$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft File: 1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft (raw, json) Hash identifier: x+KaQz8O5e+WqMSUNMCtkiarggOFF3FrabmLKUSL0Wg= Subject key identifier: F8:87:3F:B3:EA:D8:2F:6D:CC:2D:2F:5F:45:17:A5:A8:D3:0F:5D:02 Authority key identifier: 1B:E8:99:5F:C9:C3:95:14:5A:97:45:6B:64:44:2A:C6:8C:0D:F4:EB Certificate issuer: /CN=1BE8995FC9C395145A97456B64442AC68C0DF4EB Certificate serial: 78D8E7044E5B969E5AB9BDE58D5A305079CC909E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer Subject info access: rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft Manifest number: 01E3 Signing time: Sun 02 Nov 2025 22:30:32 +0000 Manifest this update: Sun 02 Nov 2025 22:25:32 +0000 Manifest next update: Mon 03 Nov 2025 23:25:32 +0000 Files and hashes: 1: 1BE8995FC9C395145A97456B64442AC68C0DF4EB.crl (hash: Zmcz2UKPeV9CLa6HInG3L76yR2WlQBy8ncfmwNIx/g0=) 2: 323830343a346530383a3a2f33322d3634203d3e20323638323335.roa (hash: XH1N2cfxCmBT8VcK9qJsDfraONQoZ81C4Yo8ki7quN0=) 3: 34352e3233362e3131362e302f32322d3234203d3e20323638323335.roa (hash: aevkZNp1r0p7IWRIUz8od2ybg+zKEryAACHQcwg1UxI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.crl rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 23:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d8:e7:04:4e:5b:96:9e:5a:b9:bd:e5:8d:5a:30:50:79:cc:90:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BE8995FC9C395145A97456B64442AC68C0DF4EB Validity Not Before: Nov 2 22:25:32 2025 GMT Not After : Nov 3 23:25:32 2025 GMT Subject: CN=F8873FB3EAD82F6DCC2D2F5F4517A5A8D30F5D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b5:bd:b2:04:8a:bf:83:a1:9c:91:75:2d:2f: e7:60:ed:ca:53:6f:5f:33:3f:f3:d1:d4:04:a9:9d: df:99:ef:0b:8b:33:fe:19:94:aa:72:fd:48:92:8f: fd:c5:b4:bf:f0:4b:3e:40:5c:6b:62:bf:07:d4:69: 3d:11:7e:cf:90:b5:7c:17:31:b4:94:94:40:a7:85: 05:16:49:2e:5e:8c:a0:d6:68:86:2f:42:ef:1d:11: 1a:eb:84:48:dd:0c:24:56:ce:88:60:24:36:91:7a: 32:1d:f5:2b:dc:84:4f:f0:bd:47:d0:10:10:65:a6: ce:97:87:59:51:9d:37:7f:86:82:54:9f:22:f8:46: 79:35:bd:b4:d9:4c:cd:57:2b:36:c1:02:6e:15:55: 12:3c:80:9b:1c:2c:d5:2d:9b:a9:35:51:de:c3:08: fe:50:7b:f5:02:4d:38:b4:a0:8a:8a:6a:1b:25:cb: 3b:9b:37:c4:b3:88:89:3c:f2:f3:21:81:80:76:c1: 77:c9:5c:9e:3f:d5:5d:d7:81:89:89:49:17:b2:00: 34:fa:71:ae:ff:1d:be:52:06:98:e4:88:2b:60:92: 03:0c:b0:20:38:7f:dc:53:d9:be:f8:f3:76:43:25: e8:35:8c:c5:46:fd:fb:8d:07:6d:22:8c:8a:d2:9f: 12:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:87:3F:B3:EA:D8:2F:6D:CC:2D:2F:5F:45:17:A5:A8:D3:0F:5D:02 X509v3 Authority Key Identifier: keyid:1B:E8:99:5F:C9:C3:95:14:5A:97:45:6B:64:44:2A:C6:8C:0D:F4:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:02:ef:b1:c3:70:24:04:65:19:ca:6d:3c:80:80:de:96:57: 74:bd:79:09:5a:cc:90:c1:ae:72:30:e9:e7:21:cc:7d:64:4a: b9:63:d7:79:26:b0:9e:11:06:9d:3c:9b:c5:d9:e3:b0:5c:e6: 81:9f:bc:56:90:4b:28:4f:eb:4b:c9:b2:04:43:fb:f7:c8:1e: 6c:41:74:3d:86:d7:49:49:c9:64:06:6b:16:1b:78:39:be:92: d3:6b:ee:a4:b8:47:77:f6:98:c8:d8:b7:f4:f7:53:0b:6b:d7: cc:f0:eb:47:f9:8b:18:0d:36:a1:35:d3:1f:b6:f4:b6:b4:34: 6b:0a:0b:64:7e:12:38:08:75:b6:70:89:20:36:e9:6a:1a:8f: 4b:11:9e:66:8e:78:a5:46:9e:5b:92:fc:1f:70:ad:ed:4d:cd: cb:17:4d:df:79:39:a0:98:f1:41:be:8e:94:1b:05:7b:00:8d: b1:13:bf:21:5e:56:c2:08:4e:8f:fd:d0:4c:62:f4:9e:99:f6: 8a:e0:7d:65:b1:0a:74:8d:cd:5f:d5:02:73:a3:75:c1:1c:c4: a3:c0:11:f0:04:7f:f9:c5:65:91:9a:fa:bf:66:45:ac:5e:39: bc:f4:be:6d:94:ac:86:0c:5f:80:38:cb:27:97:22:89:93:0e: 49:ef:d3:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeNjnBE5blp5aub3ljVowUHnMkJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJFODk5NUZDOUMzOTUxNDVBOTc0NTZCNjQ0NDJBQzY4 QzBERjRFQjAeFw0yNTExMDIyMjI1MzJaFw0yNTExMDMyMzI1MzJaMDMxMTAvBgNV BAMTKEY4ODczRkIzRUFEODJGNkRDQzJEMkY1RjQ1MTdBNUE4RDMwRjVEMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3tb2yBIq/g6GckXUtL+dg7cpT b18zP/PR1ASpnd+Z7wuLM/4ZlKpy/UiSj/3FtL/wSz5AXGtivwfUaT0Rfs+QtXwX MbSUlECnhQUWSS5ejKDWaIYvQu8dERrrhEjdDCRWzohgJDaRejId9SvchE/wvUfQ EBBlps6Xh1lRnTd/hoJUnyL4Rnk1vbTZTM1XKzbBAm4VVRI8gJscLNUtm6k1Ud7D CP5Qe/UCTTi0oIqKahslyzubN8SziIk88vMhgYB2wXfJXJ4/1V3XgYmJSReyADT6 ca7/Hb5SBpjkiCtgkgMMsCA4f9xT2b7483ZDJeg1jMVG/fuNB20ijIrSnxL3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+Ic/s+rYL23MLS9fRRelqNMPXQIwHwYDVR0j BBgwFoAUG+iZX8nDlRRal0VrZEQqxowN9OswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzNua0pMZzZzQ29rcVlxRlZLNjNhMTl4c0VpaHJHMUxNb05YOEc1S002 S3IvMC8xQkU4OTk1RkM5QzM5NTE0NUE5NzQ1NkI2NDQ0MkFDNjhDMERGNEVCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCRTg5OTVGQzlDMzk1MTQ1 QTk3NDU2QjY0NDQyQUM2OEMwREY0RUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzNua0pMZzZzQ29rcVlxRlZLNjNhMTl4c0VpaHJHMUxNb05YOEc1S002S3IvMC8x QkU4OTk1RkM5QzM5NTE0NUE5NzQ1NkI2NDQ0MkFDNjhDMERGNEVCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVgLvscNwJARlGcptPICA3pZXdL15CVrMkMGucjDp5yHMfWRKuWPXeSawnhEG nTybxdnjsFzmgZ+8VpBLKE/rS8myBEP798gebEF0PYbXSUnJZAZrFht4Ob6S02vu pLhHd/aYyNi39PdTC2vXzPDrR/mLGA02oTXTH7b0trQ0awoLZH4SOAh1tnCJIDbp ahqPSxGeZo54pUaeW5L8H3Ct7U3NyxdN33k5oJjxQb6OlBsFewCNsRO/IV5WwghO j/3QTGL0npn2iuB9ZbEKdI3NX9UCc6N1wRzEo8AR8AR/+cVlkZr6v2ZFrF45vPS+ bZSshgxfgDjLJ5ciiZMOSe/T+Q== -----END CERTIFICATE-----Generated at Mon Nov 3 12:31:42 2025 by rpki-client