$ rpki-client -vvf rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft File: 17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft (raw, json) Hash identifier: n0sgRtWJV1E36FIJuqSmBQL2y+F/rx/23arm1HISvXQ= Subject key identifier: 64:F0:C4:0C:3D:40:3D:1F:56:EF:E3:03:06:97:92:2C:D7:24:2E:3D Authority key identifier: 17:AE:8A:BC:70:3F:A8:58:68:09:D4:D8:7E:B5:C6:45:27:88:A9:EE Certificate issuer: /CN=17AE8ABC703FA8586809D4D87EB5C6452788A9EE Certificate serial: 025C36B146C1F36C4CED0DF035059A2B0128E102 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer Subject info access: rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft Manifest number: 01B0 Signing time: Mon 03 Nov 2025 19:14:57 +0000 Manifest this update: Mon 03 Nov 2025 19:09:57 +0000 Manifest next update: Tue 04 Nov 2025 23:04:57 +0000 Files and hashes: 1: 17AE8ABC703FA8586809D4D87EB5C6452788A9EE.crl (hash: 67y6CT3FWyUQkApq+9rDG8Aan9l05NifThqnW6DfAlo=) 2: 323830343a393165343a3a2f33322d3438203d3e20323734363733.roa (hash: s21rNeQfq9YTEKaQ6qP+omsM/9QsW3wpcSyzvCuwbG0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.crl rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 23:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:5c:36:b1:46:c1:f3:6c:4c:ed:0d:f0:35:05:9a:2b:01:28:e1:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17AE8ABC703FA8586809D4D87EB5C6452788A9EE Validity Not Before: Nov 3 19:09:57 2025 GMT Not After : Nov 4 23:04:57 2025 GMT Subject: CN=64F0C40C3D403D1F56EFE3030697922CD7242E3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bc:65:70:01:8e:9a:7e:14:f8:e7:7b:e5:fa: e4:f6:75:30:6d:5f:46:73:b5:96:59:75:f8:0d:52: 53:cf:e2:f0:ed:d3:f3:8b:95:5f:19:0d:82:0c:c1: 1b:3a:a8:45:03:6f:17:48:ce:76:38:42:a6:bb:ee: fc:70:2a:10:d3:87:20:1b:bf:ff:66:ea:f4:22:e3: 27:60:d3:c2:04:b0:d9:67:db:77:b5:f3:d1:b4:e5: 77:c7:ab:b1:49:9b:30:74:55:1c:a2:bc:3c:e5:99: 1d:ad:93:bc:94:f6:fd:ca:aa:d0:a2:23:6b:56:0f: c3:a4:df:55:3f:8f:8b:64:1e:93:57:5e:0b:0f:1c: db:1f:83:16:64:3c:32:69:44:aa:1e:04:8b:8d:71: 34:88:f0:1f:a3:d7:ed:8d:c1:69:55:c8:5a:37:d3: 92:fa:ed:18:3c:3f:40:f4:a8:8a:84:93:5c:d7:7d: 96:8b:3f:c5:fc:c7:de:14:dc:33:3e:e8:79:71:f9: 65:1f:ae:e7:66:4b:96:86:b1:35:33:64:a6:41:62: 06:eb:f9:2e:f8:6c:2c:57:0f:76:22:11:be:62:93: a4:32:c7:fd:8f:6c:65:9e:96:74:a4:7d:f2:53:64: 19:1b:b5:61:f0:28:84:ad:b5:45:96:db:0b:20:91: c9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F0:C4:0C:3D:40:3D:1F:56:EF:E3:03:06:97:92:2C:D7:24:2E:3D X509v3 Authority Key Identifier: keyid:17:AE:8A:BC:70:3F:A8:58:68:09:D4:D8:7E:B5:C6:45:27:88:A9:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:02:3c:91:ff:4e:da:b4:fc:ea:a7:ca:1d:24:e7:36:da:17: 4a:c5:f7:c2:85:2d:7d:49:e6:45:f1:9a:01:67:7e:ec:23:dc: 80:c7:9c:fc:fd:b6:83:a3:ca:2e:9e:3f:17:0b:95:8f:11:67: 02:04:f7:78:3c:61:1e:21:70:d1:5f:48:3e:f0:3b:60:aa:00: b1:0a:36:1e:59:bc:10:a4:e2:88:85:58:47:07:20:7f:0c:67: e6:3f:ed:3d:0a:cb:4a:d8:62:df:96:e0:d0:19:0d:54:63:ad: 15:54:79:d2:e6:ff:45:58:cb:fb:bd:26:74:c8:d9:41:72:f7: 4e:7b:c3:72:b4:57:fe:dc:ab:44:bb:5c:5d:ce:24:6c:9b:b0: 1d:09:42:82:15:4b:45:06:a3:a4:0d:bf:52:f0:1a:49:e8:d2: be:74:e6:29:50:50:c1:67:5f:ac:bd:23:35:43:88:1c:ac:2d: 3d:d6:d7:0e:cb:c2:f7:21:dc:ac:44:3a:53:80:3b:be:02:dd: d7:03:21:ba:79:5f:85:67:6a:c6:3c:d7:f7:53:98:2a:a5:3a: 3e:7c:84:c8:3b:0e:e0:6e:81:b1:87:98:21:e7:8a:42:95:43: 71:6e:8d:a2:36:7e:35:73:d9:ba:b1:3a:6c:f8:1c:d8:c4:52: 7d:69:9b:46 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUAlw2sUbB82xM7Q3wNQWaKwEo4QIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdBRThBQkM3MDNGQTg1ODY4MDlENEQ4N0VCNUM2NDUy Nzg4QTlFRTAeFw0yNTExMDMxOTA5NTdaFw0yNTExMDQyMzA0NTdaMDMxMTAvBgNV BAMTKDY0RjBDNDBDM0Q0MDNEMUY1NkVGRTMwMzA2OTc5MjJDRDcyNDJFM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChvGVwAY6afhT453vl+uT2dTBt X0ZztZZZdfgNUlPP4vDt0/OLlV8ZDYIMwRs6qEUDbxdIznY4Qqa77vxwKhDThyAb v/9m6vQi4ydg08IEsNln23e189G05XfHq7FJmzB0VRyivDzlmR2tk7yU9v3KqtCi I2tWD8Ok31U/j4tkHpNXXgsPHNsfgxZkPDJpRKoeBIuNcTSI8B+j1+2NwWlVyFo3 05L67Rg8P0D0qIqEk1zXfZaLP8X8x94U3DM+6Hlx+WUfrudmS5aGsTUzZKZBYgbr +S74bCxXD3YiEb5ik6Qyx/2PbGWelnSkffJTZBkbtWHwKISttUWW2wsgkcnJAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUZPDEDD1APR9W7+MDBpeSLNckLj0wHwYDVR0j BBgwFoAUF66KvHA/qFhoCdTYfrXGRSeIqe4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9jaUVFelU2bVltTnFpQ2FUNHZudDRVRjRuY3laOVZoelQyYmZWeVVVZTNp LzAvMTdBRThBQkM3MDNGQTg1ODY4MDlENEQ4N0VCNUM2NDUyNzg4QTlFRS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xN0FFOEFCQzcwM0ZBODU4Njgw OUQ0RDg3RUI1QzY0NTI3ODhBOUVFLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2Np RUV6VTZtWW1OcWlDYVQ0dm50NFVGNG5jeVo5Vmh6VDJiZlZ5VVVlM2kvMC8xN0FF OEFCQzcwM0ZBODU4NjgwOUQ0RDg3RUI1QzY0NTI3ODhBOUVFLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA swI8kf9O2rT86qfKHSTnNtoXSsX3woUtfUnmRfGaAWd+7CPcgMec/P22g6PKLp4/ FwuVjxFnAgT3eDxhHiFw0V9IPvA7YKoAsQo2Hlm8EKTiiIVYRwcgfwxn5j/tPQrL Sthi35bg0BkNVGOtFVR50ub/RVjL+70mdMjZQXL3TnvDcrRX/tyrRLtcXc4kbJuw HQlCghVLRQajpA2/UvAaSejSvnTmKVBQwWdfrL0jNUOIHKwtPdbXDsvC9yHcrEQ6 U4A7vgLd1wMhunlfhWdqxjzX91OYKqU6PnyEyDsO4G6BsYeYIeeKQpVDcW6NojZ+ NXPZurE6bPgc2MRSfWmbRg== -----END CERTIFICATE-----Generated at Tue Nov 4 05:06:53 2025 by rpki-client