$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/E8368A24073479BF2A14994A136ADFE43F6A2E6D.mft File: E8368A24073479BF2A14994A136ADFE43F6A2E6D.mft (raw, json) Hash identifier: aHOXGwZb+f/vraOGyyB9vd4e8UwYvViINdNRU1AQXvE= Subject key identifier: C8:AF:7F:84:89:AB:50:3B:22:67:C7:DB:4F:A4:7C:2E:D0:42:CB:A9 Authority key identifier: E8:36:8A:24:07:34:79:BF:2A:14:99:4A:13:6A:DF:E4:3F:6A:2E:6D Certificate issuer: /CN=E8368A24073479BF2A14994A136ADFE43F6A2E6D Certificate serial: 2B72D90FF276F35F4120A85FFDF936A82BE72B04 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8368A24073479BF2A14994A136ADFE43F6A2E6D.cer Subject info access: rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/E8368A24073479BF2A14994A136ADFE43F6A2E6D.mft Manifest number: 1A Signing time: Mon 03 Nov 2025 13:10:16 +0000 Manifest this update: Mon 03 Nov 2025 13:05:16 +0000 Manifest next update: Tue 04 Nov 2025 16:08:16 +0000 Files and hashes: 1: 323830343a313535343a3a2f33322d313238203d3e20323633333834.roa (hash: Fg1V+G/M5+lYQoYO7JfPUmCVhGZ5CcKr04EIrygJn+U=) 2: 3137372e38372e32382e302f32322d3332203d3e20323633333834.roa (hash: 2slGM5b9YYDtX/KGjzsQKgLP8u0fMrUO93ql8Gz+VhI=) 3: 3133382e3138352e34302e302f32322d3332203d3e20323633333834.roa (hash: Qd/ElD3iZce7dbtVOzF8dJv3HnZAKamsE5AylawYSpU=) 4: E8368A24073479BF2A14994A136ADFE43F6A2E6D.crl (hash: D6OqEvze0Y7QxKs2qyloGYNyAQYZo7XjyD/1W66pwUI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/E8368A24073479BF2A14994A136ADFE43F6A2E6D.crl rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/E8368A24073479BF2A14994A136ADFE43F6A2E6D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8368A24073479BF2A14994A136ADFE43F6A2E6D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 16:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:72:d9:0f:f2:76:f3:5f:41:20:a8:5f:fd:f9:36:a8:2b:e7:2b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8368A24073479BF2A14994A136ADFE43F6A2E6D Validity Not Before: Nov 3 13:05:16 2025 GMT Not After : Nov 4 16:08:16 2025 GMT Subject: CN=C8AF7F8489AB503B2267C7DB4FA47C2ED042CBA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e1:d1:05:a5:a8:65:0c:77:2d:68:99:38:75: 43:52:52:71:0e:b1:1e:32:06:e1:ec:48:28:c0:34: e0:52:7c:99:63:cc:15:9b:6c:12:10:0d:fb:40:43: d7:8a:c2:87:de:ea:30:fc:bd:b8:b3:3b:76:46:3b: 97:4f:e4:ff:84:13:5b:79:ce:41:0b:db:e3:85:a8: d0:d7:82:a8:44:38:c4:bd:05:5e:d0:1d:93:7b:a1: 6b:22:af:e0:ee:8b:fc:60:91:9b:12:68:3d:7b:3f: fa:6a:19:df:0d:3f:27:9f:d5:8c:56:17:1c:b2:d8: 73:4a:34:ef:f6:fd:3c:dd:bf:73:8e:da:0a:bc:6a: 71:4e:0a:36:69:69:78:39:e2:48:cc:16:bb:56:e5: 40:3b:62:ac:1b:4f:d6:4e:a6:78:56:c9:f4:4a:11: f5:f7:6f:56:c1:50:a9:2e:ea:28:4f:94:b6:6d:98: 40:b5:97:9d:f8:d5:c4:9a:15:e0:3a:58:fd:32:f2: a0:f7:ad:9d:0b:ca:ae:69:a9:44:49:3a:79:e0:d9: 2c:0e:8c:a6:c6:57:6b:d3:18:a4:6a:fd:92:8a:99: 69:d2:e7:e8:c0:f1:68:e0:01:20:70:17:85:bb:8f: 5a:21:6f:76:44:9f:6e:93:33:1e:17:16:a2:76:79: c3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AF:7F:84:89:AB:50:3B:22:67:C7:DB:4F:A4:7C:2E:D0:42:CB:A9 X509v3 Authority Key Identifier: keyid:E8:36:8A:24:07:34:79:BF:2A:14:99:4A:13:6A:DF:E4:3F:6A:2E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/E8368A24073479BF2A14994A136ADFE43F6A2E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8368A24073479BF2A14994A136ADFE43F6A2E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/E8368A24073479BF2A14994A136ADFE43F6A2E6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:5f:30:de:87:fe:b5:42:ca:b0:83:a2:48:ea:48:cc:ef:ab: 63:ae:b0:00:c0:10:41:c7:ef:f8:dc:c2:49:a9:83:6f:c3:a8: 9d:49:29:a4:2b:21:b5:a7:c8:8a:20:7a:79:41:ab:85:02:39: 17:53:fc:fe:c1:2f:bf:d8:6b:ad:52:da:1d:e8:b3:5d:4c:d4: f4:58:8a:9a:72:9f:b8:c2:0c:fa:24:24:2d:e1:96:56:0a:48: 15:c4:40:81:c4:c9:83:10:f4:7f:2a:6d:46:df:c3:50:00:cc: d9:e1:33:6d:50:93:9b:db:71:19:a5:b7:ae:6e:21:b8:57:e9: f5:11:5c:d4:08:65:7a:9f:fd:77:32:23:a5:9d:18:11:4f:61: 07:ea:7e:cf:a4:5b:79:9d:c9:25:3a:a1:37:a8:e5:26:78:09: 07:a5:2b:1c:e9:fb:da:36:cc:7f:24:80:a1:b8:ce:e4:d2:26: 00:d9:6d:f5:0c:8b:59:c0:3f:95:7a:7a:6b:f2:6b:e4:7e:f0: af:9a:e2:a2:6e:54:a6:52:39:b0:ff:fd:58:33:c8:b3:98:3e: f3:d5:5c:70:b4:51:2c:e2:e1:b2:73:b0:4b:64:86:ae:03:12: ea:21:d4:ec:57:26:c9:60:46:4e:cf:c0:d6:7f:54:05:7f:af: b7:ef:d9:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUK3LZD/J2819BIKhf/fk2qCvnKwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgzNjhBMjQwNzM0NzlCRjJBMTQ5OTRBMTM2QURGRTQz RjZBMkU2RDAeFw0yNTExMDMxMzA1MTZaFw0yNTExMDQxNjA4MTZaMDMxMTAvBgNV BAMTKEM4QUY3Rjg0ODlBQjUwM0IyMjY3QzdEQjRGQTQ3QzJFRDA0MkNCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl4dEFpahlDHctaJk4dUNSUnEO sR4yBuHsSCjANOBSfJljzBWbbBIQDftAQ9eKwofe6jD8vbizO3ZGO5dP5P+EE1t5 zkEL2+OFqNDXgqhEOMS9BV7QHZN7oWsir+Dui/xgkZsSaD17P/pqGd8NPyef1YxW Fxyy2HNKNO/2/Tzdv3OO2gq8anFOCjZpaXg54kjMFrtW5UA7YqwbT9ZOpnhWyfRK EfX3b1bBUKku6ihPlLZtmEC1l5341cSaFeA6WP0y8qD3rZ0Lyq5pqURJOnng2SwO jKbGV2vTGKRq/ZKKmWnS5+jA8WjgASBwF4W7j1ohb3ZEn26TMx4XFqJ2ecMpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyK9/hImrUDsiZ8fbT6R8LtBCy6kwHwYDVR0j BBgwFoAU6DaKJAc0eb8qFJlKE2rf5D9qLm0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRlBXVzdjMlE5Q1RDQkU2clBKWHJLUnBwZUJZMVlyTlNTRXloVm1QbTlI QTEvMC9FODM2OEEyNDA3MzQ3OUJGMkExNDk5NEExMzZBREZFNDNGNkEyRTZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4MzY4QTI0MDczNDc5QkYy QTE0OTk0QTEzNkFERkU0M0Y2QTJFNkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RlBXVzdjMlE5Q1RDQkU2clBKWHJLUnBwZUJZMVlyTlNTRXloVm1QbTlIQTEvMC9F ODM2OEEyNDA3MzQ3OUJGMkExNDk5NEExMzZBREZFNDNGNkEyRTZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAl8w3of+tULKsIOiSOpIzO+rY66wAMAQQcfv+NzCSamDb8OonUkppCshtafI iiB6eUGrhQI5F1P8/sEvv9hrrVLaHeizXUzU9FiKmnKfuMIM+iQkLeGWVgpIFcRA gcTJgxD0fyptRt/DUADM2eEzbVCTm9txGaW3rm4huFfp9RFc1Ahlep/9dzIjpZ0Y EU9hB+p+z6RbeZ3JJTqhN6jlJngJB6UrHOn72jbMfySAobjO5NImANlt9QyLWcA/ lXp6a/Jr5H7wr5riom5UplI5sP/9WDPIs5g+89VccLRRLOLhsnOwS2SGrgMS6iHU 7FcmyWBGTs/A1n9UBX+vt+/ZSg== -----END CERTIFICATE-----Generated at Mon Nov 3 19:01:23 2025 by rpki-client