$ rpki-client -vvf rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.mft File: 349BDC9A5D2D169C13F5929341F8E986CACF88D9.mft (raw, json) Hash identifier: aswBiYOsGh2k3ZgcEmXiscz6LtlrPZU9OcO88Nn/psk= Subject key identifier: C0:B4:F3:9D:B8:E0:8A:C5:10:0A:EC:02:EA:8F:88:45:43:49:09:1E Authority key identifier: 34:9B:DC:9A:5D:2D:16:9C:13:F5:92:93:41:F8:E9:86:CA:CF:88:D9 Certificate issuer: /CN=349BDC9A5D2D169C13F5929341F8E986CACF88D9 Certificate serial: 516226329D516CB7658A217DA908482F301A65DD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/349BDC9A5D2D169C13F5929341F8E986CACF88D9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.mft Manifest number: 26 Signing time: Sun 19 Oct 2025 17:54:12 +0000 Manifest this update: Sun 19 Oct 2025 17:49:12 +0000 Manifest next update: Mon 20 Oct 2025 18:33:12 +0000 Files and hashes: 1: 349BDC9A5D2D169C13F5929341F8E986CACF88D9.crl (hash: XOtE1bT7ar4XhRzKyYTfhkustErN0iN1vA7S3T8V7V4=) 2: 34352e3233342e3134302e302f32322d3234203d3e20313938393439.roa (hash: nGoUxy3Z/MpvqrXwnPLSoXN9QWdPvQGTMWdzwQBA2AE=) 3: 34352e3233342e3134302e302f32322d3332203d3e20323637333832.roa (hash: w1a2LCC4hQc0RPNVmKfvItCl8GgNaYXtVfSCDlKVpSI=) 4: 323830343a346361343a3a2f33322d313238203d3e20323637333832.roa (hash: gt5uEoYMYqM6if3oNPcnpwptlLfdw88JJcTDqT76Luo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.crl rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/349BDC9A5D2D169C13F5929341F8E986CACF88D9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 18:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:62:26:32:9d:51:6c:b7:65:8a:21:7d:a9:08:48:2f:30:1a:65:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349BDC9A5D2D169C13F5929341F8E986CACF88D9 Validity Not Before: Oct 19 17:49:12 2025 GMT Not After : Oct 20 18:33:12 2025 GMT Subject: CN=C0B4F39DB8E08AC5100AEC02EA8F88454349091E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:27:66:3f:fe:76:33:27:ef:b5:f6:a1:79:54: be:39:b7:12:38:9b:30:74:8c:40:d6:4e:37:5b:71: 24:98:a4:e6:61:f1:d3:13:57:4c:36:31:04:93:5d: e8:f7:47:6a:54:90:66:dc:ba:b2:59:52:80:00:28: de:33:b1:dc:7e:06:1e:95:4e:77:72:2a:8a:1d:11: 97:13:c9:b1:78:29:71:5c:41:27:93:fa:8f:db:0b: d1:d3:4d:3b:97:c0:76:70:43:19:10:2c:49:0f:e5: e4:4b:65:7f:68:02:a6:c5:f2:b8:5b:9e:e0:43:40: 18:55:f4:a0:01:07:d9:ce:38:19:20:cc:e6:1b:69: c1:ba:38:6d:e9:2e:9d:e1:55:d5:8a:62:86:e5:af: f3:a6:d7:a4:bd:ab:b4:bb:1e:58:cf:09:20:aa:7d: 51:d3:f1:ed:17:f7:93:3c:ac:91:9a:48:6f:42:6e: 8d:f4:4d:4f:3a:ca:37:d1:9a:ea:e3:85:16:0d:d5: 67:5b:2e:69:7e:41:ff:64:4e:ac:68:f3:f9:26:e5: 3a:25:f1:08:21:4d:ba:16:e0:94:f6:fc:4c:85:14: 82:5e:cc:d9:16:9d:9f:d7:ff:cd:61:d4:cb:9d:ed: d6:87:e7:e7:db:4a:ec:e9:8c:74:35:73:b1:3c:6a: db:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B4:F3:9D:B8:E0:8A:C5:10:0A:EC:02:EA:8F:88:45:43:49:09:1E X509v3 Authority Key Identifier: keyid:34:9B:DC:9A:5D:2D:16:9C:13:F5:92:93:41:F8:E9:86:CA:CF:88:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/349BDC9A5D2D169C13F5929341F8E986CACF88D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:8a:9d:24:27:54:80:8c:49:48:1c:a6:6d:e2:08:a4:bb:34: a4:d5:c2:9f:e6:8b:d7:65:7c:4f:ef:d3:5f:30:e4:de:06:f1: df:30:52:10:c9:e1:ee:5c:e4:f4:01:2e:d5:2f:70:b3:c8:d3: c5:a2:f8:73:5a:18:58:78:95:35:25:59:76:8d:00:29:cc:c7: 13:ea:3c:1b:50:fa:65:9d:0f:09:63:a0:b8:c4:f3:b4:d4:14: dc:01:9f:1f:20:95:89:a1:fd:c1:19:48:b4:31:53:76:46:f5: d4:ff:47:aa:cd:d2:e6:43:da:98:a5:c5:b0:15:65:c7:f1:d1: 0f:52:5f:c0:29:eb:b5:c0:50:6d:a2:92:d9:ad:f0:b2:35:9c: 52:8e:38:76:3e:b6:79:b7:db:e3:6b:ab:c4:bf:44:20:93:f9: df:0b:4a:42:fa:94:be:33:db:da:71:00:b0:1f:3a:d7:9d:ac: d9:ae:4c:85:1d:14:03:7c:75:04:3c:af:d7:a5:52:f0:af:84: 89:73:df:49:c6:f4:e6:ef:70:fe:8e:0e:f0:e1:8c:c5:6e:eb: 2f:c2:57:77:f0:13:b7:99:22:b8:3a:6e:c4:8e:06:89:68:77: 25:6b:a5:93:e0:52:49:69:f1:19:b3:fa:04:1c:fc:49:07:05: 10:2d:d6:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUWImMp1RbLdliiF9qQhILzAaZd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ5QkRDOUE1RDJEMTY5QzEzRjU5MjkzNDFGOEU5ODZD QUNGODhEOTAeFw0yNTEwMTkxNzQ5MTJaFw0yNTEwMjAxODMzMTJaMDMxMTAvBgNV BAMTKEMwQjRGMzlEQjhFMDhBQzUxMDBBRUMwMkVBOEY4ODQ1NDM0OTA5MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpJ2Y//nYzJ++19qF5VL45txI4 mzB0jEDWTjdbcSSYpOZh8dMTV0w2MQSTXej3R2pUkGbcurJZUoAAKN4zsdx+Bh6V TndyKoodEZcTybF4KXFcQSeT+o/bC9HTTTuXwHZwQxkQLEkP5eRLZX9oAqbF8rhb nuBDQBhV9KABB9nOOBkgzOYbacG6OG3pLp3hVdWKYoblr/Om16S9q7S7HljPCSCq fVHT8e0X95M8rJGaSG9Cbo30TU86yjfRmurjhRYN1WdbLml+Qf9kTqxo8/km5Tol 8QghTboW4JT2/EyFFIJezNkWnZ/X/81h1Mud7daH5+fbSuzpjHQ1c7E8attDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwLTznbjgisUQCuwC6o+IRUNJCR4wHwYDVR0j BBgwFoAUNJvcml0tFpwT9ZKTQfjphsrPiNkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlhrV0ZKR3laRlZiMzRGaGFnU1hnY0NMUUNwWDJ5TVprUnM1aVd6WlRY cHovMC8zNDlCREM5QTVEMkQxNjlDMTNGNTkyOTM0MUY4RTk4NkNBQ0Y4OEQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0OUJEQzlBNUQyRDE2OUMx M0Y1OTI5MzQxRjhFOTg2Q0FDRjg4RDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlhrV0ZKR3laRlZiMzRGaGFnU1hnY0NMUUNwWDJ5TVprUnM1aVd6WlRYcHovMC8z NDlCREM5QTVEMkQxNjlDMTNGNTkyOTM0MUY4RTk4NkNBQ0Y4OEQ5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKYqdJCdUgIxJSBymbeIIpLs0pNXCn+aL12V8T+/TXzDk3gbx3zBSEMnh7lzk 9AEu1S9ws8jTxaL4c1oYWHiVNSVZdo0AKczHE+o8G1D6ZZ0PCWOguMTztNQU3AGf HyCViaH9wRlItDFTdkb11P9Hqs3S5kPamKXFsBVlx/HRD1JfwCnrtcBQbaKS2a3w sjWcUo44dj62ebfb42urxL9EIJP53wtKQvqUvjPb2nEAsB86152s2a5MhR0UA3x1 BDyv16VS8K+EiXPfScb05u9w/o4O8OGMxW7rL8JXd/ATt5kiuDpuxI4GiWh3JWul k+BSSWnxGbP6BBz8SQcFEC3WrQ== -----END CERTIFICATE-----Generated at Mon Oct 20 03:49:31 2025 by rpki-client