$ rpki-client -vvf rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.mft File: 7CB4975FBB425123F7AC986A071279CDA92B5BCD.mft (raw, json) Hash identifier: LxgchT/nMiYZe7r+4XlkVmnI3jOyKsmQbw7qOgnZrOw= Subject key identifier: 85:EA:5C:9F:92:01:E9:E2:DB:4D:E3:48:5F:F4:9C:86:D1:2E:23:77 Authority key identifier: 7C:B4:97:5F:BB:42:51:23:F7:AC:98:6A:07:12:79:CD:A9:2B:5B:CD Certificate issuer: /CN=7CB4975FBB425123F7AC986A071279CDA92B5BCD Certificate serial: 5699E5215054DA0C24AF443C96F4E8093D16A912 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.cer Subject info access: rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.mft Manifest number: 0304 Signing time: Mon 03 Nov 2025 00:39:01 +0000 Manifest this update: Mon 03 Nov 2025 00:34:01 +0000 Manifest next update: Tue 04 Nov 2025 04:29:01 +0000 Files and hashes: 1: 34352e3137302e3139322e302f32322d3232203d3e20323638313739.roa (hash: CV6R0pQQO+KCLH13Igq4teZRyyVXBmiJdfNydxmZSO8=) 2: 7CB4975FBB425123F7AC986A071279CDA92B5BCD.crl (hash: mEPKZu5gjB9Yq84e74bJUPtVr+Io5CQWnAaRStnhOiQ=) 3: 323830343a353934303a3a2f33322d3332203d3e20323638313739.roa (hash: NfxsXVyOd3rKDYTUYvdfeaMgnhbQtQG/Cn15GYtSnfM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.crl rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 04:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:99:e5:21:50:54:da:0c:24:af:44:3c:96:f4:e8:09:3d:16:a9:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB4975FBB425123F7AC986A071279CDA92B5BCD Validity Not Before: Nov 3 00:34:01 2025 GMT Not After : Nov 4 04:29:01 2025 GMT Subject: CN=85EA5C9F9201E9E2DB4DE3485FF49C86D12E2377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:35:79:c1:ac:b8:39:66:87:e1:20:78:6f:2c: 0f:04:47:31:dd:c2:46:8a:fc:49:cc:0a:4a:57:c2: 96:72:77:b4:26:f1:0c:19:c1:ed:db:da:1b:1d:77: da:0a:40:05:89:40:7f:80:26:34:34:2a:6e:91:ad: 76:0d:7d:aa:63:fb:0b:a2:8e:2d:b2:9c:79:75:bd: eb:70:f6:70:20:67:de:e1:61:85:cb:de:c7:de:46: 1f:57:82:93:aa:9f:fe:3b:e5:b4:f1:3a:41:71:07: 66:3e:d5:c8:dd:a2:ba:92:d0:d8:27:f9:11:94:36: 28:c7:27:7c:80:92:e9:6a:7d:f2:d0:22:aa:4f:29: e2:d6:5b:cb:b0:85:d0:4f:d3:4f:ee:53:b7:48:ee: ed:d0:b7:35:1b:96:69:d4:03:f7:30:58:83:64:43: 53:2c:50:d9:15:38:2b:36:b6:a9:7e:ef:87:fc:40: a0:37:46:96:d2:2f:6e:b2:51:8a:f3:a5:d1:b5:72: 19:87:cf:09:4e:69:34:fb:4a:f2:94:5d:7d:e5:40: 4a:d3:44:05:e2:e5:0e:8b:d6:95:7d:e2:98:15:b0: 73:7a:30:d9:d1:d1:2b:6c:69:03:0d:40:79:e7:ed: 4e:47:01:e5:32:9d:da:7c:36:28:75:3d:0c:7a:d7: e6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EA:5C:9F:92:01:E9:E2:DB:4D:E3:48:5F:F4:9C:86:D1:2E:23:77 X509v3 Authority Key Identifier: keyid:7C:B4:97:5F:BB:42:51:23:F7:AC:98:6A:07:12:79:CD:A9:2B:5B:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:d1:23:25:9e:8b:70:fb:08:6e:87:88:97:a4:c4:23:75:90: 08:0b:5a:ed:b3:d4:d9:47:c9:19:24:74:56:0c:72:8e:95:f3: ae:5d:f8:1e:09:5e:9d:a0:5d:c1:f8:55:97:c8:b6:d8:5e:e6: df:cc:a7:51:bb:c9:27:de:30:58:db:08:d4:26:22:39:18:f8: db:b3:30:71:f9:8c:6d:81:f3:b8:29:c1:fb:60:91:25:8f:48: bf:50:2d:a5:63:32:5f:54:62:5c:96:ef:92:50:47:ea:f6:34: 18:1d:ff:6b:d1:96:7f:68:c3:f8:61:73:17:5c:4a:84:a6:e1: 8d:10:31:54:da:16:c7:2a:dd:91:a5:95:79:26:23:af:dd:73: 2e:8d:45:9e:8f:67:3e:8e:93:cd:8a:c5:24:d3:e4:39:3a:0c: 51:a9:d7:64:5d:7f:29:01:47:84:6a:74:ac:9b:c4:9a:a7:ec: 82:8d:f1:25:00:a0:b3:31:db:7b:7b:5c:bc:17:62:a7:bf:30: c9:1d:e9:97:44:53:29:44:04:d0:ce:a1:40:5e:a1:b5:45:ce: 81:03:a4:86:50:c5:9f:5f:98:4b:ec:8c:ea:c6:78:fd:0f:48: 18:36:1a:67:31:72:6e:71:e7:6f:e1:81:b0:1d:d1:6a:0e:74: 95:d2:96:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVpnlIVBU2gwkr0Q8lvToCT0WqRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCNDk3NUZCQjQyNTEyM0Y3QUM5ODZBMDcxMjc5Q0RB OTJCNUJDRDAeFw0yNTExMDMwMDM0MDFaFw0yNTExMDQwNDI5MDFaMDMxMTAvBgNV BAMTKDg1RUE1QzlGOTIwMUU5RTJEQjRERTM0ODVGRjQ5Qzg2RDEyRTIzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmNXnBrLg5ZofhIHhvLA8ERzHd wkaK/EnMCkpXwpZyd7Qm8QwZwe3b2hsdd9oKQAWJQH+AJjQ0Km6RrXYNfapj+wui ji2ynHl1vetw9nAgZ97hYYXL3sfeRh9XgpOqn/475bTxOkFxB2Y+1cjdorqS0Ngn +RGUNijHJ3yAkulqffLQIqpPKeLWW8uwhdBP00/uU7dI7u3QtzUblmnUA/cwWINk Q1MsUNkVOCs2tql+74f8QKA3RpbSL26yUYrzpdG1chmHzwlOaTT7SvKUXX3lQErT RAXi5Q6L1pV94pgVsHN6MNnR0StsaQMNQHnn7U5HAeUyndp8Nih1PQx61+bhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhepcn5IB6eLbTeNIX/SchtEuI3cwHwYDVR0j BBgwFoAUfLSXX7tCUSP3rJhqBxJ5zakrW80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzF6eTF1YldXcUgyQUw2SG81TUJ4VUNqaEZpYmFiVlROQzhBOVZUTGpO MVMvMS83Q0I0OTc1RkJCNDI1MTIzRjdBQzk4NkEwNzEyNzlDREE5MkI1QkNELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQjQ5NzVGQkI0MjUxMjNG N0FDOTg2QTA3MTI3OUNEQTkyQjVCQ0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzF6eTF1YldXcUgyQUw2SG81TUJ4VUNqaEZpYmFiVlROQzhBOVZUTGpOMVMvMS83 Q0I0OTc1RkJCNDI1MTIzRjdBQzk4NkEwNzEyNzlDREE5MkI1QkNELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv9EjJZ6LcPsIboeIl6TEI3WQCAta7bPU2UfJGSR0VgxyjpXzrl34HglenaBd wfhVl8i22F7m38ynUbvJJ94wWNsI1CYiORj427MwcfmMbYHzuCnB+2CRJY9Iv1At pWMyX1RiXJbvklBH6vY0GB3/a9GWf2jD+GFzF1xKhKbhjRAxVNoWxyrdkaWVeSYj r91zLo1Fno9nPo6TzYrFJNPkOToMUanXZF1/KQFHhGp0rJvEmqfsgo3xJQCgszHb e3tcvBdip78wyR3pl0RTKUQE0M6hQF6htUXOgQOkhlDFn1+YS+yM6sZ4/Q9IGDYa ZzFybnHnb+GBsB3Rag50ldKW4Q== -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:22 2025 by rpki-client