$ rpki-client -vvf rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.mft File: 08CF424E6FE1980B284A93E6736C3E8628D381CA.mft (raw, json) Hash identifier: tISmv9kWKyV/LO+N4P36zLaZlI52tD7e7kmNM+KooNs= Subject key identifier: F1:BB:F1:35:D8:C3:A8:D5:13:AA:1A:AB:63:D4:42:5C:F4:DD:55:6F Authority key identifier: 08:CF:42:4E:6F:E1:98:0B:28:4A:93:E6:73:6C:3E:86:28:D3:81:CA Certificate issuer: /CN=08CF424E6FE1980B284A93E6736C3E8628D381CA Certificate serial: 167D12B273CD6C2ECD52C25DE184C861A57DF0DF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer Subject info access: rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.mft Manifest number: 4C Signing time: Mon 03 Nov 2025 09:47:47 +0000 Manifest this update: Mon 03 Nov 2025 09:42:47 +0000 Manifest next update: Tue 04 Nov 2025 13:43:47 +0000 Files and hashes: 1: 3137372e39332e36342e302f32312d3234203d3e20323633313337.roa (hash: M/qY9z7KJ0sdMDhdS+zWWCVPkw7NbeXln4juApbMLok=) 2: 08CF424E6FE1980B284A93E6736C3E8628D381CA.crl (hash: m1dxMRosohDHVw6kMBF81uUg4nrU33nlr6wbJcAKzmw=) 3: 323830343a313735343a3a2f33322d3438203d3e20323633313337.roa (hash: 2pYNoB0nzMjsHVlF53HbQfxAIHIUNDTF1t94z66lpOQ=) 4: 3136382e3232382e3139362e302f32322d3234203d3e20323633313337.roa (hash: tdHzWepgJjgudC2yhCBD8JneXIfij9C0XXUgfdzTwBM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.crl rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 13:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:7d:12:b2:73:cd:6c:2e:cd:52:c2:5d:e1:84:c8:61:a5:7d:f0:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08CF424E6FE1980B284A93E6736C3E8628D381CA Validity Not Before: Nov 3 09:42:47 2025 GMT Not After : Nov 4 13:43:47 2025 GMT Subject: CN=F1BBF135D8C3A8D513AA1AAB63D4425CF4DD556F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9a:56:03:dd:9d:e9:09:e2:df:b7:46:1d:32: 2e:31:23:9c:05:8b:b4:24:42:f0:36:66:d4:9e:49: 6a:76:e0:79:d6:b9:71:95:f9:ec:33:9c:a7:93:2b: c9:75:da:a5:46:be:bf:39:36:58:85:e0:26:22:5d: 79:fd:7b:b4:78:e1:b5:5e:58:51:35:3b:fd:a7:8a: c0:c7:6f:dd:df:bc:df:32:f9:19:ad:fb:ef:c8:3a: 7e:60:52:24:45:db:e8:32:fe:03:59:f6:88:ba:aa: e2:6e:fb:fc:8d:d3:6d:2a:80:0f:e4:46:f7:e4:7c: f6:b9:40:1b:25:ab:79:e1:19:42:9e:c8:85:c1:42: 0d:da:8b:c0:de:76:38:8c:5d:b4:63:10:89:5b:10: 4b:4a:bd:98:45:70:c5:38:fa:0b:5f:fa:df:18:24: a7:85:ce:b9:b9:67:d2:8a:ad:d2:11:0c:58:28:8b: 55:83:72:d6:86:47:a8:3b:db:f8:10:04:5e:89:7e: 4c:82:4a:92:58:2e:03:1e:7b:0b:b7:5a:8e:d8:5a: 60:0c:78:99:64:68:66:aa:a5:dc:00:ab:c9:02:73: 40:29:a6:d1:dd:ee:43:40:3f:da:af:f4:dc:a5:bf: f1:8d:52:c4:c4:b7:be:e8:78:b3:25:ee:29:8a:1d: e3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BB:F1:35:D8:C3:A8:D5:13:AA:1A:AB:63:D4:42:5C:F4:DD:55:6F X509v3 Authority Key Identifier: keyid:08:CF:42:4E:6F:E1:98:0B:28:4A:93:E6:73:6C:3E:86:28:D3:81:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:a3:67:ff:ae:39:6a:0b:b3:9c:78:bf:d9:a7:73:a9:90:a6: cc:c4:cb:54:54:a2:ca:f3:75:a3:3f:87:0d:37:01:72:a6:25: 12:a0:a6:59:ab:1d:6a:50:fd:d0:fb:3c:a0:de:d6:5e:af:4a: f5:3b:25:71:de:19:0b:2c:f0:1a:8b:ea:55:f4:4c:5e:59:c4: 48:42:a3:61:43:1f:00:d7:43:18:92:f2:2c:30:33:71:be:5f: 0c:ce:86:f3:42:ca:a8:f1:4b:6f:7d:4a:32:2a:b3:09:d2:8e: 2f:14:14:19:ae:a1:9d:10:af:00:6d:b9:a7:66:2d:5e:e7:32: c8:c8:3e:49:45:d2:36:40:9f:b7:8c:6e:71:27:ea:16:d0:76: d5:89:5d:2e:86:2d:e4:26:00:43:dc:65:b1:21:84:bc:88:e7: 1b:0b:4d:e5:53:f9:6e:3e:fc:32:ae:b4:2e:1e:8f:1c:f8:f8: a5:65:0d:cb:bf:0c:ce:8f:cb:59:c6:7e:fd:30:1c:0b:37:10: b6:40:b4:57:0c:0d:7f:e9:8d:5e:57:0e:27:37:a6:08:4f:a9: 6d:34:b6:e7:85:f1:96:02:c9:c9:17:99:f4:8a:04:19:30:02: 0d:a5:4b:7e:ce:12:3b:4e:b8:c3:93:e6:9c:86:c2:56:4d:13: 2d:6c:41:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFn0SsnPNbC7NUsJd4YTIYaV98N8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhDRjQyNEU2RkUxOTgwQjI4NEE5M0U2NzM2QzNFODYy OEQzODFDQTAeFw0yNTExMDMwOTQyNDdaFw0yNTExMDQxMzQzNDdaMDMxMTAvBgNV BAMTKEYxQkJGMTM1RDhDM0E4RDUxM0FBMUFBQjYzRDQ0MjVDRjRERDU1NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSmlYD3Z3pCeLft0YdMi4xI5wF i7QkQvA2ZtSeSWp24HnWuXGV+ewznKeTK8l12qVGvr85NliF4CYiXXn9e7R44bVe WFE1O/2nisDHb93fvN8y+Rmt++/IOn5gUiRF2+gy/gNZ9oi6quJu+/yN020qgA/k RvfkfPa5QBslq3nhGUKeyIXBQg3ai8DedjiMXbRjEIlbEEtKvZhFcMU4+gtf+t8Y JKeFzrm5Z9KKrdIRDFgoi1WDctaGR6g72/gQBF6JfkyCSpJYLgMeewu3Wo7YWmAM eJlkaGaqpdwAq8kCc0ApptHd7kNAP9qv9Nylv/GNUsTEt77oeLMl7imKHeMZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8bvxNdjDqNUTqhqrY9RCXPTdVW8wHwYDVR0j BBgwFoAUCM9CTm/hmAsoSpPmc2w+hijTgcowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnByTkdncVRxZjZDcFQ2TVo5ZGVyclNkVllpYk04UlE4dExwa1NuM0xt b3MvMC8wOENGNDI0RTZGRTE5ODBCMjg0QTkzRTY3MzZDM0U4NjI4RDM4MUNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4Q0Y0MjRFNkZFMTk4MEIy ODRBOTNFNjczNkMzRTg2MjhEMzgxQ0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnByTkdncVRxZjZDcFQ2TVo5ZGVyclNkVllpYk04UlE4dExwa1NuM0xtb3MvMC8w OENGNDI0RTZGRTE5ODBCMjg0QTkzRTY3MzZDM0U4NjI4RDM4MUNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABqNn/645aguznHi/2adzqZCmzMTLVFSiyvN1oz+HDTcBcqYlEqCmWasdalD9 0Ps8oN7WXq9K9Tslcd4ZCyzwGovqVfRMXlnESEKjYUMfANdDGJLyLDAzcb5fDM6G 80LKqPFLb31KMiqzCdKOLxQUGa6hnRCvAG25p2YtXucyyMg+SUXSNkCft4xucSfq FtB21YldLoYt5CYAQ9xlsSGEvIjnGwtN5VP5bj78Mq60Lh6PHPj4pWUNy78Mzo/L WcZ+/TAcCzcQtkC0VwwNf+mNXlcOJzemCE+pbTS254XxlgLJyReZ9IoEGTACDaVL fs4SO064w5PmnIbCVk0TLWxB2g== -----END CERTIFICATE-----Generated at Tue Nov 4 00:29:26 2025 by rpki-client