$ rpki-client -vvf rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft File: A1E6749C09E9E32D11C15678D45C1B936D525291.mft (raw, json) Hash identifier: gyPJEhNdoUKWo4ZUN+jPdqPQg8IrL2gnL9Gfzv4mvjg= Subject key identifier: 43:57:3C:83:40:3D:F1:B9:8E:DF:CF:05:57:27:B3:DE:C2:2A:0F:B8 Authority key identifier: A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91 Certificate issuer: /CN=A1E6749C09E9E32D11C15678D45C1B936D525291 Certificate serial: 7A65CE698C802239F83231C6C11F5ABF72F3B92B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft Manifest number: 02CA Signing time: Mon 20 Oct 2025 07:35:20 +0000 Manifest this update: Mon 20 Oct 2025 07:30:20 +0000 Manifest next update: Tue 21 Oct 2025 10:40:20 +0000 Files and hashes: 1: A1E6749C09E9E32D11C15678D45C1B936D525291.crl (hash: 1SgkwQyXIrNLoqNSzsjJTo7tLxv5LDCERhH+saURb9A=) 2: 34352e3138302e3235322e302f32322d3234203d3e20323633323530.roa (hash: ORMMmfGrpHZXNdiWY4NkF0L84UkSb+i4s3EBcHiCyW8=) 3: 3137372e3233342e3136302e302f31392d3234203d3e20323633323530.roa (hash: wlPnqD7qa81i/u0GABiCUaJGTeP2DvD2cJaBWTo4WcI=) 4: 323830343a313763343a3a2f33322d3438203d3e20323633323530.roa (hash: CYHN9rK1skgLKugPUzgZGszwHwGA3WFLBGl49tYzvoY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:65:ce:69:8c:80:22:39:f8:32:31:c6:c1:1f:5a:bf:72:f3:b9:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1E6749C09E9E32D11C15678D45C1B936D525291 Validity Not Before: Oct 20 07:30:20 2025 GMT Not After : Oct 21 10:40:20 2025 GMT Subject: CN=43573C83403DF1B98EDFCF055727B3DEC22A0FB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e9:30:e2:48:76:48:c3:d9:b3:fc:8c:c6:20: ad:ab:90:d0:04:cf:ea:6c:7e:67:b9:13:48:b2:1e: 69:4f:18:61:13:3a:64:c8:7f:8d:00:9c:4b:7e:a6: e0:3c:21:e4:71:e2:87:31:da:2d:85:76:e0:3e:fa: f2:08:2c:65:53:32:05:73:bb:4d:05:23:77:b7:39: 07:fa:40:01:fd:4d:de:a3:0c:e3:9e:8c:b5:58:c7: c3:a3:f6:24:a3:af:92:7e:1c:38:95:c8:9b:bf:d1: f9:2e:39:75:d4:2a:59:61:b5:12:50:cf:c2:87:72: 67:f9:fe:50:4c:7d:0e:f6:6a:4c:07:88:25:bf:2c: db:c5:af:27:66:2c:44:82:12:88:00:3c:d3:9b:74: ad:c6:34:59:4e:a3:00:a8:10:a9:9e:41:89:31:c1: 96:1b:8b:6f:a2:95:73:cd:f1:48:01:38:24:13:d2: d7:82:25:c6:8b:bc:c1:07:cf:c4:b0:01:77:d4:07: 5d:a1:45:73:2b:3d:87:2b:3e:2c:5a:7f:6b:5c:5a: 21:ea:31:df:11:c0:f3:27:74:ff:92:eb:92:dd:4d: 92:cf:95:e9:3c:01:02:0e:de:68:0b:9c:bc:2b:16: 15:42:7c:d0:1b:19:88:05:04:9a:93:d1:69:13:c7: 1b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:57:3C:83:40:3D:F1:B9:8E:DF:CF:05:57:27:B3:DE:C2:2A:0F:B8 X509v3 Authority Key Identifier: keyid:A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:1e:41:70:41:cb:eb:4c:76:6f:7e:1e:11:28:c4:1a:5b:28: d1:d0:d3:f2:6c:17:ef:5f:01:4b:4e:2c:6c:74:29:f2:5a:33: 2c:9f:fa:0f:3b:84:8e:e2:ba:07:3b:06:c5:07:86:3b:bb:11: c6:28:83:a6:7a:ee:a9:a0:fd:2e:d5:c6:fc:76:98:0f:35:53: 88:a6:e6:8a:26:c4:54:f3:ba:40:32:fe:0e:84:45:6e:90:bc: 4d:46:06:6c:0c:ac:8f:89:c5:64:42:db:ef:67:f7:8e:0b:b3: 72:8a:68:1c:3e:ac:f0:63:e7:50:37:be:ae:6d:0e:c7:8a:7f: f4:12:9b:8a:bc:14:d0:b7:fa:01:f9:be:99:65:4b:bb:9a:b7: 21:44:0a:87:ea:ce:97:2e:be:d6:d5:1f:47:5d:fa:cb:83:6e: a7:83:07:a6:11:f4:9a:bd:5b:bf:b7:de:e2:b6:fe:a7:ee:cf: 93:84:a3:4b:bf:09:7c:47:fd:8d:ac:35:3a:ac:ad:2e:97:e6: 9e:f7:3b:11:85:8c:d7:5a:c6:8c:4a:6b:c2:36:6a:d1:44:7c: 55:00:cd:47:fa:18:12:49:6a:62:ff:c7:c7:4d:d6:53:b1:db: 30:e2:38:8f:94:84:fd:f7:b2:a0:7e:ed:07:1b:b6:ec:cc:69: 32:05:13:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUemXOaYyAIjn4MjHGwR9av3LzuSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFNjc0OUMwOUU5RTMyRDExQzE1Njc4RDQ1QzFCOTM2 RDUyNTI5MTAeFw0yNTEwMjAwNzMwMjBaFw0yNTEwMjExMDQwMjBaMDMxMTAvBgNV BAMTKDQzNTczQzgzNDAzREYxQjk4RURGQ0YwNTU3MjdCM0RFQzIyQTBGQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6TDiSHZIw9mz/IzGIK2rkNAE z+psfme5E0iyHmlPGGETOmTIf40AnEt+puA8IeRx4ocx2i2FduA++vIILGVTMgVz u00FI3e3OQf6QAH9Td6jDOOejLVYx8Oj9iSjr5J+HDiVyJu/0fkuOXXUKllhtRJQ z8KHcmf5/lBMfQ72akwHiCW/LNvFrydmLESCEogAPNObdK3GNFlOowCoEKmeQYkx wZYbi2+ilXPN8UgBOCQT0teCJcaLvMEHz8SwAXfUB12hRXMrPYcrPixaf2tcWiHq Md8RwPMndP+S65LdTZLPlek8AQIO3mgLnLwrFhVCfNAbGYgFBJqT0WkTxxsLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQ1c8g0A98bmO388FVyez3sIqD7gwHwYDVR0j BBgwFoAUoeZ0nAnp4y0RwVZ41Fwbk21SUpEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFlkMmlKOW5VMnRoU1ZRb2dwQ1o2ZkphZGFnRGpHOUFjczlZdFc4Y05B UFgvMC9BMUU2NzQ5QzA5RTlFMzJEMTFDMTU2NzhENDVDMUI5MzZENTI1MjkxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExRTY3NDlDMDlFOUUzMkQx MUMxNTY3OEQ0NUMxQjkzNkQ1MjUyOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFlkMmlKOW5VMnRoU1ZRb2dwQ1o2ZkphZGFnRGpHOUFjczlZdFc4Y05BUFgvMC9B MUU2NzQ5QzA5RTlFMzJEMTFDMTU2NzhENDVDMUI5MzZENTI1MjkxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApR5BcEHL60x2b34eESjEGlso0dDT8mwX718BS04sbHQp8lozLJ/6DzuEjuK6 BzsGxQeGO7sRxiiDpnruqaD9LtXG/HaYDzVTiKbmiibEVPO6QDL+DoRFbpC8TUYG bAysj4nFZELb72f3jguzcopoHD6s8GPnUDe+rm0Ox4p/9BKbirwU0Lf6Afm+mWVL u5q3IUQKh+rOly6+1tUfR136y4Nup4MHphH0mr1bv7fe4rb+p+7Pk4SjS78JfEf9 jaw1OqytLpfmnvc7EYWM11rGjEprwjZq0UR8VQDNR/oYEklqYv/Hx03WU7HbMOI4 j5SE/feyoH7tBxu27MxpMgUTjQ== -----END CERTIFICATE-----Generated at Mon Oct 20 10:13:50 2025 by rpki-client