$ rpki-client -vvf rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft File: 406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft (raw, json) Hash identifier: NFWA3AiS5ii70WNiVokWkLHy72SzN8Ip+E7UgEda1qc= Subject key identifier: B1:C3:FB:6C:98:D3:C1:02:C6:71:B2:F3:54:E8:CA:B3:06:6B:51:C8 Authority key identifier: 40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3 Certificate issuer: /CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3 Certificate serial: 3E34A16123179620B7BC59C6BFD548714A22DB55 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft Manifest number: 02F2 Signing time: Mon 20 Oct 2025 18:27:12 +0000 Manifest this update: Mon 20 Oct 2025 18:22:12 +0000 Manifest next update: Tue 21 Oct 2025 18:56:12 +0000 Files and hashes: 1: 323830343a386566303a323a3a2f34372d3437203d3e20323733343537.roa (hash: dqdT0Z2X2ujGOU5wllrriRCiSwGcK/M1ZPuIhoxu7I0=) 2: 323830343a386566303a3a2f33322d3430203d3e20323733343537.roa (hash: cijZiORTQj8pw+Vial1gPDZ9Wbm7UefB7xwRnVBMG3A=) 3: 406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl (hash: 3kp/mk9pgj6v0Ouofw34/jE155PfHvNxYOvkSP4YBzQ=) 4: 323830343a386566303a343a3a2f34372d3437203d3e20323733343537.roa (hash: SUmLEg8kb6XKx6NKYqf3IeVCbffV6D4xIgJGrq8TI6A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 18:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:34:a1:61:23:17:96:20:b7:bc:59:c6:bf:d5:48:71:4a:22:db:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3 Validity Not Before: Oct 20 18:22:12 2025 GMT Not After : Oct 21 18:56:12 2025 GMT Subject: CN=B1C3FB6C98D3C102C671B2F354E8CAB3066B51C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f9:22:e7:bf:3a:af:7d:8e:2c:48:c1:49:7a: 01:68:fd:8b:bc:67:13:fb:80:13:cc:e9:e8:84:37: 6d:aa:22:3d:44:a5:e0:7c:09:97:f0:74:82:ad:ee: 2c:c6:65:dd:e1:71:2c:ac:3a:ce:12:9a:26:a3:e7: 43:fd:4e:53:ee:66:89:72:dd:9a:e7:ad:ec:f2:8c: bf:3d:c5:82:a1:9b:93:ef:55:ea:62:e1:b6:70:b1: 78:b4:30:e7:5c:8e:df:13:01:0a:67:48:13:35:d7: 4f:c4:72:fd:c0:ef:40:47:4c:16:7d:bf:37:9a:82: c4:42:8c:3a:41:95:7b:c5:92:75:ea:53:39:f6:43: dc:36:57:87:91:9f:89:8b:39:14:cd:18:47:e4:52: 4f:d7:a6:d1:4c:34:1a:73:f8:32:ea:ec:50:af:34: a2:8d:db:8c:d1:8a:cf:17:35:5c:42:1b:61:89:ad: d0:d1:8c:42:1e:a5:60:ef:04:fc:57:2b:1f:ca:9f: a0:54:dd:4b:43:ae:09:f9:32:ae:92:39:42:14:05: 22:71:d4:b9:ba:09:ca:72:3e:5a:1d:1b:d0:ff:d6: 70:d4:89:0b:9b:58:15:dd:64:d9:ec:c9:18:43:2d: 19:b3:76:0c:59:e7:7c:55:03:04:f2:48:10:db:27: 4a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C3:FB:6C:98:D3:C1:02:C6:71:B2:F3:54:E8:CA:B3:06:6B:51:C8 X509v3 Authority Key Identifier: keyid:40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a9:bb:da:9d:a8:d5:47:89:f2:9e:be:77:5e:56:bc:fe:5d: e8:1a:bc:cf:ed:85:f0:eb:ba:7a:8d:35:0b:93:1b:31:b7:a3: b5:4a:af:4c:cc:01:95:3f:e9:95:3e:07:8f:08:0c:6c:4f:d9: cd:05:87:3f:a7:36:b0:2c:69:ee:cb:91:e5:0c:d5:e2:ed:63: b5:36:69:7f:73:e0:2f:86:01:c3:38:b9:f3:9d:51:5e:e5:c3: f1:d6:df:e5:43:0d:22:2c:28:d0:2c:16:ff:c8:8a:98:5b:ef: c4:6f:0b:76:60:d1:2b:57:59:85:de:6c:32:fe:16:15:00:02: 2e:8c:82:23:07:a0:2c:5c:9e:1b:c7:ea:1c:bf:4b:08:97:ab: a0:a0:73:41:79:18:17:fa:df:14:88:b1:21:62:20:67:cb:a5: c7:f8:00:2d:da:9a:cd:df:7c:84:d8:2c:43:1a:6d:ed:f4:6a: 96:3d:58:bc:da:95:00:55:e0:c1:a5:ce:1e:33:28:df:53:33: 23:d8:43:1f:b1:91:4d:80:dd:72:46:ad:bb:f1:f8:dd:81:99: 03:0e:a6:e4:97:a9:87:c5:8e:26:31:c3:bf:e2:5f:e3:33:89: 27:09:24:3e:f4:97:78:39:57:94:27:9e:1b:a2:40:f2:27:9f: d1:fa:4e:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPjShYSMXliC3vFnGv9VIcUoi21UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA2QjAwRDVCNjYwRjZFRUM1Qzg0MTRGQTBGMEI3RkYz RUM1NzZBMzAeFw0yNTEwMjAxODIyMTJaFw0yNTEwMjExODU2MTJaMDMxMTAvBgNV BAMTKEIxQzNGQjZDOThEM0MxMDJDNjcxQjJGMzU0RThDQUIzMDY2QjUxQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk+SLnvzqvfY4sSMFJegFo/Yu8 ZxP7gBPM6eiEN22qIj1EpeB8CZfwdIKt7izGZd3hcSysOs4Smiaj50P9TlPuZoly 3ZrnrezyjL89xYKhm5PvVepi4bZwsXi0MOdcjt8TAQpnSBM110/Ecv3A70BHTBZ9 vzeagsRCjDpBlXvFknXqUzn2Q9w2V4eRn4mLORTNGEfkUk/XptFMNBpz+DLq7FCv NKKN24zRis8XNVxCG2GJrdDRjEIepWDvBPxXKx/Kn6BU3UtDrgn5Mq6SOUIUBSJx 1Lm6CcpyPlodG9D/1nDUiQubWBXdZNnsyRhDLRmzdgxZ53xVAwTySBDbJ0qPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUscP7bJjTwQLGcbLzVOjKswZrUcgwHwYDVR0j BBgwFoAUQGsA1bZg9u7FyEFPoPC3/z7FdqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWRQZnVSRVBUQnR0TXFRb3BUeXRwbmlLaEUzTEhkRnN6YXZEWk1CYzUy VW0vMS80MDZCMDBENUI2NjBGNkVFQzVDODQxNEZBMEYwQjdGRjNFQzU3NkEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwNkIwMEQ1QjY2MEY2RUVD NUM4NDE0RkEwRjBCN0ZGM0VDNTc2QTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWRQZnVSRVBUQnR0TXFRb3BUeXRwbmlLaEUzTEhkRnN6YXZEWk1CYzUyVW0vMS80 MDZCMDBENUI2NjBGNkVFQzVDODQxNEZBMEYwQjdGRjNFQzU3NkEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZqm72p2o1UeJ8p6+d15WvP5d6Bq8z+2F8Ou6eo01C5MbMbejtUqvTMwBlT/p lT4HjwgMbE/ZzQWHP6c2sCxp7suR5QzV4u1jtTZpf3PgL4YBwzi5851RXuXD8dbf 5UMNIiwo0CwW/8iKmFvvxG8LdmDRK1dZhd5sMv4WFQACLoyCIwegLFyeG8fqHL9L CJeroKBzQXkYF/rfFIixIWIgZ8ulx/gALdqazd98hNgsQxpt7fRqlj1YvNqVAFXg waXOHjMo31MzI9hDH7GRTYDdckatu/H43YGZAw6m5Jeph8WOJjHDv+Jf4zOJJwkk PvSXeDlXlCeeG6JA8ief0fpOXw== -----END CERTIFICATE-----Generated at Tue Oct 21 02:37:07 2025 by rpki-client