$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft File: CD119443A2689BA4FC616BCD6929E636B5032FC0.mft (raw, json) Hash identifier: eWB74CgOD4u45JF5/boCKAdTCRxD1PQTVfcBVvDTY4k= Subject key identifier: 70:82:33:37:9D:F2:B1:91:DD:F9:42:82:D8:2E:C2:E7:61:A1:C1:09 Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0 Certificate issuer: /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0 Certificate serial: 0C14EA74C73CD48803E1E806FB9DB392DB626D31 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer Subject info access: rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft Manifest number: 0300 Signing time: Mon 03 Nov 2025 05:25:00 +0000 Manifest this update: Mon 03 Nov 2025 05:20:00 +0000 Manifest next update: Tue 04 Nov 2025 08:09:00 +0000 Files and hashes: 1: 323830343a3632383a3a2f33322d313238203d3e203533303239.roa (hash: wXzHyexM8HZC0ahdh68QW2mTL8oWKucBoRBb4ywNBSU=) 2: 3137372e37332e38302e302f32322d3332203d3e203533303239.roa (hash: Qek/xs/EKmEb9IFoScEonrCyzkJUGy3pixZFP0HNsFI=) 3: CD119443A2689BA4FC616BCD6929E636B5032FC0.crl (hash: NXXyJ0O6QRtIVd4q44TTUK+BedExfBYa5X94HJu5r90=) 4: 3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa (hash: 0yz5B0vFU4y+5bFNlnsgvOAMOkwGTpRZj0IDhhUzrRA=) 5: 3136382e3138312e34302e302f32322d3332203d3e203533303239.roa (hash: DigxLgwOCkJqaxHXJWceoasL0PEbNpzDZ+ACjp/5uT8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 08:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:14:ea:74:c7:3c:d4:88:03:e1:e8:06:fb:9d:b3:92:db:62:6d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0 Validity Not Before: Nov 3 05:20:00 2025 GMT Not After : Nov 4 08:09:00 2025 GMT Subject: CN=708233379DF2B191DDF94282D82EC2E761A1C109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2f:56:ea:c7:43:42:0c:ab:c5:f3:4d:bb:e9: 8d:17:4c:6e:14:33:90:de:a1:41:e5:af:57:4d:fd: 12:da:75:68:9c:0b:db:3c:30:3c:a1:9c:5e:61:a7: eb:14:b8:7f:96:76:f7:85:15:b2:b0:fc:a9:24:5e: e9:90:2b:eb:37:13:c3:5b:af:0f:c3:34:a9:95:cd: aa:ff:de:e1:6d:20:d0:af:2a:e8:f1:97:f0:e2:02: 9f:03:09:1f:5f:4a:f6:02:19:e1:da:f8:6c:0a:c0: 4e:d1:49:ad:ab:27:8c:4d:18:4e:fe:5b:50:d0:98: 6c:52:07:2c:6b:b0:30:17:e1:a1:d6:0a:bf:37:2f: fc:fe:34:fa:f6:53:49:64:ab:44:a3:01:a4:68:4f: 04:b1:cd:26:10:ac:c6:19:8b:83:a3:ef:2b:5f:b0: fd:5c:e3:bd:92:b3:57:46:03:d6:a9:c3:e8:a2:63: 90:43:3d:d6:e5:5a:d0:26:4f:1f:92:95:96:84:b0: bd:65:15:00:26:31:6d:f3:f3:35:bc:98:c2:bb:8c: 17:0c:4e:ce:d0:e5:c1:be:51:69:b2:a6:4f:bb:c9: df:70:46:60:9d:ce:ac:62:1d:ef:f3:c5:68:2a:32: e4:e8:94:e8:cb:14:6a:fa:a9:02:2d:8a:e9:cf:b3: c3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:82:33:37:9D:F2:B1:91:DD:F9:42:82:D8:2E:C2:E7:61:A1:C1:09 X509v3 Authority Key Identifier: keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:37:f5:6b:86:d7:81:d5:bb:df:22:b6:ac:93:74:18:d2:35: 25:50:a4:03:e0:0a:4f:54:db:4b:77:3b:e4:e3:62:82:53:80: 53:e7:68:5d:3e:f2:24:f2:82:b1:ff:04:6c:cc:7b:a8:de:18: f3:15:a6:8d:1b:bd:6b:6b:9e:ed:2a:d3:2d:77:8d:23:3e:3e: 92:6f:6d:f3:82:7a:11:3b:fd:ea:d0:50:c2:e4:3a:1e:e2:c1: ec:6a:b1:c1:f9:89:df:a4:1f:15:22:97:05:32:1b:28:9a:55: 53:1e:88:ab:f8:dd:ed:59:b1:18:41:99:ce:b3:f3:d2:8f:a0: 48:7f:bf:4d:15:b7:db:07:56:d3:57:36:88:e1:12:42:82:ea: e2:26:c8:94:f4:50:1b:f3:9d:2d:2a:54:f5:93:2b:bb:4a:d9: c7:f7:1d:0d:4f:86:0c:38:e9:f7:27:e4:b0:07:40:10:27:b9: d9:6e:5a:25:51:52:57:af:3a:36:0a:9d:0d:fc:91:e2:24:5f: 8c:9f:6d:e5:c3:e0:88:80:66:ad:17:59:b5:52:e9:89:e9:05: 9e:c3:e8:0d:dc:d7:89:9a:82:9c:94:64:1c:db:fd:f2:69:c3: 99:c8:ef:fa:ec:49:c8:de:24:4e:70:ce:62:bb:65:a4:81:c1: 5a:9c:56:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDBTqdMc81IgD4egG+52zkttibTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QxMTk0NDNBMjY4OUJBNEZDNjE2QkNENjkyOUU2MzZC NTAzMkZDMDAeFw0yNTExMDMwNTIwMDBaFw0yNTExMDQwODA5MDBaMDMxMTAvBgNV BAMTKDcwODIzMzM3OURGMkIxOTFEREY5NDI4MkQ4MkVDMkU3NjFBMUMxMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVL1bqx0NCDKvF80276Y0XTG4U M5DeoUHlr1dN/RLadWicC9s8MDyhnF5hp+sUuH+WdveFFbKw/KkkXumQK+s3E8Nb rw/DNKmVzar/3uFtINCvKujxl/DiAp8DCR9fSvYCGeHa+GwKwE7RSa2rJ4xNGE7+ W1DQmGxSByxrsDAX4aHWCr83L/z+NPr2U0lkq0SjAaRoTwSxzSYQrMYZi4Oj7ytf sP1c472Ss1dGA9apw+iiY5BDPdblWtAmTx+SlZaEsL1lFQAmMW3z8zW8mMK7jBcM Ts7Q5cG+UWmypk+7yd9wRmCdzqxiHe/zxWgqMuTolOjLFGr6qQItiunPs8PlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcIIzN53ysZHd+UKC2C7C52GhwQkwHwYDVR0j BBgwFoAUzRGUQ6Jom6T8YWvNaSnmNrUDL8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDNacUVNekM5cG0yRmhWNlpxMlhyTnpKMUJ1QmY1TkM4Rmo0WDZLQkdW RkUvMS9DRDExOTQ0M0EyNjg5QkE0RkM2MTZCQ0Q2OTI5RTYzNkI1MDMyRkMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMTE5NDQzQTI2ODlCQTRG QzYxNkJDRDY5MjlFNjM2QjUwMzJGQzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDNacUVNekM5cG0yRmhWNlpxMlhyTnpKMUJ1QmY1TkM4Rmo0WDZLQkdWRkUvMS9D RDExOTQ0M0EyNjg5QkE0RkM2MTZCQ0Q2OTI5RTYzNkI1MDMyRkMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkDf1a4bXgdW73yK2rJN0GNI1JVCkA+AKT1TbS3c75ONiglOAU+doXT7yJPKC sf8EbMx7qN4Y8xWmjRu9a2ue7SrTLXeNIz4+km9t84J6ETv96tBQwuQ6HuLB7Gqx wfmJ36QfFSKXBTIbKJpVUx6Iq/jd7VmxGEGZzrPz0o+gSH+/TRW32wdW01c2iOES QoLq4ibIlPRQG/OdLSpU9ZMru0rZx/cdDU+GDDjp9yfksAdAECe52W5aJVFSV686 NgqdDfyR4iRfjJ9t5cPgiIBmrRdZtVLpiekFnsPoDdzXiZqCnJRkHNv98mnDmcjv +uxJyN4kTnDOYrtlpIHBWpxWeg== -----END CERTIFICATE-----Generated at Tue Nov 4 00:12:41 2025 by rpki-client