$ rpki-client -vvf rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.mft File: E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.mft (raw, json) Hash identifier: k/SegoWMRpi4fesZs6kaP5y8LhjQU0iSIYCwGdbal/A= Subject key identifier: BB:F9:5F:A3:FF:B2:B7:7F:A7:59:3D:5D:D1:F5:05:C7:36:86:EA:66 Authority key identifier: E6:D6:AA:BA:3F:12:16:07:79:5E:F4:EE:E2:AC:E5:F1:2F:58:90:0E Certificate issuer: /CN=E6D6AABA3F121607795EF4EEE2ACE5F12F58900E Certificate serial: 08305813BBEED1CBA46B344DE7AA007B2CABF61A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.cer Subject info access: rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.mft Manifest number: 02A3 Signing time: Mon 03 Nov 2025 15:14:59 +0000 Manifest this update: Mon 03 Nov 2025 15:09:59 +0000 Manifest next update: Tue 04 Nov 2025 16:31:59 +0000 Files and hashes: 1: E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.crl (hash: E1D+eKlKfh1jdjUrINMZg1xJ48v683iONEBMbPls6Hw=) 2: 3137392e34382e38342e302f32322d3332203d3e20323731303734.roa (hash: MNPF/VPV5oDltJ59AkJgW06r31e4yKcjt+wKFmgYCfY=) 3: 323830343a373564633a3a2f33322d313238203d3e20323731303734.roa (hash: nbBjO/P40J8l8RS0mZcmxu4Q1kqD8hSt8YIT+007qW0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.crl rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 16:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:30:58:13:bb:ee:d1:cb:a4:6b:34:4d:e7:aa:00:7b:2c:ab:f6:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6D6AABA3F121607795EF4EEE2ACE5F12F58900E Validity Not Before: Nov 3 15:09:59 2025 GMT Not After : Nov 4 16:31:59 2025 GMT Subject: CN=BBF95FA3FFB2B77FA7593D5DD1F505C73686EA66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c3:79:35:e7:25:01:40:cf:ea:a5:f6:b5:b6: 24:a0:94:d8:51:e9:52:21:31:22:11:90:11:ef:00: bd:a2:0c:8b:d9:0a:b3:97:f6:eb:15:4d:cb:55:2a: f8:e5:af:55:48:a5:2b:54:74:9d:ff:84:8f:bf:46: 4b:21:4f:79:bb:7f:76:2c:45:70:8d:f8:66:e4:2e: 9c:6b:a4:dd:ea:ec:91:94:83:39:e1:c5:86:3f:ef: a0:bc:11:b0:c1:48:6e:bb:56:a8:f2:65:e4:08:fb: 90:a6:ac:d5:04:e9:72:ff:dc:3f:9e:ff:d6:2d:4a: 49:50:12:de:3a:2f:93:a9:08:2d:de:9e:3f:87:ce: 15:43:7b:6d:83:c3:6c:28:0a:1f:a2:42:3b:0a:e4: 35:38:4b:84:c1:3e:b8:a6:98:f6:de:6d:53:73:2a: bb:87:45:1a:26:dc:24:41:fd:92:73:d6:9c:22:ab: a1:49:c1:9a:90:f5:2a:2a:e5:d9:14:91:2d:ee:58: 97:f0:ef:a6:06:8a:6d:37:d1:62:90:f1:2e:62:16: 8c:f1:42:57:e8:40:6b:4a:84:7b:9c:50:59:c4:d6: 6f:ab:99:68:e6:a3:8d:27:6a:71:29:53:69:45:e6: b3:0f:c9:36:0b:2a:4a:d1:a4:db:fb:5f:a7:6e:53: a1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F9:5F:A3:FF:B2:B7:7F:A7:59:3D:5D:D1:F5:05:C7:36:86:EA:66 X509v3 Authority Key Identifier: keyid:E6:D6:AA:BA:3F:12:16:07:79:5E:F4:EE:E2:AC:E5:F1:2F:58:90:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/E6D6AABA3F121607795EF4EEE2ACE5F12F58900E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:a5:3c:71:58:be:77:ad:aa:d4:7b:92:4a:c7:53:0c:5e:3d: 85:97:8b:46:ed:00:d7:be:4c:a4:b3:f7:3d:9e:4b:99:f8:fd: 19:2a:fa:2f:20:4d:80:ba:71:bc:99:96:99:07:64:db:e1:89: 7c:e6:0e:2d:8e:a7:e7:9f:49:79:80:e8:98:e3:4c:36:aa:7d: e2:35:74:e6:a0:23:b6:3c:78:fe:88:bf:20:4c:1b:30:39:d1: e6:39:e6:99:c1:a5:94:e8:40:a2:cc:b4:16:d8:f8:9e:10:79: 9d:7c:6c:00:80:ea:f1:ee:93:f8:be:9e:2d:b5:6b:e8:0d:e9: eb:11:92:ea:e8:54:84:56:84:2e:82:b6:5e:90:8c:58:9a:47: 4a:1d:aa:33:d0:4d:a0:fc:a9:c9:06:26:34:1c:19:28:87:8b: b4:04:42:8e:6b:fd:f3:f3:33:c0:51:b8:89:10:81:c4:c0:e1: 84:ae:b8:e4:bc:1b:cc:83:7e:11:99:ec:50:68:27:60:2f:20: af:81:5c:93:07:d1:df:7d:ab:b1:03:37:aa:f2:36:ed:78:0a: 2f:2d:a3:5b:b8:3c:ca:36:f9:39:31:85:3f:26:c5:9b:3d:4f: 61:a4:15:0e:c8:a3:b3:60:22:f5:d5:ae:74:62:e8:1d:4d:4a: 1b:71:e9:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCDBYE7vu0cukazRN56oAeyyr9howDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZENkFBQkEzRjEyMTYwNzc5NUVGNEVFRTJBQ0U1RjEy RjU4OTAwRTAeFw0yNTExMDMxNTA5NTlaFw0yNTExMDQxNjMxNTlaMDMxMTAvBgNV BAMTKEJCRjk1RkEzRkZCMkI3N0ZBNzU5M0Q1REQxRjUwNUM3MzY4NkVBNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCew3k15yUBQM/qpfa1tiSglNhR 6VIhMSIRkBHvAL2iDIvZCrOX9usVTctVKvjlr1VIpStUdJ3/hI+/RkshT3m7f3Ys RXCN+GbkLpxrpN3q7JGUgznhxYY/76C8EbDBSG67VqjyZeQI+5CmrNUE6XL/3D+e /9YtSklQEt46L5OpCC3enj+HzhVDe22Dw2woCh+iQjsK5DU4S4TBPrimmPbebVNz KruHRRom3CRB/ZJz1pwiq6FJwZqQ9Soq5dkUkS3uWJfw76YGim030WKQ8S5iFozx QlfoQGtKhHucUFnE1m+rmWjmo40nanEpU2lF5rMPyTYLKkrRpNv7X6duU6EBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUu/lfo/+yt3+nWT1d0fUFxzaG6mYwHwYDVR0j BBgwFoAU5taquj8SFgd5XvTu4qzl8S9YkA4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGRvSEtvdThqQXcxTjQ1OFpoc1BQaWRwOHdzWVV0V2c4b2h5NlBpenFu TGkvMC9FNkQ2QUFCQTNGMTIxNjA3Nzk1RUY0RUVFMkFDRTVGMTJGNTg5MDBFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2RDZBQUJBM0YxMjE2MDc3 OTVFRjRFRUUyQUNFNUYxMkY1ODkwMEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGRvSEtvdThqQXcxTjQ1OFpoc1BQaWRwOHdzWVV0V2c4b2h5NlBpenFuTGkvMC9F NkQ2QUFCQTNGMTIxNjA3Nzk1RUY0RUVFMkFDRTVGMTJGNTg5MDBFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq6U8cVi+d62q1HuSSsdTDF49hZeLRu0A175MpLP3PZ5Lmfj9GSr6LyBNgLpx vJmWmQdk2+GJfOYOLY6n559JeYDomONMNqp94jV05qAjtjx4/oi/IEwbMDnR5jnm mcGllOhAosy0Ftj4nhB5nXxsAIDq8e6T+L6eLbVr6A3p6xGS6uhUhFaELoK2XpCM WJpHSh2qM9BNoPypyQYmNBwZKIeLtARCjmv98/MzwFG4iRCBxMDhhK645LwbzIN+ EZnsUGgnYC8gr4FckwfR332rsQM3qvI27XgKLy2jW7g8yjb5OTGFPybFmz1PYaQV Dsijs2Ai9dWudGLoHU1KG3Hpig== -----END CERTIFICATE-----Generated at Tue Nov 4 00:10:19 2025 by rpki-client