$ rpki-client -vvf rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft File: 60358884BF0F1C4D3024B709DD5734D538763EEC.mft (raw, json) Hash identifier: 9m9J0jrQfR5uyZrvTjhlVOKsavsOwc5q40B0k4xybYw= Subject key identifier: 71:D0:B7:35:CD:90:41:0D:A7:3E:10:2C:62:B3:2E:B2:A2:3B:11:11 Authority key identifier: 60:35:88:84:BF:0F:1C:4D:30:24:B7:09:DD:57:34:D5:38:76:3E:EC Certificate issuer: /CN=60358884BF0F1C4D3024B709DD5734D538763EEC Certificate serial: 321DCBA07489FB4577F25BAAA15C2A4144F7A078 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer Subject info access: rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft Manifest number: 32 Signing time: Mon 03 Nov 2025 18:47:01 +0000 Manifest this update: Mon 03 Nov 2025 18:42:01 +0000 Manifest next update: Tue 04 Nov 2025 19:22:01 +0000 Files and hashes: 1: 323830343a383234383a3a2f33322d3438203d3e20323732353130.roa (hash: FuLRg2mQnQb4bhpiLaVmWlnozUB8vSOFoWM8uHkcM+A=) 2: 60358884BF0F1C4D3024B709DD5734D538763EEC.crl (hash: E4iv5wKZSEhmGsAHSUxDYqvi4nHr2KcJpuajItSPFnw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.crl rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 19:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:1d:cb:a0:74:89:fb:45:77:f2:5b:aa:a1:5c:2a:41:44:f7:a0:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60358884BF0F1C4D3024B709DD5734D538763EEC Validity Not Before: Nov 3 18:42:01 2025 GMT Not After : Nov 4 19:22:01 2025 GMT Subject: CN=71D0B735CD90410DA73E102C62B32EB2A23B1111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1b:95:5a:5b:6a:2e:2c:2b:71:e3:db:31:a9: 0e:f1:2c:83:a1:6e:bd:f2:c7:f7:db:13:3b:79:4a: dd:8a:62:a3:1b:21:68:51:2a:24:0d:f7:fe:85:af: 23:fe:49:aa:5f:87:da:d1:0d:e1:6f:f7:f6:f9:f8: 71:04:4c:91:4d:ee:43:c2:48:f4:f4:29:82:45:cd: 5e:0b:05:89:31:c6:bb:9b:cf:3d:8d:a2:a3:3d:be: 26:ef:8d:ca:b6:71:dc:06:7a:d2:ca:09:8d:a8:c8: 41:0b:96:e7:da:a7:d3:a7:8a:4b:3d:a3:78:2e:4e: 2c:bb:1c:c0:c2:3c:8b:a8:e3:fd:30:29:ff:49:29: 2c:7f:a0:99:66:d4:4e:6f:29:7f:23:df:83:19:ff: 0b:15:9f:09:83:9b:d0:8b:2e:90:c1:68:f7:77:93: 91:c3:d5:43:a0:05:84:7d:5d:3a:40:9d:36:ed:08: bd:3e:a2:34:56:4e:34:83:7b:1b:07:e6:d3:46:62: 51:9d:29:ee:09:dc:e0:08:86:ee:30:55:de:ea:1e: 5a:76:26:c4:be:55:64:93:28:ac:6b:16:1d:8b:ad: b4:92:a8:08:6b:52:43:9f:1a:e3:5c:8f:67:58:36: be:f1:b1:44:76:1d:ee:fa:f4:98:b9:12:d6:92:a8: 21:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D0:B7:35:CD:90:41:0D:A7:3E:10:2C:62:B3:2E:B2:A2:3B:11:11 X509v3 Authority Key Identifier: keyid:60:35:88:84:BF:0F:1C:4D:30:24:B7:09:DD:57:34:D5:38:76:3E:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b5:92:0d:ec:f1:92:a1:62:5a:ad:ba:6f:74:7a:8a:1f:ff: 18:0e:02:7d:e7:c1:36:1d:05:6f:91:0c:35:5f:0f:04:95:f7: 04:ff:97:5a:a0:99:f2:45:9b:b9:4b:a9:6d:54:94:7a:cb:12: 3f:64:41:97:06:a5:3b:6c:28:2b:93:0c:58:94:c9:32:fa:7f: ef:a9:b6:0a:cd:c9:ad:97:73:33:76:8b:7a:e7:64:86:e0:10: 2a:73:d6:20:c1:ff:e8:f9:a7:55:79:9c:7e:e3:2d:40:6f:eb: 88:fe:19:c7:73:a3:41:5f:fd:b6:fa:35:a8:16:ab:8a:96:bd: 7b:cc:31:50:be:2b:9f:33:78:52:b9:ca:b5:82:81:78:b2:9f: 72:c4:d0:61:53:57:4b:cd:83:4a:7d:76:52:6a:42:10:a2:40: 66:e4:67:8e:86:fc:6d:43:e3:28:52:ba:35:5f:38:c0:ea:cd: 01:ce:80:e8:31:f4:6f:db:08:ec:28:94:1f:93:8f:2d:4f:09: be:83:21:fa:c7:4d:d9:44:a3:fd:29:01:b0:1f:f8:8d:8b:7d: 53:5f:5d:61:2e:06:66:fc:20:c4:28:84:df:b7:92:25:3b:1c: e0:22:a9:80:be:a1:07:55:68:d7:2c:df:14:78:2f:72:9a:97: 6c:af:7d:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMh3LoHSJ+0V38luqoVwqQUT3oHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAzNTg4ODRCRjBGMUM0RDMwMjRCNzA5REQ1NzM0RDUz ODc2M0VFQzAeFw0yNTExMDMxODQyMDFaFw0yNTExMDQxOTIyMDFaMDMxMTAvBgNV BAMTKDcxRDBCNzM1Q0Q5MDQxMERBNzNFMTAyQzYyQjMyRUIyQTIzQjExMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZG5VaW2ouLCtx49sxqQ7xLIOh br3yx/fbEzt5St2KYqMbIWhRKiQN9/6FryP+Sapfh9rRDeFv9/b5+HEETJFN7kPC SPT0KYJFzV4LBYkxxrubzz2NoqM9vibvjcq2cdwGetLKCY2oyEELlufap9Oniks9 o3guTiy7HMDCPIuo4/0wKf9JKSx/oJlm1E5vKX8j34MZ/wsVnwmDm9CLLpDBaPd3 k5HD1UOgBYR9XTpAnTbtCL0+ojRWTjSDexsH5tNGYlGdKe4J3OAIhu4wVd7qHlp2 JsS+VWSTKKxrFh2LrbSSqAhrUkOfGuNcj2dYNr7xsUR2He769Ji5EtaSqCErAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcdC3Nc2QQQ2nPhAsYrMusqI7EREwHwYDVR0j BBgwFoAUYDWIhL8PHE0wJLcJ3Vc01Th2PuwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDlCVkY5WGNSeVdzd2pNc2hlVWlTTDMxQlNKUUZ3UFV5VlNmSlRGMmM4 eE0vMC82MDM1ODg4NEJGMEYxQzREMzAyNEI3MDlERDU3MzRENTM4NzYzRUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwMzU4ODg0QkYwRjFDNEQz MDI0QjcwOURENTczNEQ1Mzg3NjNFRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDlCVkY5WGNSeVdzd2pNc2hlVWlTTDMxQlNKUUZ3UFV5VlNmSlRGMmM4eE0vMC82 MDM1ODg4NEJGMEYxQzREMzAyNEI3MDlERDU3MzRENTM4NzYzRUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfbWSDezxkqFiWq26b3R6ih//GA4CfefBNh0Fb5EMNV8PBJX3BP+XWqCZ8kWb uUupbVSUessSP2RBlwalO2woK5MMWJTJMvp/76m2Cs3JrZdzM3aLeudkhuAQKnPW IMH/6PmnVXmcfuMtQG/riP4Zx3OjQV/9tvo1qBaripa9e8wxUL4rnzN4UrnKtYKB eLKfcsTQYVNXS82DSn12UmpCEKJAZuRnjob8bUPjKFK6NV84wOrNAc6A6DH0b9sI 7CiUH5OPLU8JvoMh+sdN2USj/SkBsB/4jYt9U19dYS4GZvwgxCiE37eSJTsc4CKp gL6hB1Vo1yzfFHgvcpqXbK99UQ== -----END CERTIFICATE-----Generated at Tue Nov 4 00:15:27 2025 by rpki-client