$ rpki-client -vvf rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.mft File: EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.mft (raw, json) Hash identifier: VmBm2dMg8IgAav8wP3O07uQxDrmSbJVdquonDA48MXM= Subject key identifier: AA:A0:2B:AF:AF:10:A4:78:52:E2:14:88:8C:57:8D:68:AF:B4:10:B0 Authority key identifier: EC:11:D6:56:6E:30:F6:E4:7B:0B:1C:3C:93:1A:CA:63:26:C1:EE:25 Certificate issuer: /CN=EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25 Certificate serial: 2E27A4843770BB61D8AEA0E3EDD44DBE40B7146F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.cer Subject info access: rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.mft Manifest number: 32 Signing time: Mon 03 Nov 2025 00:36:08 +0000 Manifest this update: Mon 03 Nov 2025 00:31:08 +0000 Manifest next update: Tue 04 Nov 2025 04:10:08 +0000 Files and hashes: 1: 323830343a313532383a3a2f33322d3438203d3e20323633333734.roa (hash: cdeeQ8509mY7Km2qjycj2nRNYS5thd+cMlp1W7mFDbE=) 2: 3139312e33372e3232342e302f32312d3235203d3e20323633333734.roa (hash: MW+jMLEuufHi1/6mMTGA1v5xS5zh0uzlQ7x4DXe5hMk=) 3: EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.crl (hash: j5RkysRQgRXRaAry5NroElGJQAJH/mh/Q+nGloUHlpg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.crl rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 04:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:27:a4:84:37:70:bb:61:d8:ae:a0:e3:ed:d4:4d:be:40:b7:14:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25 Validity Not Before: Nov 3 00:31:08 2025 GMT Not After : Nov 4 04:10:08 2025 GMT Subject: CN=AAA02BAFAF10A47852E214888C578D68AFB410B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ce:52:3a:80:e8:60:3f:84:5e:ba:9b:a0:2b: ed:eb:49:0d:ee:a4:f1:03:74:35:13:82:6f:48:78: 3b:7c:d6:5a:20:9b:1f:a8:fe:dd:f6:d0:6b:8c:f9: be:d4:e2:0d:df:a1:00:b1:06:3a:a3:1c:c7:1c:72: cd:9d:4e:2c:ac:ba:72:3a:64:45:b8:f1:44:d1:94: 76:51:bd:6e:12:a7:a7:41:11:01:95:28:03:00:a8: ab:9d:2c:07:d2:d1:e5:68:b9:ba:d4:f6:00:59:33: 72:a5:56:3f:cc:14:77:cb:fe:1b:ab:5e:81:c8:0c: ad:06:56:7e:c2:4a:1f:4a:b6:63:a7:13:ed:22:49: ab:bc:08:2f:39:70:7a:fa:3a:cf:aa:1e:70:66:44: 1c:a9:39:4a:1e:59:b0:ce:ee:9d:ae:f2:09:b8:92: 4d:73:9a:61:1d:98:49:d5:b4:de:79:8a:4c:eb:e6: b9:00:ba:81:8a:a0:8d:ea:23:92:a9:a2:da:bd:aa: 49:47:c5:84:6f:47:47:55:d8:f2:c5:a8:28:76:89: d9:0e:cf:e6:96:06:26:da:fd:c8:1f:ee:9d:f7:eb: 4a:77:ed:5e:ff:00:7b:0c:14:03:89:9b:d8:2c:45: c8:e5:ed:68:b4:e8:b0:88:7a:4d:0f:ac:80:9b:f0: a9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A0:2B:AF:AF:10:A4:78:52:E2:14:88:8C:57:8D:68:AF:B4:10:B0 X509v3 Authority Key Identifier: keyid:EC:11:D6:56:6E:30:F6:E4:7B:0B:1C:3C:93:1A:CA:63:26:C1:EE:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f1:ca:e1:0d:d2:92:b6:e9:0b:1f:d5:34:15:aa:49:ce:f2: 69:0b:95:24:4f:1a:b8:c2:f9:29:08:b8:bf:80:6a:1c:6d:88: db:06:67:4c:02:e8:3c:ab:e4:b9:ab:93:c6:be:a1:bc:05:d5: f6:13:e0:56:16:68:90:a8:36:35:3e:36:53:c2:47:95:f8:ff: 19:0a:0d:6d:2d:5b:8f:0d:59:e2:a6:dd:58:e1:96:11:e1:cb: 03:f0:c2:ec:b8:d9:9d:e2:50:01:69:1f:b2:1c:97:ec:9f:c8: 73:3c:31:2b:38:7f:56:73:5f:3b:27:83:2c:b2:b7:4f:fc:ff: d2:2c:ec:72:82:e1:7b:bc:2a:73:23:ca:ec:76:cc:a9:5f:f7: 50:25:83:cd:8d:0e:dd:10:f9:9b:b9:bc:3b:96:6c:f3:8f:cb: 50:82:9e:ed:3c:ac:6e:68:fd:00:14:30:c4:75:c9:69:43:28: dc:e8:fd:0a:23:70:4a:f1:d4:ad:26:cc:8d:96:87:9e:98:11: 6d:16:cb:75:a4:f8:8c:33:1d:04:e5:88:33:0a:56:11:fa:77: d5:12:0d:65:c0:2d:41:52:7d:f7:dc:01:71:e9:8b:97:79:23: 32:91:fd:0e:dd:44:da:90:79:94:37:41:5e:71:a5:c9:28:1a: b3:db:95:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULiekhDdwu2HYrqDj7dRNvkC3FG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMxMUQ2NTY2RTMwRjZFNDdCMEIxQzNDOTMxQUNBNjMy NkMxRUUyNTAeFw0yNTExMDMwMDMxMDhaFw0yNTExMDQwNDEwMDhaMDMxMTAvBgNV BAMTKEFBQTAyQkFGQUYxMEE0Nzg1MkUyMTQ4ODhDNTc4RDY4QUZCNDEwQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTzlI6gOhgP4ReupugK+3rSQ3u pPEDdDUTgm9IeDt81logmx+o/t320GuM+b7U4g3foQCxBjqjHMcccs2dTiysunI6 ZEW48UTRlHZRvW4Sp6dBEQGVKAMAqKudLAfS0eVoubrU9gBZM3KlVj/MFHfL/hur XoHIDK0GVn7CSh9KtmOnE+0iSau8CC85cHr6Os+qHnBmRBypOUoeWbDO7p2u8gm4 kk1zmmEdmEnVtN55ikzr5rkAuoGKoI3qI5Kpotq9qklHxYRvR0dV2PLFqCh2idkO z+aWBiba/cgf7p3360p37V7/AHsMFAOJm9gsRcjl7Wi06LCIek0PrICb8KmfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqqArr68QpHhS4hSIjFeNaK+0ELAwHwYDVR0j BBgwFoAU7BHWVm4w9uR7Cxw8kxrKYybB7iUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0FUZVBDQjJTVkhwTXZlUnRSeFAyUVJrdzNXdnUxc1g0d29HNUJ2ekVM S1MvMC9FQzExRDY1NjZFMzBGNkU0N0IwQjFDM0M5MzFBQ0E2MzI2QzFFRTI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDMTFENjU2NkUzMEY2RTQ3 QjBCMUMzQzkzMUFDQTYzMjZDMUVFMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0FUZVBDQjJTVkhwTXZlUnRSeFAyUVJrdzNXdnUxc1g0d29HNUJ2ekVMS1MvMC9F QzExRDY1NjZFMzBGNkU0N0IwQjFDM0M5MzFBQ0E2MzI2QzFFRTI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdvHK4Q3SkrbpCx/VNBWqSc7yaQuVJE8auML5KQi4v4BqHG2I2wZnTALoPKvk uauTxr6hvAXV9hPgVhZokKg2NT42U8JHlfj/GQoNbS1bjw1Z4qbdWOGWEeHLA/DC 7LjZneJQAWkfshyX7J/IczwxKzh/VnNfOyeDLLK3T/z/0izscoLhe7wqcyPK7HbM qV/3UCWDzY0O3RD5m7m8O5Zs84/LUIKe7Tysbmj9ABQwxHXJaUMo3Oj9CiNwSvHU rSbMjZaHnpgRbRbLdaT4jDMdBOWIMwpWEfp31RINZcAtQVJ999wBcemLl3kjMpH9 Dt1E2pB5lDdBXnGlySgas9uVwA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:01:17 2025 by rpki-client