$ rpki-client -vvf rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.mft File: 6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.mft (raw, json) Hash identifier: u8gSvYaldLCFRyjV9c/5JL41Kmzko2nCHv8lfmKyTE0= Subject key identifier: AA:A7:D7:14:B7:66:04:CD:8E:BF:59:6C:A9:6A:43:18:24:75:8B:EB Authority key identifier: 6F:F2:A4:03:3B:E3:4E:02:3E:9C:C8:CA:78:CA:78:5B:05:DE:7D:A4 Certificate issuer: /CN=6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4 Certificate serial: 27AD7B3EF31CCB6E7FD5FAB5D000A569A20B6BBB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.cer Subject info access: rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.mft Manifest number: 030A Signing time: Wed 05 Nov 2025 17:54:03 +0000 Manifest this update: Wed 05 Nov 2025 17:49:03 +0000 Manifest next update: Thu 06 Nov 2025 18:18:03 +0000 Files and hashes: 1: 323830343a323032303a3a2f33322d3438203d3e20323634343730.roa (hash: OMMS11OeUiHpd1pIS6OUby2WvxhXAqQgv78+NqvvvsQ=) 2: 3133312e3235352e38302e302f32322d3234203d3e20323634343730.roa (hash: yWVpzzfxPmeNo2QzaRp9WQbxJTr8twBOkMO/pK/U4VA=) 3: 6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.crl (hash: myUm7OB8Lv+EYkHZqMuwBnI6CAMsgS4rwUnpOO5MUSw=) 4: 323830343a323032303a3a2f3332203d3e20323634343730.roa (hash: xjd1OuuN58pfUiRFC0GiT3xPfBqcGZPLvEFa4AnBvTg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.crl rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 18:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ad:7b:3e:f3:1c:cb:6e:7f:d5:fa:b5:d0:00:a5:69:a2:0b:6b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4 Validity Not Before: Nov 5 17:49:03 2025 GMT Not After : Nov 6 18:18:03 2025 GMT Subject: CN=AAA7D714B76604CD8EBF596CA96A431824758BEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f6:12:a6:81:46:1f:b8:95:1c:3c:9e:00:21: 0c:7d:a3:0b:d6:40:5f:89:40:b7:b3:4e:b9:67:84: 33:71:2e:fc:f1:ac:5d:42:2a:b9:69:1b:1b:f6:ef: 86:61:74:f6:46:e8:b2:2e:1d:cb:5d:6e:4d:f6:a0: ef:a0:5e:fc:ee:be:d0:b8:d3:6c:9a:f9:21:12:8b: a8:a9:92:87:b3:4f:a1:87:9c:e1:25:45:08:6c:41: 0e:33:5d:6a:d1:ce:05:b2:f8:a8:ca:b7:46:cd:64: 35:a0:d1:36:75:dc:69:1b:e0:86:65:7f:98:d3:4d: 6e:8a:f9:ea:34:7f:33:ad:31:99:d8:65:5f:64:84: 37:2f:55:ed:07:08:c9:50:fe:40:0f:09:a3:da:a5: 14:24:c3:86:7f:86:42:44:a4:7a:ee:6a:b8:43:73: f3:7c:b3:1c:ad:41:a2:e6:58:2a:5f:d3:f9:8b:b2: 9e:de:82:6d:bd:49:b9:57:b3:6a:09:78:ea:7e:05: 60:96:0b:09:24:cb:3c:1f:75:e6:31:80:0a:f3:b2: 35:54:66:c6:25:72:70:80:a8:ec:12:8f:f1:9e:7b: b4:70:b7:ac:22:25:d4:ae:94:ab:b6:4b:87:7b:e0: a2:69:1c:90:87:71:8f:14:49:92:6f:93:95:51:5b: 54:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A7:D7:14:B7:66:04:CD:8E:BF:59:6C:A9:6A:43:18:24:75:8B:EB X509v3 Authority Key Identifier: keyid:6F:F2:A4:03:3B:E3:4E:02:3E:9C:C8:CA:78:CA:78:5B:05:DE:7D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:5b:47:a4:33:2c:b1:a1:f5:7b:81:22:fa:f0:55:c2:97:de: 51:a5:a6:ee:1a:bc:cb:e3:96:8a:96:23:7e:e2:2b:7a:89:7e: 84:e4:b2:43:56:94:73:42:2e:33:6a:30:43:73:08:24:2e:20: 67:d8:a0:45:36:2c:77:00:74:67:a5:e5:24:ad:20:19:dd:19: 52:e3:bd:65:32:0c:e8:52:4a:14:f3:97:a8:a6:84:bd:68:66: ac:aa:6a:18:42:58:db:08:77:ed:8d:61:58:6c:e4:b4:0b:6a: 04:ba:b3:9a:ff:ba:d1:7a:b1:8d:cd:5d:f1:c7:64:f5:69:1a: b5:ee:00:b5:4c:3e:62:22:65:be:d7:07:dc:f6:47:ce:a9:ef: 73:ab:29:14:59:ea:01:73:f7:ac:dc:d4:37:95:4e:15:23:f6: 77:a4:94:e5:4f:a4:ce:48:94:e5:7d:9f:ae:cb:99:a1:e1:55: 6e:e7:f5:ae:b3:ea:4c:2b:15:e6:be:9a:d3:5a:57:88:f0:19: 22:aa:b6:6a:96:ba:6c:0d:19:df:74:6d:8f:77:64:11:ba:6f: 97:fa:cf:6e:1a:b1:be:67:c2:56:b8:f4:49:23:36:b4:17:38: f4:40:59:6b:7c:76:57:94:96:9c:e1:a1:00:2b:04:18:36:16: b8:45:65:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJ617PvMcy25/1fq10AClaaILa7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGMkE0MDMzQkUzNEUwMjNFOUNDOENBNzhDQTc4NUIw NURFN0RBNDAeFw0yNTExMDUxNzQ5MDNaFw0yNTExMDYxODE4MDNaMDMxMTAvBgNV BAMTKEFBQTdENzE0Qjc2NjA0Q0Q4RUJGNTk2Q0E5NkE0MzE4MjQ3NThCRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU9hKmgUYfuJUcPJ4AIQx9owvW QF+JQLezTrlnhDNxLvzxrF1CKrlpGxv274ZhdPZG6LIuHctdbk32oO+gXvzuvtC4 02ya+SESi6ipkoezT6GHnOElRQhsQQ4zXWrRzgWy+KjKt0bNZDWg0TZ13Gkb4IZl f5jTTW6K+eo0fzOtMZnYZV9khDcvVe0HCMlQ/kAPCaPapRQkw4Z/hkJEpHruarhD c/N8sxytQaLmWCpf0/mLsp7egm29SblXs2oJeOp+BWCWCwkkyzwfdeYxgArzsjVU ZsYlcnCAqOwSj/Gee7Rwt6wiJdSulKu2S4d74KJpHJCHcY8USZJvk5VRW1RXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqqfXFLdmBM2Ov1lsqWpDGCR1i+swHwYDVR0j BBgwFoAUb/KkAzvjTgI+nMjKeMp4WwXefaQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRk51M2hVenRnamVveUdqR0pSaEFzTXZSSGFlUm5jcW4xRW12OU1UWXE5 eGEvMS82RkYyQTQwMzNCRTM0RTAyM0U5Q0M4Q0E3OENBNzg1QjA1REU3REE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGRjJBNDAzM0JFMzRFMDIz RTlDQzhDQTc4Q0E3ODVCMDVERTdEQTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rk51M2hVenRnamVveUdqR0pSaEFzTXZSSGFlUm5jcW4xRW12OU1UWXE5eGEvMS82 RkYyQTQwMzNCRTM0RTAyM0U5Q0M4Q0E3OENBNzg1QjA1REU3REE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl1tHpDMssaH1e4Ei+vBVwpfeUaWm7hq8y+OWipYjfuIreol+hOSyQ1aUc0Iu M2owQ3MIJC4gZ9igRTYsdwB0Z6XlJK0gGd0ZUuO9ZTIM6FJKFPOXqKaEvWhmrKpq GEJY2wh37Y1hWGzktAtqBLqzmv+60Xqxjc1d8cdk9Wkate4AtUw+YiJlvtcH3PZH zqnvc6spFFnqAXP3rNzUN5VOFSP2d6SU5U+kzkiU5X2frsuZoeFVbuf1rrPqTCsV 5r6a01pXiPAZIqq2apa6bA0Z33Rtj3dkEbpvl/rPbhqxvmfCVrj0SSM2tBc49EBZ a3x2V5SWnOGhACsEGDYWuEVl/g== -----END CERTIFICATE-----Generated at Thu Nov 6 06:19:20 2025 by rpki-client