$ rpki-client -vvf rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft File: B87E403FD04360E1BA519D841853FF5C9E675A23.mft (raw, json) Hash identifier: VvyPZn5uOsZskx5JqbxCKFPgVcm5w3bixaiWvsb11vU= Subject key identifier: B2:04:1A:B0:6E:2C:35:CC:A4:2F:24:88:95:D9:1D:A0:09:DB:4A:7C Authority key identifier: B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23 Certificate issuer: /CN=B87E403FD04360E1BA519D841853FF5C9E675A23 Certificate serial: 0BE9999565E028A89B297F82429FBD565B78F291 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer Subject info access: rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft Manifest number: 0302 Signing time: Mon 03 Nov 2025 07:50:00 +0000 Manifest this update: Mon 03 Nov 2025 07:45:00 +0000 Manifest next update: Tue 04 Nov 2025 09:32:00 +0000 Files and hashes: 1: B87E403FD04360E1BA519D841853FF5C9E675A23.crl (hash: N6wiGdpQkko9bKTRiWBrK8WnfGY7Q1JOU8DpKYZpH7Y=) 2: 3136382e39302e3132302e302f32322d3234203d3e203533313735.roa (hash: kmPbp9SIMWkNQPWpAWYgRGrTVxQTvYRtPinUblfqjEI=) 3: 3138362e3232352e3232342e302f32302d3234203d3e203533313735.roa (hash: 8clL3fZ/UcUBet/ByyqI0tz/CBKDL/m9LuvOyhWETW0=) 4: 3138362e3232352e3234302e302f32302d3234203d3e203533313735.roa (hash: w0owl7DF+mAIOGXYpwnTswecX/S7RFKkX0sboH3wAh8=) 5: 323830343a3161633a3a2f33322d3634203d3e203533313735.roa (hash: hthaHQ1W4Hhi7UR8B+WN+HOaWbENvNu2yu6xV3d/KEc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.crl rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e9:99:95:65:e0:28:a8:9b:29:7f:82:42:9f:bd:56:5b:78:f2:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B87E403FD04360E1BA519D841853FF5C9E675A23 Validity Not Before: Nov 3 07:45:00 2025 GMT Not After : Nov 4 09:32:00 2025 GMT Subject: CN=B2041AB06E2C35CCA42F248895D91DA009DB4A7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:00:09:8a:7d:a8:c1:39:e5:15:a4:38:cd:cd: 8c:db:ac:bc:f0:ab:c8:5b:2a:82:76:69:85:69:2d: 8e:62:30:3b:52:25:89:07:4f:f2:c6:15:b8:74:f8: c7:fb:4b:09:5e:28:e0:ac:af:f3:1e:e5:0e:95:f2: d4:85:52:98:7f:72:c4:e6:8d:ce:24:a4:49:4d:06: 21:b1:59:a6:b1:a4:bb:a2:ec:91:86:c6:29:84:b1: db:67:c8:18:78:b2:bb:68:e5:b4:f5:d5:9b:74:0e: 2f:be:4d:63:71:54:c0:8f:f5:23:bd:ce:97:ef:ce: ef:52:62:c8:a2:58:02:b8:9f:15:ca:89:66:f9:45: 78:fb:32:3c:6f:f7:30:52:93:de:36:54:bb:b0:1d: 8f:b6:de:31:96:5c:20:fa:8b:14:16:d1:77:f0:32: ed:2d:46:2f:9a:f1:18:7d:0f:ba:36:21:7f:c6:d3: 83:bf:d5:63:17:04:71:8f:d3:3f:e6:a8:19:9a:2b: 54:09:22:b8:e5:52:8b:3e:f7:40:c6:78:db:f7:2b: cd:93:09:6d:11:8c:25:0c:aa:46:9b:2b:cc:1f:58: ff:ac:18:48:d9:7f:28:d5:bb:fd:1c:ae:d9:49:3a: cd:fe:c0:eb:e7:d4:4e:52:e5:8b:08:78:f2:52:3d: 26:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:04:1A:B0:6E:2C:35:CC:A4:2F:24:88:95:D9:1D:A0:09:DB:4A:7C X509v3 Authority Key Identifier: keyid:B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:74:1a:4a:ee:d3:25:10:35:c1:15:59:a5:a7:48:08:17:8e: a8:85:b7:ac:f0:03:53:6e:c9:dc:84:fd:62:35:c3:71:96:c9: 81:8e:62:d8:1d:16:6f:6a:5e:39:da:00:ba:75:3b:cc:07:9d: f8:40:44:36:75:19:fa:40:1f:90:9e:0c:0e:b6:9d:8d:80:c2: c9:1c:e3:82:a2:ed:ee:75:a0:ec:f9:5c:9d:02:f2:42:13:52: 46:1d:c3:7f:49:3e:05:6a:ff:1a:e9:20:ad:61:e3:06:9f:93: 47:7a:ad:f7:65:6d:3f:9c:ae:f5:62:af:ad:a8:5d:15:4c:f4: 1b:e7:ed:a4:11:cd:78:71:13:b1:7c:91:8a:db:61:1c:7a:69: 73:15:f9:1c:a4:f0:b6:0d:1a:27:23:d0:5e:3a:28:fd:50:3e: 68:a9:e0:a8:a8:7b:19:dd:18:01:da:9a:0c:04:2d:8e:1e:75: 17:11:1b:69:c5:4d:b5:39:c6:87:dc:16:09:1c:b9:22:df:b5: e9:a9:18:e7:0b:60:43:5c:bc:d4:a8:1d:3e:e1:34:ed:cd:e4: 35:51:25:f8:f2:37:8f:0f:a4:49:c1:f9:dc:12:7d:93:ad:94: b4:b0:e5:a9:bd:c8:46:ab:04:e5:2a:96:bd:fc:7c:ee:ee:50: f6:03:f4:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUC+mZlWXgKKibKX+CQp+9Vlt48pEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3RTQwM0ZEMDQzNjBFMUJBNTE5RDg0MTg1M0ZGNUM5 RTY3NUEyMzAeFw0yNTExMDMwNzQ1MDBaFw0yNTExMDQwOTMyMDBaMDMxMTAvBgNV BAMTKEIyMDQxQUIwNkUyQzM1Q0NBNDJGMjQ4ODk1RDkxREEwMDlEQjRBN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8AAmKfajBOeUVpDjNzYzbrLzw q8hbKoJ2aYVpLY5iMDtSJYkHT/LGFbh0+Mf7SwleKOCsr/Me5Q6V8tSFUph/csTm jc4kpElNBiGxWaaxpLui7JGGximEsdtnyBh4srto5bT11Zt0Di++TWNxVMCP9SO9 zpfvzu9SYsiiWAK4nxXKiWb5RXj7Mjxv9zBSk942VLuwHY+23jGWXCD6ixQW0Xfw Mu0tRi+a8Rh9D7o2IX/G04O/1WMXBHGP0z/mqBmaK1QJIrjlUos+90DGeNv3K82T CW0RjCUMqkabK8wfWP+sGEjZfyjVu/0crtlJOs3+wOvn1E5S5YsIePJSPSZDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsgQasG4sNcykLySIldkdoAnbSnwwHwYDVR0j BBgwFoAUuH5AP9BDYOG6UZ2EGFP/XJ5nWiMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREdRc0dWckdmZzJrcVQ0a2s1N0hvSkYzWlJaWThrcFRieGFubnpnVHVD VncvMS9CODdFNDAzRkQwNDM2MEUxQkE1MTlEODQxODUzRkY1QzlFNjc1QTIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4N0U0MDNGRDA0MzYwRTFC QTUxOUQ4NDE4NTNGRjVDOUU2NzVBMjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REdRc0dWckdmZzJrcVQ0a2s1N0hvSkYzWlJaWThrcFRieGFubnpnVHVDVncvMS9C ODdFNDAzRkQwNDM2MEUxQkE1MTlEODQxODUzRkY1QzlFNjc1QTIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEnQaSu7TJRA1wRVZpadICBeOqIW3rPADU27J3IT9YjXDcZbJgY5i2B0Wb2pe OdoAunU7zAed+EBENnUZ+kAfkJ4MDradjYDCyRzjgqLt7nWg7PlcnQLyQhNSRh3D f0k+BWr/GukgrWHjBp+TR3qt92VtP5yu9WKvrahdFUz0G+ftpBHNeHETsXyRitth HHppcxX5HKTwtg0aJyPQXjoo/VA+aKngqKh7Gd0YAdqaDAQtjh51FxEbacVNtTnG h9wWCRy5It+16akY5wtgQ1y81KgdPuE07c3kNVEl+PI3jw+kScH53BJ9k62UtLDl qb3IRqsE5SqWvfx87u5Q9gP0xA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:10:19 2025 by rpki-client