$ rpki-client -vvf rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft File: 0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft (raw, json) Hash identifier: rDZZNZTA+w6gu2TU2ZCdjBOiNQ4KK74uLIf6XygQsXg= Subject key identifier: 89:51:6C:6E:DD:18:5C:AA:B5:99:C4:92:5E:3B:D9:27:81:18:D4:27 Authority key identifier: 0B:F2:84:1F:A2:33:6A:7C:8B:D1:92:BC:93:5F:8F:3A:53:F7:F0:F9 Certificate issuer: /CN=0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9 Certificate serial: 63C6E281BCBB37AA077C2AC76B900A7680485E33 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer Subject info access: rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft Manifest number: 31 Signing time: Sun 02 Nov 2025 17:28:24 +0000 Manifest this update: Sun 02 Nov 2025 17:23:24 +0000 Manifest next update: Mon 03 Nov 2025 19:42:24 +0000 Files and hashes: 1: 323830343a383266633a3a2f33322d313238203d3e20323732313639.roa (hash: I6emds5ngPltq+zX/8WmZ4R9w3ZwGbEw6yUNHUh4RpU=) 2: 0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.crl (hash: bvX9Mc8QV9qWqctduPXG5X8BeEj0X+q84k2YsfqIQ7k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.crl rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 19:42:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c6:e2:81:bc:bb:37:aa:07:7c:2a:c7:6b:90:0a:76:80:48:5e:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9 Validity Not Before: Nov 2 17:23:24 2025 GMT Not After : Nov 3 19:42:24 2025 GMT Subject: CN=89516C6EDD185CAAB599C4925E3BD9278118D427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ec:1e:d4:9e:a9:13:cb:36:57:69:c3:83:93: 80:45:b7:de:0b:d5:3b:16:60:ea:e4:3f:4f:28:62: 97:df:1d:e6:b6:ca:01:a2:f4:cc:63:1c:0d:34:3c: dc:17:9d:3c:bf:02:89:73:99:54:59:3f:cc:59:54: 10:b5:7b:9d:d2:40:0d:0e:e9:ad:f1:f9:2e:c4:c0: f3:d4:4e:28:38:a1:f6:1e:4d:9d:a4:6a:11:b5:47: 3c:07:5b:06:cd:0e:ae:fc:9b:ac:d2:41:35:1a:06: c0:23:aa:5e:c7:fa:32:ff:98:3c:40:77:e2:3b:98: 42:1e:4d:94:6a:fe:7e:d1:17:20:01:45:3a:df:f6: 36:35:f2:27:df:4f:83:bf:4b:94:7a:20:30:06:44: 1b:8e:55:f2:6d:33:e2:09:00:f7:fe:58:72:40:72: 3a:32:e4:9b:8b:43:84:01:cc:a2:62:ef:6f:3f:c6: 97:cf:12:f7:42:2e:f4:7d:95:9b:8f:d2:ae:8c:91: 9b:15:97:53:e8:03:dc:15:b4:d8:c2:00:f9:97:af: 6c:ea:af:6c:75:b8:94:f0:11:3f:79:18:0f:51:9b: 99:57:e8:b0:69:a6:a6:b0:b9:9e:c3:7b:e1:b0:c6: f4:40:b9:3a:5e:d2:4a:14:6e:df:47:1e:a7:9f:97: 48:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:51:6C:6E:DD:18:5C:AA:B5:99:C4:92:5E:3B:D9:27:81:18:D4:27 X509v3 Authority Key Identifier: keyid:0B:F2:84:1F:A2:33:6A:7C:8B:D1:92:BC:93:5F:8F:3A:53:F7:F0:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c0:3d:a6:f9:a6:ca:62:d1:bd:41:31:04:a6:b6:f1:e5:3c: 9c:26:62:14:fa:e0:b9:99:b1:45:cc:9f:d6:19:fd:d5:0c:45: 71:07:59:f3:37:7e:ed:30:2f:20:e9:98:94:66:c3:c8:e4:32: 57:54:d8:06:1c:23:a2:c3:2e:1c:c4:f9:de:f6:5c:62:b7:b6: 08:c1:12:d7:b6:3c:ac:04:ef:61:c4:7f:1d:b7:78:b0:83:df: 88:57:97:6a:9e:e3:e9:8e:d4:f7:e0:5d:a6:2b:24:1e:a5:a0: fb:eb:ed:f6:1a:87:be:4a:9e:76:a7:2a:fc:c1:d9:4f:6f:f5: 7c:92:0d:88:5b:13:2d:4a:af:e7:55:f1:ff:46:0f:2e:6d:0e: 00:cc:11:78:f3:2e:8f:76:ac:24:cb:10:2f:dc:57:ac:6a:b8: df:cf:ad:80:51:23:f2:e2:91:13:ae:1e:e6:7f:b8:24:cd:10: 76:09:c2:a5:47:17:f8:61:7e:b6:cf:72:f3:f5:a4:ac:71:4e: bb:29:87:15:34:69:35:5f:3a:c8:4d:16:ac:63:0e:ae:6f:7c: a9:1f:16:98:d6:aa:9b:73:d1:4e:db:84:51:a3:6f:1b:01:75: 8f:36:03:be:43:0d:8c:6a:83:b1:aa:18:0e:ba:59:7c:3f:05: c0:95:1d:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUY8bigby7N6oHfCrHa5AKdoBIXjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJGMjg0MUZBMjMzNkE3QzhCRDE5MkJDOTM1RjhGM0E1 M0Y3RjBGOTAeFw0yNTExMDIxNzIzMjRaFw0yNTExMDMxOTQyMjRaMDMxMTAvBgNV BAMTKDg5NTE2QzZFREQxODVDQUFCNTk5QzQ5MjVFM0JEOTI3ODExOEQ0MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm7B7UnqkTyzZXacODk4BFt94L 1TsWYOrkP08oYpffHea2ygGi9MxjHA00PNwXnTy/AolzmVRZP8xZVBC1e53SQA0O 6a3x+S7EwPPUTig4ofYeTZ2kahG1RzwHWwbNDq78m6zSQTUaBsAjql7H+jL/mDxA d+I7mEIeTZRq/n7RFyABRTrf9jY18iffT4O/S5R6IDAGRBuOVfJtM+IJAPf+WHJA cjoy5JuLQ4QBzKJi728/xpfPEvdCLvR9lZuP0q6MkZsVl1PoA9wVtNjCAPmXr2zq r2x1uJTwET95GA9Rm5lX6LBppqawuZ7De+GwxvRAuTpe0koUbt9HHqefl0hLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiVFsbt0YXKq1mcSSXjvZJ4EY1CcwHwYDVR0j BBgwFoAUC/KEH6IzanyL0ZK8k1+POlP38PkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ25TRWE0SGhDWlFiTHM4c2d5YWF4clkyaGZFVTdQVGdkbnNlNExxblJN dVgvMC8wQkYyODQxRkEyMzM2QTdDOEJEMTkyQkM5MzVGOEYzQTUzRjdGMEY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCRjI4NDFGQTIzMzZBN0M4 QkQxOTJCQzkzNUY4RjNBNTNGN0YwRjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q25TRWE0SGhDWlFiTHM4c2d5YWF4clkyaGZFVTdQVGdkbnNlNExxblJNdVgvMC8w QkYyODQxRkEyMzM2QTdDOEJEMTkyQkM5MzVGOEYzQTUzRjdGMEY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADsA9pvmmymLRvUExBKa28eU8nCZiFPrguZmxRcyf1hn91QxFcQdZ8zd+7TAv IOmYlGbDyOQyV1TYBhwjosMuHMT53vZcYre2CMES17Y8rATvYcR/Hbd4sIPfiFeX ap7j6Y7U9+BdpiskHqWg++vt9hqHvkqedqcq/MHZT2/1fJINiFsTLUqv51Xx/0YP Lm0OAMwRePMuj3asJMsQL9xXrGq438+tgFEj8uKRE64e5n+4JM0QdgnCpUcX+GF+ ts9y8/WkrHFOuymHFTRpNV86yE0WrGMOrm98qR8WmNaqm3PRTtuEUaNvGwF1jzYD vkMNjGqDsaoYDrpZfD8FwJUdAg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:22:44 2025 by rpki-client