$ rpki-client -vvf rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.mft File: 97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.mft (raw, json) Hash identifier: lbzh9clVDyoQzKe/ARhZO9lCMrc458K8jQgejXSNl9A= Subject key identifier: 4B:15:8F:8E:A0:CC:13:00:98:CB:7F:AB:9A:6B:31:3A:D1:4B:A1:13 Authority key identifier: 97:CC:C2:E8:ED:2C:45:CB:A6:D5:90:F1:1C:C3:B7:82:E1:FD:C9:58 Certificate issuer: /CN=97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958 Certificate serial: 3C42D655D99EB861DEA565014DFD41693793EBC0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.cer Subject info access: rsync://rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.mft Manifest number: 87 Signing time: Sun 02 Nov 2025 22:35:17 +0000 Manifest this update: Sun 02 Nov 2025 22:30:17 +0000 Manifest next update: Tue 04 Nov 2025 01:53:17 +0000 Files and hashes: 1: 97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.crl (hash: dlBd610TwGEIwnUErbDcmiAHPSMoQW1O0P68rWeK8Io=) 2: 323830343a393462383a3a2f33322d3438203d3e20323734343736.roa (hash: nxxaSm6ijnAlHiDlW+pF2qez4T+Ed89O37FeulJZ94w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.crl rsync://rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 01:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:42:d6:55:d9:9e:b8:61:de:a5:65:01:4d:fd:41:69:37:93:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958 Validity Not Before: Nov 2 22:30:17 2025 GMT Not After : Nov 4 01:53:17 2025 GMT Subject: CN=4B158F8EA0CC130098CB7FAB9A6B313AD14BA113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a5:de:81:5c:df:4c:f9:d5:fd:f7:bc:be:25: 32:7e:67:39:80:45:81:d7:ba:15:d9:5c:78:71:d3: c5:ba:33:75:d7:bf:29:38:46:a1:61:02:2a:b2:ae: 61:70:da:40:5d:24:7b:29:75:0e:96:12:b4:63:37: 06:04:44:ee:7d:00:1e:89:b3:51:ac:a7:4a:5a:dc: ee:ed:69:89:49:1e:6c:92:0f:43:f2:c2:b6:97:d3: 9b:5b:8b:97:e1:c3:7f:b5:92:b0:cc:4f:da:2c:6d: cb:86:77:3d:1e:dc:47:1d:a3:53:45:93:a2:db:5d: 29:d7:c7:b7:8d:34:f5:46:36:fe:cd:fa:8e:70:3b: bd:e4:2b:b1:94:ef:c5:9c:b0:db:03:6a:ce:4f:e0: 91:05:5b:b6:35:72:4f:a0:21:13:f1:e3:1e:df:33: 1c:58:ae:f9:0d:f7:85:8a:ce:ef:13:1f:8f:f4:ee: 60:7f:e9:0a:b9:6b:44:86:45:69:46:b3:d5:ad:4e: c6:0c:2c:64:73:91:8e:1b:08:89:d0:31:d6:6e:65: 5f:3f:b8:74:6f:b9:3e:6b:2a:cf:00:5e:83:8a:4c: 02:b1:dd:7a:8c:f3:e9:b8:5a:77:0f:3a:32:3e:fb: 36:b7:f6:e2:c6:92:3e:d3:21:76:10:e7:aa:e6:9c: bf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:15:8F:8E:A0:CC:13:00:98:CB:7F:AB:9A:6B:31:3A:D1:4B:A1:13 X509v3 Authority Key Identifier: keyid:97:CC:C2:E8:ED:2C:45:CB:A6:D5:90:F1:1C:C3:B7:82:E1:FD:C9:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/B35vaNdXR1B1g38rBUfef9SvXKbTM2CEkkZqMnYaz4zh/0/97CCC2E8ED2C45CBA6D590F11CC3B782E1FDC958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d1:8e:23:2d:aa:a3:af:bc:fd:cb:c7:b1:59:cf:89:61:97: 66:6d:b5:fa:7c:db:1d:df:75:02:e4:05:24:85:68:83:95:e3: ea:30:36:9c:d3:07:f1:2b:c2:59:fa:82:51:9c:05:80:4e:52: f9:0b:08:a4:6e:88:dc:19:31:8e:a8:82:d7:c1:c0:b2:66:a9: 6e:4c:00:6c:b7:34:3e:5f:bf:84:16:0e:a1:b7:4f:f5:11:ea: f8:21:e6:be:a8:72:83:95:ae:a6:01:18:ab:50:02:48:1a:a0: af:07:30:17:f5:bd:e5:30:37:59:8a:f1:70:45:39:bf:c1:57: 12:c7:53:83:53:1d:ac:e4:f8:09:b6:69:73:85:cc:74:2a:c9: 51:99:2b:4b:c5:41:6b:99:a9:7f:77:86:ce:51:9e:27:63:9d: 59:c1:9a:cc:e9:21:cf:4f:4d:d0:1c:92:05:15:b2:01:09:7f: c6:78:b9:b2:9c:36:b6:6b:ff:55:85:3c:a0:b2:5c:f1:c8:11: d4:43:5c:df:50:d8:4d:eb:09:95:67:6f:33:8e:21:64:96:b8: eb:4c:6a:25:24:3c:c7:58:47:53:7a:87:b5:c1:b0:4d:79:a4: 33:d4:52:c2:17:b2:14:fe:50:b5:96:bf:59:6c:7b:44:b3:27: 0d:57:82:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPELWVdmeuGHepWUBTf1BaTeT68AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdDQ0MyRThFRDJDNDVDQkE2RDU5MEYxMUNDM0I3ODJF MUZEQzk1ODAeFw0yNTExMDIyMjMwMTdaFw0yNTExMDQwMTUzMTdaMDMxMTAvBgNV BAMTKDRCMTU4RjhFQTBDQzEzMDA5OENCN0ZBQjlBNkIzMTNBRDE0QkExMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWpd6BXN9M+dX997y+JTJ+ZzmA RYHXuhXZXHhx08W6M3XXvyk4RqFhAiqyrmFw2kBdJHspdQ6WErRjNwYERO59AB6J s1Gsp0pa3O7taYlJHmySD0PywraX05tbi5fhw3+1krDMT9osbcuGdz0e3Ecdo1NF k6LbXSnXx7eNNPVGNv7N+o5wO73kK7GU78WcsNsDas5P4JEFW7Y1ck+gIRPx4x7f MxxYrvkN94WKzu8TH4/07mB/6Qq5a0SGRWlGs9WtTsYMLGRzkY4bCInQMdZuZV8/ uHRvuT5rKs8AXoOKTAKx3XqM8+m4WncPOjI++za39uLGkj7TIXYQ56rmnL/RAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSxWPjqDMEwCYy3+rmmsxOtFLoRMwHwYDVR0j BBgwFoAUl8zC6O0sRcum1ZDxHMO3guH9yVgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQjM1dmFOZFhSMUIxZzM4ckJVZmVmOVN2WEtiVE0yQ0Vra1pxTW5ZYXo0 emgvMC85N0NDQzJFOEVEMkM0NUNCQTZENTkwRjExQ0MzQjc4MkUxRkRDOTU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3Q0NDMkU4RUQyQzQ1Q0JB NkQ1OTBGMTFDQzNCNzgyRTFGREM5NTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QjM1dmFOZFhSMUIxZzM4ckJVZmVmOVN2WEtiVE0yQ0Vra1pxTW5ZYXo0emgvMC85 N0NDQzJFOEVEMkM0NUNCQTZENTkwRjExQ0MzQjc4MkUxRkRDOTU4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHNGOIy2qo6+8/cvHsVnPiWGXZm21+nzbHd91AuQFJIVog5Xj6jA2nNMH8SvC WfqCUZwFgE5S+QsIpG6I3BkxjqiC18HAsmapbkwAbLc0Pl+/hBYOobdP9RHq+CHm vqhyg5WupgEYq1ACSBqgrwcwF/W95TA3WYrxcEU5v8FXEsdTg1MdrOT4CbZpc4XM dCrJUZkrS8VBa5mpf3eGzlGeJ2OdWcGazOkhz09N0BySBRWyAQl/xni5spw2tmv/ VYU8oLJc8cgR1ENc31DYTesJlWdvM44hZJa460xqJSQ8x1hHU3qHtcGwTXmkM9RS wheyFP5QtZa/WWx7RLMnDVeCHg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:10 2025 by rpki-client