$ rpki-client -vvf rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/03D890B77B1AF14678B0086207AFAF22FA681661.mft File: 03D890B77B1AF14678B0086207AFAF22FA681661.mft (raw, json) Hash identifier: aOC15COXK7WuKR+sU3ltWOc+UrZCSkyUVZdZnVctQkQ= Subject key identifier: BB:0D:0C:12:1A:5B:F5:28:82:17:93:0A:E2:90:B5:35:2E:7C:22:5E Authority key identifier: 03:D8:90:B7:7B:1A:F1:46:78:B0:08:62:07:AF:AF:22:FA:68:16:61 Certificate issuer: /CN=03D890B77B1AF14678B0086207AFAF22FA681661 Certificate serial: 656126200AEA3EF71EDB34D0D6E476D23A03D3F8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D890B77B1AF14678B0086207AFAF22FA681661.cer Subject info access: rsync://rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/03D890B77B1AF14678B0086207AFAF22FA681661.mft Manifest number: 2C Signing time: Mon 20 Oct 2025 10:00:47 +0000 Manifest this update: Mon 20 Oct 2025 09:55:47 +0000 Manifest next update: Tue 21 Oct 2025 12:13:47 +0000 Files and hashes: 1: 323830343a353939633a3a2f33322d3334203d3e20323638373133.roa (hash: aSvQ8aMZAU3axI5LUJJL4kfMlM8q3L2yBCzc7DZyg54=) 2: 34352e3137302e32342e302f32322d3234203d3e20323638373133.roa (hash: I2AcO2n/VhiexYBqpfc1/gvvAOg2mjqpJ6Jeg8KVLLg=) 3: 03D890B77B1AF14678B0086207AFAF22FA681661.crl (hash: U2EwxE/V3LhPrGlEvFOsxV76aLiVBpWl+NwAq8OLskE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/03D890B77B1AF14678B0086207AFAF22FA681661.crl rsync://rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/03D890B77B1AF14678B0086207AFAF22FA681661.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D890B77B1AF14678B0086207AFAF22FA681661.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:61:26:20:0a:ea:3e:f7:1e:db:34:d0:d6:e4:76:d2:3a:03:d3:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03D890B77B1AF14678B0086207AFAF22FA681661 Validity Not Before: Oct 20 09:55:47 2025 GMT Not After : Oct 21 12:13:47 2025 GMT Subject: CN=BB0D0C121A5BF5288217930AE290B5352E7C225E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3b:a4:b7:34:58:4e:e8:bc:0d:71:bc:e6:5b: 95:b6:89:18:49:88:b1:a2:83:58:3c:6d:88:1c:f7: 30:0c:37:bb:37:00:d0:3e:c7:5b:50:35:52:80:9a: 17:1b:e1:d5:dc:04:43:e8:3d:7c:10:f7:95:86:23: 4e:3c:ba:1f:97:b2:b0:c0:be:5a:3c:cb:39:ec:8a: 2d:c7:e5:5c:84:9c:c2:b5:d7:a1:48:14:0f:06:e0: b6:2c:94:7b:b9:ae:44:ec:8a:26:08:77:40:03:2b: af:a8:33:f6:29:39:c4:28:11:cf:81:c0:10:cb:e9: 6c:0c:cd:98:aa:dd:36:81:d9:7c:cd:a4:b9:e0:54: 2f:1b:12:33:8a:54:fe:21:8f:f2:16:1f:1a:f4:01: e3:a3:2c:fe:53:da:59:77:0f:43:00:81:f9:86:92: 1b:b5:86:4e:06:8b:3c:0e:e7:26:70:37:23:bf:38: 00:30:06:1e:79:d7:1a:40:81:d6:eb:b1:db:06:5e: 7c:d2:93:77:c9:72:60:ce:ef:0a:bc:d0:f4:0f:51: 8c:6b:84:6f:f8:5e:b7:dd:f7:dc:e9:ad:bd:28:01: 45:11:29:a2:65:b4:28:85:d8:62:8b:6a:6f:ea:bb: 35:5f:e7:54:e0:38:a0:4c:27:f2:36:96:08:32:71: 2d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0D:0C:12:1A:5B:F5:28:82:17:93:0A:E2:90:B5:35:2E:7C:22:5E X509v3 Authority Key Identifier: keyid:03:D8:90:B7:7B:1A:F1:46:78:B0:08:62:07:AF:AF:22:FA:68:16:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/03D890B77B1AF14678B0086207AFAF22FA681661.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D890B77B1AF14678B0086207AFAF22FA681661.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/03D890B77B1AF14678B0086207AFAF22FA681661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7c:d5:b8:45:db:af:be:26:81:d4:43:b3:0b:1e:2f:4e:57: ad:62:bd:58:a6:a1:9d:cd:d0:2d:e5:c3:54:3b:26:85:78:32: 7f:a8:02:1b:f8:c6:91:53:41:89:07:9a:ad:3f:75:62:54:bf: ec:5f:dd:c1:39:08:74:f0:31:d6:ee:8c:f7:67:3b:f4:7c:03: b4:3a:c7:2d:df:8f:b9:82:bf:a5:15:6a:8a:5a:6f:24:9d:41: b4:e9:d0:2a:df:09:74:37:aa:cb:bf:b8:ba:96:46:54:88:f8: c8:b9:b9:ce:81:8e:9d:83:2e:62:11:ac:3f:c4:2c:c3:e1:1b: 5d:be:52:3c:98:9d:a7:82:e5:fc:97:b0:ba:b0:b5:7c:9a:1b: 2a:fa:5d:54:28:4f:0f:cc:15:9a:dc:46:5a:80:33:c6:95:4a: 5b:b6:42:86:4f:56:6a:35:34:0e:d7:ee:75:92:27:cf:cd:bd: 34:e5:f9:98:bb:86:b8:eb:17:aa:b6:4e:c5:d0:13:3a:cc:2e: bc:4f:98:ae:21:83:bd:64:6c:12:e2:e8:a6:4f:e6:d7:3f:e8: cf:0a:0c:e8:82:4e:94:f1:e7:b2:b9:f6:7a:c3:5e:ed:39:11: 2a:9c:9c:ce:e5:4d:8a:9f:6e:e1:ab:83:13:7f:d9:7a:b5:b8: 2b:0d:c9:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZWEmIArqPvce2zTQ1uR20joD0/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNEODkwQjc3QjFBRjE0Njc4QjAwODYyMDdBRkFGMjJG QTY4MTY2MTAeFw0yNTEwMjAwOTU1NDdaFw0yNTEwMjExMjEzNDdaMDMxMTAvBgNV BAMTKEJCMEQwQzEyMUE1QkY1Mjg4MjE3OTMwQUUyOTBCNTM1MkU3QzIyNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDO6S3NFhO6LwNcbzmW5W2iRhJ iLGig1g8bYgc9zAMN7s3ANA+x1tQNVKAmhcb4dXcBEPoPXwQ95WGI048uh+XsrDA vlo8yznsii3H5VyEnMK116FIFA8G4LYslHu5rkTsiiYId0ADK6+oM/YpOcQoEc+B wBDL6WwMzZiq3TaB2XzNpLngVC8bEjOKVP4hj/IWHxr0AeOjLP5T2ll3D0MAgfmG khu1hk4GizwO5yZwNyO/OAAwBh551xpAgdbrsdsGXnzSk3fJcmDO7wq80PQPUYxr hG/4Xrfd99zprb0oAUURKaJltCiF2GKLam/quzVf51TgOKBMJ/I2lggycS0BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuw0MEhpb9SiCF5MK4pC1NS58Il4wHwYDVR0j BBgwFoAUA9iQt3sa8UZ4sAhiB6+vIvpoFmEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1NObTEzQkZ0dnQzRFpkS3Jwb1ZMRXkzUVZwdXc1Z2ZEN0g3SHdxcGFY SDcvMC8wM0Q4OTBCNzdCMUFGMTQ2NzhCMDA4NjIwN0FGQUYyMkZBNjgxNjYxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzRDg5MEI3N0IxQUYxNDY3 OEIwMDg2MjA3QUZBRjIyRkE2ODE2NjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1NObTEzQkZ0dnQzRFpkS3Jwb1ZMRXkzUVZwdXc1Z2ZEN0g3SHdxcGFYSDcvMC8w M0Q4OTBCNzdCMUFGMTQ2NzhCMDA4NjIwN0FGQUYyMkZBNjgxNjYxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH3zVuEXbr74mgdRDswseL05XrWK9WKahnc3QLeXDVDsmhXgyf6gCG/jGkVNB iQearT91YlS/7F/dwTkIdPAx1u6M92c79HwDtDrHLd+PuYK/pRVqilpvJJ1BtOnQ Kt8JdDeqy7+4upZGVIj4yLm5zoGOnYMuYhGsP8Qsw+EbXb5SPJidp4Ll/JewurC1 fJobKvpdVChPD8wVmtxGWoAzxpVKW7ZChk9WajU0DtfudZInz829NOX5mLuGuOsX qrZOxdATOswuvE+YriGDvWRsEuLopk/m1z/ozwoM6IJOlPHnsrn2esNe7TkRKpyc zuVNip9u4auDE3/ZerW4Kw3JWg== -----END CERTIFICATE-----Generated at Mon Oct 20 12:23:58 2025 by rpki-client