNTExMDMwNjM2MzdaFw0yNTExMDQwODA1MzdaMDMxMTAvBgNV BAMTKDhBQjAyMTA0NENFQTFDNzVDQzcxNUY3MzdFOENFQ0U1NDQ4NDZBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiH2LNktP8EadahTBEqcfH6mzz FgdKqRigLw+zjLDNr45+KjUauHF2/G+s/ZKTKCIL/BmaOSPVRq6rTEXWDUHxPzbp RvI1/sCnZgf2ELkIZg5BE0J7hAQFXDzLXnqjDPTdOpZOmHK5UOPaC3q4soWWBCZN MnHC1wwMgKzdAuniRzROTuqugkec6zDFDS6KhHOkii453nx+W4PJSL4Z8CxMEk6F jswl+Q+n8FQe1k8QKbBCN2MX7O47r21s5yTEQCg2FJafRsVMZzrJANje6xb2X29F 4k/kQucxP4vN4Aoy1FtPLVJE0k+ohyY1ryvteUGislN9XZJlNpXO8mQlRfb5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUirAhBEzqHHXMcV9zfozs5USEatwwHwYDVR0j BBgwFoAUEg8DnIcvoq5/3NHUSZxAEc4aW54wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTNHR2dLVzFMck5QZ3NNeEtEcEdTV3hpNnNMb3ZHaDZia2RvbzdVOVlq RmIvMC8xMjBGMDM5Qzg3MkZBMkFFN0ZEQ0QxRDQ0OTlDNDAxMUNFMUE1QjlFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyMEYwMzlDODcyRkEyQUU3 RkRDRDFENDQ5OUM0MDExQ0UxQTVCOUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTNHR2dLVzFMck5QZ3NNeEtEcEdTV3hpNnNMb3ZHaDZia2RvbzdVOVlqRmIvMC8x MjBGMDM5Qzg3MkZBMkFFN0ZEQ0QxRDQ0OTlDNDAxMUNFMUE1QjlFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFPj4y/sHIyUZ7rFMRnTfSYJstaAj9E7zrDRY+ATJmze/SOWwfRCGMKMVhoZQ sYANqkt+2IMfAhqzAvJ9HzfQ8sWgbla3+ZlDDFILU7IIuHvKq0HyUVCAXBOC7efI TZypmhLyxZXNkfe/KiBhNvpKnNW8k8B9ef42bjlpSmUnOD7LSRmRr6ppyorbkVe4 NgHzZGFMmoGJS0FZHOhAUgEN0MP8X5zfDE0XfJ6cLuJMlxa5E7St1ydFYA5yD11Q CFOJGs+LHI92Lh6aw9S6DFftzUBc54M8Qkzq8e1RguQTOmthYtF1joigfyqCzHBI JoQLXx5wD+E8rqP562yUyICzOA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:39:40 2025 by rpki-client