$ rpki-client -vvf rpki-repo.registro.br/repo/AbHZpUwojeTa2KMUcz8N8ukRKkpeiVegJNmKzTSqcAra/0/603EA2C2136D2EB2EB32BEEC7D15647AD29324A7.mft File: 603EA2C2136D2EB2EB32BEEC7D15647AD29324A7.mft (raw, json) Hash identifier: DCOGIdWa21ioPzN2ryn84JJTzBfMm2Z6RtP2tCyYDYA= Subject key identifier: 2C:AB:56:FA:CF:1D:89:46:AA:F1:68:8F:54:14:15:3E:29:E2:D2:72 Authority key identifier: 60:3E:A2:C2:13:6D:2E:B2:EB:32:BE:EC:7D:15:64:7A:D2:93:24:A7 Certificate issuer: /CN=603EA2C2136D2EB2EB32BEEC7D15647AD29324A7 Certificate serial: 600589A3F2AD37753B5DE226152697F71CB58319 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/603EA2C2136D2EB2EB32BEEC7D15647AD29324A7.cer Subject info access: rsync://rpki-repo.registro.br/repo/AbHZpUwojeTa2KMUcz8N8ukRKkpeiVegJNmKzTSqcAra/0/603EA2C2136D2EB2EB32BEEC7D15647AD29324A7.mft Manifest number: 16 Signing time: Mon 03 Nov 2025 04:26:05 +0000 Manifest this update: Mon 03 Nov 2025 04:21:05 +0000 Manifest next update: Tue 04 Nov 2025 04:31:05 +0000 Files and hashes: 1: 603EA2C2136D2EB2EB32BEEC7D15647AD29324A7.crl (hash: +DRkJH9jBxqGZ8cYHnJosntRMqWgmL6SExWHT+FtQyA=) 2: 34352e3138382e34342e302f32322d3332203d3e20323639353331.roa (hash: NYVujtKgI3N9jR78N1eDEl3Wy8AegE+dbKw2OUdQ6CU=) 3: 323830343a363631303a3a2f33322d313238203d3e20323639353331.roa (hash: 9zlnMDHFWOHlvdtPPxPPY5HR/JwtsCGOJ8/AsCE7Hm8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AbHZpUwojeTa2KMUcz8N8ukRKkpeiVegJNmKzTSqcAra/0/603EA2C2136D2EB2EB32BEEC7D15647AD29324A7.crl rsync://rpki-repo.registro.br/repo/AbHZpUwojeTa2KMUcz8N8ukRKkpeiVegJNmKzTSqcAra/0/603EA2C2136D2EB2EB32BEEC7D15647AD29324A7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/603EA2C2136D2EB2EB32BEEC7D15647AD29324A7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 04:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:05:89:a3:f2:ad:37:75:3b:5d:e2:26:15:26:97:f7:1c:b5:83:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=603EA2C2136D2EB2EB32BEEC7D15647AD29324A7 Validity Not Before: Nov 3 04:21:05 2025 GMT Not After : Nov 4 04:31:05 2025 GMT Subject: CN=2CAB56FACF1D8946AAF1688F5414153E29E2D272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:a8:75:a2:13:a8:65:22:ac:98:eb:e4:32: e0:54:ba:97:4b:87:ff:82:67:e2:5e:fe:16:99:85: 4a:a5:68:13:c2:89:07:c1:4c:ba:71:a2:77:58:84: c3:70:f1:ea:d8:87:ef:16:ea:12:13:ef:b5:eb:2c: f8:25:d0:a5:20:55:3a:99:f0:70:7d:7d:89:d6:ab: 7c:97:5a:70:88:64:b9:90:bc:55:64:a2:6d:b5:7b: 2e:da:1c:ab:c2:9c:47:7f:ca:35:0c:db:e4:64:dc: 58:bf:cb:7b:94:16:d4:5f:98:aa:8f:3a:57:0e:7b: ba:f0:9e:c0:8d:67:87:c1:96:f4:26:48:ee:ec:af: df:27:15:52:85:b7:11:8d:b5:ae:16:a0:19:d5:5e: 9b:06:00:7d:59:73:b7:62:10:0b:77:2a:fe:03:0d: 4b:7c:bb:91:be:b0:ee:d4:fb:da:8b:c4:b8:a7:7d: 34:77:89:66:3b:bf:9e:02:64:a2:80:8b:ce:5e:ba: b1:f9:4d:af:41:e3:0b:1b:a8:3c:dd:e7:73:57:fe: ac:28:d7:2a:bb:af:92:57:60:98:4e:9d:91:1a:df: 2c:f9:c5:31:a0:ea:7b:6d:8a:8f:a6:56:5f:49:63: c5:a1:64:e6:90:43:f8:8f:88:84:db:d7:44:71:ec: fb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AB:56:FA:CF:1D:89:46:AA:F1:68:8F:54:14:15:3E:29:E2:D2:72 X509v3 Authority Key Identifier: keyid:60:3E:A2:C2:13:6D:2E:B2:EB:32:BE:EC:7D:15:64:7A:D2:93:24:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AbHZpUwojeTa2KMUcz8N8ukRKkpeiVegJNmKzTSqcAra/0/603EA2C2136D2EB2EB32BEEC7D15647AD29324A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/603EA2C2136D2EB2EB32BEEC7D15647AD29324A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AbHZpUwojeTa2KMUcz8N8ukRKkpeiVegJNmKzTSqcAra/0/603EA2C2136D2EB2EB32BEEC7D15647AD29324A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1f:b3:01:8c:d4:38:71:3d:f6:2c:e2:b1:aa:3f:60:31:ec: 33:2b:c5:92:9f:df:cd:5a:d2:6f:35:be:92:55:91:df:a3:ec: 6b:62:9c:25:de:09:4e:82:47:f1:a4:19:1b:83:43:6b:6a:76: d4:85:35:a5:6a:b1:c6:e8:84:d0:3e:62:f8:eb:90:cc:e6:f1: e2:5d:2f:fd:d7:ca:5c:00:d7:37:a6:be:96:d7:4b:92:7f:77: 29:1b:b9:d1:aa:98:31:e6:18:39:2b:9b:1e:97:e6:8a:1d:6a: 51:31:7e:93:d6:cb:36:58:9d:ea:b3:17:ee:32:46:18:64:09: a5:3f:ed:73:1a:57:bf:f8:49:74:35:bd:f8:2c:27:0c:a2:8d: c8:5e:7d:a2:65:b6:c0:06:9e:1f:1d:db:66:e5:38:8e:83:64: 6c:59:f0:56:3f:26:d8:51:04:1a:3e:91:2b:41:bb:40:3c:f5: dc:84:58:b0:fe:c9:2a:3c:89:f2:9b:af:62:85:77:45:f2:2c: 1e:31:c9:ca:a5:6e:37:f2:42:7f:59:d2:ac:f5:bd:1f:76:4a: 3c:7f:8c:da:64:52:38:59:b3:8a:b6:a8:22:29:bc:7c:c5:76: 63:00:bb:6f:2c:0d:b2:7c:07:8e:1d:e5:34:b1:12:cd:5e:67: 2b:d5:53:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYAWJo/KtN3U7XeImFSaX9xy1gxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAzRUEyQzIxMzZEMkVCMkVCMzJCRUVDN0QxNTY0N0FE MjkzMjRBNzAeFw0yNTExMDMwNDIxMDVaFw0yNTExMDQwNDMxMDVaMDMxMTAvBgNV BAMTKDJDQUI1NkZBQ0YxRDg5NDZBQUYxNjg4RjU0MTQxNTNFMjlFMkQyNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Hqh1ohOoZSKsmOvkMuBUupdL h/+CZ+Je/haZhUqlaBPCiQfBTLpxondYhMNw8erYh+8W6hIT77XrLPgl0KUgVTqZ 8HB9fYnWq3yXWnCIZLmQvFVkom21ey7aHKvCnEd/yjUM2+Rk3Fi/y3uUFtRfmKqP OlcOe7rwnsCNZ4fBlvQmSO7sr98nFVKFtxGNta4WoBnVXpsGAH1Zc7diEAt3Kv4D DUt8u5G+sO7U+9qLxLinfTR3iWY7v54CZKKAi85eurH5Ta9B4wsbqDzd53NX/qwo 1yq7r5JXYJhOnZEa3yz5xTGg6nttio+mVl9JY8WhZOaQQ/iPiITb10Rx7PsjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULKtW+s8diUaq8WiPVBQVPini0nIwHwYDVR0j BBgwFoAUYD6iwhNtLrLrMr7sfRVketKTJKcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWJIWnBVd29qZVRhMktNVWN6OE44dWtSS2twZWlWZWdKTm1LelRTcWNB cmEvMC82MDNFQTJDMjEzNkQyRUIyRUIzMkJFRUM3RDE1NjQ3QUQyOTMyNEE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwM0VBMkMyMTM2RDJFQjJF QjMyQkVFQzdEMTU2NDdBRDI5MzI0QTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWJIWnBVd29qZVRhMktNVWN6OE44dWtSS2twZWlWZWdKTm1LelRTcWNBcmEvMC82 MDNFQTJDMjEzNkQyRUIyRUIzMkJFRUM3RDE1NjQ3QUQyOTMyNEE3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPh+zAYzUOHE99izisao/YDHsMyvFkp/fzVrSbzW+klWR36Psa2KcJd4JToJH 8aQZG4NDa2p21IU1pWqxxuiE0D5i+OuQzObx4l0v/dfKXADXN6a+ltdLkn93KRu5 0aqYMeYYOSubHpfmih1qUTF+k9bLNlid6rMX7jJGGGQJpT/tcxpXv/hJdDW9+Cwn DKKNyF59omW2wAaeHx3bZuU4joNkbFnwVj8m2FEEGj6RK0G7QDz13IRYsP7JKjyJ 8puvYoV3RfIsHjHJyqVuN/JCf1nSrPW9H3ZKPH+M2mRSOFmziraoIim8fMV2YwC7 bywNsnwHjh3lNLESzV5nK9VThg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:11:48 2025 by rpki-client