$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft File: EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft (raw, json) Hash identifier: tdZV/cd9Dl3Lrdq1LMwX2adjK2fQy0tL6YZiTfqztoo= Subject key identifier: 85:4C:60:5F:4D:51:4E:0C:7E:46:45:BB:FB:5E:58:DA:94:03:FC:E3 Authority key identifier: EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73 Certificate issuer: /CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73 Certificate serial: 3AB6B5D851B3FB1E10D593957EA39482C9F1BC9A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer Subject info access: rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft Manifest number: 02ED Signing time: Mon 20 Oct 2025 12:10:00 +0000 Manifest this update: Mon 20 Oct 2025 12:05:00 +0000 Manifest next update: Tue 21 Oct 2025 15:53:00 +0000 Files and hashes: 1: EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl (hash: YdI4hClkCgLguiaEZ+GUOyE6YhUhC8xIfSBa+LHk8Uc=) 2: 323830343a6438303a3a2f33322d3438203d3e203532363335.roa (hash: h5ZbShRyf6a9djvBfVUYZNDwI63lUNghsgSzyARdb0k=) 3: 3137372e3132352e32302e302f32322d3234203d3e203532363335.roa (hash: zB3RAYBJ5ds+DR9vGHFVJDE/Fhcry/mu8n6ADfs/cdI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 15:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b6:b5:d8:51:b3:fb:1e:10:d5:93:95:7e:a3:94:82:c9:f1:bc:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73 Validity Not Before: Oct 20 12:05:00 2025 GMT Not After : Oct 21 15:53:00 2025 GMT Subject: CN=854C605F4D514E0C7E4645BBFB5E58DA9403FCE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4f:9a:7e:72:61:de:92:22:87:f3:8f:22:e2: cf:c8:6c:84:42:45:9e:39:df:af:d7:35:49:d0:7a: a2:18:86:c9:82:31:9a:31:6c:8e:04:8a:3a:38:0d: 2f:56:43:97:0b:14:21:db:00:8a:ef:74:22:95:eb: c6:75:5b:5c:9d:9b:62:ab:8f:5a:01:a6:aa:da:89: 1d:98:20:9e:ae:25:63:7f:23:ce:ea:53:1c:5e:09: 6c:ea:b9:56:e8:d4:42:df:3a:f2:13:81:bc:c7:39: 4f:18:a7:9a:26:5b:b1:fb:4d:da:52:f3:b9:d9:4e: dc:31:88:fe:71:ce:98:d3:db:6f:c5:d3:df:35:2e: b0:7e:17:fe:bb:47:8b:47:5f:f1:66:b7:b5:27:eb: 24:c6:99:55:57:bb:c8:a1:99:f1:0d:19:5e:6b:63: c1:d0:de:1e:de:de:72:48:eb:97:f2:7d:2a:25:2e: d3:fa:77:bd:ca:2c:af:37:44:1c:d4:75:54:fe:bc: a7:e8:12:ea:d6:d4:25:9c:31:96:73:91:fa:89:a0: f8:fd:9c:c9:42:fe:64:47:ec:5b:b4:4f:8f:c7:61: 67:4e:f5:92:1f:09:2c:a0:f6:9d:28:9b:ec:4f:69: 46:f3:c0:69:b7:27:1f:c4:b3:32:e9:2d:d4:09:41: ff:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4C:60:5F:4D:51:4E:0C:7E:46:45:BB:FB:5E:58:DA:94:03:FC:E3 X509v3 Authority Key Identifier: keyid:EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ac:da:d4:28:40:e8:b0:99:f9:c9:d7:11:45:b3:1a:1a:13: 78:a8:aa:57:9d:eb:66:bf:07:2e:6b:e2:04:a2:1c:06:44:6e: 6c:8b:8c:97:e4:bd:87:07:34:bd:8f:8e:30:c0:04:38:d3:16: f0:7b:b2:af:2b:49:a1:7b:58:37:85:d8:83:b3:54:a9:46:4f: b2:78:5b:d0:28:c1:ec:e0:d3:39:f2:62:c3:6d:c6:2f:93:0b: fe:f3:02:f1:6c:5a:cd:ba:32:25:4c:a8:64:98:f9:19:52:44: 12:cc:d6:18:5b:90:88:81:22:fe:53:c4:02:e6:c6:60:cb:0a: 7e:fe:fe:b9:ec:37:dd:80:5c:22:f5:11:24:1f:c8:61:3a:b3: 85:ab:88:34:db:f8:bb:db:76:0f:55:be:5e:c8:a0:96:7f:42: db:fb:b3:70:f7:91:61:61:09:08:6b:32:17:30:1f:d4:ca:86: f5:17:da:c1:65:c4:f4:dc:6c:a9:2f:85:ea:11:99:08:20:64: 26:d2:8c:37:aa:a4:86:1b:50:7c:e8:f1:f4:dc:01:b6:95:c9: ec:ff:2f:0c:e2:b3:76:96:9b:df:75:2e:52:76:7e:5d:90:95: 5e:64:fd:15:10:58:09:73:17:4b:7d:01:cf:0a:c7:b3:95:a1: 37:0d:0c:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOra12FGz+x4Q1ZOVfqOUgsnxvJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMwODY1NTgyMTU4NUEwQTVCN0Q2QTBFNTJGQzc0RUY1 MUY5MEU3MzAeFw0yNTEwMjAxMjA1MDBaFw0yNTEwMjExNTUzMDBaMDMxMTAvBgNV BAMTKDg1NEM2MDVGNEQ1MTRFMEM3RTQ2NDVCQkZCNUU1OERBOTQwM0ZDRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvT5p+cmHekiKH848i4s/IbIRC RZ4536/XNUnQeqIYhsmCMZoxbI4Eijo4DS9WQ5cLFCHbAIrvdCKV68Z1W1ydm2Kr j1oBpqraiR2YIJ6uJWN/I87qUxxeCWzquVbo1ELfOvITgbzHOU8Yp5omW7H7TdpS 87nZTtwxiP5xzpjT22/F0981LrB+F/67R4tHX/Fmt7Un6yTGmVVXu8ihmfENGV5r Y8HQ3h7e3nJI65fyfSolLtP6d73KLK83RBzUdVT+vKfoEurW1CWcMZZzkfqJoPj9 nMlC/mRH7Fu0T4/HYWdO9ZIfCSyg9p0om+xPaUbzwGm3Jx/EszLpLdQJQf/TAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhUxgX01RTgx+RkW7+15Y2pQD/OMwHwYDVR0j BBgwFoAU7AhlWCFYWgpbfWoOUvx071H5DnMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3RKR2p2cjZ1ZVZxU1NiRnV2Z1NIbnpORXlSMlZrSkh3TWN1OVRBOW1h bUUvMS9FQzA4NjU1ODIxNTg1QTBBNUI3RDZBMEU1MkZDNzRFRjUxRjkwRTczLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDMDg2NTU4MjE1ODVBMEE1 QjdENkEwRTUyRkM3NEVGNTFGOTBFNzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3RKR2p2cjZ1ZVZxU1NiRnV2Z1NIbnpORXlSMlZrSkh3TWN1OVRBOW1hbUUvMS9F QzA4NjU1ODIxNTg1QTBBNUI3RDZBMEU1MkZDNzRFRjUxRjkwRTczLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOKza1ChA6LCZ+cnXEUWzGhoTeKiqV53rZr8HLmviBKIcBkRubIuMl+S9hwc0 vY+OMMAEONMW8HuyrytJoXtYN4XYg7NUqUZPsnhb0CjB7ODTOfJiw23GL5ML/vMC 8WxazboyJUyoZJj5GVJEEszWGFuQiIEi/lPEAubGYMsKfv7+uew33YBcIvURJB/I YTqzhauINNv4u9t2D1W+Xsigln9C2/uzcPeRYWEJCGsyFzAf1MqG9RfawWXE9Nxs qS+F6hGZCCBkJtKMN6qkhhtQfOjx9NwBtpXJ7P8vDOKzdpab33UuUnZ+XZCVXmT9 FRBYCXMXS30BzwrHs5WhNw0MDQ== -----END CERTIFICATE-----Generated at Mon Oct 20 19:30:36 2025 by rpki-client