$ rpki-client -vvf rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft File: 643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft (raw, json) Hash identifier: RRYmdVpglr/D4y2+amAIf+R+wi66usjJBX7Hh2j7ITM= Subject key identifier: D8:7C:38:30:97:4A:D6:05:73:AD:C1:3F:FA:C6:1C:9E:E9:1C:42:82 Authority key identifier: 64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC Certificate issuer: /CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC Certificate serial: 527DB80A114D5D63A09B3025285645F1D2606D4A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer Subject info access: rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft Manifest number: 01DA Signing time: Mon 03 Nov 2025 04:56:56 +0000 Manifest this update: Mon 03 Nov 2025 04:51:56 +0000 Manifest next update: Tue 04 Nov 2025 07:27:56 +0000 Files and hashes: 1: 323830343a343036633a3a2f33322d3334203d3e20323635393538.roa (hash: nwZpfdiD9lmHVEfGr7y7ft3lumKfAxBvAzwQfB72Avg=) 2: 643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl (hash: cFYac7363QKoa0e9UbbavOomhQ6rDdXoevnXH4w9rVM=) 3: 3136342e3136332e33322e302f32322d3234203d3e20323635393538.roa (hash: 0v/IQuZRt8fOahBYOamSIWRCnGJvUKoedCirRCLNEWE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 07:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:7d:b8:0a:11:4d:5d:63:a0:9b:30:25:28:56:45:f1:d2:60:6d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC Validity Not Before: Nov 3 04:51:56 2025 GMT Not After : Nov 4 07:27:56 2025 GMT Subject: CN=D87C3830974AD60573ADC13FFAC61C9EE91C4282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:5c:1e:21:b8:db:37:e9:d3:c1:d6:8e:d8: 82:fa:ec:b8:f8:6a:56:cb:ca:97:71:fd:85:3c:25: 54:ae:4d:0c:6f:ce:20:96:38:e1:ac:c3:19:1d:d1: 88:44:f4:2b:18:9c:54:57:8d:4d:7c:4c:55:05:0d: 75:d1:91:26:76:46:87:60:b4:d2:4b:24:ea:9f:ec: c8:9d:78:2f:53:a0:77:49:00:02:15:76:da:cb:37: 1a:17:cf:b4:0e:eb:0d:56:26:27:72:f1:82:1d:a7: ad:81:2d:67:83:31:2e:ea:03:a4:b2:75:35:72:33: 82:98:f2:ac:30:b6:c2:88:5a:a1:b6:3d:15:68:eb: 8b:ff:04:97:12:f3:90:e4:06:4c:ba:cc:30:30:8f: 1e:10:da:8d:56:79:b7:be:33:4f:52:e4:da:db:1f: e9:d6:85:6f:36:8a:a3:02:4d:ad:b6:c5:a1:89:30: 19:33:99:12:d7:54:66:23:65:0a:6d:6c:cc:6a:ce: 3d:48:6e:8a:12:c7:6e:41:56:76:f1:0c:96:14:94: 35:69:89:34:68:49:29:87:dd:2e:37:6d:a3:c0:4e: bb:02:bc:b3:8b:cd:02:35:88:95:49:5d:ef:2e:58: 19:33:9d:80:e7:59:3a:6a:d2:cd:8d:88:82:fc:5d: 85:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7C:38:30:97:4A:D6:05:73:AD:C1:3F:FA:C6:1C:9E:E9:1C:42:82 X509v3 Authority Key Identifier: keyid:64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:56:7e:5d:4d:41:fa:51:31:b5:f5:6d:d7:12:be:66:0a:d6: 11:de:95:a3:a0:35:76:7a:ea:85:05:f6:da:ec:6c:9a:b8:a8: dc:9c:4e:10:8a:a6:22:1d:87:07:38:6a:ec:c2:2d:1b:a4:36: 40:87:2b:f1:b4:2e:7f:e0:cd:ca:60:e0:bc:d9:3a:5c:30:3f: a3:1e:36:f3:48:7f:e1:34:05:f3:f1:a5:2b:95:e9:0c:a5:6b: 64:6a:b8:00:14:16:2e:49:c4:12:88:44:fe:17:90:83:f2:47: 1d:d7:6f:87:4c:f4:66:6b:e0:2c:ad:8b:09:f1:4f:1b:a6:a5: 88:22:e1:04:01:35:76:71:53:a3:13:45:01:96:80:60:80:c9: 66:6d:e4:0a:aa:e7:db:b9:2c:47:17:07:a6:ac:75:aa:0e:ec: 4f:59:c3:e6:c7:3d:f3:7b:3d:55:1c:ed:d0:9e:40:a3:07:27: da:88:3b:4a:ba:a7:43:d3:e0:ac:34:22:f8:28:b9:9e:0b:f5: 06:54:96:3e:f0:61:57:de:63:25:05:7f:c1:bb:72:ee:ce:9b: 90:95:2f:b6:da:4a:e7:cf:bd:80:99:a6:84:2c:28:53:41:0a: b7:c8:17:9e:3b:4c:40:fe:60:b9:1c:a9:61:0e:45:85:43:f8: 9c:08:c0:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUn24ChFNXWOgmzAlKFZF8dJgbUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzRkI0RThFRkIyOUY3M0IwMTc3QTBEMUFENUM2MzY0 RjQ0QjJBQzAeFw0yNTExMDMwNDUxNTZaFw0yNTExMDQwNzI3NTZaMDMxMTAvBgNV BAMTKEQ4N0MzODMwOTc0QUQ2MDU3M0FEQzEzRkZBQzYxQzlFRTkxQzQyODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3lweIbjbN+nTwdaO2IL67Lj4 albLypdx/YU8JVSuTQxvziCWOOGswxkd0YhE9CsYnFRXjU18TFUFDXXRkSZ2Rodg tNJLJOqf7MideC9ToHdJAAIVdtrLNxoXz7QO6w1WJidy8YIdp62BLWeDMS7qA6Sy dTVyM4KY8qwwtsKIWqG2PRVo64v/BJcS85DkBky6zDAwjx4Q2o1Webe+M09S5Nrb H+nWhW82iqMCTa22xaGJMBkzmRLXVGYjZQptbMxqzj1IbooSx25BVnbxDJYUlDVp iTRoSSmH3S43baPATrsCvLOLzQI1iJVJXe8uWBkznYDnWTpq0s2NiIL8XYWNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2Hw4MJdK1gVzrcE/+sYcnukcQoIwHwYDVR0j BBgwFoAUZD+06O+yn3OwF3oNGtXGNk9EsqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR21vVG5VUVV6SHJBTXh4M0ttQ1FBaEZacW9WSktlOFlGS1RFUnkxU0Nj dDcvMC82NDNGQjRFOEVGQjI5RjczQjAxNzdBMEQxQUQ1QzYzNjRGNDRCMkFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0M0ZCNEU4RUZCMjlGNzNC MDE3N0EwRDFBRDVDNjM2NEY0NEIyQUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R21vVG5VUVV6SHJBTXh4M0ttQ1FBaEZacW9WSktlOFlGS1RFUnkxU0NjdDcvMC82 NDNGQjRFOEVGQjI5RjczQjAxNzdBMEQxQUQ1QzYzNjRGNDRCMkFDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcFZ+XU1B+lExtfVt1xK+ZgrWEd6Vo6A1dnrqhQX22uxsmrio3JxOEIqmIh2H Bzhq7MItG6Q2QIcr8bQuf+DNymDgvNk6XDA/ox4280h/4TQF8/GlK5XpDKVrZGq4 ABQWLknEEohE/heQg/JHHddvh0z0ZmvgLK2LCfFPG6aliCLhBAE1dnFToxNFAZaA YIDJZm3kCqrn27ksRxcHpqx1qg7sT1nD5sc983s9VRzt0J5Aowcn2og7SrqnQ9Pg rDQi+Ci5ngv1BlSWPvBhV95jJQV/wbty7s6bkJUvttpK58+9gJmmhCwoU0EKt8gX njtMQP5guRypYQ5FhUP4nAjAVQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:49 2025 by rpki-client