$ rpki-client -vvf rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft File: 114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft (raw, json) Hash identifier: BQBr62OaeQaPmbWujsq/UixnlklgakT76qjxIzjCH7U= Subject key identifier: 48:36:40:1B:CF:61:AA:6E:30:DC:C9:B3:5E:59:72:78:BB:5A:8E:30 Authority key identifier: 11:4C:34:E7:02:D6:B3:C7:8D:B6:AD:0C:8B:6A:12:A4:F6:C9:62:F2 Certificate issuer: /CN=114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2 Certificate serial: 1B6D1F07CBA51C63A50A7CDDE3EBA5C0908A1285 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft Manifest number: 0148 Signing time: Mon 20 Oct 2025 05:52:47 +0000 Manifest this update: Mon 20 Oct 2025 05:47:47 +0000 Manifest next update: Tue 21 Oct 2025 09:30:47 +0000 Files and hashes: 1: 323830343a383534633a3a2f33322d313238203d3e20323732353730.roa (hash: /jjNTYdHgGu54/KsbvfYxBSxmVomJOu/7haHE2jkFo8=) 2: 114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.crl (hash: +G/e5Jy8PeUDXVsxewkCbTkQtbuxRPaqJyIx2CrLf6g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.crl rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:6d:1f:07:cb:a5:1c:63:a5:0a:7c:dd:e3:eb:a5:c0:90:8a:12:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2 Validity Not Before: Oct 20 05:47:47 2025 GMT Not After : Oct 21 09:30:47 2025 GMT Subject: CN=4836401BCF61AA6E30DCC9B35E597278BB5A8E30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8b:fb:95:a4:47:1b:39:79:b2:f1:63:a7:18: 2b:1b:18:9f:32:b1:71:29:54:e1:e2:99:fb:7f:4f: ca:2a:50:c6:fc:92:6f:dc:f5:e2:36:9a:4b:0e:0c: 34:fb:a7:72:86:67:26:bb:4d:5a:f7:67:4b:5a:16: 97:b5:00:c2:b0:37:09:fc:0e:95:97:3e:58:11:4d: 3f:14:ba:a0:4b:8c:20:70:4c:01:a7:ab:cd:36:af: 31:06:f5:a6:7b:2c:d3:4f:dc:b9:c8:ec:52:57:a3: de:49:1a:ed:d6:9e:51:16:0a:48:60:f2:32:d6:66: 8b:dd:41:d7:ab:50:d6:a4:7c:fb:67:aa:49:26:0c: 68:e6:f1:e7:70:ac:93:1a:0a:e0:87:4b:58:9a:d9: 05:fa:68:36:d5:3f:2a:19:c4:a7:f1:c8:c0:7c:13: 71:c8:ea:21:a2:03:5a:7a:fa:a3:81:08:0d:c1:05: f8:1c:bc:9c:84:15:d5:5f:ee:17:af:a8:14:4c:80: b1:87:f5:56:44:f1:9e:a4:e3:3e:a7:53:6e:fd:43: ac:15:1f:c3:4f:0a:99:50:47:63:bf:87:0e:3f:4e: b0:64:2d:61:70:26:e5:b4:5c:03:a4:c8:25:a8:b8: 16:d3:03:46:87:56:08:75:56:cc:7a:a3:20:be:43: eb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:36:40:1B:CF:61:AA:6E:30:DC:C9:B3:5E:59:72:78:BB:5A:8E:30 X509v3 Authority Key Identifier: keyid:11:4C:34:E7:02:D6:B3:C7:8D:B6:AD:0C:8B:6A:12:A4:F6:C9:62:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7e:1a:32:72:10:dd:e6:ee:4a:67:39:71:41:d9:37:64:19: 5c:e1:03:70:66:ef:c1:85:d4:7e:22:04:c9:ec:f2:68:05:fd: e9:c5:83:93:84:60:ac:ec:cb:d4:03:73:03:f6:a6:f2:6e:57: 2b:d9:cd:a3:b2:a2:5c:0d:a2:ac:8e:51:45:cd:3d:14:17:7c: 6b:89:1e:9f:0a:9e:06:04:85:1f:29:5c:46:69:18:14:19:f3: 99:ba:1c:21:e8:ea:f5:3d:d6:4b:7e:34:c5:d7:70:88:a0:7a: 3a:2e:bb:dd:34:a2:91:f6:a6:66:f9:ac:af:e4:0c:f3:5c:fd: 23:01:50:c1:0a:1e:69:df:5a:05:4c:fc:99:94:2e:6c:b5:89: 0c:a6:1f:b9:61:ad:26:f8:6d:d2:b6:42:8e:54:7c:27:56:57: 44:6d:8c:2a:68:25:6a:98:0b:b7:38:1b:36:77:b6:38:92:2e: 9e:4b:86:3d:53:76:59:75:2b:0e:89:81:a2:2d:43:20:6d:4f: 99:e6:85:00:37:a2:10:e7:cb:82:6d:13:75:ef:a6:77:8e:23: 53:d9:f4:5f:6b:5e:35:d8:18:76:57:95:0f:4c:ea:0c:8c:cb: 5a:d5:71:ea:cc:ae:b2:a5:56:4b:6a:dd:df:c4:a6:87:7e:ea: f5:81:9e:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUG20fB8ulHGOlCnzd4+ulwJCKEoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0QzM0RTcwMkQ2QjNDNzhEQjZBRDBDOEI2QTEyQTRG NkM5NjJGMjAeFw0yNTEwMjAwNTQ3NDdaFw0yNTEwMjEwOTMwNDdaMDMxMTAvBgNV BAMTKDQ4MzY0MDFCQ0Y2MUFBNkUzMERDQzlCMzVFNTk3Mjc4QkI1QThFMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAi/uVpEcbOXmy8WOnGCsbGJ8y sXEpVOHimft/T8oqUMb8km/c9eI2mksODDT7p3KGZya7TVr3Z0taFpe1AMKwNwn8 DpWXPlgRTT8UuqBLjCBwTAGnq802rzEG9aZ7LNNP3LnI7FJXo95JGu3WnlEWCkhg 8jLWZovdQderUNakfPtnqkkmDGjm8edwrJMaCuCHS1ia2QX6aDbVPyoZxKfxyMB8 E3HI6iGiA1p6+qOBCA3BBfgcvJyEFdVf7hevqBRMgLGH9VZE8Z6k4z6nU279Q6wV H8NPCplQR2O/hw4/TrBkLWFwJuW0XAOkyCWouBbTA0aHVgh1Vsx6oyC+Q+uNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSDZAG89hqm4w3MmzXllyeLtajjAwHwYDVR0j BBgwFoAUEUw05wLWs8eNtq0Mi2oSpPbJYvIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1FWWGY0aHhHRmNtWXR5NEg2NjhlV3JxdWdnOFZya0Qzc0RBSDlxcFBv eFgvMS8xMTRDMzRFNzAyRDZCM0M3OERCNkFEMEM4QjZBMTJBNEY2Qzk2MkYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExNEMzNEU3MDJENkIzQzc4 REI2QUQwQzhCNkExMkE0RjZDOTYyRjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1FWWGY0aHhHRmNtWXR5NEg2NjhlV3JxdWdnOFZya0Qzc0RBSDlxcFBveFgvMS8x MTRDMzRFNzAyRDZCM0M3OERCNkFEMEM4QjZBMTJBNEY2Qzk2MkYyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADH4aMnIQ3ebuSmc5cUHZN2QZXOEDcGbvwYXUfiIEyezyaAX96cWDk4RgrOzL 1ANzA/am8m5XK9nNo7KiXA2irI5RRc09FBd8a4kenwqeBgSFHylcRmkYFBnzmboc Iejq9T3WS340xddwiKB6Oi673TSikfamZvmsr+QM81z9IwFQwQoead9aBUz8mZQu bLWJDKYfuWGtJvht0rZCjlR8J1ZXRG2MKmglapgLtzgbNne2OJIunkuGPVN2WXUr DomBoi1DIG1PmeaFADeiEOfLgm0Tde+md44jU9n0X2teNdgYdleVD0zqDIzLWtVx 6syusqVWS2rd38Smh37q9YGeVQ== -----END CERTIFICATE-----Generated at Mon Oct 20 09:30:07 2025 by rpki-client