$ rpki-client -vvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.mft File: A601CC15A099E546A3DCBD53AF497300DAA65598.mft (raw, json) Hash identifier: PfPg9w8D4IdXyKvTatOip6qCh45VM0wn5e+ROoM/R+o= Subject key identifier: 9F:93:71:A8:EA:C9:F3:8A:57:68:9A:04:C1:3E:41:F0:74:36:BE:28 Authority key identifier: A6:01:CC:15:A0:99:E5:46:A3:DC:BD:53:AF:49:73:00:DA:A6:55:98 Certificate issuer: /CN=A601CC15A099E546A3DCBD53AF497300DAA65598 Certificate serial: 20E2C0D1D5C4FFECC01AF0D2B825F6962E278541 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer Subject info access: rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.mft Manifest number: 02FF Signing time: Mon 03 Nov 2025 09:51:37 +0000 Manifest this update: Mon 03 Nov 2025 09:46:37 +0000 Manifest next update: Tue 04 Nov 2025 10:55:37 +0000 Files and hashes: 1: 3137372e33392e3132302e302f32312d3234203d3e203532373635.roa (hash: opY7h3WsRkaqXfV3NlGmTGs/HlokTSJ+NhDP3JYVlqI=) 2: A601CC15A099E546A3DCBD53AF497300DAA65598.crl (hash: iyanxE7TRSyQGFwyWCKk9h86dEYbn/DM91sYdYhUTMQ=) 3: 3137302e3233392e37322e302f32322d3234203d3e203532373635.roa (hash: YG8MK5i53pOtSjSF2swhO2zvKt0n8IMFMMP94C9iVgU=) 4: 323830343a6235343a3a2f33322d3438203d3e203532373635.roa (hash: 38mXIeA6gDD6kINv9tTGlOrmKBcV1t+K9YLKIquI5ew=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.crl rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 10:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e2:c0:d1:d5:c4:ff:ec:c0:1a:f0:d2:b8:25:f6:96:2e:27:85:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A601CC15A099E546A3DCBD53AF497300DAA65598 Validity Not Before: Nov 3 09:46:37 2025 GMT Not After : Nov 4 10:55:37 2025 GMT Subject: CN=9F9371A8EAC9F38A57689A04C13E41F07436BE28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:25:b6:8d:db:98:38:3c:dd:21:7a:8d:5f:f7: 9b:80:27:85:83:88:3e:8f:21:24:b6:30:6a:81:65: 03:cd:c9:fb:c7:d9:4c:77:b6:89:e7:8f:45:93:8e: 47:0c:f8:07:6a:49:e4:7b:0c:d5:c2:14:5f:bb:fe: d9:3d:14:83:1f:20:0b:d9:45:0a:78:ad:65:68:cf: a4:6a:f9:6d:33:5a:a9:a0:47:a3:d8:44:b2:bc:98: 8e:04:c1:c1:9b:e4:2a:8f:9f:64:73:94:33:45:9e: 15:cf:8d:5f:3f:79:7f:90:18:5c:23:51:ac:ab:ee: d5:63:fb:82:20:ff:31:b5:f7:ba:a9:40:88:ca:2d: 75:ed:e2:c7:65:62:79:ec:98:4c:55:2b:69:1a:7c: 07:8d:24:07:f7:65:17:37:a5:6f:27:7f:78:80:7f: 78:44:20:e6:6e:1b:05:cd:b1:a5:58:dc:66:13:38: 17:27:e7:77:48:6f:d8:62:6d:6e:7b:7a:2e:fa:52: 6e:72:a2:36:a2:60:56:78:42:19:0c:d5:9c:72:8f: 57:ec:89:26:49:d1:08:1d:fc:7f:02:cb:ee:23:d6: d0:b2:56:b8:7b:d3:7e:46:86:cf:37:d2:11:e5:78: b5:c4:f6:bb:a2:91:0a:96:15:2d:32:f0:d2:e3:78: 24:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:93:71:A8:EA:C9:F3:8A:57:68:9A:04:C1:3E:41:F0:74:36:BE:28 X509v3 Authority Key Identifier: keyid:A6:01:CC:15:A0:99:E5:46:A3:DC:BD:53:AF:49:73:00:DA:A6:55:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ff:3d:e8:d1:4b:e4:e2:c5:f2:8a:a2:01:73:cf:d4:aa:9e: 83:07:0f:42:33:c4:e9:66:b8:bb:0d:5d:08:b6:24:60:99:c8: d0:8f:a4:36:db:93:14:1f:b0:a4:05:b9:0b:95:ed:27:c0:d5: dd:70:76:08:36:a9:4b:59:37:20:b8:7b:43:24:8d:76:5b:d8: 18:52:7d:38:37:19:b1:ec:7e:a7:33:ba:6e:2e:68:ad:93:df: 66:ec:7c:9f:17:60:1a:8f:c1:c0:76:81:94:d3:02:9d:14:c3: 50:db:11:0e:77:07:e5:db:31:f7:91:29:49:34:27:43:5a:34: 87:ad:17:c0:6c:2d:9f:1f:ff:c3:9e:eb:e3:48:d8:b4:76:06: ce:02:ef:0a:82:94:90:bc:db:a9:d1:a1:77:c3:a1:23:f1:12: a4:15:66:e5:fe:e4:d3:9f:f4:c5:99:57:64:8a:11:38:f6:84: 43:cd:a8:33:29:58:a7:65:5d:e6:bd:67:0d:84:14:ce:90:2a: 54:50:eb:6b:4b:27:26:d5:8c:00:46:2e:44:42:28:00:fc:c5: cc:94:7e:63:c8:58:9f:38:dc:1f:38:9e:2a:df:8b:ca:0a:8b: d1:5d:5e:e6:e5:6b:3c:2b:72:3a:20:d7:4e:9a:b6:9c:82:9d: f7:6e:5e:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIOLA0dXE/+zAGvDSuCX2li4nhUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwMUNDMTVBMDk5RTU0NkEzRENCRDUzQUY0OTczMDBE QUE2NTU5ODAeFw0yNTExMDMwOTQ2MzdaFw0yNTExMDQxMDU1MzdaMDMxMTAvBgNV BAMTKDlGOTM3MUE4RUFDOUYzOEE1NzY4OUEwNEMxM0U0MUYwNzQzNkJFMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwJbaN25g4PN0heo1f95uAJ4WD iD6PISS2MGqBZQPNyfvH2Ux3tonnj0WTjkcM+AdqSeR7DNXCFF+7/tk9FIMfIAvZ RQp4rWVoz6Rq+W0zWqmgR6PYRLK8mI4EwcGb5CqPn2RzlDNFnhXPjV8/eX+QGFwj Uayr7tVj+4Ig/zG197qpQIjKLXXt4sdlYnnsmExVK2kafAeNJAf3ZRc3pW8nf3iA f3hEIOZuGwXNsaVY3GYTOBcn53dIb9hibW57ei76Um5yojaiYFZ4QhkM1Zxyj1fs iSZJ0Qgd/H8Cy+4j1tCyVrh7035Ghs830hHleLXE9ruikQqWFS0y8NLjeCSjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUn5NxqOrJ84pXaJoEwT5B8HQ2vigwHwYDVR0j BBgwFoAUpgHMFaCZ5Uaj3L1Tr0lzANqmVZgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlJobXg3WWV1U1hOdjJITjNoOG4yYmFxM2l6bXlNOWZKSGhjeFNWVmFl U1kvMS9BNjAxQ0MxNUEwOTlFNTQ2QTNEQ0JENTNBRjQ5NzMwMERBQTY1NTk4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MDFDQzE1QTA5OUU1NDZB M0RDQkQ1M0FGNDk3MzAwREFBNjU1OTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QlJobXg3WWV1U1hOdjJITjNoOG4yYmFxM2l6bXlNOWZKSGhjeFNWVmFlU1kvMS9B NjAxQ0MxNUEwOTlFNTQ2QTNEQ0JENTNBRjQ5NzMwMERBQTY1NTk4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmv896NFL5OLF8oqiAXPP1KqegwcPQjPE6Wa4uw1dCLYkYJnI0I+kNtuTFB+w pAW5C5XtJ8DV3XB2CDapS1k3ILh7QySNdlvYGFJ9ODcZsex+pzO6bi5orZPfZux8 nxdgGo/BwHaBlNMCnRTDUNsRDncH5dsx95EpSTQnQ1o0h60XwGwtnx//w57r40jY tHYGzgLvCoKUkLzbqdGhd8OhI/ESpBVm5f7k05/0xZlXZIoROPaEQ82oMylYp2Vd 5r1nDYQUzpAqVFDra0snJtWMAEYuREIoAPzFzJR+Y8hYnzjcHzieKt+LygqL0V1e 5uVrPCtyOiDXTpq2nIKd925epw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:40:13 2025 by rpki-client