$ rpki-client -vvf rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.mft File: 0E8D4D28751C71CE312B11C82E2188BC7F54FB05.mft (raw, json) Hash identifier: QHQMCFGtVzny3ROxBcF60Dk3C3yagrPA5twqJj5GHpY= Subject key identifier: 68:3F:55:FA:86:0D:21:7D:BA:6C:A3:29:5F:D7:5B:B4:DE:F3:22:31 Authority key identifier: 0E:8D:4D:28:75:1C:71:CE:31:2B:11:C8:2E:21:88:BC:7F:54:FB:05 Certificate issuer: /CN=0E8D4D28751C71CE312B11C82E2188BC7F54FB05 Certificate serial: 293A0D906DF0299DA72DAF342946B4EA2B4EC170 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.cer Subject info access: rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.mft Manifest number: 36 Signing time: Mon 03 Nov 2025 17:04:02 +0000 Manifest this update: Mon 03 Nov 2025 16:59:02 +0000 Manifest next update: Tue 04 Nov 2025 17:26:02 +0000 Files and hashes: 1: 0E8D4D28751C71CE312B11C82E2188BC7F54FB05.crl (hash: kSf5rXe/OQsbSUD2R61SfMXEEeChoWOlJKLqFRaNdT4=) 2: 323830343a323066343a3a2f33322d313238203d3e20323634353233.roa (hash: iHbjXbQYJnpbLyThD8ntb7N9gcirtc1ZLnFEEOo/IsY=) 3: 3133312e3235352e37322e302f32322d3332203d3e20323634353233.roa (hash: UMQhuETAP3mo2VT6DbKKQ75ltp0Z6mOrCpfi41HCarM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.crl rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 17:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:3a:0d:90:6d:f0:29:9d:a7:2d:af:34:29:46:b4:ea:2b:4e:c1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E8D4D28751C71CE312B11C82E2188BC7F54FB05 Validity Not Before: Nov 3 16:59:02 2025 GMT Not After : Nov 4 17:26:02 2025 GMT Subject: CN=683F55FA860D217DBA6CA3295FD75BB4DEF32231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:53:75:95:e3:87:ce:8a:f1:fb:44:13:91:03: b3:f1:0c:74:82:2c:44:4a:de:af:84:73:d5:f1:17: 0e:73:94:2b:60:3f:2e:11:49:25:5a:10:c1:84:3f: 7d:f3:28:7f:31:a9:d2:36:1a:e1:dd:3f:8c:a9:39: 0b:4a:f9:4e:cb:d8:db:ce:03:7e:c5:5f:46:45:35: 08:e5:2f:0e:af:e7:a1:7e:4b:92:58:79:f6:11:2a: dc:a8:a5:92:53:6f:de:5e:9c:be:01:7f:21:a7:fc: bf:c3:28:fa:9a:12:64:17:24:5a:a4:71:73:7c:ff: 7a:95:ce:1f:0c:1b:a4:70:bc:75:81:2a:00:9b:12: 07:67:8d:a2:f7:3f:bc:bc:1d:82:c5:32:db:8c:c3: 6c:74:8e:f7:3a:86:ec:ee:ab:78:45:92:24:44:91: b4:6e:a2:cf:a0:29:93:89:51:94:d3:40:f6:77:ed: d0:cd:4f:a5:b0:1e:ad:81:78:5f:1b:e9:9b:53:99: 0c:97:07:58:c2:21:d6:b1:10:d9:e2:d1:69:38:a1: 3c:6e:ce:4c:29:48:f6:b0:30:60:ad:9b:0c:76:34: 65:f9:72:80:1c:68:a5:05:83:39:1c:e3:f7:70:5e: f4:11:2f:62:91:cc:08:09:96:45:22:d9:b8:74:1f: 55:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3F:55:FA:86:0D:21:7D:BA:6C:A3:29:5F:D7:5B:B4:DE:F3:22:31 X509v3 Authority Key Identifier: keyid:0E:8D:4D:28:75:1C:71:CE:31:2B:11:C8:2E:21:88:BC:7F:54:FB:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b8:27:4a:9c:0a:67:83:6b:ee:a0:99:00:ea:34:1f:74:48: 16:a9:e2:67:17:dc:e2:08:bc:0a:94:d0:78:24:3b:89:90:42: f3:e6:5b:b9:ad:f3:e2:59:54:7c:ec:7f:af:6a:72:9b:1c:51: 8f:10:14:49:45:52:fb:34:ec:3c:a9:91:73:bb:f9:f8:59:2d: 87:44:5b:87:54:5e:51:26:4e:77:e1:3a:04:9e:81:22:f6:57: 32:9d:10:78:af:84:57:0a:07:cc:2f:1d:c0:d6:5b:de:0f:78: fa:53:27:8a:79:b0:62:6a:60:87:79:f8:6f:23:d2:88:eb:ca: a3:c5:c2:4b:dc:be:20:64:06:82:f4:97:bc:b6:23:d7:29:26: 76:60:a2:5f:42:ed:ce:c6:6d:0c:cd:d1:65:13:76:82:76:b8: b9:a2:68:30:ba:a3:d8:42:f5:0c:f5:73:e3:0a:48:4d:3f:b7: 51:00:37:7f:12:16:50:bb:19:d4:9c:bb:a7:43:48:e2:f5:63: 1b:09:7a:bd:5c:e2:c3:75:ff:4b:f1:20:8e:bc:5c:bc:d8:90: 73:d4:f8:38:6a:32:9d:c6:01:48:6d:63:40:44:5b:cb:0f:33: a4:2f:8f:fc:d3:2b:65:57:66:92:28:af:b6:f6:c5:c5:c0:5a: a9:19:bf:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKToNkG3wKZ2nLa80KUa06itOwXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU4RDREMjg3NTFDNzFDRTMxMkIxMUM4MkUyMTg4QkM3 RjU0RkIwNTAeFw0yNTExMDMxNjU5MDJaFw0yNTExMDQxNzI2MDJaMDMxMTAvBgNV BAMTKDY4M0Y1NUZBODYwRDIxN0RCQTZDQTMyOTVGRDc1QkI0REVGMzIyMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdU3WV44fOivH7RBORA7PxDHSC LERK3q+Ec9XxFw5zlCtgPy4RSSVaEMGEP33zKH8xqdI2GuHdP4ypOQtK+U7L2NvO A37FX0ZFNQjlLw6v56F+S5JYefYRKtyopZJTb95enL4BfyGn/L/DKPqaEmQXJFqk cXN8/3qVzh8MG6RwvHWBKgCbEgdnjaL3P7y8HYLFMtuMw2x0jvc6huzuq3hFkiRE kbRuos+gKZOJUZTTQPZ37dDNT6WwHq2BeF8b6ZtTmQyXB1jCIdaxENni0Wk4oTxu zkwpSPawMGCtmwx2NGX5coAcaKUFgzkc4/dwXvQRL2KRzAgJlkUi2bh0H1ULAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaD9V+oYNIX26bKMpX9dbtN7zIjEwHwYDVR0j BBgwFoAUDo1NKHUccc4xKxHILiGIvH9U+wUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEF6OUZqQlN0TEhCdTVYVGRqYjhLRXNTRmcyMkJXWDRhRTFvd2toY0RV cjkvMC8wRThENEQyODc1MUM3MUNFMzEyQjExQzgyRTIxODhCQzdGNTRGQjA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFOEQ0RDI4NzUxQzcxQ0Uz MTJCMTFDODJFMjE4OEJDN0Y1NEZCMDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEF6OUZqQlN0TEhCdTVYVGRqYjhLRXNTRmcyMkJXWDRhRTFvd2toY0RVcjkvMC8w RThENEQyODc1MUM3MUNFMzEyQjExQzgyRTIxODhCQzdGNTRGQjA1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgbgnSpwKZ4Nr7qCZAOo0H3RIFqniZxfc4gi8CpTQeCQ7iZBC8+Zbua3z4llU fOx/r2pymxxRjxAUSUVS+zTsPKmRc7v5+Fkth0Rbh1ReUSZOd+E6BJ6BIvZXMp0Q eK+EVwoHzC8dwNZb3g94+lMninmwYmpgh3n4byPSiOvKo8XCS9y+IGQGgvSXvLYj 1ykmdmCiX0LtzsZtDM3RZRN2gna4uaJoMLqj2EL1DPVz4wpITT+3UQA3fxIWULsZ 1Jy7p0NI4vVjGwl6vVziw3X/S/EgjrxcvNiQc9T4OGoyncYBSG1jQERbyw8zpC+P /NMrZVdmkiivtvbFxcBaqRm/0A== -----END CERTIFICATE-----Generated at Mon Nov 3 18:51:20 2025 by rpki-client