$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.mft File: 41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.mft (raw, json) Hash identifier: jwJayC+SG0aZezydoRkvDqt+sgztxTdXvRT/tK7SUFE= Subject key identifier: 25:B3:20:73:A3:D3:86:B3:2E:4F:21:AD:D8:22:4F:CC:D2:21:B4:49 Authority key identifier: 41:FD:33:29:BA:EE:7F:DE:9F:A6:AE:86:AE:40:25:B1:BF:AE:0A:68 Certificate issuer: /CN=41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68 Certificate serial: 09C7F612CA750F9CE44CB2926026A72536DF64C2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer Subject info access: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.mft Manifest number: 0E Signing time: Mon 03 Nov 2025 08:49:21 +0000 Manifest this update: Mon 03 Nov 2025 08:44:21 +0000 Manifest next update: Tue 04 Nov 2025 11:10:21 +0000 Files and hashes: 1: 41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.crl (hash: PySeqihyJ0/qXva8NemE3JigAWb2EJWPnrnMYje42g4=) 2: 3138362e3234392e3230382e302f32312d3234203d3e20323633303236.roa (hash: I91E2F3jw4jRdSPxaOhLIhvmTJSuU7fGzMz9ajPNwbU=) 3: 3133382e33362e32302e302f32322d3234203d3e20323633303236.roa (hash: BUK0GzbNyD/abJDFa7an7fqiO0Un2af6pmFESK0VwW8=) 4: 3137302e38332e38302e302f32322d3234203d3e20323633303236.roa (hash: yxbRoHfWtwh6xMmlphpwB2OBsNVcchipPcjKM9kVzCI=) 5: 323830343a6132383a3a2f33322d3438203d3e20323633303236.roa (hash: 6nFTNuG5EFWl6bFOpqqneFS6n/37QZ9k+qctY+fvJsM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.crl rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c7:f6:12:ca:75:0f:9c:e4:4c:b2:92:60:26:a7:25:36:df:64:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68 Validity Not Before: Nov 3 08:44:21 2025 GMT Not After : Nov 4 11:10:21 2025 GMT Subject: CN=25B32073A3D386B32E4F21ADD8224FCCD221B449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9e:9f:5e:cd:3c:13:c6:b9:00:ad:99:46:be: 87:de:43:0d:cc:66:10:5a:5e:7e:db:ce:c7:11:a7: 50:2a:b1:c0:35:e8:02:78:bb:f6:5a:b9:13:b6:1d: a9:fe:11:c8:7f:c3:b2:44:39:bb:ca:92:35:78:4f: cd:7e:e1:6c:1f:6a:ed:fb:f9:2a:3c:bb:3b:0a:7d: 6d:7f:da:9e:d6:00:af:47:85:19:40:aa:db:c3:ec: f0:a3:ea:83:9c:0f:bd:05:31:49:53:95:1f:d9:8e: 57:bc:d8:98:3f:66:dd:8a:1b:4d:fb:04:5b:92:44: aa:8e:38:ad:92:99:d4:98:76:1d:14:a0:89:d2:7e: c2:05:89:c7:ae:44:51:68:71:01:30:b6:f4:b5:6a: d4:4d:51:5f:1c:ff:65:ce:33:db:ca:a9:98:8a:5e: 09:20:9c:fc:10:01:c4:cb:73:71:9d:c5:d8:62:40: 25:86:e7:98:3d:b7:48:61:ca:46:bd:de:d0:4a:d5: b9:25:a5:a3:00:94:ca:dd:70:80:13:c1:39:42:c7: c1:c0:7a:dc:5d:14:5b:35:a4:13:fa:63:30:6d:e5: c5:e9:76:c1:26:1c:96:60:da:07:64:82:b2:7f:ed: ce:3a:a6:50:c3:6a:5f:41:68:16:87:2c:03:8a:bb: a4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B3:20:73:A3:D3:86:B3:2E:4F:21:AD:D8:22:4F:CC:D2:21:B4:49 X509v3 Authority Key Identifier: keyid:41:FD:33:29:BA:EE:7F:DE:9F:A6:AE:86:AE:40:25:B1:BF:AE:0A:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a5:40:96:6a:32:c6:23:e5:cb:cb:db:22:d1:07:27:82:63: ce:f6:45:85:28:4c:5c:0e:43:2a:81:d5:c8:96:ca:88:25:1f: 40:8b:15:4c:13:4e:50:3c:2b:97:eb:ae:9a:ef:58:b2:21:c7: 59:51:79:2f:85:84:e4:f4:61:d6:7e:b0:64:fb:17:f9:28:4c: 67:70:20:cd:94:32:a8:5c:e4:59:34:e1:6e:4e:50:b9:3e:ea: 7b:3a:71:ac:41:3d:bb:70:92:ad:d6:67:b0:4c:2a:c7:03:c1: e6:04:ae:25:db:64:2b:ea:43:d8:0d:0b:6d:01:d2:ce:5e:76: b8:12:11:9e:8b:ab:5e:0c:be:00:be:d0:31:43:a1:7b:65:93: 9c:03:cf:d9:20:12:93:9e:9e:fc:b2:9a:c9:ad:69:02:b7:73: 8b:79:fb:5d:3d:91:92:a8:0c:8b:09:30:15:f4:a4:d2:ea:74: e7:c2:f5:54:6e:30:13:28:d0:62:8c:4f:ac:fa:19:d1:88:1f: e6:eb:af:6e:62:e6:4d:dd:51:56:38:ae:d1:05:52:e7:c7:42: 71:13:f1:5d:83:b1:6c:de:bf:c3:84:b5:58:dc:88:84:41:06: 8c:ba:27:b5:c5:a6:d5:36:b1:d0:17:40:31:9b:d7:08:7f:4a: 37:dd:05:a7 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUCcf2Esp1D5zkTLKSYCanJTbfZMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGRDMzMjlCQUVFN0ZERTlGQTZBRTg2QUU0MDI1QjFC RkFFMEE2ODAeFw0yNTExMDMwODQ0MjFaFw0yNTExMDQxMTEwMjFaMDMxMTAvBgNV BAMTKDI1QjMyMDczQTNEMzg2QjMyRTRGMjFBREQ4MjI0RkNDRDIyMUI0NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDnp9ezTwTxrkArZlGvofeQw3M ZhBaXn7bzscRp1AqscA16AJ4u/ZauRO2Han+Ech/w7JEObvKkjV4T81+4Wwfau37 +So8uzsKfW1/2p7WAK9HhRlAqtvD7PCj6oOcD70FMUlTlR/Zjle82Jg/Zt2KG037 BFuSRKqOOK2SmdSYdh0UoInSfsIFiceuRFFocQEwtvS1atRNUV8c/2XOM9vKqZiK XgkgnPwQAcTLc3GdxdhiQCWG55g9t0hhyka93tBK1bklpaMAlMrdcIATwTlCx8HA etxdFFs1pBP6YzBt5cXpdsEmHJZg2gdkgrJ/7c46plDDal9BaBaHLAOKu6QPAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUJbMgc6PThrMuTyGt2CJPzNIhtEkwHwYDVR0j BBgwFoAUQf0zKbruf96fpq6GrkAlsb+uCmgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby94WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2Jj LzAvNDFGRDMzMjlCQUVFN0ZERTlGQTZBRTg2QUU0MDI1QjFCRkFFMEE2OC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80MUZEMzMyOUJBRUU3RkRFOUZB NkFFODZBRTQwMjVCMUJGQUUwQTY4LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3hY cHNBZ3ZwNjl0S21wM1A1QkU5WWRpZHVBejJkQk44RVdhbjF0VkFDYmMvMC80MUZE MzMyOUJBRUU3RkRFOUZBNkFFODZBRTQwMjVCMUJGQUUwQTY4Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA LKVAlmoyxiPly8vbItEHJ4JjzvZFhShMXA5DKoHVyJbKiCUfQIsVTBNOUDwrl+uu mu9YsiHHWVF5L4WE5PRh1n6wZPsX+ShMZ3AgzZQyqFzkWTThbk5QuT7qezpxrEE9 u3CSrdZnsEwqxwPB5gSuJdtkK+pD2A0LbQHSzl52uBIRnourXgy+AL7QMUOhe2WT nAPP2SASk56e/LKaya1pArdzi3n7XT2RkqgMiwkwFfSk0up058L1VG4wEyjQYoxP rPoZ0Ygf5uuvbmLmTd1RVjiu0QVS58dCcRPxXYOxbN6/w4S1WNyIhEEGjLontcWm 1Tax0BdAMZvXCH9KN90Fpw== -----END CERTIFICATE-----Generated at Tue Nov 4 00:17:18 2025 by rpki-client