$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/02DB708FAA035F37E9C4D396E2C459A6F379C838.mft File: 02DB708FAA035F37E9C4D396E2C459A6F379C838.mft (raw, json) Hash identifier: 3Vvznjbb76IjbgKI6PYCKTcnpSGODWL3o24WIOqqkJo= Subject key identifier: 7F:E5:A5:A3:83:D0:5C:7F:EB:34:2C:65:46:29:BF:53:12:7E:33:F1 Authority key identifier: 02:DB:70:8F:AA:03:5F:37:E9:C4:D3:96:E2:C4:59:A6:F3:79:C8:38 Certificate issuer: /CN=02DB708FAA035F37E9C4D396E2C459A6F379C838 Certificate serial: 03D79546230EE1ABF10EF924CBC5266CB56EB405 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02DB708FAA035F37E9C4D396E2C459A6F379C838.cer Subject info access: rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/02DB708FAA035F37E9C4D396E2C459A6F379C838.mft Manifest number: 0C Signing time: Mon 03 Nov 2025 04:40:13 +0000 Manifest this update: Mon 03 Nov 2025 04:35:13 +0000 Manifest next update: Tue 04 Nov 2025 08:33:13 +0000 Files and hashes: 1: 323830343a333764633a3a2f33322d313238203d3e20323636343430.roa (hash: ljtDUaBK64bKw8D577GcFAYINbUO+k+F9aiNNEeXmD8=) 2: 3137302e38322e32302e302f32322d3332203d3e20323636343430.roa (hash: +7JkTEE4bdu/mc4lXKGovNFi8dRokSvJlTmV0wVj7os=) 3: 02DB708FAA035F37E9C4D396E2C459A6F379C838.crl (hash: qpY/yYPGUFUHKxj3Zp01y4IWJLEHQV2WA7HOgE6G/wE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/02DB708FAA035F37E9C4D396E2C459A6F379C838.crl rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/02DB708FAA035F37E9C4D396E2C459A6F379C838.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02DB708FAA035F37E9C4D396E2C459A6F379C838.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 08:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d7:95:46:23:0e:e1:ab:f1:0e:f9:24:cb:c5:26:6c:b5:6e:b4:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02DB708FAA035F37E9C4D396E2C459A6F379C838 Validity Not Before: Nov 3 04:35:13 2025 GMT Not After : Nov 4 08:33:13 2025 GMT Subject: CN=7FE5A5A383D05C7FEB342C654629BF53127E33F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:33:78:e5:f1:09:0f:dc:b6:db:b2:94:50:3b: 85:94:61:e8:ac:2e:a7:00:eb:d6:3b:54:a3:b6:46: 19:56:f5:71:a6:ce:5a:e5:ae:a3:1f:0c:42:ee:2f: 7a:4b:ac:8b:ca:2f:c6:41:c8:74:07:91:25:e3:f7: 0f:76:9b:92:88:a2:55:c6:0a:ab:3e:b8:55:97:90: 7e:7f:74:53:bc:85:fd:49:3f:e4:2f:d1:6e:32:ee: 43:4d:15:8b:ae:08:7f:6f:7c:57:ee:e4:49:9f:5c: 83:34:c3:86:a7:7f:df:ff:8d:ab:aa:be:8a:17:1f: 57:f5:00:93:3a:c9:f1:1b:71:ac:10:2c:44:3e:e4: fe:94:0b:e7:80:a2:04:ad:63:13:40:e9:8d:94:84: 86:71:16:cc:fe:66:90:14:a8:7e:20:fc:76:98:ea: 87:de:59:92:42:07:85:9c:f1:e2:fe:62:16:96:87: ec:af:66:75:ad:93:05:e7:dd:fb:30:72:0e:66:60: f9:73:ad:b8:db:f9:fe:47:b8:03:ef:57:ec:10:15: 3c:8c:4b:43:d4:a3:6d:b2:7f:23:c2:d8:41:fc:16: df:91:a8:6e:4f:58:f2:b5:49:0e:35:da:69:61:36: d4:66:ca:ef:01:7e:6b:d7:3f:bf:6d:4a:51:19:6b: a1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E5:A5:A3:83:D0:5C:7F:EB:34:2C:65:46:29:BF:53:12:7E:33:F1 X509v3 Authority Key Identifier: keyid:02:DB:70:8F:AA:03:5F:37:E9:C4:D3:96:E2:C4:59:A6:F3:79:C8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/02DB708FAA035F37E9C4D396E2C459A6F379C838.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02DB708FAA035F37E9C4D396E2C459A6F379C838.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/02DB708FAA035F37E9C4D396E2C459A6F379C838.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:ff:30:97:fd:0d:6f:f5:9f:31:3a:35:9a:d8:eb:b7:eb:56: cd:da:9b:77:dc:91:43:bc:11:6c:4f:ee:52:41:e9:a3:08:f4: ae:c3:98:d9:3f:2a:94:31:ea:8e:0e:01:53:c8:7b:5f:26:72: ed:6d:84:bc:45:3b:f9:bf:6c:1f:92:ac:26:93:e6:8a:2e:be: ec:a2:7f:d8:b3:1a:49:a7:09:41:9d:66:2c:5b:3e:ed:e9:63: 12:da:f8:40:02:e4:74:3a:52:8b:70:e7:a3:5b:54:7c:39:f6: 05:72:cd:96:72:e1:2a:44:06:99:8e:2f:f4:38:d7:32:db:01: fd:85:e2:85:34:c0:20:86:49:11:bb:a7:4d:f0:7b:9e:f1:f4: 7c:fb:ed:38:11:1c:24:b6:24:b7:1e:12:bf:55:1a:c2:a5:5f: 57:2b:13:03:29:b6:73:f3:d9:8d:77:6a:b3:ff:1f:78:60:31: 07:49:36:a2:76:12:bc:61:12:55:26:89:3d:a8:44:14:e8:27: 8a:c2:45:0c:1b:bf:d3:ac:29:13:a1:e0:9a:b5:e7:ca:1d:9e: 08:2b:89:7a:74:95:f9:09:48:f9:bf:1b:81:5d:81:d4:23:6d: 90:68:95:d3:7a:44:74:ea:14:cc:0b:c6:90:83:a6:ac:0e:1b: b0:cd:0e:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA9eVRiMO4avxDvkky8UmbLVutAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJEQjcwOEZBQTAzNUYzN0U5QzREMzk2RTJDNDU5QTZG Mzc5QzgzODAeFw0yNTExMDMwNDM1MTNaFw0yNTExMDQwODMzMTNaMDMxMTAvBgNV BAMTKDdGRTVBNUEzODNEMDVDN0ZFQjM0MkM2NTQ2MjlCRjUzMTI3RTMzRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIM3jl8QkP3LbbspRQO4WUYeis LqcA69Y7VKO2RhlW9XGmzlrlrqMfDELuL3pLrIvKL8ZByHQHkSXj9w92m5KIolXG Cqs+uFWXkH5/dFO8hf1JP+Qv0W4y7kNNFYuuCH9vfFfu5EmfXIM0w4anf9//jauq vooXH1f1AJM6yfEbcawQLEQ+5P6UC+eAogStYxNA6Y2UhIZxFsz+ZpAUqH4g/HaY 6ofeWZJCB4Wc8eL+YhaWh+yvZnWtkwXn3fswcg5mYPlzrbjb+f5HuAPvV+wQFTyM S0PUo22yfyPC2EH8Ft+RqG5PWPK1SQ412mlhNtRmyu8BfmvXP79tSlEZa6F5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUf+Wlo4PQXH/rNCxlRim/UxJ+M/EwHwYDVR0j BBgwFoAUAttwj6oDXzfpxNOW4sRZpvN5yDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSG9XVGJVR1BYS1hzN1FQQ2FEY1ZYQ1hYcGhzdlRmc1pDbXBSaXVxWk1r WTQvMC8wMkRCNzA4RkFBMDM1RjM3RTlDNEQzOTZFMkM0NTlBNkYzNzlDODM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyREI3MDhGQUEwMzVGMzdF OUM0RDM5NkUyQzQ1OUE2RjM3OUM4MzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SG9XVGJVR1BYS1hzN1FQQ2FEY1ZYQ1hYcGhzdlRmc1pDbXBSaXVxWk1rWTQvMC8w MkRCNzA4RkFBMDM1RjM3RTlDNEQzOTZFMkM0NTlBNkYzNzlDODM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVv8wl/0Nb/WfMTo1mtjrt+tWzdqbd9yRQ7wRbE/uUkHpowj0rsOY2T8qlDHq jg4BU8h7XyZy7W2EvEU7+b9sH5KsJpPmii6+7KJ/2LMaSacJQZ1mLFs+7eljEtr4 QALkdDpSi3Dno1tUfDn2BXLNlnLhKkQGmY4v9DjXMtsB/YXihTTAIIZJEbunTfB7 nvH0fPvtOBEcJLYktx4Sv1UawqVfVysTAym2c/PZjXdqs/8feGAxB0k2onYSvGES VSaJPahEFOgnisJFDBu/06wpE6HgmrXnyh2eCCuJenSV+QlI+b8bgV2B1CNtkGiV 03pEdOoUzAvGkIOmrA4bsM0Okg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:15:39 2025 by rpki-client