$ rpki-client -vvf rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.mft File: 40024D9137B1E11B244B48E87E69634A33E200A3.mft (raw, json) Hash identifier: 4RFipHCHq9oI3JIRsrXPo+j3LmJ1HKKDeLZxQMdJ9f8= Subject key identifier: DD:E8:9D:A2:95:14:5C:F8:10:CC:76:7C:02:B5:DC:C6:21:DF:06:D5 Authority key identifier: 40:02:4D:91:37:B1:E1:1B:24:4B:48:E8:7E:69:63:4A:33:E2:00:A3 Certificate issuer: /CN=40024D9137B1E11B244B48E87E69634A33E200A3 Certificate serial: 2DD9505A693A717CE36B1D83388FFED841DF5DCD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40024D9137B1E11B244B48E87E69634A33E200A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.mft Manifest number: 0304 Signing time: Mon 03 Nov 2025 06:28:18 +0000 Manifest this update: Mon 03 Nov 2025 06:23:18 +0000 Manifest next update: Tue 04 Nov 2025 09:36:18 +0000 Files and hashes: 1: 323830343a313336343a3a2f33322d3438203d3e20323633353332.roa (hash: /NlP/nFInfupYyPAIeeNmFEHxIgrARxYeJrMLAyFWfI=) 2: 40024D9137B1E11B244B48E87E69634A33E200A3.crl (hash: IbY5gHciA4SjV3Z35NoMZ79Hq4elS+dPAA89PJCIsFc=) 3: 3139312e352e34382e302f32312d3234203d3e20323633353332.roa (hash: xwhiR8s2KXPoYmAj/BsNvhfcFgjUvWyfc1+EWR5Q9eE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.crl rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40024D9137B1E11B244B48E87E69634A33E200A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d9:50:5a:69:3a:71:7c:e3:6b:1d:83:38:8f:fe:d8:41:df:5d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40024D9137B1E11B244B48E87E69634A33E200A3 Validity Not Before: Nov 3 06:23:18 2025 GMT Not After : Nov 4 09:36:18 2025 GMT Subject: CN=DDE89DA295145CF810CC767C02B5DCC621DF06D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c7:11:aa:4e:83:bc:e5:f5:cd:4f:1d:6f:42: 2d:d3:d5:3a:48:2e:e0:48:e9:49:d3:41:34:f3:76: f3:1d:21:a7:47:77:d2:12:9e:c8:e8:ca:80:b9:b9: 92:50:c2:60:64:c2:cf:5d:20:e0:37:45:64:07:e6: 7d:6b:62:98:46:59:d2:68:51:a9:d8:b8:4f:d6:a6: d5:6e:4c:c5:6e:1a:e8:2a:6f:61:69:8f:ee:2a:80: e8:79:c5:42:f0:26:ad:69:f6:e9:a4:8a:ae:66:6d: 5f:ad:7b:ed:b3:6c:af:3b:af:36:f6:27:31:5d:40: 4c:78:5c:c5:bc:ad:fe:39:6e:53:c4:3f:56:45:66: 7a:ea:ea:37:c1:09:ba:ac:28:94:4c:49:40:8a:48: b6:5e:d3:3e:01:dc:53:3d:86:2c:95:35:aa:a4:37: 47:1d:46:00:56:ef:41:cc:3a:e7:20:5c:f8:90:3f: 26:64:a3:ab:3a:5e:eb:36:e4:00:fe:97:d0:28:49: fb:03:6e:6a:4d:5d:a9:f6:46:22:40:5c:3a:8f:c0: 75:dc:6f:81:0f:b8:02:31:e0:bf:be:36:eb:03:01: 9d:25:69:a3:71:a2:f3:2a:3f:e7:7a:61:65:05:ee: ae:a7:7a:17:dc:9a:b6:16:0f:0e:c6:3e:02:46:df: 8e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E8:9D:A2:95:14:5C:F8:10:CC:76:7C:02:B5:DC:C6:21:DF:06:D5 X509v3 Authority Key Identifier: keyid:40:02:4D:91:37:B1:E1:1B:24:4B:48:E8:7E:69:63:4A:33:E2:00:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40024D9137B1E11B244B48E87E69634A33E200A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:e1:54:1e:c4:46:7e:31:59:8b:55:92:d4:0b:a4:a0:3c:cb: ec:a3:7b:d2:df:07:7a:e2:8a:8c:38:d9:98:c8:b5:60:cb:49: 92:3e:76:57:61:8c:9b:b4:17:2a:9f:de:9e:0b:7d:74:a8:62: 9c:df:c0:03:b3:34:69:e8:25:25:76:d7:90:f6:6e:e6:4f:52: 95:6d:f4:6c:f1:98:af:0d:1d:ce:34:cd:82:61:90:06:8a:d1: 69:ab:0b:60:dc:e8:52:c6:18:45:38:ab:8b:83:18:10:61:c6: 1a:43:bb:02:26:7f:d1:55:b6:71:0b:70:2b:35:db:38:bd:f5: 3d:1d:98:55:5f:27:9a:24:58:03:31:79:e5:b9:ec:68:53:54: 97:02:cf:98:c4:b1:43:f8:59:52:7e:fa:17:1c:11:10:b9:a8: 8d:e9:32:35:f3:5e:22:dd:c2:6f:1a:04:e7:ed:1c:91:10:b1: 7a:e4:05:10:fe:92:5f:ce:42:88:62:89:b9:51:9c:a3:72:41: bb:ef:d7:2a:07:e2:c6:ab:e7:c0:7f:4e:cc:ab:e8:5a:ad:25: ea:e7:86:c6:4a:cf:db:9e:b0:df:30:54:b8:ba:e5:7c:87:4c: 21:b8:54:cb:04:97:05:d7:c3:b4:31:d7:18:75:25:78:ba:ce: b2:a9:73:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULdlQWmk6cXzjax2DOI/+2EHfXc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAwMjREOTEzN0IxRTExQjI0NEI0OEU4N0U2OTYzNEEz M0UyMDBBMzAeFw0yNTExMDMwNjIzMThaFw0yNTExMDQwOTM2MThaMDMxMTAvBgNV BAMTKERERTg5REEyOTUxNDVDRjgxMENDNzY3QzAyQjVEQ0M2MjFERjA2RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/xxGqToO85fXNTx1vQi3T1TpI LuBI6UnTQTTzdvMdIadHd9ISnsjoyoC5uZJQwmBkws9dIOA3RWQH5n1rYphGWdJo UanYuE/WptVuTMVuGugqb2Fpj+4qgOh5xULwJq1p9umkiq5mbV+te+2zbK87rzb2 JzFdQEx4XMW8rf45blPEP1ZFZnrq6jfBCbqsKJRMSUCKSLZe0z4B3FM9hiyVNaqk N0cdRgBW70HMOucgXPiQPyZko6s6Xus25AD+l9AoSfsDbmpNXan2RiJAXDqPwHXc b4EPuAIx4L++NusDAZ0laaNxovMqP+d6YWUF7q6nehfcmrYWDw7GPgJG347LAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3eidopUUXPgQzHZ8ArXcxiHfBtUwHwYDVR0j BBgwFoAUQAJNkTex4RskS0jofmljSjPiAKMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXBvdzd0eUR2UEE2MjFVN3JKcG9DaUVGRjZwV1Y1bTdjV2hUOW1zajRy VkgvMS80MDAyNEQ5MTM3QjFFMTFCMjQ0QjQ4RTg3RTY5NjM0QTMzRTIwMEEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwMDI0RDkxMzdCMUUxMUIy NDRCNDhFODdFNjk2MzRBMzNFMjAwQTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXBvdzd0eUR2UEE2MjFVN3JKcG9DaUVGRjZwV1Y1bTdjV2hUOW1zajRyVkgvMS80 MDAyNEQ5MTM3QjFFMTFCMjQ0QjQ4RTg3RTY5NjM0QTMzRTIwMEEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEeFUHsRGfjFZi1WS1AukoDzL7KN70t8HeuKKjDjZmMi1YMtJkj52V2GMm7QX Kp/engt9dKhinN/AA7M0aeglJXbXkPZu5k9SlW30bPGYrw0dzjTNgmGQBorRaasL YNzoUsYYRTiri4MYEGHGGkO7AiZ/0VW2cQtwKzXbOL31PR2YVV8nmiRYAzF55bns aFNUlwLPmMSxQ/hZUn76FxwRELmojekyNfNeIt3CbxoE5+0ckRCxeuQFEP6SX85C iGKJuVGco3JBu+/XKgfixqvnwH9OzKvoWq0l6ueGxkrP256w3zBUuLrlfIdMIbhU ywSXBdfDtDHXGHUleLrOsqlzdQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:35:02 2025 by rpki-client