$ rpki-client -vvf rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft File: 0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft (raw, json) Hash identifier: ac+7d4gFzJPYy0znopUGC98FOFdVs16cBToRIU5EiAg= Subject key identifier: 1C:11:8D:BC:DC:4B:E7:DA:AE:09:52:75:1D:84:65:43:C4:B9:45:46 Authority key identifier: 0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08 Certificate issuer: /CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08 Certificate serial: 0A6F9CEC5406C1BAB190B6DA2DA0E9C8500FDBD5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer Subject info access: rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft Manifest number: 0305 Signing time: Sun 02 Nov 2025 21:39:52 +0000 Manifest this update: Sun 02 Nov 2025 21:34:52 +0000 Manifest next update: Mon 03 Nov 2025 23:23:52 +0000 Files and hashes: 1: 323830343a356363303a3a2f33322d3438203d3e20323638393238.roa (hash: k92FdWEorNxKTyarjpxwu6x7nUdmTkLXLHku6hKnTFU=) 2: 0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl (hash: hQPqd4IcbxRqlgT2p61+4espJgIUiyq4YIBxmXX6dcQ=) 3: 34352e3137362e31322e302f32322d3234203d3e20323638393238.roa (hash: 6BQGyRfWPoyBSQCgM4C6Jq/eSUg3l4bDaxyZgDl3HcQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 23:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:6f:9c:ec:54:06:c1:ba:b1:90:b6:da:2d:a0:e9:c8:50:0f:db:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08 Validity Not Before: Nov 2 21:34:52 2025 GMT Not After : Nov 3 23:23:52 2025 GMT Subject: CN=1C118DBCDC4BE7DAAE0952751D846543C4B94546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:53:90:9b:be:1b:89:d2:ac:21:68:2b:d8:b5: 5a:07:23:38:a1:f8:5a:00:bd:bb:fa:06:ed:17:14: be:08:02:09:e5:94:97:23:61:96:e0:e4:e8:3c:1d: 79:da:96:e2:dc:e2:45:88:43:59:26:ef:21:36:b1: 80:c1:b1:f1:4e:2b:d3:3f:8f:3c:18:2b:ae:31:24: 68:94:69:7c:fa:2d:e4:b3:5e:74:72:46:48:02:6d: 75:4e:f8:c7:08:2a:99:d5:c5:4c:a3:ba:60:f7:64: e5:60:bc:69:15:2f:d1:f6:e1:b9:d7:64:ff:64:3c: 16:81:13:86:5c:18:de:dc:e0:bc:36:80:1e:86:cb: 57:a5:52:76:40:99:d4:b2:fc:1d:71:27:3b:4c:10: af:8c:25:d2:e4:a5:cc:ed:21:8a:30:ed:1e:71:79: cc:1c:d0:50:25:87:8f:2f:d9:b4:64:af:52:3b:eb: d6:18:b0:12:c4:3f:d2:8c:41:42:16:9b:68:32:21: 9e:60:47:d5:d2:ae:32:af:33:b6:33:88:3c:8e:15: 77:db:0c:40:96:17:88:59:0f:af:94:4f:a9:9d:4a: 21:6d:a7:94:d4:df:50:55:6c:58:65:c4:51:99:7c: 03:ef:4c:63:c2:fc:23:71:78:93:1e:79:bb:cc:75: e7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:11:8D:BC:DC:4B:E7:DA:AE:09:52:75:1D:84:65:43:C4:B9:45:46 X509v3 Authority Key Identifier: keyid:0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:0c:de:80:8e:d9:71:88:67:d5:7e:60:90:b9:08:fb:7d:8e: 84:a9:9f:64:30:59:b1:cb:f8:73:cb:41:75:32:4c:ec:6c:cc: 77:1b:68:32:32:ed:99:48:20:95:4d:7b:30:c0:79:ff:69:0c: 90:df:89:e6:8b:dc:61:31:64:d9:ea:a7:eb:e3:30:06:7c:0b: 6e:34:56:89:66:13:62:52:ec:5c:5b:a8:dc:9c:4f:99:26:80: bf:ad:50:f4:c2:78:4c:1f:9e:31:e2:a0:9d:eb:c4:47:37:4d: cd:a8:91:f5:cd:38:b1:ce:e2:80:d4:c1:63:23:19:81:d6:cb: b6:a1:21:90:2d:87:b3:0b:33:7f:39:d2:c6:e2:bf:09:af:e9: 47:2f:ef:c2:be:3d:bf:b3:5a:3d:06:0d:41:04:52:f8:cb:3b: 22:a7:cf:48:0b:63:85:ce:35:1e:4e:dd:6c:9b:6a:72:f0:84: 6e:ce:ec:b8:5b:0f:4c:45:d1:25:c8:42:0c:72:8f:5e:f3:6d: 23:c3:40:2e:3f:46:a2:28:b9:c6:44:47:b0:07:af:3f:c9:0d: de:c8:2e:85:dd:13:bb:db:19:24:10:64:9c:5f:a9:d7:8b:ea: f6:ef:cc:2d:f1:11:33:a6:5b:1a:d9:8d:be:01:19:44:18:75: fb:ac:59:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCm+c7FQGwbqxkLbaLaDpyFAP29UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYzRUIwMEUwMUZEREVDREQwRDIwQUM3QTEzODlFOUUx MzUwREUwODAeFw0yNTExMDIyMTM0NTJaFw0yNTExMDMyMzIzNTJaMDMxMTAvBgNV BAMTKDFDMTE4REJDREM0QkU3REFBRTA5NTI3NTFEODQ2NTQzQzRCOTQ1NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmU5CbvhuJ0qwhaCvYtVoHIzih +FoAvbv6Bu0XFL4IAgnllJcjYZbg5Og8HXnaluLc4kWIQ1km7yE2sYDBsfFOK9M/ jzwYK64xJGiUaXz6LeSzXnRyRkgCbXVO+McIKpnVxUyjumD3ZOVgvGkVL9H24bnX ZP9kPBaBE4ZcGN7c4Lw2gB6Gy1elUnZAmdSy/B1xJztMEK+MJdLkpcztIYow7R5x ecwc0FAlh48v2bRkr1I769YYsBLEP9KMQUIWm2gyIZ5gR9XSrjKvM7YziDyOFXfb DECWF4hZD6+UT6mdSiFtp5TU31BVbFhlxFGZfAPvTGPC/CNxeJMeebvMdecjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHBGNvNxL59quCVJ1HYRlQ8S5RUYwHwYDVR0j BBgwFoAUDz6wDgH93s3Q0grHoTienhNQ3ggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREtyVEtqU0FMeDh2N0Zwb0YzdldhNVhIZ2t3TTdiVUZKemVxclFqcnJ6 UmsvMS8wRjNFQjAwRTAxRkRERUNERDBEMjBBQzdBMTM4OUU5RTEzNTBERTA4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGM0VCMDBFMDFGRERFQ0RE MEQyMEFDN0ExMzg5RTlFMTM1MERFMDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REtyVEtqU0FMeDh2N0Zwb0YzdldhNVhIZ2t3TTdiVUZKemVxclFqcnJ6UmsvMS8w RjNFQjAwRTAxRkRERUNERDBEMjBBQzdBMTM4OUU5RTEzNTBERTA4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABAzegI7ZcYhn1X5gkLkI+32OhKmfZDBZscv4c8tBdTJM7GzMdxtoMjLtmUgg lU17MMB5/2kMkN+J5ovcYTFk2eqn6+MwBnwLbjRWiWYTYlLsXFuo3JxPmSaAv61Q 9MJ4TB+eMeKgnevERzdNzaiR9c04sc7igNTBYyMZgdbLtqEhkC2HswszfznSxuK/ Ca/pRy/vwr49v7NaPQYNQQRS+Ms7IqfPSAtjhc41Hk7dbJtqcvCEbs7suFsPTEXR JchCDHKPXvNtI8NALj9Goii5xkRHsAevP8kN3sguhd0Tu9sZJBBknF+p14vq9u/M LfERM6ZbGtmNvgEZRBh1+6xZxQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:35:12 2025 by rpki-client