$ rpki-client -vvf rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/6B4CC171DFBE7D197B119332192B5E7E9C131C42.mft File: 6B4CC171DFBE7D197B119332192B5E7E9C131C42.mft (raw, json) Hash identifier: PCylJ+HJXV/LS+A0gYKgd4hKC2v9ppDo6Dd6mUfcAvU= Subject key identifier: 5D:1B:2B:EA:F5:D5:98:3E:A3:3F:83:D9:88:3B:43:16:67:0F:CE:07 Authority key identifier: 6B:4C:C1:71:DF:BE:7D:19:7B:11:93:32:19:2B:5E:7E:9C:13:1C:42 Certificate issuer: /CN=6B4CC171DFBE7D197B119332192B5E7E9C131C42 Certificate serial: 31E66FDBD21E3B73244C4E5606D36EFE49F0DC08 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B4CC171DFBE7D197B119332192B5E7E9C131C42.cer Subject info access: rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/6B4CC171DFBE7D197B119332192B5E7E9C131C42.mft Manifest number: 0117 Signing time: Mon 03 Nov 2025 02:15:15 +0000 Manifest this update: Mon 03 Nov 2025 02:10:13 +0000 Manifest next update: Tue 04 Nov 2025 04:07:13 +0000 Files and hashes: 1: 3139322e3134342e36382e302f32322d3332203d3e20323636313536.roa (hash: Jbqm2cYTFZqnVwhYv9MtcLfLescp6uZnHERY1nohyOQ=) 2: 323830343a336238633a3a2f33322d3634203d3e20323636313536.roa (hash: qfgQw0mr88KgK6lzZ+6bRYBWlRfte5WLPXqVcuUoehc=) 3: 6B4CC171DFBE7D197B119332192B5E7E9C131C42.crl (hash: DJ0mW7jiT5CGYWzK2s7CKL//D770Ng2x4tJ7zcTOSZA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/6B4CC171DFBE7D197B119332192B5E7E9C131C42.crl rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/6B4CC171DFBE7D197B119332192B5E7E9C131C42.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B4CC171DFBE7D197B119332192B5E7E9C131C42.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 04:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e6:6f:db:d2:1e:3b:73:24:4c:4e:56:06:d3:6e:fe:49:f0:dc:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B4CC171DFBE7D197B119332192B5E7E9C131C42 Validity Not Before: Nov 3 02:10:13 2025 GMT Not After : Nov 4 04:07:13 2025 GMT Subject: CN=5D1B2BEAF5D5983EA33F83D9883B4316670FCE07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:27:74:44:2f:6d:72:3c:17:07:64:c6:6d:8d: cd:97:4d:8d:f2:86:11:52:06:79:37:d1:1f:5b:74: b9:3f:ad:83:a3:8b:8e:5a:d7:ab:dd:71:93:6b:d8: 69:cf:ef:55:17:47:29:9e:03:70:2f:5d:97:4a:ee: 87:27:7b:39:2c:53:04:17:0f:20:20:12:7f:cb:16: 2e:dd:9f:66:bc:ed:9f:a4:50:78:eb:f6:a3:3e:ad: 1c:87:4b:36:d6:86:67:1e:99:81:3b:14:9d:08:d9: ff:55:ab:50:7f:c0:21:4e:5e:63:94:05:ce:b9:43: 43:be:59:32:fd:47:0b:cc:52:cc:93:69:2e:10:90: 46:d5:10:22:c4:87:8d:f5:da:87:88:f8:65:b5:fc: df:3f:b9:56:c2:be:d2:5c:f7:fc:51:e8:31:6d:a4: e9:1b:e7:45:fa:10:0f:ca:e5:f8:43:32:0d:76:4e: c2:fc:a5:ea:51:53:28:19:fc:9d:ed:4b:bf:b0:a0: 09:d8:87:63:f9:a2:d8:70:f1:1e:d6:f6:71:18:0a: 0a:49:4b:a7:a5:ee:9c:00:d2:51:c8:45:a0:7b:98: ae:f8:89:d9:19:b7:44:f7:8c:d8:5e:8d:ba:e9:fb: e9:28:2a:75:ef:c7:d5:92:22:8b:00:bf:99:25:72: 3d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1B:2B:EA:F5:D5:98:3E:A3:3F:83:D9:88:3B:43:16:67:0F:CE:07 X509v3 Authority Key Identifier: keyid:6B:4C:C1:71:DF:BE:7D:19:7B:11:93:32:19:2B:5E:7E:9C:13:1C:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/6B4CC171DFBE7D197B119332192B5E7E9C131C42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B4CC171DFBE7D197B119332192B5E7E9C131C42.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/6B4CC171DFBE7D197B119332192B5E7E9C131C42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:6f:54:12:8d:5a:53:56:50:7e:24:1a:de:be:34:83:3a:cf: 53:79:88:e6:e0:cb:51:d6:5e:93:77:e0:96:01:ae:e1:75:fa: 25:a4:86:b6:49:9d:8c:96:1b:db:cf:50:f2:15:db:de:59:cd: 3a:f3:9c:be:2e:e6:59:f7:17:57:94:86:6a:93:58:84:74:6b: 07:99:6e:2b:32:3a:fb:5d:f3:0d:07:cc:4f:a8:26:cd:56:57: e0:37:15:93:7e:a8:13:95:6c:6e:00:f5:ec:54:5a:03:f9:43: d8:7e:6c:08:ae:e0:8d:45:b6:a8:13:52:c1:00:24:79:ab:ac: 5a:11:0b:53:a8:bb:0a:63:c5:69:05:4d:fc:84:ed:02:0f:fc: 7b:c5:ca:e7:ca:77:6e:ff:07:a7:ad:0a:80:91:2c:2d:48:d4: 9e:1c:3f:33:3f:80:95:be:db:24:d8:94:ff:87:fe:9d:41:c4: 1f:a8:9f:6f:b8:2d:3d:6c:34:ab:22:92:8c:3b:3e:c6:4a:8f: 55:f4:9a:3b:a0:04:34:cc:11:16:6f:df:8b:ae:57:cf:1c:0c: a6:5b:bc:1d:29:59:9a:75:a1:e6:d5:cc:3d:f8:e1:95:cf:8f: 39:10:36:a3:bb:54:4d:1b:19:e2:08:be:2d:a8:a9:cd:88:84: 13:69:cf:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMeZv29IeO3MkTE5WBtNu/knw3AgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI0Q0MxNzFERkJFN0QxOTdCMTE5MzMyMTkyQjVFN0U5 QzEzMUM0MjAeFw0yNTExMDMwMjEwMTNaFw0yNTExMDQwNDA3MTNaMDMxMTAvBgNV BAMTKDVEMUIyQkVBRjVENTk4M0VBMzNGODNEOTg4M0I0MzE2NjcwRkNFMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1J3REL21yPBcHZMZtjc2XTY3y hhFSBnk30R9bdLk/rYOji45a16vdcZNr2GnP71UXRymeA3AvXZdK7ocnezksUwQX DyAgEn/LFi7dn2a87Z+kUHjr9qM+rRyHSzbWhmcemYE7FJ0I2f9Vq1B/wCFOXmOU Bc65Q0O+WTL9RwvMUsyTaS4QkEbVECLEh4312oeI+GW1/N8/uVbCvtJc9/xR6DFt pOkb50X6EA/K5fhDMg12TsL8pepRUygZ/J3tS7+woAnYh2P5othw8R7W9nEYCgpJ S6el7pwA0lHIRaB7mK74idkZt0T3jNhejbrp++koKnXvx9WSIosAv5klcj1pAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXRsr6vXVmD6jP4PZiDtDFmcPzgcwHwYDVR0j BBgwFoAUa0zBcd++fRl7EZMyGStefpwTHEIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTRKQ1NzUlF0Vnp4S3RLd0U5emZFRmVnZ2NjVlY4TkRSQ1ZKYWQ4d3dk dm0vMC82QjRDQzE3MURGQkU3RDE5N0IxMTkzMzIxOTJCNUU3RTlDMTMxQzQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCNENDMTcxREZCRTdEMTk3 QjExOTMzMjE5MkI1RTdFOUMxMzFDNDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTRKQ1NzUlF0Vnp4S3RLd0U5emZFRmVnZ2NjVlY4TkRSQ1ZKYWQ4d3dkdm0vMC82 QjRDQzE3MURGQkU3RDE5N0IxMTkzMzIxOTJCNUU3RTlDMTMxQzQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeG9UEo1aU1ZQfiQa3r40gzrPU3mI5uDLUdZek3fglgGu4XX6JaSGtkmdjJYb 289Q8hXb3lnNOvOcvi7mWfcXV5SGapNYhHRrB5luKzI6+13zDQfMT6gmzVZX4DcV k36oE5VsbgD17FRaA/lD2H5sCK7gjUW2qBNSwQAkeausWhELU6i7CmPFaQVN/ITt Ag/8e8XK58p3bv8Hp60KgJEsLUjUnhw/Mz+Alb7bJNiU/4f+nUHEH6ifb7gtPWw0 qyKSjDs+xkqPVfSaO6AENMwRFm/fi65XzxwMplu8HSlZmnWh5tXMPfjhlc+PORA2 o7tUTRsZ4gi+LaipzYiEE2nPIA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:13:27 2025 by rpki-client