$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft File: 0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft (raw, json) Hash identifier: KynVaPyHMoBpXLmmSZMRFbfHqOqV/vwdPzEKmZ/gYSo= Subject key identifier: 8B:CF:82:7D:04:D8:B9:AE:B1:A0:B2:20:1E:62:33:60:64:BC:73:DE Authority key identifier: 03:43:B8:92:8C:A7:8A:1D:35:48:AF:9E:B5:A3:90:CF:76:64:FE:BA Certificate issuer: /CN=0343B8928CA78A1D3548AF9EB5A390CF7664FEBA Certificate serial: 1C90D46270C23A5FC37BDDF6D953B893BFD2773F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer Subject info access: rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft Manifest number: 87 Signing time: Sun 02 Nov 2025 18:28:20 +0000 Manifest this update: Sun 02 Nov 2025 18:23:20 +0000 Manifest next update: Mon 03 Nov 2025 20:33:20 +0000 Files and hashes: 1: 323830343a373734343a383030303a3a2f33332d3333203d3e20323731313636.roa (hash: 9c/Vv3pmZ5CXw4NUWRozYcmOTc1afAQ0zUfVqRBq+Pk=) 2: 3137392e34322e3133342e302f32342d3234203d3e20323731313636.roa (hash: gC1Zx88Oj+ffmPgCX94pUVv95lctnZo7+2qZD2k3PjE=) 3: 323830343a373734343a3a2f33332d3333203d3e20323731313636.roa (hash: Tr39WnlN4clRonCBNxfsmOX5oBu6rb58TAmNgtPvMZE=) 4: 3137392e34322e3133322e302f32332d3233203d3e20323731313636.roa (hash: 6i45KHUsx3IuMwgHojvOYh0ct4E7sfM5OUZ8hxW9JxQ=) 5: 3137392e34322e3133332e302f32342d3234203d3e20323731313636.roa (hash: KTcAkgeYiA11ExQN7cxBo03hZTlRZpRR0UNVqAdvMzI=) 6: 3137392e34322e3133352e302f32342d3234203d3e20323731313636.roa (hash: rEVRUj+OMOr8ex1XJsMDs+aNuh4znkXFky0YVDXzhcQ=) 7: 0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.crl (hash: jW4v2pUgf+h+TPKfrNG7jaF40fnUOMK2jZKHKUFiVq4=) 8: 323830343a373734343a3a2f33322d3332203d3e20323731313636.roa (hash: xj0HXmCi3+nuO9evTuFxKMPwLUzzhbRjUwq9ukBX1Lc=) 9: 3137392e34322e3133322e302f32342d3234203d3e20323731313636.roa (hash: nsUixGFLPigSeWiVkcLSWl5yZBG2+UKFwNjxQ5cacTY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.crl rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 20:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:90:d4:62:70:c2:3a:5f:c3:7b:dd:f6:d9:53:b8:93:bf:d2:77:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0343B8928CA78A1D3548AF9EB5A390CF7664FEBA Validity Not Before: Nov 2 18:23:20 2025 GMT Not After : Nov 3 20:33:20 2025 GMT Subject: CN=8BCF827D04D8B9AEB1A0B2201E62336064BC73DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c5:75:e6:59:d9:89:e8:d8:da:fd:de:f7:46: 55:64:72:bc:8c:38:2a:9b:e6:9e:ce:bb:78:85:32: fc:17:dd:08:d7:c1:6e:87:2c:36:10:1d:5b:d1:85: ed:33:c3:bd:d0:80:17:1b:aa:58:b4:c9:30:c8:1c: e4:4e:f3:07:4c:fc:ca:fa:83:c5:ed:12:57:14:6e: 66:1c:62:38:7f:8a:68:79:cf:86:d2:dc:3d:09:4a: 35:e1:ce:9b:6e:06:99:88:1e:64:05:9a:5f:99:46: 46:13:5f:bd:3c:87:46:e4:45:6d:9a:d4:7f:e9:cf: ba:c7:5e:15:88:0e:d5:f5:a3:df:bf:5d:e0:b5:d7: 9b:04:51:1b:a2:16:19:ce:83:8a:95:3a:20:1b:b5: eb:68:f5:8b:83:38:1f:d9:de:bd:2c:5a:5b:dd:19: 2c:8a:1f:6a:f9:82:ed:24:19:c3:53:51:29:08:59: 86:05:43:95:66:db:b3:41:36:e0:a1:a0:91:e7:f3: dc:6f:16:5b:3b:da:4d:03:6d:1c:20:db:91:bc:57: 0a:c4:31:b9:f9:ab:05:80:a7:c8:c4:cc:f6:e8:0a: 17:40:4c:c7:62:fb:10:a8:de:98:9b:89:74:89:cd: 5f:96:49:b1:66:78:78:41:fd:57:82:98:4c:82:75: 4d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CF:82:7D:04:D8:B9:AE:B1:A0:B2:20:1E:62:33:60:64:BC:73:DE X509v3 Authority Key Identifier: keyid:03:43:B8:92:8C:A7:8A:1D:35:48:AF:9E:B5:A3:90:CF:76:64:FE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:0e:b1:dc:b2:5f:c9:56:44:c4:db:09:49:38:6d:6d:47:9c: 44:25:16:b1:69:47:ec:cc:8c:b1:5e:38:36:d5:53:53:a1:ae: f7:3c:d5:5b:41:ec:2e:61:cb:61:38:6d:70:2d:53:c0:59:16: 45:ac:4e:2c:d1:dc:e1:41:a1:15:27:a3:d9:8e:e0:45:d8:dc: 3b:62:5e:91:b9:ea:af:27:a8:2d:f4:f9:51:59:ed:53:a4:ac: 77:9c:8f:c7:91:ed:1e:8d:5a:30:8e:79:8f:83:cf:15:7b:e7: 7e:d6:2b:99:8e:57:ab:00:f2:ad:c7:ac:54:11:6b:49:98:9b: 16:d4:34:6c:7c:00:7e:1e:cb:40:3d:0a:94:0e:98:3d:df:74: 87:4e:25:e4:85:f0:2c:1c:ad:b0:c5:30:ac:e4:62:e0:77:7f: 35:28:7e:63:05:f5:af:6a:71:95:f6:f7:e1:4d:57:35:de:b9: 4e:eb:47:b0:28:0d:e3:f4:cb:27:f2:33:97:6b:bf:1b:d8:cd: 6e:3f:3a:aa:39:3d:fb:71:ec:a5:fb:60:a9:29:f7:88:39:ec: 3b:19:03:39:06:52:2b:16:5f:a3:3c:f7:82:06:d6:fb:cc:66: bc:5d:3c:40:99:d4:d0:5f:9f:b0:4d:5a:c3:cd:1d:c7:a2:cf: d3:01:05:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHJDUYnDCOl/De9322VO4k7/Sdz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM0M0I4OTI4Q0E3OEExRDM1NDhBRjlFQjVBMzkwQ0Y3 NjY0RkVCQTAeFw0yNTExMDIxODIzMjBaFw0yNTExMDMyMDMzMjBaMDMxMTAvBgNV BAMTKDhCQ0Y4MjdEMDREOEI5QUVCMUEwQjIyMDFFNjIzMzYwNjRCQzczREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVxXXmWdmJ6Nja/d73RlVkcryM OCqb5p7Ou3iFMvwX3QjXwW6HLDYQHVvRhe0zw73QgBcbqli0yTDIHORO8wdM/Mr6 g8XtElcUbmYcYjh/imh5z4bS3D0JSjXhzptuBpmIHmQFml+ZRkYTX708h0bkRW2a 1H/pz7rHXhWIDtX1o9+/XeC115sEURuiFhnOg4qVOiAbteto9YuDOB/Z3r0sWlvd GSyKH2r5gu0kGcNTUSkIWYYFQ5Vm27NBNuChoJHn89xvFls72k0DbRwg25G8VwrE Mbn5qwWAp8jEzPboChdATMdi+xCo3pibiXSJzV+WSbFmeHhB/VeCmEyCdU25AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUi8+CfQTYua6xoLIgHmIzYGS8c94wHwYDVR0j BBgwFoAUA0O4koynih01SK+etaOQz3Zk/rowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSG5xUFpMcUM1YzFRUVJNN2RjbVdBVkR6Sm55aWZzQ0EycGVwOEdDZnA4 VlYvMC8wMzQzQjg5MjhDQTc4QTFEMzU0OEFGOUVCNUEzOTBDRjc2NjRGRUJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNDNCODkyOENBNzhBMUQz NTQ4QUY5RUI1QTM5MENGNzY2NEZFQkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SG5xUFpMcUM1YzFRUVJNN2RjbVdBVkR6Sm55aWZzQ0EycGVwOEdDZnA4VlYvMC8w MzQzQjg5MjhDQTc4QTFEMzU0OEFGOUVCNUEzOTBDRjc2NjRGRUJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApA6x3LJfyVZExNsJSThtbUecRCUWsWlH7MyMsV44NtVTU6Gu9zzVW0HsLmHL YThtcC1TwFkWRaxOLNHc4UGhFSej2Y7gRdjcO2JekbnqryeoLfT5UVntU6Ssd5yP x5HtHo1aMI55j4PPFXvnftYrmY5XqwDyrcesVBFrSZibFtQ0bHwAfh7LQD0KlA6Y Pd90h04l5IXwLBytsMUwrORi4Hd/NSh+YwX1r2pxlfb34U1XNd65TutHsCgN4/TL J/Izl2u/G9jNbj86qjk9+3HspftgqSn3iDnsOxkDOQZSKxZfozz3ggbW+8xmvF08 QJnU0F+fsE1aw80dx6LP0wEF5w== -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:17 2025 by rpki-client