$ rpki-client -vvf rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/F2FC2409C974536DD07DCF34EDA886CFCF34700A.mft File: F2FC2409C974536DD07DCF34EDA886CFCF34700A.mft (raw, json) Hash identifier: vECNGOslM/etaICEhbmVzHfOxpYZMAYmKswPQDKMLlk= Subject key identifier: 1B:4A:A3:E6:1F:FE:EF:39:5A:E6:0A:06:B4:24:0B:4D:EC:FF:83:D4 Authority key identifier: F2:FC:24:09:C9:74:53:6D:D0:7D:CF:34:ED:A8:86:CF:CF:34:70:0A Certificate issuer: /CN=F2FC2409C974536DD07DCF34EDA886CFCF34700A Certificate serial: 7CAE5327024BCD5A12DF930679248C84C7E91C63 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2FC2409C974536DD07DCF34EDA886CFCF34700A.cer Subject info access: rsync://rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/F2FC2409C974536DD07DCF34EDA886CFCF34700A.mft Manifest number: 59 Signing time: Mon 03 Nov 2025 16:57:15 +0000 Manifest this update: Mon 03 Nov 2025 16:52:15 +0000 Manifest next update: Tue 04 Nov 2025 20:17:15 +0000 Files and hashes: 1: F2FC2409C974536DD07DCF34EDA886CFCF34700A.crl (hash: gk3j4dcogjGw++OYr5GIe3KAwLFjq5p8cSC6joary4c=) 2: 323830343a326138343a3a2f33322d313238203d3e20323634303736.roa (hash: YJKFiAKMThgxizm6OnFztHFMFUv9HZTzDxY2b7a+KOM=) 3: 3134332e3230322e3138342e302f32322d3332203d3e20323634303736.roa (hash: 0IGHCoNpLKZ74ARk+GfiEvD3MMiXbsNh9BQzEOG3u3s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/F2FC2409C974536DD07DCF34EDA886CFCF34700A.crl rsync://rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/F2FC2409C974536DD07DCF34EDA886CFCF34700A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2FC2409C974536DD07DCF34EDA886CFCF34700A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 20:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ae:53:27:02:4b:cd:5a:12:df:93:06:79:24:8c:84:c7:e9:1c:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2FC2409C974536DD07DCF34EDA886CFCF34700A Validity Not Before: Nov 3 16:52:15 2025 GMT Not After : Nov 4 20:17:15 2025 GMT Subject: CN=1B4AA3E61FFEEF395AE60A06B4240B4DECFF83D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d3:d3:a8:25:f1:e2:12:1d:2a:6a:b2:18:c4: b1:7e:1f:71:42:f7:95:96:bc:d1:36:c1:e5:99:c2: 0b:90:8b:72:86:fb:8a:14:82:1c:f1:4e:65:fc:54: 0f:d2:a5:8a:38:22:6d:11:4d:d8:39:d3:c8:fe:9f: 71:0a:64:17:07:cb:3b:05:9e:9d:e4:d3:65:2e:47: e8:97:86:fe:cb:2f:94:d8:f9:32:a5:18:2d:91:45: 84:1a:ef:38:ec:8a:6e:27:af:aa:ff:60:45:4a:84: 57:29:90:6f:e2:2c:b2:96:52:90:24:a2:f1:39:08: 4b:7e:a6:2d:48:c1:ec:62:f6:44:a7:58:13:b2:d5: 6f:6a:d2:c3:6f:ec:11:12:ef:78:2b:d0:85:5c:9f: e8:82:16:1e:09:45:a3:0e:51:fa:18:70:78:f3:6c: 47:59:3c:63:82:e2:92:6f:fa:45:ea:45:7b:37:8b: fd:38:63:09:bb:31:b6:9d:ff:3b:89:e6:ee:8e:9d: b6:b1:a2:c9:d7:8c:3f:74:04:5d:0d:ca:d9:0b:4c: f4:fb:85:9c:60:1a:db:7c:b6:88:ab:ef:46:0a:e5: 5a:83:eb:67:cd:6e:3f:18:10:9e:51:cb:0e:28:87: f8:5d:f9:83:5f:f4:91:6e:7b:41:c7:60:2f:e8:18: 20:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4A:A3:E6:1F:FE:EF:39:5A:E6:0A:06:B4:24:0B:4D:EC:FF:83:D4 X509v3 Authority Key Identifier: keyid:F2:FC:24:09:C9:74:53:6D:D0:7D:CF:34:ED:A8:86:CF:CF:34:70:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/F2FC2409C974536DD07DCF34EDA886CFCF34700A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2FC2409C974536DD07DCF34EDA886CFCF34700A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/F2FC2409C974536DD07DCF34EDA886CFCF34700A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:e8:c3:6a:05:6c:0d:80:d1:31:70:57:39:7e:ed:ba:6f:09: 20:92:9a:93:31:41:c0:55:e5:46:86:e0:5d:44:d3:02:db:ac: 91:18:6e:7b:eb:1c:5a:b4:43:84:8b:90:d4:dc:55:c9:4a:b1: c1:94:52:97:5a:7f:7e:a7:fb:49:a7:57:8c:f3:de:8a:34:30: 07:59:76:31:f8:f7:ed:66:66:b9:9d:cb:67:cc:4b:96:61:44: d8:8a:0c:9c:a6:d5:da:15:7f:ea:70:3c:ab:e2:db:61:35:3b: 01:53:62:f9:bc:7d:09:b5:e2:c1:52:24:4b:3a:0e:3d:36:5e: 2f:87:14:52:85:d1:93:1b:37:b7:17:ab:d1:99:28:43:03:3e: 27:20:95:cd:8f:40:c8:11:cd:43:61:9e:fd:4d:3a:90:f5:0a: df:1c:22:ba:b2:11:0a:95:82:1e:fc:15:f4:9b:26:23:4f:41: d2:a3:16:09:c6:3f:96:8d:04:5b:fd:f4:96:88:49:8f:9c:d5: 57:a6:b4:fe:c7:9f:8b:6f:e4:dd:bd:09:b0:1e:36:32:9f:47: e2:5e:07:b0:e8:d2:5f:62:da:b3:16:42:a6:79:74:20:28:60: 3d:dd:b4:b0:09:b9:e7:75:dc:18:8b:5c:ce:ad:1a:a0:35:37: 9a:dc:4f:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfK5TJwJLzVoS35MGeSSMhMfpHGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJGQzI0MDlDOTc0NTM2REQwN0RDRjM0RURBODg2Q0ZD RjM0NzAwQTAeFw0yNTExMDMxNjUyMTVaFw0yNTExMDQyMDE3MTVaMDMxMTAvBgNV BAMTKDFCNEFBM0U2MUZGRUVGMzk1QUU2MEEwNkI0MjQwQjRERUNGRjgzRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE09OoJfHiEh0qarIYxLF+H3FC 95WWvNE2weWZwguQi3KG+4oUghzxTmX8VA/SpYo4Im0RTdg508j+n3EKZBcHyzsF np3k02UuR+iXhv7LL5TY+TKlGC2RRYQa7zjsim4nr6r/YEVKhFcpkG/iLLKWUpAk ovE5CEt+pi1Iwexi9kSnWBOy1W9q0sNv7BES73gr0IVcn+iCFh4JRaMOUfoYcHjz bEdZPGOC4pJv+kXqRXs3i/04Ywm7Mbad/zuJ5u6OnbaxosnXjD90BF0NytkLTPT7 hZxgGtt8toir70YK5VqD62fNbj8YEJ5Ryw4oh/hd+YNf9JFue0HHYC/oGCBrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUG0qj5h/+7zla5goGtCQLTez/g9QwHwYDVR0j BBgwFoAU8vwkCcl0U23Qfc807aiGz880cAowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0g4R2VpTFlheDVhUW9mUFR2UXpSZHJ6TWR3ZlBGQlIzVGhlYWFtZHlS WnUvMC9GMkZDMjQwOUM5NzQ1MzZERDA3RENGMzRFREE4ODZDRkNGMzQ3MDBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyRkMyNDA5Qzk3NDUzNkRE MDdEQ0YzNEVEQTg4NkNGQ0YzNDcwMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0g4R2VpTFlheDVhUW9mUFR2UXpSZHJ6TWR3ZlBGQlIzVGhlYWFtZHlSWnUvMC9G MkZDMjQwOUM5NzQ1MzZERDA3RENGMzRFREE4ODZDRkNGMzQ3MDBBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ+jDagVsDYDRMXBXOX7tum8JIJKakzFBwFXlRobgXUTTAtuskRhue+scWrRD hIuQ1NxVyUqxwZRSl1p/fqf7SadXjPPeijQwB1l2Mfj37WZmuZ3LZ8xLlmFE2IoM nKbV2hV/6nA8q+LbYTU7AVNi+bx9CbXiwVIkSzoOPTZeL4cUUoXRkxs3txer0Zko QwM+JyCVzY9AyBHNQ2Ge/U06kPUK3xwiurIRCpWCHvwV9JsmI09B0qMWCcY/lo0E W/30lohJj5zVV6a0/sefi2/k3b0JsB42Mp9H4l4HsOjSX2LasxZCpnl0IChgPd20 sAm553XcGItczq0aoDU3mtxPmA== -----END CERTIFICATE-----Generated at Tue Nov 4 00:25:52 2025 by rpki-client