$ rpki-client -vvf rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2.mft File: 0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2.mft (raw, json) Hash identifier: Hi88zznlH8EMpNQy6T95FIEOUJraFJnXu1qKqD4ZFV8= Subject key identifier: 63:FC:2F:06:C5:3C:AF:62:DB:42:08:CC:EE:FA:CC:DB:12:3A:D6:1A Authority key identifier: 0A:DD:4E:F7:2A:DF:2C:FB:B0:0E:C3:44:4E:AB:D9:79:E9:5D:F8:A2 Certificate issuer: /CN=0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2 Certificate serial: 172FDEBF00C7715FF24C19F48392ACDC762CAFD5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2.mft Manifest number: C4 Signing time: Mon 03 Nov 2025 16:53:35 +0000 Manifest this update: Mon 03 Nov 2025 16:48:35 +0000 Manifest next update: Tue 04 Nov 2025 19:35:35 +0000 Files and hashes: 1: 323830343a353061383a3a2f33322d313238203d3e20323638343032.roa (hash: LBcc4G/UoyP8aAGLuZe5tJyFFXEhu+8QmxeHPKNs1ic=) 2: 34352e3136302e31362e302f32322d3332203d3e20323638343032.roa (hash: 2U8AxXnKDtQRZI1E7ExhC+Kim7BgGctgX38CQ7DgBqE=) 3: 0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2.crl (hash: mWHvIsgz35POcOq321KKFbjQ6czSpEU8nLf7bM6iICg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2.crl rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 19:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:2f:de:bf:00:c7:71:5f:f2:4c:19:f4:83:92:ac:dc:76:2c:af:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2 Validity Not Before: Nov 3 16:48:35 2025 GMT Not After : Nov 4 19:35:35 2025 GMT Subject: CN=63FC2F06C53CAF62DB4208CCEEFACCDB123AD61A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ad:7b:aa:94:67:ff:b6:33:1d:9f:00:92:c7: 01:44:6f:a6:c7:8d:54:29:f8:a1:94:0c:43:6f:af: 5f:46:e7:b7:11:ca:53:75:25:ec:61:a9:13:cd:42: 25:c5:f3:b3:60:b6:30:cd:d4:e1:b5:21:f6:fa:3c: d5:dc:fb:0d:a0:60:0c:11:42:e5:7d:b1:d0:1b:2c: 20:4e:f8:d8:b8:6e:2e:d3:62:fb:a4:2a:28:a8:5a: 8a:92:f4:bd:89:11:60:54:e6:ab:6f:ac:0c:17:8e: 7c:8f:1f:dc:94:a8:61:4a:59:3e:3b:84:e6:ca:2e: b3:03:74:1c:40:55:90:0c:e3:24:49:2d:dc:b8:02: 2c:1d:74:10:6d:af:65:cf:75:e6:e2:0e:4e:0e:c4: 12:bb:e4:2e:49:24:95:42:dc:b4:ea:e5:c9:f6:24: 77:91:1d:df:e1:22:ee:70:cf:8e:6a:4a:15:39:5f: dc:36:fc:e3:b4:56:80:cf:b4:8a:54:30:4b:d0:b4: 2f:1a:6b:66:e4:ae:17:07:29:d5:78:21:c6:98:af: ca:6b:08:8a:e0:1f:14:17:95:5a:86:1a:79:e8:8a: a5:a4:32:9b:e0:c0:ea:6d:cc:6c:5e:51:bc:48:dc: 0f:13:2a:8e:1f:9e:ee:de:fc:17:71:81:46:c5:3a: d5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FC:2F:06:C5:3C:AF:62:DB:42:08:CC:EE:FA:CC:DB:12:3A:D6:1A X509v3 Authority Key Identifier: keyid:0A:DD:4E:F7:2A:DF:2C:FB:B0:0E:C3:44:4E:AB:D9:79:E9:5D:F8:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/0ADD4EF72ADF2CFBB00EC3444EABD979E95DF8A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:f4:cc:7d:a8:8c:38:e7:8a:1c:ec:96:d9:40:66:7f:41:90: 1e:1e:b1:55:09:8e:2e:e8:e0:e9:3e:e4:e2:69:b2:06:fc:20: 70:c6:c1:05:5c:56:d2:30:2e:a0:1f:dd:ca:92:29:6b:a0:32: 6e:c5:42:b3:f0:31:2e:b0:20:34:ff:29:a3:c9:e2:d3:ca:2e: 84:78:db:05:1c:66:42:cf:c6:d4:45:10:a8:a0:2d:e1:11:fb: 61:09:eb:23:78:82:b4:ff:c2:7c:9b:a7:1e:21:2b:bd:86:a5: e9:cc:c8:99:0c:52:18:0a:b7:73:d8:91:33:72:27:b5:3b:03: 00:63:07:0f:2e:f0:0f:c5:34:d3:e6:40:44:97:42:6d:0e:cf: 07:7d:fd:79:71:7d:2e:89:e1:6c:c8:11:d0:9d:08:db:c4:f8: b2:ce:46:74:1b:aa:d9:74:3f:c1:9d:f7:65:42:23:2f:9d:b3: a9:29:53:d1:72:54:44:f0:50:55:5c:4f:89:4d:e5:e5:38:89: 92:ec:e8:f4:1f:2f:02:ed:f1:2d:c6:34:02:7b:c9:e9:fe:0c: a4:3e:73:63:17:9e:ce:f1:0f:83:74:71:60:c6:2e:07:f1:9f: 3e:4b:6d:5f:e6:a0:4b:7a:46:35:8f:d2:1f:49:db:39:0b:d9: 38:d6:be:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFy/evwDHcV/yTBn0g5Ks3HYsr9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFERDRFRjcyQURGMkNGQkIwMEVDMzQ0NEVBQkQ5NzlF OTVERjhBMjAeFw0yNTExMDMxNjQ4MzVaFw0yNTExMDQxOTM1MzVaMDMxMTAvBgNV BAMTKDYzRkMyRjA2QzUzQ0FGNjJEQjQyMDhDQ0VFRkFDQ0RCMTIzQUQ2MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZrXuqlGf/tjMdnwCSxwFEb6bH jVQp+KGUDENvr19G57cRylN1JexhqRPNQiXF87NgtjDN1OG1Ifb6PNXc+w2gYAwR QuV9sdAbLCBO+Ni4bi7TYvukKiioWoqS9L2JEWBU5qtvrAwXjnyPH9yUqGFKWT47 hObKLrMDdBxAVZAM4yRJLdy4AiwddBBtr2XPdebiDk4OxBK75C5JJJVC3LTq5cn2 JHeRHd/hIu5wz45qShU5X9w2/OO0VoDPtIpUMEvQtC8aa2bkrhcHKdV4IcaYr8pr CIrgHxQXlVqGGnnoiqWkMpvgwOptzGxeUbxI3A8TKo4fnu7e/BdxgUbFOtWJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUY/wvBsU8r2LbQgjM7vrM2xI61howHwYDVR0j BBgwFoAUCt1O9yrfLPuwDsNETqvZeeld+KIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXZoUVp6ZlY4S1NySFR5S1BLM3c5VWJzRHF3Tkp6MUZFazlHcU1wQnVQ WDcvMC8wQURENEVGNzJBREYyQ0ZCQjAwRUMzNDQ0RUFCRDk3OUU5NURGOEEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBREQ0RUY3MkFERjJDRkJC MDBFQzM0NDRFQUJEOTc5RTk1REY4QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXZoUVp6ZlY4S1NySFR5S1BLM3c5VWJzRHF3Tkp6MUZFazlHcU1wQnVQWDcvMC8w QURENEVGNzJBREYyQ0ZCQjAwRUMzNDQ0RUFCRDk3OUU5NURGOEEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR/TMfaiMOOeKHOyW2UBmf0GQHh6xVQmOLujg6T7k4mmyBvwgcMbBBVxW0jAu oB/dypIpa6AybsVCs/AxLrAgNP8po8ni08ouhHjbBRxmQs/G1EUQqKAt4RH7YQnr I3iCtP/CfJunHiErvYal6czImQxSGAq3c9iRM3IntTsDAGMHDy7wD8U00+ZARJdC bQ7PB339eXF9LonhbMgR0J0I28T4ss5GdBuq2XQ/wZ33ZUIjL52zqSlT0XJURPBQ VVxPiU3l5TiJkuzo9B8vAu3xLcY0AnvJ6f4MpD5zYxeezvEPg3RxYMYuB/GfPktt X+agS3pGNY/SH0nbOQvZONa+Ww== -----END CERTIFICATE-----Generated at Mon Nov 3 19:39:43 2025 by rpki-client