$ rpki-client -vvf rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.mft File: 687D5F008B520395E4289191144220E2C472A669.mft (raw, json) Hash identifier: N42UClhau0ZIITBZ9awG96ltDcPhHGtBkXaa4tYgovY= Subject key identifier: 6E:3F:94:57:CF:2E:45:4C:83:80:E7:05:DC:90:27:D3:73:C2:5B:0C Authority key identifier: 68:7D:5F:00:8B:52:03:95:E4:28:91:91:14:42:20:E2:C4:72:A6:69 Certificate issuer: /CN=687D5F008B520395E4289191144220E2C472A669 Certificate serial: 650B4BA79CF5B5605AEB41AA00ED97BFD0B68C77 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D5F008B520395E4289191144220E2C472A669.cer Subject info access: rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.mft Manifest number: 3A Signing time: Mon 03 Nov 2025 06:39:22 +0000 Manifest this update: Mon 03 Nov 2025 06:34:22 +0000 Manifest next update: Tue 04 Nov 2025 09:17:22 +0000 Files and hashes: 1: 3134332e3230382e3234342e302f32322d3234203d3e20323635313337.roa (hash: kdjvMgt4WKFDG11VUvvzllBV2iitiEy2lt7hQDUlrNU=) 2: 323830343a326232343a3a2f33322d3438203d3e20323635313337.roa (hash: ijEr3f7j1DppUG1sCN5o0v9QuT/FdCpQy+KDTJiXd6E=) 3: 687D5F008B520395E4289191144220E2C472A669.crl (hash: +QRY0DZxDIX4yvTAjZ519bBZu1L21gaU0W11sHzRU4g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.crl rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D5F008B520395E4289191144220E2C472A669.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:0b:4b:a7:9c:f5:b5:60:5a:eb:41:aa:00:ed:97:bf:d0:b6:8c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687D5F008B520395E4289191144220E2C472A669 Validity Not Before: Nov 3 06:34:22 2025 GMT Not After : Nov 4 09:17:22 2025 GMT Subject: CN=6E3F9457CF2E454C8380E705DC9027D373C25B0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f1:b9:95:6b:c3:e3:7b:61:e4:f9:7a:ad:da: 22:7b:d7:75:29:a0:63:fd:86:60:08:49:3c:28:83: d2:17:0a:b3:2f:e6:6e:4f:ad:55:d7:00:83:b2:d5: 15:8d:f1:f8:b9:cf:81:44:14:42:8b:16:d4:6c:89: 54:69:30:2d:4e:77:d4:05:7e:9f:08:84:70:34:f1: 0c:40:83:9b:e6:5a:46:96:14:3c:3d:09:3d:97:b3: e8:5a:cd:75:44:a7:a3:45:1f:3f:71:3d:2d:13:f6: dd:0c:a5:fe:ad:5c:7f:be:7e:a1:8b:21:18:58:0c: a6:04:1d:5b:d3:a7:6a:eb:f8:cc:9c:71:1a:f3:7d: 0b:e4:8e:7b:d1:aa:d2:cf:f7:46:16:e5:d4:a1:08: 20:14:9f:ba:df:7a:15:15:01:91:09:ed:2e:83:6a: 45:b7:03:c6:23:94:72:46:45:c8:6b:e5:0a:64:3f: 39:a1:9d:55:d7:3e:69:5a:88:26:db:d6:53:19:6e: f6:dd:96:ba:d7:8b:c4:9c:3f:81:90:2c:45:57:0a: b1:8b:f1:58:f0:24:7e:53:89:88:f0:0f:f3:cb:73: 59:c7:ca:2e:ed:e2:da:b2:48:3e:c3:83:99:82:19: 59:24:13:e2:54:45:5d:17:fc:e3:63:44:d4:ff:38: 20:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3F:94:57:CF:2E:45:4C:83:80:E7:05:DC:90:27:D3:73:C2:5B:0C X509v3 Authority Key Identifier: keyid:68:7D:5F:00:8B:52:03:95:E4:28:91:91:14:42:20:E2:C4:72:A6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D5F008B520395E4289191144220E2C472A669.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:44:6b:95:f7:a9:2e:c7:ab:d8:b3:71:be:8d:3e:19:dc:9d: 87:43:21:a4:88:dc:0f:59:1b:de:04:60:69:54:bf:76:6a:02: 60:73:e7:e8:5c:7f:db:64:10:f4:0f:91:1b:00:a7:33:7e:5f: ca:65:a4:cb:e1:2a:2d:8f:c4:e7:06:d8:a5:8f:7a:b7:59:cd: 30:fc:51:2d:df:ae:f9:2f:82:b8:dd:fb:94:29:4e:b3:a6:a1: 3c:26:6b:41:0e:e8:87:65:92:c2:87:d1:40:2c:bd:5a:14:01: c8:ce:ab:51:f5:b6:bc:91:b1:80:1c:63:59:a0:16:a8:5f:cd: 5c:fc:de:91:bb:04:14:a8:dc:a5:58:e8:ce:c2:4a:17:ce:98: f4:e7:24:c2:bf:fb:40:b6:53:10:cf:7d:ab:bf:4d:d7:4d:70: 6e:7b:b3:40:ad:9c:57:e2:1a:1b:35:e6:f2:d7:33:04:e2:1a: 26:bd:70:17:11:af:da:47:3e:17:38:14:1a:4e:ee:5c:dc:b1: 7b:1a:19:9b:ed:65:53:6c:20:36:ea:a7:13:77:fb:36:69:87: e3:43:cb:de:60:80:35:cf:e1:d7:5f:c1:89:5d:a4:22:2f:62: 2f:ce:4f:97:c5:71:81:cb:41:3a:c8:aa:19:30:5e:4a:04:0d: 94:1e:ee:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZQtLp5z1tWBa60GqAO2Xv9C2jHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg3RDVGMDA4QjUyMDM5NUU0Mjg5MTkxMTQ0MjIwRTJD NDcyQTY2OTAeFw0yNTExMDMwNjM0MjJaFw0yNTExMDQwOTE3MjJaMDMxMTAvBgNV BAMTKDZFM0Y5NDU3Q0YyRTQ1NEM4MzgwRTcwNURDOTAyN0QzNzNDMjVCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCG8bmVa8Pje2Hk+Xqt2iJ713Up oGP9hmAISTwog9IXCrMv5m5PrVXXAIOy1RWN8fi5z4FEFEKLFtRsiVRpMC1Od9QF fp8IhHA08QxAg5vmWkaWFDw9CT2Xs+hazXVEp6NFHz9xPS0T9t0Mpf6tXH++fqGL IRhYDKYEHVvTp2rr+MyccRrzfQvkjnvRqtLP90YW5dShCCAUn7rfehUVAZEJ7S6D akW3A8YjlHJGRchr5QpkPzmhnVXXPmlaiCbb1lMZbvbdlrrXi8ScP4GQLEVXCrGL 8VjwJH5TiYjwD/PLc1nHyi7t4tqySD7Dg5mCGVkkE+JURV0X/ONjRNT/OCBdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUbj+UV88uRUyDgOcF3JAn03PCWwwwHwYDVR0j BBgwFoAUaH1fAItSA5XkKJGRFEIg4sRypmkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTdpQmZmZ3hEQnhZcWR1VkJxWFZKUFJ0aWdpRDFrbjVSd3k2RGVlRUt4 a0wvMC82ODdENUYwMDhCNTIwMzk1RTQyODkxOTExNDQyMjBFMkM0NzJBNjY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4N0Q1RjAwOEI1MjAzOTVF NDI4OTE5MTE0NDIyMEUyQzQ3MkE2NjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTdpQmZmZ3hEQnhZcWR1VkJxWFZKUFJ0aWdpRDFrbjVSd3k2RGVlRUt4a0wvMC82 ODdENUYwMDhCNTIwMzk1RTQyODkxOTExNDQyMjBFMkM0NzJBNjY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVURrlfepLser2LNxvo0+Gdydh0MhpIjcD1kb3gRgaVS/dmoCYHPn6Fx/22QQ 9A+RGwCnM35fymWky+EqLY/E5wbYpY96t1nNMPxRLd+u+S+CuN37lClOs6ahPCZr QQ7oh2WSwofRQCy9WhQByM6rUfW2vJGxgBxjWaAWqF/NXPzekbsEFKjcpVjozsJK F86Y9Ockwr/7QLZTEM99q79N101wbnuzQK2cV+IaGzXm8tczBOIaJr1wFxGv2kc+ FzgUGk7uXNyxexoZm+1lU2wgNuqnE3f7NmmH40PL3mCANc/h11/BiV2kIi9iL85P l8VxgctBOsiqGTBeSgQNlB7udw== -----END CERTIFICATE-----Generated at Tue Nov 4 00:15:26 2025 by rpki-client