$ rpki-client -vvf rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/980C1C961523F08075AB59E8C017D8E90E5EF19B.mft File: 980C1C961523F08075AB59E8C017D8E90E5EF19B.mft (raw, json) Hash identifier: wNJbJINnzGqqcqj/XCVpe8EC4QroevVEBHpHWzflx3s= Subject key identifier: 2A:70:6D:98:14:7F:6B:1D:31:3C:F1:F1:64:3D:21:A7:D7:4D:B8:01 Authority key identifier: 98:0C:1C:96:15:23:F0:80:75:AB:59:E8:C0:17:D8:E9:0E:5E:F1:9B Certificate issuer: /CN=980C1C961523F08075AB59E8C017D8E90E5EF19B Certificate serial: 2FB8CBF2E1B1D03EE02D022B129B262A370EA87E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/980C1C961523F08075AB59E8C017D8E90E5EF19B.cer Subject info access: rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/980C1C961523F08075AB59E8C017D8E90E5EF19B.mft Manifest number: 0132 Signing time: Mon 03 Nov 2025 11:43:42 +0000 Manifest this update: Mon 03 Nov 2025 11:38:42 +0000 Manifest next update: Tue 04 Nov 2025 15:19:42 +0000 Files and hashes: 1: 34352e3233332e32382e302f32322d3332203d3e20323637323930.roa (hash: DyhID5jKvZMZErZYnIYmaQvXlPcWFKXwlHCxi8vwGro=) 2: 980C1C961523F08075AB59E8C017D8E90E5EF19B.crl (hash: grdNrlB3rios5Kb3zfi8gXDoLk6bCrlMm+Sy1tAcf84=) 3: 323830343a346233343a3a2f33322d313238203d3e20323637323930.roa (hash: hIwChKiAdKBylSixJAqhumU3GR24C7ygZdBDAW2jqZc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/980C1C961523F08075AB59E8C017D8E90E5EF19B.crl rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/980C1C961523F08075AB59E8C017D8E90E5EF19B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/980C1C961523F08075AB59E8C017D8E90E5EF19B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 15:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b8:cb:f2:e1:b1:d0:3e:e0:2d:02:2b:12:9b:26:2a:37:0e:a8:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=980C1C961523F08075AB59E8C017D8E90E5EF19B Validity Not Before: Nov 3 11:38:42 2025 GMT Not After : Nov 4 15:19:42 2025 GMT Subject: CN=2A706D98147F6B1D313CF1F1643D21A7D74DB801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:16:a1:43:ff:ef:dc:f7:46:ff:0c:c3:89:ad: 36:67:f0:fe:58:eb:95:d6:8d:54:54:11:28:92:4e: 3e:96:ab:d1:b7:8c:f5:61:e1:05:44:a5:81:8d:5a: cc:6b:e8:88:8d:c8:28:ac:31:3a:77:f9:26:2d:17: ce:78:77:8d:97:f6:a4:e6:fb:16:ed:2d:20:b1:e1: 68:bb:af:65:be:76:6e:e4:2a:2a:b5:15:5d:58:71: 2e:23:a0:d3:09:69:ac:a8:e4:56:61:03:f3:5a:65: be:47:ed:b9:63:cc:55:6f:dc:fd:68:b9:20:21:29: 0d:0b:ee:87:b0:9d:bb:50:a7:4a:0f:42:82:86:7c: 75:79:d3:d9:e8:cc:f7:ab:f4:4a:c7:e2:75:fb:45: 1a:56:99:2c:5c:00:21:13:b2:48:7b:ef:a3:e4:a0: e6:19:54:ca:d6:66:04:fe:e8:9d:26:8f:80:a9:cc: a0:41:bc:ec:f8:3a:d9:fb:69:30:27:f3:aa:74:34: 07:37:24:8e:32:24:cc:e9:bf:c0:38:31:bc:46:76: 67:a7:ca:a1:f5:a6:0d:4f:8a:24:a9:63:33:fe:26: 2d:42:48:1e:01:9f:b5:93:3b:1a:52:85:d5:76:ad: 37:c6:b7:6d:df:ad:94:00:4b:fc:71:98:9d:bb:19: ed:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:70:6D:98:14:7F:6B:1D:31:3C:F1:F1:64:3D:21:A7:D7:4D:B8:01 X509v3 Authority Key Identifier: keyid:98:0C:1C:96:15:23:F0:80:75:AB:59:E8:C0:17:D8:E9:0E:5E:F1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/980C1C961523F08075AB59E8C017D8E90E5EF19B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/980C1C961523F08075AB59E8C017D8E90E5EF19B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/980C1C961523F08075AB59E8C017D8E90E5EF19B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:46:d9:4c:0a:30:e0:95:c4:f8:be:c0:d9:26:1f:29:84:88: e7:05:4a:b4:0e:bf:5e:7f:fe:db:f3:5c:7e:8e:66:5e:77:a1: 0b:3d:00:eb:ae:33:df:bc:4d:a0:8f:a3:73:b4:c3:e0:0e:98: d3:d4:f2:12:4b:0f:bf:6c:9c:fc:40:2a:90:fa:b3:e5:23:46: ae:dd:69:09:5a:8c:6f:d4:d6:1d:56:a8:be:50:9a:1b:3f:a1: 73:58:55:9b:0d:ba:99:1c:41:dc:fa:72:6f:f7:0b:bc:0c:b5: 66:dd:b4:21:27:6e:82:f2:b1:37:01:33:b5:d5:b9:08:7e:81: 46:c2:77:b8:8f:c2:d5:69:57:27:32:27:28:ea:68:a0:ae:31: 9e:31:89:3c:0c:44:c8:f3:f7:fb:79:ab:be:8b:3b:4e:f3:22: 81:a8:e9:bf:d5:ab:92:fb:e6:b2:45:b0:94:68:06:45:af:52: 6c:93:a5:f8:58:10:3a:87:d8:a1:80:ec:5a:8a:2b:b5:78:cf: c1:3b:1e:36:4e:b1:06:93:09:1a:25:6e:2c:5e:df:8d:fd:28: 58:9a:60:4f:02:56:9f:45:7c:a9:d2:76:42:10:b5:42:d7:81: 5f:63:9c:cd:7a:d5:f6:02:0b:ca:ba:52:66:f6:38:ba:bd:fb: e7:8e:5f:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUL7jL8uGx0D7gLQIrEpsmKjcOqH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwQzFDOTYxNTIzRjA4MDc1QUI1OUU4QzAxN0Q4RTkw RTVFRjE5QjAeFw0yNTExMDMxMTM4NDJaFw0yNTExMDQxNTE5NDJaMDMxMTAvBgNV BAMTKDJBNzA2RDk4MTQ3RjZCMUQzMTNDRjFGMTY0M0QyMUE3RDc0REI4MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHFqFD/+/c90b/DMOJrTZn8P5Y 65XWjVRUESiSTj6Wq9G3jPVh4QVEpYGNWsxr6IiNyCisMTp3+SYtF854d42X9qTm +xbtLSCx4Wi7r2W+dm7kKiq1FV1YcS4joNMJaayo5FZhA/NaZb5H7bljzFVv3P1o uSAhKQ0L7oewnbtQp0oPQoKGfHV509nozPer9ErH4nX7RRpWmSxcACETskh776Pk oOYZVMrWZgT+6J0mj4CpzKBBvOz4Otn7aTAn86p0NAc3JI4yJMzpv8A4MbxGdmen yqH1pg1PiiSpYzP+Ji1CSB4Bn7WTOxpShdV2rTfGt23frZQAS/xxmJ27Ge1PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKnBtmBR/ax0xPPHxZD0hp9dNuAEwHwYDVR0j BBgwFoAUmAwclhUj8IB1q1nowBfY6Q5e8ZswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ003dEJSQU5hOWE5WktKdDJCM0RUd3hneDk2MmhGOWZ0VUp3dWtnMjlY UlkvMC85ODBDMUM5NjE1MjNGMDgwNzVBQjU5RThDMDE3RDhFOTBFNUVGMTlCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4MEMxQzk2MTUyM0YwODA3 NUFCNTlFOEMwMTdEOEU5MEU1RUYxOUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q003dEJSQU5hOWE5WktKdDJCM0RUd3hneDk2MmhGOWZ0VUp3dWtnMjlYUlkvMC85 ODBDMUM5NjE1MjNGMDgwNzVBQjU5RThDMDE3RDhFOTBFNUVGMTlCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR0bZTAow4JXE+L7A2SYfKYSI5wVKtA6/Xn/+2/Ncfo5mXnehCz0A664z37xN oI+jc7TD4A6Y09TyEksPv2yc/EAqkPqz5SNGrt1pCVqMb9TWHVaovlCaGz+hc1hV mw26mRxB3Ppyb/cLvAy1Zt20ISdugvKxNwEztdW5CH6BRsJ3uI/C1WlXJzInKOpo oK4xnjGJPAxEyPP3+3mrvos7TvMigajpv9WrkvvmskWwlGgGRa9SbJOl+FgQOofY oYDsWoortXjPwTseNk6xBpMJGiVuLF7fjf0oWJpgTwJWn0V8qdJ2QhC1QteBX2Oc zXrV9gILyrpSZvY4ur37545fkA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:25:33 2025 by rpki-client