$ rpki-client -vvf rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.mft File: F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.mft (raw, json) Hash identifier: 7sFYpHumcCZ4dZI64SA0pVihFxqZjdbgSln/LyD2TtM= Subject key identifier: 47:0D:B7:8B:37:73:1A:12:5F:7A:4B:FB:EE:33:71:55:9E:3B:F5:E8 Authority key identifier: F2:7F:97:DD:E3:2D:8C:91:FD:89:D5:F3:01:08:BB:0E:32:19:4A:D9 Certificate issuer: /CN=F27F97DDE32D8C91FD89D5F30108BB0E32194AD9 Certificate serial: 3B9AC7BCA899B759CEEED0206D8D89164BB94E7D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.cer Subject info access: rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.mft Manifest number: 0206 Signing time: Mon 03 Nov 2025 10:48:46 +0000 Manifest this update: Mon 03 Nov 2025 10:43:46 +0000 Manifest next update: Tue 04 Nov 2025 13:53:46 +0000 Files and hashes: 1: 34352e3138392e34342e302f32322d3332203d3e20323639353737.roa (hash: WZx5i/TW0m/ZYOZTy094vtIw4be/X8WNFuv/13kVI4w=) 2: F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.crl (hash: r/gVjbqmllT9va7daCsRPZEcmOy9VSEiDT74TXylh0w=) 3: 323830343a363662343a3a2f33322d313238203d3e20323639353737.roa (hash: Kvzrs8ZGvCTsx4wa7o8g/NIevIqAhzkXLfkOF1bJnr8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.crl rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 13:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9a:c7:bc:a8:99:b7:59:ce:ee:d0:20:6d:8d:89:16:4b:b9:4e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F27F97DDE32D8C91FD89D5F30108BB0E32194AD9 Validity Not Before: Nov 3 10:43:46 2025 GMT Not After : Nov 4 13:53:46 2025 GMT Subject: CN=470DB78B37731A125F7A4BFBEE3371559E3BF5E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:7e:1b:41:ac:21:ba:94:26:f6:24:9d:2c: 87:0b:8f:82:93:12:70:74:d7:7a:9e:e2:ea:ca:34: 59:d2:65:eb:91:d8:56:ae:c0:b8:56:e5:66:e8:94: c5:06:59:ec:81:fd:dc:b6:cc:a6:c0:60:83:aa:ee: 93:e4:13:65:0c:f7:b4:a1:1e:45:48:67:d7:f7:92: de:6d:18:80:ad:61:29:d0:c1:41:6a:80:bd:58:5f: bd:e4:97:6b:18:1b:1d:be:da:d0:11:d6:f9:e5:66: 97:07:1a:5f:c2:eb:89:3d:c8:02:9f:a9:24:3d:84: 58:48:58:c0:83:d6:ff:e4:58:05:0a:23:f2:6d:30: 72:ed:ce:12:98:d5:32:c2:12:96:e3:ce:ad:cc:fe: 74:52:08:0c:7f:80:28:82:ee:32:b9:3f:f9:6b:ae: ab:f7:c1:db:91:95:76:45:e9:92:78:19:30:29:a7: 7b:1c:67:24:5e:8c:a5:30:ba:8e:b7:d0:72:bc:62: 25:1b:d2:6d:cf:13:6f:dc:73:27:5f:7c:c4:e5:bf: 0b:c5:e4:d0:92:d1:d3:97:89:c6:fe:7a:5d:d8:c1: 75:19:f5:2d:5e:4b:ff:23:bf:3e:87:3c:37:cd:51: 0b:32:57:b5:44:5d:68:83:f2:80:f8:4b:82:af:a7: fc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0D:B7:8B:37:73:1A:12:5F:7A:4B:FB:EE:33:71:55:9E:3B:F5:E8 X509v3 Authority Key Identifier: keyid:F2:7F:97:DD:E3:2D:8C:91:FD:89:D5:F3:01:08:BB:0E:32:19:4A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/F27F97DDE32D8C91FD89D5F30108BB0E32194AD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c3:61:0d:c1:d8:68:b4:6c:97:13:51:38:42:d1:32:1c:c5: 07:36:1b:21:01:33:7e:76:f1:eb:d0:ce:31:0a:cc:16:fa:f4: 10:2a:1d:ed:64:d5:5f:6f:7a:9f:5e:2c:b6:c7:b1:9d:10:16: ab:f3:09:8f:97:86:bf:a4:61:51:6a:40:17:b0:44:ab:d0:fa: 0b:cf:1c:30:93:08:31:25:b7:74:fb:96:c4:fe:e9:71:3f:45: e6:c9:73:ab:73:6a:f9:5d:5f:e8:e0:7a:34:87:23:17:88:e5: e9:88:05:36:6c:60:ab:61:97:41:a8:20:60:37:29:2e:75:95: 9b:4a:90:20:ed:2b:53:73:fe:75:9a:e5:db:28:75:f6:45:8e: 8f:8e:a7:4b:68:f9:6d:d0:0f:17:05:94:43:17:ab:b0:d2:fe: b2:7e:df:ea:b7:23:7b:a2:7b:48:15:e4:2c:96:f9:5e:d9:d2: 04:65:1a:23:02:a3:b6:a5:12:ee:27:b1:94:a7:40:80:9c:88: c9:92:d3:58:e9:bc:0f:8a:b9:34:35:87:0e:01:7e:a3:63:ed: e5:81:8e:ba:85:1c:1f:a3:c0:8a:77:dc:70:35:51:ee:47:50: 11:3d:87:c1:17:0a:04:0a:f7:1a:80:92:5c:5c:bf:25:54:35: d9:79:ee:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO5rHvKiZt1nO7tAgbY2JFku5Tn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI3Rjk3RERFMzJEOEM5MUZEODlENUYzMDEwOEJCMEUz MjE5NEFEOTAeFw0yNTExMDMxMDQzNDZaFw0yNTExMDQxMzUzNDZaMDMxMTAvBgNV BAMTKDQ3MERCNzhCMzc3MzFBMTI1RjdBNEJGQkVFMzM3MTU1OUUzQkY1RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsH34bQawhupQm9iSdLIcLj4KT EnB013qe4urKNFnSZeuR2FauwLhW5WbolMUGWeyB/dy2zKbAYIOq7pPkE2UM97Sh HkVIZ9f3kt5tGICtYSnQwUFqgL1YX73kl2sYGx2+2tAR1vnlZpcHGl/C64k9yAKf qSQ9hFhIWMCD1v/kWAUKI/JtMHLtzhKY1TLCEpbjzq3M/nRSCAx/gCiC7jK5P/lr rqv3wduRlXZF6ZJ4GTApp3scZyRejKUwuo630HK8YiUb0m3PE2/ccydffMTlvwvF 5NCS0dOXicb+el3YwXUZ9S1eS/8jvz6HPDfNUQsyV7VEXWiD8oD4S4Kvp/yRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURw23izdzGhJfekv77jNxVZ479egwHwYDVR0j BBgwFoAU8n+X3eMtjJH9idXzAQi7DjIZStkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ01Kd2FRQ3F3TVFzcGM2NFo2bmR0aVdNdzZpZVE4cHhTeDg2dFFWWHFS c1UvMC9GMjdGOTdEREUzMkQ4QzkxRkQ4OUQ1RjMwMTA4QkIwRTMyMTk0QUQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyN0Y5N0RERTMyRDhDOTFG RDg5RDVGMzAxMDhCQjBFMzIxOTRBRDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q01Kd2FRQ3F3TVFzcGM2NFo2bmR0aVdNdzZpZVE4cHhTeDg2dFFWWHFSc1UvMC9G MjdGOTdEREUzMkQ4QzkxRkQ4OUQ1RjMwMTA4QkIwRTMyMTk0QUQ5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT8NhDcHYaLRslxNROELRMhzFBzYbIQEzfnbx69DOMQrMFvr0ECod7WTVX296 n14stsexnRAWq/MJj5eGv6RhUWpAF7BEq9D6C88cMJMIMSW3dPuWxP7pcT9F5slz q3Nq+V1f6OB6NIcjF4jl6YgFNmxgq2GXQaggYDcpLnWVm0qQIO0rU3P+dZrl2yh1 9kWOj46nS2j5bdAPFwWUQxersNL+sn7f6rcje6J7SBXkLJb5XtnSBGUaIwKjtqUS 7iexlKdAgJyIyZLTWOm8D4q5NDWHDgF+o2Pt5YGOuoUcH6PAinfccDVR7kdQET2H wRcKBAr3GoCSXFy/JVQ12XnuTw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:10:20 2025 by rpki-client