$ rpki-client -vvf rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.mft File: 678744E2F008A98B388D024DEEAB7AEEF09D3883.mft (raw, json) Hash identifier: KzBy9hT2pqsHlhln3NYaukNx0HilRHYT13k2IlURS64= Subject key identifier: 29:42:15:87:42:20:EE:CD:13:2B:B1:11:3A:21:A4:C1:3B:44:03:A8 Authority key identifier: 67:87:44:E2:F0:08:A9:8B:38:8D:02:4D:EE:AB:7A:EE:F0:9D:38:83 Certificate issuer: /CN=678744E2F008A98B388D024DEEAB7AEEF09D3883 Certificate serial: 312743B8A0BD06DE5EBE13D9CDFBF19B55EF64DF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.cer Subject info access: rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.mft Manifest number: 02F3 Signing time: Mon 03 Nov 2025 21:24:41 +0000 Manifest this update: Mon 03 Nov 2025 21:19:41 +0000 Manifest next update: Tue 04 Nov 2025 21:46:41 +0000 Files and hashes: 1: 3133382e302e37322e302f32322d3332203d3e20323634353331.roa (hash: ws13/Y9PdSkwXG/EkX5KLQQynEeZGqRNpQpSgcgt8Fg=) 2: 323830343a323131343a3a2f33322d313238203d3e20323634353331.roa (hash: UPHvs93Rd+YmsT/7GMOYgrcgRQxytVueQsthJXQDUJg=) 3: 678744E2F008A98B388D024DEEAB7AEEF09D3883.crl (hash: DMEwpSBv+X46qjPdmVP2h3htYiJpgUFPbKJoK1djbQs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.crl rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:27:43:b8:a0:bd:06:de:5e:be:13:d9:cd:fb:f1:9b:55:ef:64:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=678744E2F008A98B388D024DEEAB7AEEF09D3883 Validity Not Before: Nov 3 21:19:41 2025 GMT Not After : Nov 4 21:46:41 2025 GMT Subject: CN=294215874220EECD132BB1113A21A4C13B4403A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fa:ac:3c:ed:63:94:7a:67:6b:06:7d:19:e7: b6:94:65:e4:d5:44:0a:a2:10:11:3d:b3:71:ed:33: 99:1b:4f:7f:88:b5:b6:b4:26:62:9a:c3:f4:71:c8: dd:a1:f6:af:94:2e:f5:6f:3e:72:b7:f7:cd:52:de: 48:bd:8a:b0:e3:d4:56:4b:32:d6:cb:03:c2:81:f3: 5e:8b:46:61:e4:ef:0e:54:4d:97:69:c1:2c:7b:ea: 38:fb:97:a0:d2:32:42:90:d9:6b:28:3d:f2:f6:a3: 12:52:0b:57:62:38:06:43:b8:bc:0c:1f:c4:c8:de: 84:9b:c9:ae:9d:be:61:07:f4:49:7b:a3:80:45:a9: 17:7c:ac:81:40:bf:81:05:89:19:17:2b:85:a3:c4: b9:0d:e6:35:3c:a9:b7:f9:2f:4c:7d:33:b4:12:b9: 76:6b:d4:1d:cb:e4:80:7f:c5:71:24:22:66:36:04: a8:00:ac:c5:40:77:22:03:6a:62:cb:78:8c:b2:23: 5d:11:01:05:73:d4:22:17:e3:db:fc:93:db:11:8c: da:d3:b9:16:ca:bc:5c:7a:91:dc:58:21:97:10:4a: db:02:20:00:f2:e6:a7:53:1f:8b:27:08:6e:d9:84: bc:85:3f:cb:e6:1a:18:5f:9c:79:aa:d1:b0:63:07: fa:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:42:15:87:42:20:EE:CD:13:2B:B1:11:3A:21:A4:C1:3B:44:03:A8 X509v3 Authority Key Identifier: keyid:67:87:44:E2:F0:08:A9:8B:38:8D:02:4D:EE:AB:7A:EE:F0:9D:38:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ef:ee:78:b6:d7:51:1f:fc:71:8f:7c:ef:a9:73:78:1b:5f: 21:48:d7:23:2e:ea:ff:90:fd:82:0d:f8:b1:36:e9:7b:91:d9: c5:9e:65:97:af:b2:58:78:3b:28:06:76:76:8a:57:4b:8c:8b: 19:aa:bf:ec:41:af:d5:e6:9c:63:43:e6:82:c2:2d:9c:b0:5a: 3f:3b:26:cd:61:af:02:aa:50:4a:2e:c7:59:de:7b:22:59:f1: de:e4:ce:9c:63:7d:1a:df:18:a6:6f:60:4d:b1:f1:5d:fc:f5: 6e:09:52:1a:ab:36:ca:7c:8e:f4:a4:a8:ba:b8:be:20:68:f2: 07:df:95:75:72:fd:8e:12:e8:21:b9:58:d5:84:ed:34:65:69: 91:18:9c:a7:63:3b:95:5c:82:3a:d6:32:54:3e:e7:11:9b:61: 66:45:fb:a9:33:cb:08:b7:de:47:55:c2:6f:5c:21:73:6a:1b: 06:26:ff:da:f1:d9:50:95:ec:08:09:b3:9d:ba:19:c9:de:51: 47:35:a0:96:0a:97:31:43:f9:1d:06:b4:6a:33:75:a6:c5:16: aa:a7:59:d6:58:8b:ef:1a:da:79:6a:1b:64:ae:96:32:87:aa: 1a:61:a3:0f:59:ac:e5:6e:0b:7e:ae:f6:84:b0:ba:25:64:63: 1a:77:a0:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMSdDuKC9Bt5evhPZzfvxm1XvZN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc4NzQ0RTJGMDA4QTk4QjM4OEQwMjRERUVBQjdBRUVG MDlEMzg4MzAeFw0yNTExMDMyMTE5NDFaFw0yNTExMDQyMTQ2NDFaMDMxMTAvBgNV BAMTKDI5NDIxNTg3NDIyMEVFQ0QxMzJCQjExMTNBMjFBNEMxM0I0NDAzQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+qw87WOUemdrBn0Z57aUZeTV RAqiEBE9s3HtM5kbT3+Itba0JmKaw/RxyN2h9q+ULvVvPnK3981S3ki9irDj1FZL MtbLA8KB816LRmHk7w5UTZdpwSx76jj7l6DSMkKQ2WsoPfL2oxJSC1diOAZDuLwM H8TI3oSbya6dvmEH9El7o4BFqRd8rIFAv4EFiRkXK4WjxLkN5jU8qbf5L0x9M7QS uXZr1B3L5IB/xXEkImY2BKgArMVAdyIDamLLeIyyI10RAQVz1CIX49v8k9sRjNrT uRbKvFx6kdxYIZcQStsCIADy5qdTH4snCG7ZhLyFP8vmGhhfnHmq0bBjB/pxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKUIVh0Ig7s0TK7EROiGkwTtEA6gwHwYDVR0j BBgwFoAUZ4dE4vAIqYs4jQJN7qt67vCdOIMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmJRRkpzZGloWFBKN3RveWNZNnZUY0hVZVJ5VFFyS3hSNldxcGRLZ3Z3 NkgvMS82Nzg3NDRFMkYwMDhBOThCMzg4RDAyNERFRUFCN0FFRUYwOUQzODgzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3ODc0NEUyRjAwOEE5OEIz ODhEMDI0REVFQUI3QUVFRjA5RDM4ODMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmJRRkpzZGloWFBKN3RveWNZNnZUY0hVZVJ5VFFyS3hSNldxcGRLZ3Z3NkgvMS82 Nzg3NDRFMkYwMDhBOThCMzg4RDAyNERFRUFCN0FFRUYwOUQzODgzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU+/ueLbXUR/8cY9876lzeBtfIUjXIy7q/5D9gg34sTbpe5HZxZ5ll6+yWHg7 KAZ2dopXS4yLGaq/7EGv1eacY0PmgsItnLBaPzsmzWGvAqpQSi7HWd57Ilnx3uTO nGN9Gt8Ypm9gTbHxXfz1bglSGqs2ynyO9KSouri+IGjyB9+VdXL9jhLoIblY1YTt NGVpkRicp2M7lVyCOtYyVD7nEZthZkX7qTPLCLfeR1XCb1whc2obBib/2vHZUJXs CAmznboZyd5RRzWglgqXMUP5HQa0ajN1psUWqqdZ1liL7xraeWobZK6WMoeqGmGj D1ms5W4Lfq72hLC6JWRjGneg2Q== -----END CERTIFICATE-----Generated at Tue Nov 4 00:13:41 2025 by rpki-client