$ rpki-client -vvf rpki-repo.registro.br/repo/D5uCfxRSAWqx763LiMuQ38ALYPd35HEwDXzwYvrg4j2p/0/7FA9BF9F12750C277B09128D03E40ED5D7E48CEF.mft File: 7FA9BF9F12750C277B09128D03E40ED5D7E48CEF.mft (raw, json) Hash identifier: FWciXB+jybHHjh1wsN9IaPc50hSp5h9CImkQ/QRPr40= Subject key identifier: A2:C6:0A:8F:B6:A5:DE:DD:1E:CD:1F:F6:D2:29:58:59:95:0E:67:16 Authority key identifier: 7F:A9:BF:9F:12:75:0C:27:7B:09:12:8D:03:E4:0E:D5:D7:E4:8C:EF Certificate issuer: /CN=7FA9BF9F12750C277B09128D03E40ED5D7E48CEF Certificate serial: 6D1887106AEE27FF22B05D7842FE68E1496631C7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA9BF9F12750C277B09128D03E40ED5D7E48CEF.cer Subject info access: rsync://rpki-repo.registro.br/repo/D5uCfxRSAWqx763LiMuQ38ALYPd35HEwDXzwYvrg4j2p/0/7FA9BF9F12750C277B09128D03E40ED5D7E48CEF.mft Manifest number: 32 Signing time: Mon 03 Nov 2025 06:33:12 +0000 Manifest this update: Mon 03 Nov 2025 06:28:12 +0000 Manifest next update: Tue 04 Nov 2025 09:59:12 +0000 Files and hashes: 1: 34352e3233362e35322e302f32322d3234203d3e20323638323231.roa (hash: p4cStahjzanX1Fh2b6m7xOpr0igEiG+yub20WRyPgoE=) 2: 7FA9BF9F12750C277B09128D03E40ED5D7E48CEF.crl (hash: defy4zyoLQyhTtHN5QSD2f2jGaBIsffGm+yf0e80Zds=) 3: 323830343a346464303a3a2f33322d3438203d3e20323638323231.roa (hash: c1DOXXxzmM+NtTzynR98/jrb9ZDJZHOpEw+JTlEqpQs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D5uCfxRSAWqx763LiMuQ38ALYPd35HEwDXzwYvrg4j2p/0/7FA9BF9F12750C277B09128D03E40ED5D7E48CEF.crl rsync://rpki-repo.registro.br/repo/D5uCfxRSAWqx763LiMuQ38ALYPd35HEwDXzwYvrg4j2p/0/7FA9BF9F12750C277B09128D03E40ED5D7E48CEF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA9BF9F12750C277B09128D03E40ED5D7E48CEF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:18:87:10:6a:ee:27:ff:22:b0:5d:78:42:fe:68:e1:49:66:31:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FA9BF9F12750C277B09128D03E40ED5D7E48CEF Validity Not Before: Nov 3 06:28:12 2025 GMT Not After : Nov 4 09:59:12 2025 GMT Subject: CN=A2C60A8FB6A5DEDD1ECD1FF6D2295859950E6716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:75:63:3e:03:08:23:dd:0f:3d:fb:03:ef:1f: 2b:d6:8d:96:78:9c:49:a7:68:df:8b:21:f0:03:90: 1f:a6:33:9c:40:79:04:fb:d8:0f:8d:8b:34:d4:63: 4f:8b:b8:f9:76:d2:47:78:1b:42:b6:0c:84:93:cc: 2e:f5:17:c6:86:d5:df:57:97:7e:34:83:43:69:c7: 5f:3d:92:a8:3e:fc:46:8c:ba:ef:f3:0d:19:a9:9e: 70:71:59:63:18:c9:34:a7:6d:23:4e:99:df:17:f7: e0:fd:05:fa:56:b7:91:8e:db:78:90:d7:4f:d6:66: 66:79:0d:2c:6c:f5:53:bc:bc:de:ca:a2:86:e6:75: 08:4d:6e:1a:e9:00:39:d3:bf:fb:98:9f:88:1f:23: f7:4e:e9:3d:04:f7:c3:73:e1:49:a5:15:1b:2a:68: e0:6d:8f:18:71:a0:1b:45:06:80:f7:ee:86:0c:2b: be:9b:01:f0:db:18:45:a5:86:fe:01:d8:9e:02:13: f0:e1:a9:ce:71:42:e5:95:90:bd:83:5b:f8:28:25: 96:0d:ed:9f:0b:e2:47:2d:19:f8:fd:03:e9:da:bb: 86:18:58:ec:15:a2:a4:6a:89:88:62:af:0d:6f:fb: ea:d0:ee:47:75:a3:83:63:0d:2a:5f:88:2d:85:01: 2a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C6:0A:8F:B6:A5:DE:DD:1E:CD:1F:F6:D2:29:58:59:95:0E:67:16 X509v3 Authority Key Identifier: keyid:7F:A9:BF:9F:12:75:0C:27:7B:09:12:8D:03:E4:0E:D5:D7:E4:8C:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D5uCfxRSAWqx763LiMuQ38ALYPd35HEwDXzwYvrg4j2p/0/7FA9BF9F12750C277B09128D03E40ED5D7E48CEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FA9BF9F12750C277B09128D03E40ED5D7E48CEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5uCfxRSAWqx763LiMuQ38ALYPd35HEwDXzwYvrg4j2p/0/7FA9BF9F12750C277B09128D03E40ED5D7E48CEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:42:ac:75:43:5c:6c:cf:38:9b:a4:5f:b6:fb:27:e6:74:93: 71:a0:f3:c4:c2:4d:0c:fd:fc:b5:41:52:3d:37:87:80:11:d0: 62:cd:52:ea:56:67:70:38:69:80:94:ac:69:25:85:a4:2d:0b: 40:66:d0:73:04:86:b0:49:79:2f:85:3d:8b:4e:49:e6:ab:0b: de:ac:05:1c:72:9e:6a:b9:67:94:be:be:8f:3e:d0:02:f1:4a: f2:fa:b4:67:10:71:c2:3f:13:df:35:e3:bd:bd:bb:3e:39:0d: 3d:52:71:2f:73:9c:5a:25:e7:13:fd:d8:6c:9c:f5:26:59:46: c3:8d:e7:22:8a:f0:81:10:65:ca:17:41:51:59:65:d7:2f:be: ac:2f:74:b4:cd:e1:29:8d:1e:ef:fe:cd:f2:e6:f0:9f:2f:c9: b5:2f:ce:73:75:a9:52:dc:b2:4d:89:34:59:84:66:9c:74:ed: 4a:dd:72:71:75:9e:d3:96:66:df:28:85:7b:70:3d:7f:80:a9: 76:c1:58:cb:09:3d:74:5b:22:1e:03:6b:d5:3c:95:55:31:13: a2:3a:39:dd:8b:50:c9:af:4e:a7:88:c0:1d:34:7d:b4:4b:fa: 93:f7:cc:4a:0b:e6:47:df:88:66:39:0d:11:b0:a5:c8:91:ac: 0b:b2:0f:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbRiHEGruJ/8isF14Qv5o4UlmMccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZBOUJGOUYxMjc1MEMyNzdCMDkxMjhEMDNFNDBFRDVE N0U0OENFRjAeFw0yNTExMDMwNjI4MTJaFw0yNTExMDQwOTU5MTJaMDMxMTAvBgNV BAMTKEEyQzYwQThGQjZBNURFREQxRUNEMUZGNkQyMjk1ODU5OTUwRTY3MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+dWM+Awgj3Q89+wPvHyvWjZZ4 nEmnaN+LIfADkB+mM5xAeQT72A+NizTUY0+LuPl20kd4G0K2DISTzC71F8aG1d9X l340g0Npx189kqg+/EaMuu/zDRmpnnBxWWMYyTSnbSNOmd8X9+D9BfpWt5GO23iQ 10/WZmZ5DSxs9VO8vN7KoobmdQhNbhrpADnTv/uYn4gfI/dO6T0E98Nz4UmlFRsq aOBtjxhxoBtFBoD37oYMK76bAfDbGEWlhv4B2J4CE/Dhqc5xQuWVkL2DW/goJZYN 7Z8L4kctGfj9A+nau4YYWOwVoqRqiYhirw1v++rQ7kd1o4NjDSpfiC2FASoXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUosYKj7al3t0ezR/20ilYWZUOZxYwHwYDVR0j BBgwFoAUf6m/nxJ1DCd7CRKNA+QO1dfkjO8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDV1Q2Z4UlNBV3F4NzYzTGlNdVEzOEFMWVBkMzVIRXdEWHp3WXZyZzRq MnAvMC83RkE5QkY5RjEyNzUwQzI3N0IwOTEyOEQwM0U0MEVENUQ3RTQ4Q0VGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGQTlCRjlGMTI3NTBDMjc3 QjA5MTI4RDAzRTQwRUQ1RDdFNDhDRUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDV1Q2Z4UlNBV3F4NzYzTGlNdVEzOEFMWVBkMzVIRXdEWHp3WXZyZzRqMnAvMC83 RkE5QkY5RjEyNzUwQzI3N0IwOTEyOEQwM0U0MEVENUQ3RTQ4Q0VGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAikKsdUNcbM84m6Rftvsn5nSTcaDzxMJNDP38tUFSPTeHgBHQYs1S6lZncDhp gJSsaSWFpC0LQGbQcwSGsEl5L4U9i05J5qsL3qwFHHKearlnlL6+jz7QAvFK8vq0 ZxBxwj8T3zXjvb27PjkNPVJxL3OcWiXnE/3YbJz1JllGw43nIorwgRBlyhdBUVll 1y++rC90tM3hKY0e7/7N8ubwny/JtS/Oc3WpUtyyTYk0WYRmnHTtSt1ycXWe05Zm 3yiFe3A9f4CpdsFYywk9dFsiHgNr1TyVVTETojo53YtQya9Op4jAHTR9tEv6k/fM SgvmR9+IZjkNEbClyJGsC7IPEg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:09:40 2025 by rpki-client