$ rpki-client -vvf rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.mft File: D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.mft (raw, json) Hash identifier: FTU6tdWqHVdVgA0V4Ay7It6UWtlQT283qsWipKgADeo= Subject key identifier: 0E:A7:60:B4:52:59:1E:2C:F8:1B:75:1A:9E:DD:7C:45:E8:0E:45:E2 Authority key identifier: D4:D7:B4:B6:F1:A1:DF:E5:DE:7C:71:D7:CA:00:0A:62:A3:3C:CF:F3 Certificate issuer: /CN=D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3 Certificate serial: 7D6BFDCFC9B4D874F67F022CD2394C1D3466A9C8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.cer Subject info access: rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.mft Manifest number: 0B Signing time: Mon 03 Nov 2025 01:04:02 +0000 Manifest this update: Mon 03 Nov 2025 00:59:02 +0000 Manifest next update: Tue 04 Nov 2025 03:52:02 +0000 Files and hashes: 1: D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.crl (hash: u0Av+G/t+/g3x85LKzt93goj5y9d8F4EvxcvpKvdE5I=) 2: 323830343a366331343a3a2f33322d313238203d3e20323730343434.roa (hash: kASh8zVYwE/Obyfpyxza9Q7wW/4pAtPYXYf8ziPeTOw=) 3: 3230302e32362e3235322e302f32322d3332203d3e20323730343434.roa (hash: MmleVkBml5/UZscO0CSe4h4eFsPXdrqauXOoF9cCo/U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.crl rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 03:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:6b:fd:cf:c9:b4:d8:74:f6:7f:02:2c:d2:39:4c:1d:34:66:a9:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3 Validity Not Before: Nov 3 00:59:02 2025 GMT Not After : Nov 4 03:52:02 2025 GMT Subject: CN=0EA760B452591E2CF81B751A9EDD7C45E80E45E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:76:49:4f:bb:6c:d2:0c:bb:25:3a:c5:45:33: 06:33:06:a0:71:b6:6f:c4:2f:92:c1:6f:56:c1:4d: b9:af:bc:fa:69:09:e1:23:cc:0b:93:d8:55:c7:ff: c9:d4:a0:78:7e:a1:50:73:41:0e:e5:4f:63:61:8c: ee:3c:d7:66:74:67:9f:cf:78:57:92:b4:4e:23:09: cd:6c:34:6c:33:df:09:c2:58:7a:bc:b1:0a:a6:ef: 2f:ea:cf:dc:a8:17:de:ea:a2:b8:d0:d1:ae:28:36: bb:4e:ff:66:33:ab:c4:29:73:d8:73:c8:60:ab:7c: 50:fb:c5:ec:ee:13:7a:06:d8:47:7b:c2:0d:08:62: 86:9f:84:e5:1e:bc:f0:30:a3:70:c2:01:7c:95:31: fc:fb:65:69:dd:33:6d:34:f1:d7:d8:7e:bc:90:2d: 5b:5f:26:9e:6b:7e:81:c1:54:c6:ca:75:a7:86:9d: 66:80:62:35:27:24:ff:a7:3d:93:e9:68:07:b3:99: e4:c9:f3:6d:fe:f1:13:53:9f:aa:93:33:4e:e4:2e: 5f:94:56:ef:e9:35:37:41:ea:7a:9f:77:f7:7f:f6: fc:93:4a:97:09:5d:d9:54:85:c7:57:2d:35:09:1b: 97:b2:15:24:d0:01:fc:44:df:f5:c9:af:8a:29:d8: 2a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A7:60:B4:52:59:1E:2C:F8:1B:75:1A:9E:DD:7C:45:E8:0E:45:E2 X509v3 Authority Key Identifier: keyid:D4:D7:B4:B6:F1:A1:DF:E5:DE:7C:71:D7:CA:00:0A:62:A3:3C:CF:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:bf:0c:a0:27:c5:7a:ae:82:8b:5a:fb:86:b0:60:97:aa:a4: a6:05:4f:d8:da:37:6b:6e:ed:97:82:40:1d:8f:af:03:33:c6: 31:95:a1:ea:b5:40:59:bf:2f:34:31:b6:b9:d7:63:82:ad:a0: a4:e9:be:37:3e:6f:28:a4:0a:36:a6:59:96:03:e8:05:17:99: e8:f0:01:ee:a8:67:5c:c1:85:67:be:ac:6e:f8:46:f4:6d:d2: 05:d1:f5:02:85:48:af:6a:e2:b7:e9:32:2c:18:ed:4c:a8:3e: 61:f2:22:f4:19:1a:08:51:14:5b:33:a8:4e:c3:d8:4f:09:7c: a1:8a:94:6e:75:d8:e0:dc:ee:03:68:f5:7b:4e:08:cb:a2:95: cc:90:93:28:e0:ca:24:1e:b0:0b:3f:54:65:81:8c:3f:1e:bf: 88:98:ca:d4:01:a2:80:6d:bb:26:c0:ff:55:51:a1:de:ff:7e: 41:0d:e6:f2:d4:16:8d:7c:1d:12:89:39:d1:9e:10:2b:85:b1: ec:df:d6:96:c6:aa:fd:c4:91:7f:d8:d7:a6:cf:ad:2b:ec:b5: 24:38:e2:1c:a0:03:a2:61:d1:d7:2a:29:b0:d9:1e:58:ef:6d: 78:16:3a:b1:c7:b9:86:d7:8b:42:92:e8:a9:cd:6f:90:99:7a: b1:f4:c2:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfWv9z8m02HT2fwIs0jlMHTRmqcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDREN0I0QjZGMUExREZFNURFN0M3MUQ3Q0EwMDBBNjJB MzNDQ0ZGMzAeFw0yNTExMDMwMDU5MDJaFw0yNTExMDQwMzUyMDJaMDMxMTAvBgNV BAMTKDBFQTc2MEI0NTI1OTFFMkNGODFCNzUxQTlFREQ3QzQ1RTgwRTQ1RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNdklPu2zSDLslOsVFMwYzBqBx tm/EL5LBb1bBTbmvvPppCeEjzAuT2FXH/8nUoHh+oVBzQQ7lT2NhjO4812Z0Z5/P eFeStE4jCc1sNGwz3wnCWHq8sQqm7y/qz9yoF97qorjQ0a4oNrtO/2Yzq8Qpc9hz yGCrfFD7xezuE3oG2Ed7wg0IYoafhOUevPAwo3DCAXyVMfz7ZWndM2008dfYfryQ LVtfJp5rfoHBVMbKdaeGnWaAYjUnJP+nPZPpaAezmeTJ823+8RNTn6qTM07kLl+U Vu/pNTdB6nqfd/d/9vyTSpcJXdlUhcdXLTUJG5eyFSTQAfxE3/XJr4op2CrvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDqdgtFJZHiz4G3Uant18RegOReIwHwYDVR0j BBgwFoAU1Ne0tvGh3+XefHHXygAKYqM8z/MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTl1d3ZmY1NxbnlKZGlTbmlhcFFxNUNxRXZ5RUJNdkRyVk1RVzN3Nm9i Mm0vMC9ENEQ3QjRCNkYxQTFERkU1REU3QzcxRDdDQTAwMEE2MkEzM0NDRkYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0RDdCNEI2RjFBMURGRTVE RTdDNzFEN0NBMDAwQTYyQTMzQ0NGRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTl1d3ZmY1NxbnlKZGlTbmlhcFFxNUNxRXZ5RUJNdkRyVk1RVzN3Nm9iMm0vMC9E NEQ3QjRCNkYxQTFERkU1REU3QzcxRDdDQTAwMEE2MkEzM0NDRkYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAb8MoCfFeq6Ci1r7hrBgl6qkpgVP2No3a27tl4JAHY+vAzPGMZWh6rVAWb8v NDG2uddjgq2gpOm+Nz5vKKQKNqZZlgPoBReZ6PAB7qhnXMGFZ76sbvhG9G3SBdH1 AoVIr2rit+kyLBjtTKg+YfIi9BkaCFEUWzOoTsPYTwl8oYqUbnXY4NzuA2j1e04I y6KVzJCTKODKJB6wCz9UZYGMPx6/iJjK1AGigG27JsD/VVGh3v9+QQ3m8tQWjXwd Eok50Z4QK4Wx7N/Wlsaq/cSRf9jXps+tK+y1JDjiHKADomHR1yopsNkeWO9teBY6 sce5hteLQpLoqc1vkJl6sfTCAQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:01:26 2025 by rpki-client