$ rpki-client -vvf rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft File: 8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft (raw, json) Hash identifier: f0lW98YavHnXyLKnwBypCrB+CxGMIhjTM/qJ8EqfLvM= Subject key identifier: A1:28:48:B0:AA:49:C0:A7:F8:85:C4:64:F4:97:C7:E0:90:45:F0:21 Authority key identifier: 8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F Certificate issuer: /CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F Certificate serial: 3154304767AE54E925B46654F8F831380A693988 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer Subject info access: rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft Manifest number: 030E Signing time: Tue 04 Nov 2025 06:10:50 +0000 Manifest this update: Tue 04 Nov 2025 06:05:50 +0000 Manifest next update: Wed 05 Nov 2025 08:55:50 +0000 Files and hashes: 1: 323830343a313838303a3a2f33322d3438203d3e203631393336.roa (hash: fNkBrLz/jvFOQO/KxVfV9h3dG8yXI+1zaqYHBVObJmU=) 2: 8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl (hash: cWNAfc483xA9sY635WjnsZAMRX8weCKOhpo+yefLiDw=) 3: 3230312e3135382e382e302f32322d3332203d3e203631393336.roa (hash: WpZ5sUqhiJ0BMAFBVpd5yaa8cbE2gQgKDld3O0R9kZU=) 4: 3230312e3135382e31322e302f32322d3332203d3e203631393336.roa (hash: q64U3XdQiM6WKtpCEo7j7fGKyfFwMLWBdU09Qk2x/B0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 08:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:54:30:47:67:ae:54:e9:25:b4:66:54:f8:f8:31:38:0a:69:39:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F Validity Not Before: Nov 4 06:05:50 2025 GMT Not After : Nov 5 08:55:50 2025 GMT Subject: CN=A12848B0AA49C0A7F885C464F497C7E09045F021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a8:ba:96:97:d3:d4:25:e0:1b:7a:d4:47:ef: 5f:bd:04:fd:87:24:8e:09:38:57:e4:5d:8d:b3:9b: 3c:88:a9:84:af:55:f3:5e:6c:eb:6e:b7:3c:69:d2: ef:24:1b:27:ef:75:01:38:ab:40:f2:53:6e:a7:cb: 44:05:3b:e2:b5:f2:43:59:90:db:ee:11:3c:1d:fb: d7:9b:5b:f2:ff:85:1d:80:83:84:75:57:04:b5:72: 86:3f:c3:20:6e:5b:21:82:29:28:3c:e0:eb:cc:d7: 19:a3:46:52:23:a8:75:61:24:43:81:35:f1:51:47: e8:b0:8c:f9:74:c6:33:87:a2:90:64:5a:45:17:e9: 6c:2b:c7:c5:db:7d:ab:c0:93:5b:64:53:d4:cf:81: cf:fe:2f:fd:19:f1:65:fb:f5:a7:93:63:f0:c8:5f: d9:7f:5f:58:5d:75:d2:57:f7:b9:50:35:b3:b1:bd: 5c:63:06:b0:c6:fc:ad:33:b4:03:cb:9a:b7:dc:ff: 60:2b:57:43:11:69:6a:4e:37:08:61:3e:5c:34:f9: 3b:75:2c:b3:da:b0:e7:2a:fe:1b:20:57:89:61:cb: be:cd:92:bb:c8:7a:ac:a1:ed:bb:26:eb:6a:65:02: aa:ba:ec:02:f3:cc:b1:7e:da:24:dd:4e:a2:8c:a8: 62:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:28:48:B0:AA:49:C0:A7:F8:85:C4:64:F4:97:C7:E0:90:45:F0:21 X509v3 Authority Key Identifier: keyid:8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:54:24:61:c9:3b:e5:15:0e:53:1b:04:79:bd:c7:2a:1c:46: 73:6f:0e:f6:ef:01:33:38:a5:8c:d0:71:ba:86:d2:fd:eb:83: 07:9f:97:af:31:88:6e:80:06:72:ab:c5:8f:cf:8b:a2:6c:75: fd:67:66:ef:c6:fe:7b:ca:29:67:22:85:de:26:bf:3b:9e:c8: e7:33:72:47:54:ad:b1:9d:50:7f:1f:0e:46:3b:b9:cc:32:d0: 8a:a8:2e:86:77:26:10:9f:a5:1e:0d:25:1b:4e:34:76:db:b4: 8b:fc:5b:f8:23:d5:c2:70:a3:26:a9:65:7a:0e:3c:91:bf:37: 15:de:f5:84:8b:17:b8:3a:8d:cc:4c:cf:55:d8:d2:93:45:06: 2c:99:e5:15:74:e6:fc:fe:38:80:aa:62:b3:2c:13:20:4d:e6: c4:07:2b:fa:93:7e:fe:a2:1b:c1:8a:92:6f:f6:92:39:b4:cf: fe:eb:40:90:35:79:37:a2:2a:47:b5:f5:1f:20:ad:cc:44:55: 02:f9:47:f6:58:20:e6:e5:21:97:7b:32:76:bb:38:4f:2c:47: 82:ee:09:41:e5:d8:1b:76:10:37:3d:9b:1d:d7:aa:d8:7f:96: 52:d7:ec:08:af:54:ae:6b:e5:2f:1d:9b:2c:05:80:0d:8c:39: d7:46:38:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMVQwR2euVOkltGZU+PgxOAppOYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQwMzA2QzIzRkY1NjRBRjU0Qjc5RDhGOThEMERDRERD OTMwQjIxRjAeFw0yNTExMDQwNjA1NTBaFw0yNTExMDUwODU1NTBaMDMxMTAvBgNV BAMTKEExMjg0OEIwQUE0OUMwQTdGODg1QzQ2NEY0OTdDN0UwOTA0NUYwMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgqLqWl9PUJeAbetRH71+9BP2H JI4JOFfkXY2zmzyIqYSvVfNebOtutzxp0u8kGyfvdQE4q0DyU26ny0QFO+K18kNZ kNvuETwd+9ebW/L/hR2Ag4R1VwS1coY/wyBuWyGCKSg84OvM1xmjRlIjqHVhJEOB NfFRR+iwjPl0xjOHopBkWkUX6Wwrx8XbfavAk1tkU9TPgc/+L/0Z8WX79aeTY/DI X9l/X1hdddJX97lQNbOxvVxjBrDG/K0ztAPLmrfc/2ArV0MRaWpONwhhPlw0+Tt1 LLPasOcq/hsgV4lhy77NkrvIeqyh7bsm62plAqq67ALzzLF+2iTdTqKMqGKlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoShIsKpJwKf4hcRk9JfH4JBF8CEwHwYDVR0j BBgwFoAUjQMGwj/1ZK9Ut52PmNDc3ckwsh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSkNYdkZVWXY4NDdNOEtOQUhGREppb3VUcUpCdDJWUU5xbUVOVHFNeFhG TU4vMC84RDAzMDZDMjNGRjU2NEFGNTRCNzlEOEY5OEQwRENEREM5MzBCMjFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEMDMwNkMyM0ZGNTY0QUY1 NEI3OUQ4Rjk4RDBEQ0REQzkzMEIyMUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SkNYdkZVWXY4NDdNOEtOQUhGREppb3VUcUpCdDJWUU5xbUVOVHFNeFhGTU4vMC84 RDAzMDZDMjNGRjU2NEFGNTRCNzlEOEY5OEQwRENEREM5MzBCMjFGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGFQkYck75RUOUxsEeb3HKhxGc28O9u8BMziljNBxuobS/euDB5+XrzGIboAG cqvFj8+Lomx1/Wdm78b+e8opZyKF3ia/O57I5zNyR1StsZ1Qfx8ORju5zDLQiqgu hncmEJ+lHg0lG040dtu0i/xb+CPVwnCjJqlleg48kb83Fd71hIsXuDqNzEzPVdjS k0UGLJnlFXTm/P44gKpisywTIE3mxAcr+pN+/qIbwYqSb/aSObTP/utAkDV5N6Iq R7X1HyCtzERVAvlH9lgg5uUhl3sydrs4TyxHgu4JQeXYG3YQNz2bHdeq2H+WUtfs CK9UrmvlLx2bLAWADYw510Y4yQ== -----END CERTIFICATE-----Generated at Tue Nov 4 16:09:49 2025 by rpki-client