$ rpki-client -vvf rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.mft File: 331A5DDD5E7A3EE354C08E8A7D87875342BC753F.mft (raw, json) Hash identifier: VQYrSR7vJZAyP4Z/t1gG6kpEkHqZsTLUGEwvxbAEtNU= Subject key identifier: 94:8C:76:AD:A8:BA:84:BC:1A:0B:17:14:C9:A0:02:4A:59:86:33:E2 Authority key identifier: 33:1A:5D:DD:5E:7A:3E:E3:54:C0:8E:8A:7D:87:87:53:42:BC:75:3F Certificate issuer: /CN=331A5DDD5E7A3EE354C08E8A7D87875342BC753F Certificate serial: 1E6AFC7157EB1ECBA267F1D0131603E264A1660C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.mft Manifest number: 38 Signing time: Mon 20 Oct 2025 06:50:21 +0000 Manifest this update: Mon 20 Oct 2025 06:45:21 +0000 Manifest next update: Tue 21 Oct 2025 09:36:21 +0000 Files and hashes: 1: 331A5DDD5E7A3EE354C08E8A7D87875342BC753F.crl (hash: 8gnkVfYuj1VgElpEbMEmxH+GP/y0UML7TsAR1MOu+Bk=) 2: 34352e3136302e3232382e302f32322d3332203d3e20323730373234.roa (hash: apiMZOTuoCPu0nI8Ljt6nzTzBjuneeSIxNjEV+NCOQo=) 3: 3138392e35312e33322e302f32322d3332203d3e20323730373234.roa (hash: HeqzkCCYidKrGemD/zJHMBvKf1m7SRTqFqAe5JoJ50s=) 4: 323830343a373036343a3a2f33322d313238203d3e20323730373234.roa (hash: FWXKs+yzXm3tJ1PLuYtQFD/8hznD8kqFJwXAg/Hl87E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.crl rsync://rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:6a:fc:71:57:eb:1e:cb:a2:67:f1:d0:13:16:03:e2:64:a1:66:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331A5DDD5E7A3EE354C08E8A7D87875342BC753F Validity Not Before: Oct 20 06:45:21 2025 GMT Not After : Oct 21 09:36:21 2025 GMT Subject: CN=948C76ADA8BA84BC1A0B1714C9A0024A598633E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:06:fb:63:52:de:e7:68:c2:05:34:d5:54:8b: f1:48:f2:6b:ea:3b:81:2b:01:19:2c:ea:48:f2:af: 96:52:ba:d7:ab:af:3f:b8:c3:ba:ef:90:42:b7:ca: 47:bc:5b:1d:67:3b:26:ba:e9:b5:f2:65:b3:86:aa: 60:0f:ee:4a:c1:c9:af:47:c4:ec:98:03:61:42:71: ed:e0:79:87:2e:0f:18:17:3c:b9:8b:09:54:10:c1: 4a:b4:8c:0d:40:c8:83:b9:68:0f:14:3d:0a:8d:7e: 5f:b9:87:b9:12:ce:99:4d:c2:01:a9:01:e2:e8:3a: da:b7:f7:61:99:14:a5:4d:b6:24:02:66:70:db:07: d5:c3:97:87:8f:6e:39:2d:7c:50:fb:e4:ca:6b:2d: 1b:5e:4f:35:80:e4:81:2c:80:39:86:86:eb:af:35: 1f:49:8e:5e:cc:ae:64:64:96:3b:f5:33:f9:b9:07: 21:15:d5:cf:d2:0e:76:e4:b5:82:72:44:c1:d2:c3: 91:98:5e:5a:91:ef:1c:cd:3e:c3:f2:8e:46:f2:da: 6e:38:9d:be:3e:80:cf:11:eb:f6:8f:e0:19:6b:ba: 8b:cd:43:6b:f6:a5:6a:e1:1e:e4:70:24:fc:10:38: ca:c7:7a:9f:b2:01:e1:8e:1e:1c:1a:1b:1e:a7:d8: 22:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8C:76:AD:A8:BA:84:BC:1A:0B:17:14:C9:A0:02:4A:59:86:33:E2 X509v3 Authority Key Identifier: keyid:33:1A:5D:DD:5E:7A:3E:E3:54:C0:8E:8A:7D:87:87:53:42:BC:75:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn2Xu3sL61WwS5V4i8BsQR3E4rZmgJyoBZnKn1h4DATt/0/331A5DDD5E7A3EE354C08E8A7D87875342BC753F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:78:c3:c6:5b:b1:20:6b:e2:c3:5d:53:34:92:62:d2:f3:09: ad:ce:3c:0c:ca:5b:96:ab:27:37:f6:70:c1:2c:22:a0:63:52: a5:75:9c:fc:8c:4b:f7:10:bd:6b:fa:56:ab:03:81:cc:e5:a3: 6a:ef:e2:2d:3f:a5:97:23:a7:2d:77:02:99:78:70:40:b4:f7: cf:40:3a:cc:d0:3c:bb:45:c1:d0:1a:f1:4e:ec:7f:6d:24:a6: 4b:9f:3b:3e:8b:96:56:df:14:29:fb:b7:e1:f0:6a:50:72:cf: 1c:02:b3:af:2b:2d:a1:e9:35:f7:0c:39:39:a7:9a:05:78:81: 80:6b:4a:1a:0c:0f:0f:da:f8:95:67:cb:b8:7d:c0:f7:69:76: 9c:9e:0c:67:56:50:11:11:60:af:34:50:71:11:5d:e2:49:e7: 4a:07:30:95:04:29:31:b1:a5:18:b1:a2:7d:07:63:fc:88:fa: 24:46:59:8a:58:04:eb:5b:45:59:a1:f0:34:3a:f6:3a:ed:87: a2:4c:b0:71:62:a8:d4:22:bf:a6:6d:db:7e:50:c7:47:0c:99: 3c:e6:a5:3a:ff:b7:46:55:74:2f:e8:54:af:fe:0d:d5:e4:aa: 64:b2:2f:03:31:f3:c5:ee:db:88:3d:78:eb:25:3c:6a:46:b1: d7:00:13:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHmr8cVfrHsuiZ/HQExYD4mShZgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxQTVEREQ1RTdBM0VFMzU0QzA4RThBN0Q4Nzg3NTM0 MkJDNzUzRjAeFw0yNTEwMjAwNjQ1MjFaFw0yNTEwMjEwOTM2MjFaMDMxMTAvBgNV BAMTKDk0OEM3NkFEQThCQTg0QkMxQTBCMTcxNEM5QTAwMjRBNTk4NjMzRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXBvtjUt7naMIFNNVUi/FI8mvq O4ErARks6kjyr5ZSuterrz+4w7rvkEK3yke8Wx1nOya66bXyZbOGqmAP7krBya9H xOyYA2FCce3geYcuDxgXPLmLCVQQwUq0jA1AyIO5aA8UPQqNfl+5h7kSzplNwgGp AeLoOtq392GZFKVNtiQCZnDbB9XDl4ePbjktfFD75MprLRteTzWA5IEsgDmGhuuv NR9Jjl7MrmRkljv1M/m5ByEV1c/SDnbktYJyRMHSw5GYXlqR7xzNPsPyjkby2m44 nb4+gM8R6/aP4BlruovNQ2v2pWrhHuRwJPwQOMrHep+yAeGOHhwaGx6n2CIhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlIx2rai6hLwaCxcUyaACSlmGM+IwHwYDVR0j BBgwFoAUMxpd3V56PuNUwI6KfYeHU0K8dT8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRG4yWHUzc0w2MVd3UzVWNGk4QnNRUjNFNHJabWdKeW9CWm5LbjFoNERB VHQvMC8zMzFBNURERDVFN0EzRUUzNTRDMDhFOEE3RDg3ODc1MzQyQkM3NTNGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzMUE1RERENUU3QTNFRTM1 NEMwOEU4QTdEODc4NzUzNDJCQzc1M0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RG4yWHUzc0w2MVd3UzVWNGk4QnNRUjNFNHJabWdKeW9CWm5LbjFoNERBVHQvMC8z MzFBNURERDVFN0EzRUUzNTRDMDhFOEE3RDg3ODc1MzQyQkM3NTNGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIHjDxluxIGviw11TNJJi0vMJrc48DMpblqsnN/ZwwSwioGNSpXWc/IxL9xC9 a/pWqwOBzOWjau/iLT+llyOnLXcCmXhwQLT3z0A6zNA8u0XB0BrxTux/bSSmS587 PouWVt8UKfu34fBqUHLPHAKzrystoek19ww5OaeaBXiBgGtKGgwPD9r4lWfLuH3A 92l2nJ4MZ1ZQERFgrzRQcRFd4knnSgcwlQQpMbGlGLGifQdj/Ij6JEZZilgE61tF WaHwNDr2Ou2HokywcWKo1CK/pm3bflDHRwyZPOalOv+3RlV0L+hUr/4N1eSqZLIv AzHzxe7biD146yU8akax1wATgQ== -----END CERTIFICATE-----Generated at Mon Oct 20 22:14:39 2025 by rpki-client