$ rpki-client -vvf rpki-repo.registro.br/repo/DZoKhyJqLw16efaLf4dCfdCS6DFhPDb1J9vswcpfvNUa/1/F4A0FC9FB977B37B79C92F12AB9B773B4BE2E4E8.mft File: F4A0FC9FB977B37B79C92F12AB9B773B4BE2E4E8.mft (raw, json) Hash identifier: CpPPT6G9sMQzrZq79+bFEfI02MRrHm5TYyJpJOKMDRY= Subject key identifier: E6:81:D9:94:AD:0D:B4:03:90:7C:2F:7B:14:31:9E:05:23:AD:7A:69 Authority key identifier: F4:A0:FC:9F:B9:77:B3:7B:79:C9:2F:12:AB:9B:77:3B:4B:E2:E4:E8 Certificate issuer: /CN=F4A0FC9FB977B37B79C92F12AB9B773B4BE2E4E8 Certificate serial: 78BEFDEF3BF1D8AC329D0E75CDCBAE29DC820303 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4A0FC9FB977B37B79C92F12AB9B773B4BE2E4E8.cer Subject info access: rsync://rpki-repo.registro.br/repo/DZoKhyJqLw16efaLf4dCfdCS6DFhPDb1J9vswcpfvNUa/1/F4A0FC9FB977B37B79C92F12AB9B773B4BE2E4E8.mft Manifest number: 0303 Signing time: Mon 03 Nov 2025 22:40:35 +0000 Manifest this update: Mon 03 Nov 2025 22:35:35 +0000 Manifest next update: Wed 05 Nov 2025 00:51:35 +0000 Files and hashes: 1: F4A0FC9FB977B37B79C92F12AB9B773B4BE2E4E8.crl (hash: qb1zYG3XHDICedWuNBmMWixH52UpV8OHLHAbDBfNr0k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DZoKhyJqLw16efaLf4dCfdCS6DFhPDb1J9vswcpfvNUa/1/F4A0FC9FB977B37B79C92F12AB9B773B4BE2E4E8.crl rsync://rpki-repo.registro.br/repo/DZoKhyJqLw16efaLf4dCfdCS6DFhPDb1J9vswcpfvNUa/1/F4A0FC9FB977B37B79C92F12AB9B773B4BE2E4E8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4A0FC9FB977B37B79C92F12AB9B773B4BE2E4E8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 00:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:be:fd:ef:3b:f1:d8:ac:32:9d:0e:75:cd:cb:ae:29:dc:82:03:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4A0FC9FB977B37B79C92F12AB9B773B4BE2E4E8 Validity Not Before: Nov 3 22:35:35 2025 GMT Not After : Nov 5 00:51:35 2025 GMT Subject: CN=E681D994AD0DB403907C2F7B14319E0523AD7A69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3d:43:6c:8a:79:36:51:e1:cf:13:34:79:06: 0a:a2:9f:d8:65:c6:c7:b3:4e:83:67:c3:56:72:97: bb:4f:bc:50:af:08:38:50:54:92:0b:00:bc:c1:9f: c5:d0:22:dc:d7:96:9a:f0:3e:00:01:0f:f4:66:78: 9f:81:b6:cd:1b:0c:5c:06:e4:60:33:a9:32:bd:e7: d8:bc:99:06:36:42:d0:c7:0e:8a:ff:3d:00:47:c7: 26:87:ef:af:50:78:11:62:a2:88:61:d8:8c:37:b9: 20:b7:ce:a0:33:f7:54:8d:a1:47:6b:d8:87:43:8e: 6a:ea:7d:68:d7:0b:e0:76:ea:29:b8:84:0d:9b:01: 1e:51:53:c5:15:f1:cb:27:58:3d:0a:26:a8:ba:c2: c9:98:a5:99:d7:bf:64:10:db:8f:a2:30:ca:9e:eb: 6b:1b:11:26:d6:c0:20:0e:55:a5:c7:11:88:67:80: e4:c7:fe:c0:1c:d2:e7:09:5a:f2:e8:20:dd:6e:65: a2:5f:b6:c3:80:b8:0c:2e:ce:8c:b9:43:b9:d9:8a: ea:9d:ae:41:9b:34:3d:f6:b8:eb:fa:7e:db:bf:c7: 35:3b:b9:65:6c:2b:3f:3b:d0:01:0e:76:c3:f8:59: 17:17:fd:4c:dc:82:f3:20:da:df:1f:cf:05:5f:88: 66:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:81:D9:94:AD:0D:B4:03:90:7C:2F:7B:14:31:9E:05:23:AD:7A:69 X509v3 Authority Key Identifier: keyid:F4:A0:FC:9F:B9:77:B3:7B:79:C9:2F:12:AB:9B:77:3B:4B:E2:E4:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DZoKhyJqLw16efaLf4dCfdCS6DFhPDb1J9vswcpfvNUa/1/F4A0FC9FB977B37B79C92F12AB9B773B4BE2E4E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4A0FC9FB977B37B79C92F12AB9B773B4BE2E4E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZoKhyJqLw16efaLf4dCfdCS6DFhPDb1J9vswcpfvNUa/1/F4A0FC9FB977B37B79C92F12AB9B773B4BE2E4E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:52:98:67:c5:be:72:4d:cb:90:37:f6:e1:22:02:fe:1a:bb: 66:c7:58:de:62:42:72:db:b9:6f:83:29:7d:d6:79:1d:a9:7e: 88:2b:d1:a8:20:12:e2:96:ff:99:4a:0d:bb:dd:65:43:75:2a: ad:ed:ed:ea:6c:f0:97:05:ee:1e:6d:d3:0c:4e:1c:42:ea:86: 9d:07:f6:26:2a:44:0c:a2:cd:7d:a6:b7:5e:e7:6b:52:78:94: 6c:20:24:8e:9a:48:7b:8a:d4:95:03:7e:68:33:10:e4:aa:da: bd:2d:2b:62:56:bf:3f:ac:5f:a3:1b:1f:11:10:d6:f1:db:f0: 24:0f:ee:10:8a:75:a5:23:44:01:8a:c9:b2:e6:8f:bf:bd:9e: e4:4c:44:c8:36:0f:fb:51:53:f5:a7:e1:c6:79:4e:82:e6:07: e4:e9:65:23:f9:23:15:4f:42:e7:77:31:4e:1f:db:35:65:d7: 12:24:6e:8b:64:07:2a:75:25:91:bc:0b:77:6b:e2:bf:62:1c: f5:1f:c2:3e:b4:d8:df:75:af:d3:84:f1:39:69:14:4c:e5:e4: e4:17:f0:5d:4d:7d:50:95:13:db:d7:6d:72:05:28:21:c3:24: 25:d7:ad:72:4d:66:7f:b6:df:9f:af:a7:8a:dc:c3:c7:29:17: be:7a:0b:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeL797zvx2KwynQ51zcuuKdyCAwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjRBMEZDOUZCOTc3QjM3Qjc5QzkyRjEyQUI5Qjc3M0I0 QkUyRTRFODAeFw0yNTExMDMyMjM1MzVaFw0yNTExMDUwMDUxMzVaMDMxMTAvBgNV BAMTKEU2ODFEOTk0QUQwREI0MDM5MDdDMkY3QjE0MzE5RTA1MjNBRDdBNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmPUNsink2UeHPEzR5Bgqin9hl xsezToNnw1Zyl7tPvFCvCDhQVJILALzBn8XQItzXlprwPgABD/RmeJ+Bts0bDFwG 5GAzqTK959i8mQY2QtDHDor/PQBHxyaH769QeBFioohh2Iw3uSC3zqAz91SNoUdr 2IdDjmrqfWjXC+B26im4hA2bAR5RU8UV8csnWD0KJqi6wsmYpZnXv2QQ24+iMMqe 62sbESbWwCAOVaXHEYhngOTH/sAc0ucJWvLoIN1uZaJftsOAuAwuzoy5Q7nZiuqd rkGbND32uOv6ftu/xzU7uWVsKz870AEOdsP4WRcX/UzcgvMg2t8fzwVfiGZpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5oHZlK0NtAOQfC97FDGeBSOtemkwHwYDVR0j BBgwFoAU9KD8n7l3s3t5yS8Sq5t3O0vi5OgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFpvS2h5SnFMdzE2ZWZhTGY0ZENmZENTNkRGaFBEYjFKOXZzd2NwZnZO VWEvMS9GNEEwRkM5RkI5NzdCMzdCNzlDOTJGMTJBQjlCNzczQjRCRTJFNEU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0QTBGQzlGQjk3N0IzN0I3 OUM5MkYxMkFCOUI3NzNCNEJFMkU0RTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFpvS2h5SnFMdzE2ZWZhTGY0ZENmZENTNkRGaFBEYjFKOXZzd2NwZnZOVWEvMS9G NEEwRkM5RkI5NzdCMzdCNzlDOTJGMTJBQjlCNzczQjRCRTJFNEU4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN1KYZ8W+ck3LkDf24SIC/hq7ZsdY3mJCctu5b4MpfdZ5Hal+iCvRqCAS4pb/ mUoNu91lQ3Uqre3t6mzwlwXuHm3TDE4cQuqGnQf2JipEDKLNfaa3XudrUniUbCAk jppIe4rUlQN+aDMQ5KravS0rYla/P6xfoxsfERDW8dvwJA/uEIp1pSNEAYrJsuaP v72e5ExEyDYP+1FT9afhxnlOguYH5OllI/kjFU9C53cxTh/bNWXXEiRui2QHKnUl kbwLd2viv2Ic9R/CPrTY33Wv04TxOWkUTOXk5BfwXU19UJUT29dtcgUoIcMkJdet ck1mf7bfn6+nitzDxykXvnoLUw== -----END CERTIFICATE-----Generated at Tue Nov 4 06:21:14 2025 by rpki-client