$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft File: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft (raw, json) Hash identifier: /xi/tknYL42zVhRr8ainEcN1dBiCcj5tUSaJShOsdtg= Subject key identifier: 97:D9:54:2A:9A:F8:3B:74:75:49:70:82:06:90:73:B5:41:96:A5:FF Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 Certificate issuer: /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Certificate serial: 517EF11E60D9CD232D1C7D10F6932A0080003B0B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject info access: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft Manifest number: 0192 Signing time: Mon 20 Oct 2025 09:53:19 +0000 Manifest this update: Mon 20 Oct 2025 09:48:19 +0000 Manifest next update: Tue 21 Oct 2025 10:26:19 +0000 Files and hashes: 1: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl (hash: R0cN4hkG0IHzWoEgNeCb2syb5DuIICv5EeXH6dqLXY4=) 2: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (hash: uIh+Oz5wiODIMg7enOUna4NRPwYVYruwibBcWxdlN6k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 10:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:7e:f1:1e:60:d9:cd:23:2d:1c:7d:10:f6:93:2a:00:80:00:3b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Validity Not Before: Oct 20 09:48:19 2025 GMT Not After : Oct 21 10:26:19 2025 GMT Subject: CN=97D9542A9AF83B7475497082069073B54196A5FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c5:ea:8f:e5:cd:14:6d:c1:92:63:a7:91:c0: 1c:a3:6a:29:21:f4:c0:95:70:5c:3b:fc:3a:6c:24: b1:ba:f8:e1:5b:5a:11:ed:9c:be:10:45:14:ca:c6: 57:4b:32:49:d2:63:07:b6:63:08:96:02:70:b9:94: 9c:b6:62:48:22:25:0e:fe:7f:b6:3d:a7:60:04:3f: 5c:0f:07:b7:88:ce:38:97:70:9f:b1:bd:03:ff:4f: 34:81:86:7b:8c:2f:a8:3b:79:e0:dd:f0:0e:48:47: 39:f9:67:b3:46:83:a3:78:11:e7:e5:0a:e9:91:d5: 94:b3:c3:89:ce:4d:70:85:00:59:9e:e1:88:5e:7c: b3:4a:7b:b8:1c:47:7e:5b:00:b6:c2:97:a1:32:5e: 9c:e4:15:7a:f7:58:79:08:b1:0e:e1:4c:76:84:43: a3:bc:26:7b:4c:f2:4d:d5:e7:9b:6b:a1:ea:a3:4b: a5:88:e7:7a:b3:a5:c8:c6:b0:76:9e:46:f9:8a:98: 1c:46:5d:76:3e:c3:4c:36:05:38:46:20:0f:08:23: 18:5b:8e:5f:e4:45:71:c3:03:9d:a0:9c:39:9d:49: e9:77:f7:8d:77:0d:86:30:82:c5:31:69:44:40:34: fe:cd:ce:c0:f5:f8:30:3f:df:4e:0d:36:e4:95:b0: 1d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D9:54:2A:9A:F8:3B:74:75:49:70:82:06:90:73:B5:41:96:A5:FF X509v3 Authority Key Identifier: keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:03:3b:aa:91:40:8f:5b:97:4c:d9:d8:9e:bf:4d:fb:d0:b6: 82:0a:74:8d:ab:51:2d:7e:b4:87:63:d7:46:97:18:1c:72:7c: db:97:35:e2:c6:d8:b8:48:92:c3:a9:df:3d:6c:5c:e2:b0:a9: 6a:51:b3:d2:aa:67:c5:42:a2:86:d8:7b:07:a0:1a:85:87:26: 04:8e:8b:d8:26:ab:63:07:2d:f5:f9:27:a7:02:20:4e:23:e8: 1d:a1:6d:6e:a4:91:b0:27:2e:64:9d:af:c1:0b:1e:2d:12:5d: 56:cb:3c:24:e2:55:ef:26:9c:87:6e:ad:e9:76:a7:5c:9b:4b: da:83:6d:57:0e:9a:8b:e9:7e:47:b0:db:8e:75:ef:bf:5b:21: da:c9:f1:3c:b8:46:0c:23:e3:15:5b:ba:ee:0f:f2:83:1f:a0: 09:eb:99:f5:91:ed:5d:a7:54:57:f7:3e:c5:c7:31:d5:00:e3: f9:54:9f:62:03:6e:db:d3:24:54:96:01:19:55:ba:8f:77:4d: 79:5e:ce:6f:d2:25:31:77:3b:e2:ba:87:43:63:bf:81:b4:4e: 69:35:c0:fc:77:30:ca:f5:e7:47:75:df:c8:90:c6:6d:c9:ef: ff:48:0c:b0:a4:89:86:1f:14:84:aa:af:3f:97:8e:7a:1c:15: f8:a4:ad:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUX7xHmDZzSMtHH0Q9pMqAIAAOwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM2RkNCMzFGMkMzM0Y4RTU3MEQzQ0EwMjc1NUJDQzUx QjIzRUEwMTAeFw0yNTEwMjAwOTQ4MTlaFw0yNTEwMjExMDI2MTlaMDMxMTAvBgNV BAMTKDk3RDk1NDJBOUFGODNCNzQ3NTQ5NzA4MjA2OTA3M0I1NDE5NkE1RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSxeqP5c0UbcGSY6eRwByjaikh 9MCVcFw7/DpsJLG6+OFbWhHtnL4QRRTKxldLMknSYwe2YwiWAnC5lJy2YkgiJQ7+ f7Y9p2AEP1wPB7eIzjiXcJ+xvQP/TzSBhnuML6g7eeDd8A5IRzn5Z7NGg6N4Eefl CumR1ZSzw4nOTXCFAFme4YhefLNKe7gcR35bALbCl6EyXpzkFXr3WHkIsQ7hTHaE Q6O8JntM8k3V55troeqjS6WI53qzpcjGsHaeRvmKmBxGXXY+w0w2BThGIA8IIxhb jl/kRXHDA52gnDmdSel39413DYYwgsUxaURANP7NzsD1+DA/304NNuSVsB0TAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUl9lUKpr4O3R1SXCCBpBztUGWpf8wHwYDVR0j BBgwFoAUQ2/LMfLDP45XDTygJ1W8xRsj6gEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJI NGUvMC80MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNkZDQjMxRjJDMzNGOEU1 NzBEM0NBMDI3NTVCQ0M1MUIyM0VBMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJINGUvMC80 MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAAM7qpFAj1uXTNnYnr9N+9C2ggp0jatRLX60h2PXRpcYHHJ825c14sbYuEiS w6nfPWxc4rCpalGz0qpnxUKihth7B6AahYcmBI6L2CarYwct9fknpwIgTiPoHaFt bqSRsCcuZJ2vwQseLRJdVss8JOJV7yach26t6XanXJtL2oNtVw6ai+l+R7DbjnXv v1sh2snxPLhGDCPjFVu67g/ygx+gCeuZ9ZHtXadUV/c+xccx1QDj+VSfYgNu29Mk VJYBGVW6j3dNeV7Ob9IlMXc74rqHQ2O/gbROaTXA/HcwyvXnR3XfyJDGbcnv/0gM sKSJhh8UhKqvP5eOehwV+KSt3A== -----END CERTIFICATE-----Generated at Mon Oct 20 15:15:20 2025 by rpki-client