$ rpki-client -vvf rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/0/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.mft File: 0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.mft (raw, json) Hash identifier: Q3EhiR7RSiZj4PT5oz8aAROtw9eNRb9M26I6EAJGIZg= Subject key identifier: EF:C1:41:6F:3A:07:A7:0E:EC:B2:76:07:14:FC:2C:7F:B5:C1:E1:C9 Authority key identifier: 0C:E1:0F:3D:2F:72:46:78:7E:71:71:D1:A1:D8:8B:A0:BA:A6:53:E7 Certificate issuer: /CN=0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7 Certificate serial: 4B4717C8E5910C96025DBD4CF75FC1AE87249A1D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.cer Subject info access: rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/0/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.mft Manifest number: 0F Signing time: Mon 03 Nov 2025 09:53:45 +0000 Manifest this update: Mon 03 Nov 2025 09:48:45 +0000 Manifest next update: Tue 04 Nov 2025 13:09:45 +0000 Files and hashes: 1: 0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.crl (hash: Rp843BW1ZiUn2LInk5FhmNksctotYxdRgpuJHaJdZvg=) 2: 323830343a386565383a3a2f33322d3438203d3e20323733343535.roa (hash: NVUJownjGnvFSmtuDbAZ9K64Gu/5n2+eB4lx6uENZ3s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/0/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.crl rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/0/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:47:17:c8:e5:91:0c:96:02:5d:bd:4c:f7:5f:c1:ae:87:24:9a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7 Validity Not Before: Nov 3 09:48:45 2025 GMT Not After : Nov 4 13:09:45 2025 GMT Subject: CN=EFC1416F3A07A70EECB2760714FC2C7FB5C1E1C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c6:98:f0:74:9d:c8:79:e0:29:62:4f:3c:b7: 16:45:dc:92:69:b0:f8:e8:74:f1:57:78:40:ba:be: 48:40:ed:a8:ea:bb:5f:75:ea:a6:d2:8c:3e:d4:65: 51:25:d4:73:20:5c:93:34:19:51:04:e8:a4:84:69: 58:47:07:95:2c:be:cd:22:d7:28:25:5b:b9:f8:80: 89:a5:90:f9:ca:db:fd:f0:33:1f:0d:82:37:5e:bf: 32:4a:ba:6d:fc:5e:f2:ce:e3:22:46:19:da:9b:73: 49:98:bc:55:80:e9:54:59:fc:a0:e3:ca:a0:a2:ac: 93:fc:56:52:fd:c8:38:7b:2d:07:a7:81:a1:e0:1a: 19:0f:ec:23:54:00:7a:03:a1:66:69:af:ad:b6:87: 6b:94:9c:49:ee:21:c7:49:c9:8c:55:65:11:ec:27: e7:36:0c:91:4b:1f:64:d7:b6:02:71:16:6b:a6:5a: f1:ca:67:9d:c4:6a:a7:b2:55:a9:7e:53:0b:5a:68: e9:57:3b:28:02:d1:5d:b9:31:ef:87:90:ad:8d:f5: 69:78:64:3e:ee:08:7e:40:83:b1:2c:55:dd:5f:9e: 92:f9:1e:c1:13:33:dc:84:bc:89:c8:a6:84:4a:9e: 89:e8:a9:f9:be:82:c5:d7:ff:10:c0:1c:eb:c5:df: 71:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C1:41:6F:3A:07:A7:0E:EC:B2:76:07:14:FC:2C:7F:B5:C1:E1:C9 X509v3 Authority Key Identifier: keyid:0C:E1:0F:3D:2F:72:46:78:7E:71:71:D1:A1:D8:8B:A0:BA:A6:53:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/0/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGEpzEM2AHPA8uSvaY5uxoP9mQavB7yC7SepttSuD76q/0/0CE10F3D2F7246787E7171D1A1D88BA0BAA653E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:5b:31:d4:29:b8:0c:5b:7c:50:d1:72:92:bf:a0:84:a7:4e: e0:47:77:cc:cb:f0:31:d1:40:03:8f:a9:c5:90:fc:1c:bb:7c: ed:d1:0f:ff:44:96:fa:22:29:ea:31:c5:83:b8:41:d4:80:82: 7e:4c:b2:ba:46:64:cc:cf:bb:96:2d:69:40:81:cc:f2:9b:4b: ef:7d:b4:62:c8:c2:3d:61:75:dd:9e:b5:c7:c0:09:67:6c:ae: c3:5c:1b:70:71:e5:fc:0d:fc:6f:ca:a4:0a:05:b0:93:d2:51: 41:ad:af:c4:c6:67:36:84:38:2e:22:ac:93:08:e5:66:71:c5: aa:da:60:66:4b:d7:a8:9a:44:da:29:cc:c5:f5:d7:7e:73:11: 54:56:7e:89:74:15:2d:0c:a7:40:df:69:41:84:74:78:16:e7: b7:b6:d2:92:83:8b:5a:9e:7d:12:95:21:21:7f:50:f1:f2:52: f6:e0:4e:e0:ad:64:27:71:2f:50:db:d7:f7:d0:34:df:3f:09: af:77:2d:f5:e6:55:70:36:b2:bc:2a:7b:27:8f:b9:60:8c:75: 4d:a8:11:0f:6a:12:98:67:6e:85:98:ed:a9:e5:17:63:31:5c: 1b:77:8c:8e:92:02:a0:b1:37:f9:bd:64:59:03:9b:cd:ef:d1: 3e:c5:55:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS0cXyOWRDJYCXb1M91/Brockmh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMTBGM0QyRjcyNDY3ODdFNzE3MUQxQTFEODhCQTBC QUE2NTNFNzAeFw0yNTExMDMwOTQ4NDVaFw0yNTExMDQxMzA5NDVaMDMxMTAvBgNV BAMTKEVGQzE0MTZGM0EwN0E3MEVFQ0IyNzYwNzE0RkMyQzdGQjVDMUUxQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6xpjwdJ3IeeApYk88txZF3JJp sPjodPFXeEC6vkhA7ajqu1916qbSjD7UZVEl1HMgXJM0GVEE6KSEaVhHB5Usvs0i 1yglW7n4gImlkPnK2/3wMx8NgjdevzJKum38XvLO4yJGGdqbc0mYvFWA6VRZ/KDj yqCirJP8VlL9yDh7LQengaHgGhkP7CNUAHoDoWZpr622h2uUnEnuIcdJyYxVZRHs J+c2DJFLH2TXtgJxFmumWvHKZ53EaqeyVal+UwtaaOlXOygC0V25Me+HkK2N9Wl4 ZD7uCH5Ag7EsVd1fnpL5HsETM9yEvInIpoRKnonoqfm+gsXX/xDAHOvF33FfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU78FBbzoHpw7ssnYHFPwsf7XB4ckwHwYDVR0j BBgwFoAUDOEPPS9yRnh+cXHRodiLoLqmU+cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkdFcHpFTTJBSFBBOHVTdmFZNXV4b1A5bVFhdkI3eUM3U2VwdHRTdUQ3 NnEvMC8wQ0UxMEYzRDJGNzI0Njc4N0U3MTcxRDFBMUQ4OEJBMEJBQTY1M0U3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDRTEwRjNEMkY3MjQ2Nzg3 RTcxNzFEMUExRDg4QkEwQkFBNjUzRTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkdFcHpFTTJBSFBBOHVTdmFZNXV4b1A5bVFhdkI3eUM3U2VwdHRTdUQ3NnEvMC8w Q0UxMEYzRDJGNzI0Njc4N0U3MTcxRDFBMUQ4OEJBMEJBQTY1M0U3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaVsx1Cm4DFt8UNFykr+ghKdO4Ed3zMvwMdFAA4+pxZD8HLt87dEP/0SW+iIp 6jHFg7hB1ICCfkyyukZkzM+7li1pQIHM8ptL7320YsjCPWF13Z61x8AJZ2yuw1wb cHHl/A38b8qkCgWwk9JRQa2vxMZnNoQ4LiKskwjlZnHFqtpgZkvXqJpE2inMxfXX fnMRVFZ+iXQVLQynQN9pQYR0eBbnt7bSkoOLWp59EpUhIX9Q8fJS9uBO4K1kJ3Ev UNvX99A03z8Jr3ct9eZVcDayvCp7J4+5YIx1TagRD2oSmGduhZjtqeUXYzFcG3eM jpICoLE3+b1kWQObze/RPsVV5A== -----END CERTIFICATE-----Generated at Mon Nov 3 12:10:32 2025 by rpki-client