$ rpki-client -vvf rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/1/E8152E596079B8640CD4A49A76E332DB59F626EF.mft File: E8152E596079B8640CD4A49A76E332DB59F626EF.mft (raw, json) Hash identifier: c8P4H1KZaqU634ttu4OBjL+YzQZRTjHe6A1Ck69lelk= Subject key identifier: 17:D6:B4:E6:CD:7C:32:58:DE:EC:60:7B:20:C1:01:D3:7B:76:06:8A Authority key identifier: E8:15:2E:59:60:79:B8:64:0C:D4:A4:9A:76:E3:32:DB:59:F6:26:EF Certificate issuer: /CN=E8152E596079B8640CD4A49A76E332DB59F626EF Certificate serial: 058DE54DEA3A09DFFE37A1BD932504C1DCE20F0C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8152E596079B8640CD4A49A76E332DB59F626EF.cer Subject info access: rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/1/E8152E596079B8640CD4A49A76E332DB59F626EF.mft Manifest number: 02FF Signing time: Mon 03 Nov 2025 11:56:22 +0000 Manifest this update: Mon 03 Nov 2025 11:51:22 +0000 Manifest next update: Tue 04 Nov 2025 14:35:22 +0000 Files and hashes: 1: E8152E596079B8640CD4A49A76E332DB59F626EF.crl (hash: 4+ygF6uCFBe4Mg53xxw8zAFadthp+1gXQ9t6ht2/V3c=) 2: 3137392e34322e37302e302f32332d3332203d3e20323731313330.roa (hash: I/UuthJwuRn/29jTkV44jqrvFtOCB6vdImI7uou0w48=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/1/E8152E596079B8640CD4A49A76E332DB59F626EF.crl rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/1/E8152E596079B8640CD4A49A76E332DB59F626EF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8152E596079B8640CD4A49A76E332DB59F626EF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 14:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:8d:e5:4d:ea:3a:09:df:fe:37:a1:bd:93:25:04:c1:dc:e2:0f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8152E596079B8640CD4A49A76E332DB59F626EF Validity Not Before: Nov 3 11:51:22 2025 GMT Not After : Nov 4 14:35:22 2025 GMT Subject: CN=17D6B4E6CD7C3258DEEC607B20C101D37B76068A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:83:01:d7:24:28:64:db:d7:40:8e:64:b4:57: 21:2d:99:1d:fb:9c:3f:c8:5e:b2:3c:b0:fa:a2:ae: 4e:8e:be:da:88:83:2b:42:0f:b8:18:f7:25:fb:ed: a4:17:8e:e3:bc:ff:61:e4:81:3a:83:26:70:b0:17: c6:6d:14:7b:f8:1d:98:33:c0:82:77:2c:09:d6:86: 36:87:19:91:7d:3d:d3:d1:e7:56:1a:62:21:40:be: 04:6b:39:35:7d:87:72:13:d4:64:c9:95:74:1f:b2: e2:fa:38:dc:f9:1e:a8:8d:04:c6:15:9e:70:9d:d3: 14:ae:19:ea:78:b9:86:8d:ac:aa:79:b3:cb:fd:b1: d5:87:0b:54:bd:28:50:54:70:e6:0c:fc:b9:6d:68: 94:39:28:ed:81:55:af:49:6f:a3:c8:6b:2a:04:29: a1:38:fe:1d:8b:e7:53:79:65:3d:c7:ba:30:de:8f: e7:09:35:37:69:5e:ab:51:59:9e:54:18:e8:26:d3: ae:b9:aa:27:1e:44:a7:41:53:94:00:17:b6:d3:f2: 85:7f:37:6c:a1:e8:f1:b2:7f:f6:be:f4:ea:3d:15: ff:52:37:35:93:24:4a:e1:f7:5e:71:cf:0a:f6:ff: db:80:bc:25:a4:de:15:94:6e:57:19:ea:ce:cf:76: cf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D6:B4:E6:CD:7C:32:58:DE:EC:60:7B:20:C1:01:D3:7B:76:06:8A X509v3 Authority Key Identifier: keyid:E8:15:2E:59:60:79:B8:64:0C:D4:A4:9A:76:E3:32:DB:59:F6:26:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/1/E8152E596079B8640CD4A49A76E332DB59F626EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8152E596079B8640CD4A49A76E332DB59F626EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/1/E8152E596079B8640CD4A49A76E332DB59F626EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f3:fd:26:91:ae:79:94:fc:d4:82:ad:d1:15:14:3f:56:f9: 35:c4:8e:e1:9c:2f:89:aa:6f:8e:ca:a7:8b:4b:05:a5:3a:81: c6:87:32:49:23:97:38:4a:73:a2:79:84:6d:02:fb:9a:0e:0d: 5f:68:13:62:7e:11:73:7e:c5:e9:71:a4:31:b6:a8:d2:ad:20: ae:8a:c2:25:f6:12:23:7a:b0:2f:fb:64:31:8a:6a:56:6d:fd: 14:a5:2e:dd:a2:ab:66:42:77:d1:25:04:79:ce:d6:13:bd:bc: 42:4b:6f:38:7b:68:d4:a1:87:ea:08:5a:87:37:05:7c:8b:3f: e8:8f:e2:f4:1f:29:c9:c1:ba:2a:f5:2d:ac:14:e1:da:be:f2: a2:a1:d7:fd:c7:98:c8:85:83:6b:21:bd:52:46:43:11:2d:2e: 60:73:a4:d1:ba:f6:1a:0d:68:c8:23:7d:6c:00:0f:82:ba:8b: 60:3f:a0:c8:9d:31:0f:bf:7c:7c:ed:69:64:84:62:e2:5d:50: f2:30:f5:8e:c4:14:39:55:26:ac:c7:ae:f4:8d:68:30:49:23: 0f:72:82:d3:f4:d8:b3:ee:f9:ca:f7:14:87:80:97:cf:3a:14: fe:36:58:69:0a:07:47:ba:45:8a:dd:b8:e1:10:13:22:ee:bf: a8:48:b7:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBY3lTeo6Cd/+N6G9kyUEwdziDwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgxNTJFNTk2MDc5Qjg2NDBDRDRBNDlBNzZFMzMyREI1 OUY2MjZFRjAeFw0yNTExMDMxMTUxMjJaFw0yNTExMDQxNDM1MjJaMDMxMTAvBgNV BAMTKDE3RDZCNEU2Q0Q3QzMyNThERUVDNjA3QjIwQzEwMUQzN0I3NjA2OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDegwHXJChk29dAjmS0VyEtmR37 nD/IXrI8sPqirk6OvtqIgytCD7gY9yX77aQXjuO8/2HkgTqDJnCwF8ZtFHv4HZgz wIJ3LAnWhjaHGZF9PdPR51YaYiFAvgRrOTV9h3IT1GTJlXQfsuL6ONz5HqiNBMYV nnCd0xSuGep4uYaNrKp5s8v9sdWHC1S9KFBUcOYM/LltaJQ5KO2BVa9Jb6PIayoE KaE4/h2L51N5ZT3HujDej+cJNTdpXqtRWZ5UGOgm0665qiceRKdBU5QAF7bT8oV/ N2yh6PGyf/a+9Oo9Ff9SNzWTJErh915xzwr2/9uAvCWk3hWUblcZ6s7Pds+bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUF9a05s18Mlje7GB7IMEB03t2BoowHwYDVR0j BBgwFoAU6BUuWWB5uGQM1KSaduMy21n2Ju8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGVZSjNvWktTa1VFZ25DaFJ0d3ZBMlI5V2hnbVdGYkw4azVNMVRTeXpY SEQvMS9FODE1MkU1OTYwNzlCODY0MENENEE0OUE3NkUzMzJEQjU5RjYyNkVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4MTUyRTU5NjA3OUI4NjQw Q0Q0QTQ5QTc2RTMzMkRCNTlGNjI2RUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGVZSjNvWktTa1VFZ25DaFJ0d3ZBMlI5V2hnbVdGYkw4azVNMVRTeXpYSEQvMS9F ODE1MkU1OTYwNzlCODY0MENENEE0OUE3NkUzMzJEQjU5RjYyNkVGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZPP9JpGueZT81IKt0RUUP1b5NcSO4Zwviapvjsqni0sFpTqBxocySSOXOEpz onmEbQL7mg4NX2gTYn4Rc37F6XGkMbao0q0grorCJfYSI3qwL/tkMYpqVm39FKUu 3aKrZkJ30SUEec7WE728QktvOHto1KGH6ghahzcFfIs/6I/i9B8pycG6KvUtrBTh 2r7yoqHX/ceYyIWDayG9UkZDES0uYHOk0br2Gg1oyCN9bAAPgrqLYD+gyJ0xD798 fO1pZIRi4l1Q8jD1jsQUOVUmrMeu9I1oMEkjD3KC0/TYs+75yvcUh4CXzzoU/jZY aQoHR7pFit244RATIu6/qEi3dw== -----END CERTIFICATE-----Generated at Tue Nov 4 06:21:13 2025 by rpki-client