$ rpki-client -vvf rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/0C11919693AE159458997FCDCB251C3E52E0401A.mft File: 0C11919693AE159458997FCDCB251C3E52E0401A.mft (raw, json) Hash identifier: MOPlyZe1haZtNOPx4M0xzBkceCF/W2Dv8E0XtInyJbE= Subject key identifier: 02:D3:76:7B:9E:5F:8C:7E:56:C0:E3:00:D9:85:D7:AD:59:65:AF:33 Authority key identifier: 0C:11:91:96:93:AE:15:94:58:99:7F:CD:CB:25:1C:3E:52:E0:40:1A Certificate issuer: /CN=0C11919693AE159458997FCDCB251C3E52E0401A Certificate serial: 1DCE90BEA89ED67D8FA5063E6F32EA63B7B16CE2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C11919693AE159458997FCDCB251C3E52E0401A.cer Subject info access: rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/0C11919693AE159458997FCDCB251C3E52E0401A.mft Manifest number: 0A Signing time: Mon 03 Nov 2025 02:04:12 +0000 Manifest this update: Mon 03 Nov 2025 01:59:12 +0000 Manifest next update: Tue 04 Nov 2025 04:41:12 +0000 Files and hashes: 1: 3137302e38312e39322e302f32322d3332203d3e20323636333939.roa (hash: 8OvFyeYl+VIL6IHH2s7L4/mvfmEeeomnN7iAuqvfgL0=) 2: 323830343a333734303a3a2f33322d313238203d3e20323636333939.roa (hash: db0iTHx8en4eCukhqDFJWpV0R9R7hw0OeX8aPn+rKBA=) 3: 0C11919693AE159458997FCDCB251C3E52E0401A.crl (hash: Al2j9qN0BA0q0OFTOkwRSw9BIkUx8CVtlG5nou/ezDM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/0C11919693AE159458997FCDCB251C3E52E0401A.crl rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/0C11919693AE159458997FCDCB251C3E52E0401A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C11919693AE159458997FCDCB251C3E52E0401A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 04:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ce:90:be:a8:9e:d6:7d:8f:a5:06:3e:6f:32:ea:63:b7:b1:6c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C11919693AE159458997FCDCB251C3E52E0401A Validity Not Before: Nov 3 01:59:12 2025 GMT Not After : Nov 4 04:41:12 2025 GMT Subject: CN=02D3767B9E5F8C7E56C0E300D985D7AD5965AF33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:50:c1:8e:b4:8e:44:d0:c4:4e:3a:73:64:24: 4a:0c:95:80:9a:89:33:a0:a2:e7:99:5c:e0:a9:e8: 6b:3a:08:8c:af:4c:72:95:88:82:94:f2:72:25:8f: a2:65:89:87:08:a0:42:d9:97:8a:99:14:3a:0b:f4: d5:91:80:7b:ba:e2:8d:b3:d8:0d:61:72:85:9a:91: d9:45:b5:0b:4d:fa:5b:bb:90:ec:9c:96:42:dc:51: 5b:70:bc:7b:d5:2f:d6:7b:2c:24:77:ce:79:5a:e6: d9:50:b3:b8:d5:84:7c:32:b9:16:df:16:95:d9:82: 77:82:80:51:dd:bb:6d:1a:59:a0:53:dc:f3:65:27: 77:24:19:83:a3:f6:a6:bd:d2:f8:32:f4:5c:73:46: 94:1c:54:4c:08:f3:87:0e:69:30:54:2c:0a:71:17: 8d:ce:57:3f:d8:23:7e:79:03:0e:48:34:d6:f0:fc: 7b:3e:37:26:4a:48:f3:42:60:b6:ba:95:5f:ff:9d: 96:4e:c4:dc:09:54:25:69:3a:a9:98:f3:d3:0c:61: 1c:e3:b7:df:d1:34:73:13:52:ea:ac:82:db:a5:7c: c3:a4:6d:5a:ca:a8:48:41:76:9f:b4:c2:1e:37:98: 59:59:fb:62:77:d5:2b:c8:51:22:5c:ef:54:1c:32: 5b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D3:76:7B:9E:5F:8C:7E:56:C0:E3:00:D9:85:D7:AD:59:65:AF:33 X509v3 Authority Key Identifier: keyid:0C:11:91:96:93:AE:15:94:58:99:7F:CD:CB:25:1C:3E:52:E0:40:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/0C11919693AE159458997FCDCB251C3E52E0401A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C11919693AE159458997FCDCB251C3E52E0401A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/0C11919693AE159458997FCDCB251C3E52E0401A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:6f:a3:91:cd:53:95:f0:d6:c1:4a:53:d0:ff:4e:89:a1:18: 24:c7:b3:81:ae:4e:0f:5f:1c:6b:33:e0:67:74:49:c2:88:ef: 6e:39:b2:88:48:db:b7:31:95:57:dd:99:1b:a4:e0:9b:11:8d: 33:1f:31:00:9d:b9:ea:88:c5:79:be:c3:b0:68:0e:ae:f9:1d: a5:1b:1e:3b:77:7a:88:b0:c9:04:8f:f7:d0:87:21:2e:6e:9a: a6:7f:ce:47:1a:70:f5:65:60:6f:e9:48:50:a2:3b:db:11:3d: 9d:a5:dc:6f:4a:72:f2:29:6a:88:b8:39:64:1a:79:e3:9d:4b: 78:3e:96:e9:83:17:9f:1f:ff:4f:8f:d0:57:8b:4a:ee:ad:c3: 78:5a:4b:91:4c:99:98:5b:33:9c:08:f4:77:f9:5a:93:61:5a: 68:b7:1e:bb:17:49:10:74:18:8d:fc:c8:89:54:7f:36:cb:e7: d4:b9:c5:90:ba:1d:90:dd:cb:ea:68:77:5f:41:68:37:92:af: 0c:60:34:7f:28:ba:45:4e:fa:39:f6:6b:f6:7f:01:20:74:1c: 84:d9:fa:d9:10:66:22:4f:fc:0a:42:45:b6:7b:80:87:be:52: e3:eb:a7:03:cf:35:3d:e4:a3:c1:7d:aa:d5:5e:b5:9d:f9:33: 6f:0e:e1:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHc6Qvqie1n2PpQY+bzLqY7exbOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMxMTkxOTY5M0FFMTU5NDU4OTk3RkNEQ0IyNTFDM0U1 MkUwNDAxQTAeFw0yNTExMDMwMTU5MTJaFw0yNTExMDQwNDQxMTJaMDMxMTAvBgNV BAMTKDAyRDM3NjdCOUU1RjhDN0U1NkMwRTMwMEQ5ODVEN0FENTk2NUFGMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtUMGOtI5E0MROOnNkJEoMlYCa iTOgoueZXOCp6Gs6CIyvTHKViIKU8nIlj6JliYcIoELZl4qZFDoL9NWRgHu64o2z 2A1hcoWakdlFtQtN+lu7kOyclkLcUVtwvHvVL9Z7LCR3znla5tlQs7jVhHwyuRbf FpXZgneCgFHdu20aWaBT3PNlJ3ckGYOj9qa90vgy9FxzRpQcVEwI84cOaTBULApx F43OVz/YI355Aw5INNbw/Hs+NyZKSPNCYLa6lV//nZZOxNwJVCVpOqmY89MMYRzj t9/RNHMTUuqsgtulfMOkbVrKqEhBdp+0wh43mFlZ+2J31SvIUSJc71QcMltfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAtN2e55fjH5WwOMA2YXXrVllrzMwHwYDVR0j BBgwFoAUDBGRlpOuFZRYmX/NyyUcPlLgQBowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnJpUlkzUlVYQTExd1BRVWVKTlN4OFhjWGZ3WFdUQWFXSm5zSFRmclFk eHEvMC8wQzExOTE5NjkzQUUxNTk0NTg5OTdGQ0RDQjI1MUMzRTUyRTA0MDFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDMTE5MTk2OTNBRTE1OTQ1 ODk5N0ZDRENCMjUxQzNFNTJFMDQwMUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnJpUlkzUlVYQTExd1BRVWVKTlN4OFhjWGZ3WFdUQWFXSm5zSFRmclFkeHEvMC8w QzExOTE5NjkzQUUxNTk0NTg5OTdGQ0RDQjI1MUMzRTUyRTA0MDFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALm+jkc1TlfDWwUpT0P9OiaEYJMezga5OD18cazPgZ3RJwojvbjmyiEjbtzGV V92ZG6TgmxGNMx8xAJ256ojFeb7DsGgOrvkdpRseO3d6iLDJBI/30IchLm6apn/O Rxpw9WVgb+lIUKI72xE9naXcb0py8ilqiLg5ZBp5451LeD6W6YMXnx//T4/QV4tK 7q3DeFpLkUyZmFsznAj0d/lak2FaaLceuxdJEHQYjfzIiVR/Nsvn1LnFkLodkN3L 6mh3X0FoN5KvDGA0fyi6RU76OfZr9n8BIHQchNn62RBmIk/8CkJFtnuAh75S4+un A881PeSjwX2q1V61nfkzbw7hog== -----END CERTIFICATE-----Generated at Mon Nov 3 12:22:45 2025 by rpki-client