$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft File: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft (raw, json) Hash identifier: gAFhag1mGxTiZsp9OPIcXNJfXVwDUQGsYwydcVjMdk8= Subject key identifier: 33:95:C3:80:3A:7E:95:F4:B8:22:C8:2C:9F:AA:13:2F:54:61:D3:FA Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Certificate serial: 361E943939271410B1BBAFFE1E6327ED3F2F22B8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft Manifest number: 037E Signing time: Sun 02 Nov 2025 21:00:41 +0000 Manifest this update: Sun 02 Nov 2025 20:55:41 +0000 Manifest next update: Mon 03 Nov 2025 21:59:41 +0000 Files and hashes: 1: 323830343a3937383a3a2f33322d313238203d3e20323633303837.roa (hash: G/FFJ7H4y3UmSNdQvjTb1QYjVB9bKR8OycW7xU2KFuI=) 2: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl (hash: +9SFV5YVRtKBoXi89C+27hEN6Y7eLKiLvYkpKwnWTyQ=) 3: 3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa (hash: lsPfySBrQRokkFGPXoHfXtf83HsA13dTki6xitZ2OTw=) 4: 3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa (hash: XRhfslxEoTNm+hxIZ2x4tmw31Lm059fbAltLDLKYMTE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 21:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:1e:94:39:39:27:14:10:b1:bb:af:fe:1e:63:27:ed:3f:2f:22:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Validity Not Before: Nov 2 20:55:41 2025 GMT Not After : Nov 3 21:59:41 2025 GMT Subject: CN=3395C3803A7E95F4B822C82C9FAA132F5461D3FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d1:30:a3:0b:4d:f3:c3:8d:0d:3c:a3:2b:3e: 5c:21:1c:ef:90:44:79:de:41:6a:f4:c6:86:60:27: 66:4d:39:89:2a:07:86:a4:fc:10:3f:28:c4:d8:39: 9e:af:12:2c:1c:d5:2e:45:77:fd:58:93:55:cb:38: 15:14:1f:ca:dc:90:b9:9d:51:6d:f3:64:6f:97:8c: 98:c4:58:35:11:af:fe:ef:20:88:82:5e:15:cb:a6: 26:20:f2:90:b4:d3:7e:1d:f9:69:4f:1b:81:1d:ff: a9:ec:9f:b5:d5:be:31:04:93:f8:d1:30:a1:d9:ec: cd:3b:2e:a3:66:bd:53:73:77:b9:21:82:ad:ba:7c: 73:66:d5:b2:6a:8f:e8:a1:13:f1:69:31:66:b8:55: 1a:2c:92:a6:5d:b1:61:a0:48:79:71:6e:c3:7e:f6: a4:c5:58:24:ac:ed:61:91:8e:c7:31:9d:2b:3a:30: 36:04:8d:e1:18:e1:6f:66:47:36:7d:05:a6:75:04: 09:63:b8:72:a6:7e:66:26:d2:44:a4:18:8e:80:b5: af:c2:b7:d5:df:78:bb:4c:46:97:7d:6c:5c:95:7a: fb:68:80:a0:e4:6c:e5:43:cf:07:98:16:76:db:15: 03:2b:ea:fb:74:dc:4e:c2:74:55:f2:2b:d3:87:0f: d5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:95:C3:80:3A:7E:95:F4:B8:22:C8:2C:9F:AA:13:2F:54:61:D3:FA X509v3 Authority Key Identifier: keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:9f:af:c5:c0:10:ec:bb:9b:ab:7a:3e:b5:7f:9b:74:0d:92: 97:eb:9f:69:06:3e:4e:7f:d6:c7:fe:35:83:80:4a:9b:85:ef: 66:26:42:f6:42:78:59:da:35:a9:99:27:f4:be:ec:1c:71:77: 57:09:af:d1:bd:09:25:fb:bf:dd:f0:a9:00:e3:56:59:d5:4d: fd:10:1f:e6:c9:37:67:8c:07:c0:93:47:90:7b:05:32:54:b7: a0:75:f2:c6:5f:c1:74:f1:d4:a1:84:6c:7d:78:d7:cc:29:52: 6b:52:6c:19:02:c0:62:6f:bb:59:9e:eb:a9:93:ef:21:06:8e: 6c:c9:6d:34:4e:fe:89:45:99:84:98:a0:fc:d0:8f:14:c4:9b: 61:90:e9:f7:a1:60:bd:7c:69:28:5e:07:8d:b8:08:af:a3:d0: a9:db:73:b2:1d:6a:ef:3c:6e:50:61:6d:48:e4:f2:13:c1:69: f9:9a:6f:51:56:9b:c5:d5:8a:96:62:79:20:44:52:8f:e0:52: c4:f2:e7:d3:33:65:c6:44:2d:40:31:4d:0b:6a:64:34:e4:49: d0:d3:9b:5b:82:bf:86:db:ff:4e:7e:03:31:79:22:d9:51:7f: d6:8c:8d:a6:4a:d8:63:1c:9c:cf:69:2f:44:7b:a1:c2:4d:6a: 93:10:8e:62 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUNh6UOTknFBCxu6/+HmMn7T8vIrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFB MzY0M0Y5NDAeFw0yNTExMDIyMDU1NDFaFw0yNTExMDMyMTU5NDFaMDMxMTAvBgNV BAMTKDMzOTVDMzgwM0E3RTk1RjRCODIyQzgyQzlGQUExMzJGNTQ2MUQzRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI0TCjC03zw40NPKMrPlwhHO+Q RHneQWr0xoZgJ2ZNOYkqB4ak/BA/KMTYOZ6vEiwc1S5Fd/1Yk1XLOBUUH8rckLmd UW3zZG+XjJjEWDURr/7vIIiCXhXLpiYg8pC0034d+WlPG4Ed/6nsn7XVvjEEk/jR MKHZ7M07LqNmvVNzd7khgq26fHNm1bJqj+ihE/FpMWa4VRoskqZdsWGgSHlxbsN+ 9qTFWCSs7WGRjscxnSs6MDYEjeEY4W9mRzZ9BaZ1BAljuHKmfmYm0kSkGI6Ata/C t9XfeLtMRpd9bFyVevtogKDkbOVDzweYFnbbFQMr6vt03E7CdFXyK9OHD9XrAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUM5XDgDp+lfS4Isgsn6oTL1Rh0/owHwYDVR0j BBgwFoAULQ0Ui98u1Pvb64DbHrN36qNkP5QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9LRmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1C LzAvMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFBMzY0M0Y5NC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yRDBEMTQ4QkRGMkVENEZCREJF QjgwREIxRUIzNzdFQUEzNjQzRjk0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0tG ZTlGRzNheEhabzVHZUhGM2ZGRmJtV0MxNTd1NW5jVFdkYzZZQXFWbUIvMC8yRDBE MTQ4QkRGMkVENEZCREJFQjgwREIxRUIzNzdFQUEzNjQzRjk0Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA oZ+vxcAQ7Lubq3o+tX+bdA2Sl+ufaQY+Tn/Wx/41g4BKm4XvZiZC9kJ4Wdo1qZkn 9L7sHHF3Vwmv0b0JJfu/3fCpAONWWdVN/RAf5sk3Z4wHwJNHkHsFMlS3oHXyxl/B dPHUoYRsfXjXzClSa1JsGQLAYm+7WZ7rqZPvIQaObMltNE7+iUWZhJig/NCPFMSb YZDp96FgvXxpKF4HjbgIr6PQqdtzsh1q7zxuUGFtSOTyE8Fp+ZpvUVabxdWKlmJ5 IERSj+BSxPLn0zNlxkQtQDFNC2pkNORJ0NObW4K/htv/Tn4DMXki2VF/1oyNpkrY Yxycz2kvRHuhwk1qkxCOYg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:13:20 2025 by rpki-client