$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft File: 84210C699884A23E38D45F40B27833D84A440F91.mft (raw, json) Hash identifier: xLCFwQI7StgLrwlI+jaIALNOFBYCsHDt/t5pCbEPXzY= Subject key identifier: DC:24:0B:35:94:76:7A:70:00:A0:58:B2:76:8A:A7:CB:06:03:BD:FD Authority key identifier: 84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91 Certificate issuer: /CN=84210C699884A23E38D45F40B27833D84A440F91 Certificate serial: 27908C8718DF0DBC984470472F0AA5CA8AB178E2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer Subject info access: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft Manifest number: 030B Signing time: Mon 03 Nov 2025 02:40:00 +0000 Manifest this update: Mon 03 Nov 2025 02:35:00 +0000 Manifest next update: Tue 04 Nov 2025 03:24:00 +0000 Files and hashes: 1: 84210C699884A23E38D45F40B27833D84A440F91.crl (hash: 7pxi7SL9KqC5afGuXPl2ZiVbGdAtaJS44fp2bjazRfM=) 2: 3133382e33362e38302e302f32322d3234203d3e20323634353731.roa (hash: W9cuh6TY+DbzNPDLc450PMX/lZENV+B6iA3ixoKigao=) 3: 323830343a323163303a3a2f33322d3332203d3e20323634353731.roa (hash: XTvtebp7oM9owviERxilfDQ7pM/0nW6KsEuwtKryh3E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 03:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:90:8c:87:18:df:0d:bc:98:44:70:47:2f:0a:a5:ca:8a:b1:78:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84210C699884A23E38D45F40B27833D84A440F91 Validity Not Before: Nov 3 02:35:00 2025 GMT Not After : Nov 4 03:24:00 2025 GMT Subject: CN=DC240B3594767A7000A058B2768AA7CB0603BDFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:63:3c:f6:6d:f0:d9:ac:dd:47:37:01:b1:ab: c8:68:6b:e1:da:61:bd:84:33:0c:04:45:99:60:86: 40:b3:e0:eb:a0:f5:11:e4:44:85:e5:86:3f:4f:31: 72:83:38:e1:87:c7:65:9a:84:ee:f3:85:61:0d:46: b3:26:f6:4c:71:ea:0f:cb:21:7a:3c:27:ad:12:60: 88:98:8f:70:98:23:e5:07:c9:fb:7c:b9:74:df:88: aa:59:07:58:c0:47:6c:34:2c:cd:29:a1:77:b0:5f: 48:83:aa:0c:6c:7b:3c:87:d8:f2:81:2d:8a:3c:4a: e6:7f:a9:79:ec:43:81:be:4a:32:9e:5f:df:3e:43: 94:7c:69:84:5d:c4:9b:c3:ca:f3:7e:a5:08:a7:de: 32:bf:e2:07:4b:87:ee:8c:5d:bb:00:09:f9:4c:ae: 52:88:7b:1e:8b:b5:ac:08:e9:45:0d:7f:b8:1f:94: 35:d5:62:a6:9c:bf:84:99:38:bb:ab:2e:9b:93:99: e9:79:7d:69:fb:da:e9:f8:d1:e9:13:d7:08:1a:0d: fc:05:9a:d7:1f:00:16:01:0d:a9:f9:99:f7:f5:42: 27:8e:90:97:08:b2:e3:c8:b1:51:af:b9:b6:b3:f3: 1d:63:c0:f6:17:12:c1:b4:5c:43:2c:12:9e:63:2c: ac:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:24:0B:35:94:76:7A:70:00:A0:58:B2:76:8A:A7:CB:06:03:BD:FD X509v3 Authority Key Identifier: keyid:84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:84:07:ea:f6:27:bc:8e:0a:32:fc:42:8d:61:34:c5:16:b0: 82:b9:f6:0f:1d:5c:9a:5f:a3:ae:94:bc:ff:a6:6f:88:6b:19: fb:ac:9c:f6:72:f3:27:d1:3d:58:f3:d7:aa:77:45:68:4f:65: eb:30:2f:ab:63:76:8c:fd:3d:83:63:74:ac:09:17:ca:d3:0a: ee:d6:93:30:d4:9f:de:ee:ab:e3:22:fc:a1:9f:6d:76:1b:c6: 97:3c:7a:12:f0:52:de:c3:82:de:91:f9:aa:fc:8c:93:95:3b: 31:29:50:64:c4:f0:1a:40:a3:d3:8c:8e:ca:4a:f7:21:3b:7a: a1:96:6c:7d:49:54:60:5e:79:f2:a5:63:f6:65:e7:a1:28:a1: cf:2a:4b:ff:f8:d5:88:f6:d6:8a:10:d1:68:91:c4:f2:fc:27: 9b:48:b7:36:58:d8:b5:03:59:16:5c:09:d2:91:50:87:35:8d: d5:f9:32:73:ff:9c:fa:fa:59:a0:75:39:6b:69:b0:46:56:cc: 8a:f6:7b:d1:1a:df:6b:fd:87:75:8d:01:d8:0c:d4:2d:8d:8c: 3b:95:fb:db:f4:b0:20:da:a5:8c:cf:eb:b9:d9:7f:58:01:94: de:f3:2f:e6:9a:a2:78:2e:eb:8f:13:73:c7:80:32:bd:db:12: d9:b9:0a:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJ5CMhxjfDbyYRHBHLwqlyoqxeOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMTBDNjk5ODg0QTIzRTM4RDQ1RjQwQjI3ODMzRDg0 QTQ0MEY5MTAeFw0yNTExMDMwMjM1MDBaFw0yNTExMDQwMzI0MDBaMDMxMTAvBgNV BAMTKERDMjQwQjM1OTQ3NjdBNzAwMEEwNThCMjc2OEFBN0NCMDYwM0JERkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxYzz2bfDZrN1HNwGxq8hoa+Ha Yb2EMwwERZlghkCz4Oug9RHkRIXlhj9PMXKDOOGHx2WahO7zhWENRrMm9kxx6g/L IXo8J60SYIiYj3CYI+UHyft8uXTfiKpZB1jAR2w0LM0poXewX0iDqgxsezyH2PKB LYo8SuZ/qXnsQ4G+SjKeX98+Q5R8aYRdxJvDyvN+pQin3jK/4gdLh+6MXbsACflM rlKIex6LtawI6UUNf7gflDXVYqacv4SZOLurLpuTmel5fWn72un40ekT1wgaDfwF mtcfABYBDan5mff1QieOkJcIsuPIsVGvubaz8x1jwPYXEsG0XEMsEp5jLKzfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3CQLNZR2enAAoFiydoqnywYDvf0wHwYDVR0j BBgwFoAUhCEMaZiEoj441F9Asngz2EpED5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1B4aE5xZzVFQWNnaFVEalU0WUJlZXNtbUthRmRxbnZFM3I1R0s1Zm55 RkYvMS84NDIxMEM2OTk4ODRBMjNFMzhENDVGNDBCMjc4MzNEODRBNDQwRjkxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0MjEwQzY5OTg4NEEyM0Uz OEQ0NUY0MEIyNzgzM0Q4NEE0NDBGOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1B4aE5xZzVFQWNnaFVEalU0WUJlZXNtbUthRmRxbnZFM3I1R0s1Zm55RkYvMS84 NDIxMEM2OTk4ODRBMjNFMzhENDVGNDBCMjc4MzNEODRBNDQwRjkxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPIQH6vYnvI4KMvxCjWE0xRawgrn2Dx1cml+jrpS8/6ZviGsZ+6yc9nLzJ9E9 WPPXqndFaE9l6zAvq2N2jP09g2N0rAkXytMK7taTMNSf3u6r4yL8oZ9tdhvGlzx6 EvBS3sOC3pH5qvyMk5U7MSlQZMTwGkCj04yOykr3ITt6oZZsfUlUYF558qVj9mXn oSihzypL//jViPbWihDRaJHE8vwnm0i3NljYtQNZFlwJ0pFQhzWN1fkyc/+c+vpZ oHU5a2mwRlbMivZ70Rrfa/2HdY0B2AzULY2MO5X72/SwINqljM/rudl/WAGU3vMv 5pqieC7rjxNzx4AyvdsS2bkK/Q== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:52 2025 by rpki-client