$ rpki-client -vvf rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft File: FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft (raw, json) Hash identifier: LXNwJccLcGt7SBrAJvWh7zf8TUsQein4vGSuW6JE7Po= Subject key identifier: 0E:D8:F4:56:44:32:FE:96:67:95:2D:A9:5C:C3:9D:59:62:F8:15:FD Authority key identifier: FA:A2:0D:01:76:A8:E0:99:3E:B6:3C:7F:51:07:16:3B:BE:5D:BA:8F Certificate issuer: /CN=FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F Certificate serial: 3CCFD6A413F9AA0349A5D30EDF0318E12DA88A16 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft Manifest number: 43 Signing time: Mon 20 Oct 2025 04:40:18 +0000 Manifest this update: Mon 20 Oct 2025 04:35:18 +0000 Manifest next update: Tue 21 Oct 2025 08:19:18 +0000 Files and hashes: 1: FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl (hash: mfiaF0QyKLAHV4/0unmJkQkRUzCzxTpLMLwYmUyP5nM=) 2: 323830343a323837383a3a2f33322d313238203d3e20323633393633.roa (hash: hpg9sOEi3xaCO9v17zpfUf72FMO/U8MEML8fvgpIA8Q=) 3: 3133382e3231392e3232302e302f32322d3332203d3e20323633393633.roa (hash: dgQenF0SOCgMjKxMC4O4DFcfxi1LaXIDVtj0og24Gxc=) 4: 3137302e3234362e3136382e302f32322d3332203d3e20323633393633.roa (hash: 3hBRIGCUqb3DIjYAKZm9OcITGyCs0TuU0X+4zHfoRVQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:cf:d6:a4:13:f9:aa:03:49:a5:d3:0e:df:03:18:e1:2d:a8:8a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F Validity Not Before: Oct 20 04:35:18 2025 GMT Not After : Oct 21 08:19:18 2025 GMT Subject: CN=0ED8F4564432FE9667952DA95CC39D5962F815FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:71:3c:22:9c:3d:c8:84:72:2a:63:4d:a6: e5:5a:bf:09:6c:f0:60:5b:97:bf:6d:31:f2:af:f5: f5:bf:9b:42:e4:87:de:c7:45:11:ae:77:69:67:c3: 16:17:b9:2a:b4:5c:1c:cf:9b:ee:69:1b:dd:26:6d: 64:71:0e:a2:9a:b8:1d:7d:33:b1:7c:7f:8a:c5:3a: c0:9b:71:c3:34:a3:9b:69:11:1f:2f:95:d9:a5:6c: d8:30:f9:85:c6:71:43:b9:e8:b7:43:0b:54:1e:95: 07:bf:a8:ea:79:cd:8e:76:2b:0d:c8:50:5d:24:68: 34:ec:7e:6d:b7:9a:51:2a:e8:2b:3d:bb:13:ba:39: f3:e6:c6:76:43:21:90:8d:0f:0f:98:47:e2:03:6a: 04:67:f0:7e:a1:c0:a0:ad:00:af:5f:bd:75:bc:91: 39:84:4b:24:2d:9c:d0:66:f5:d5:54:cd:63:48:1f: c1:ea:ac:07:32:66:66:6f:a4:3c:86:c6:77:e5:3f: c1:3d:90:09:9a:d0:a3:b9:6c:c7:9b:de:f2:c7:e0: b8:af:c6:56:dc:d4:ba:41:07:9e:cf:ef:30:3a:6c: 21:7c:de:d0:31:f8:2d:f6:29:07:c4:e3:53:92:0a: 28:2f:0d:b8:81:6b:40:a8:59:54:de:3c:d6:f9:99: 43:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D8:F4:56:44:32:FE:96:67:95:2D:A9:5C:C3:9D:59:62:F8:15:FD X509v3 Authority Key Identifier: keyid:FA:A2:0D:01:76:A8:E0:99:3E:B6:3C:7F:51:07:16:3B:BE:5D:BA:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:a6:5b:d2:9d:f9:96:dd:14:5d:6f:f8:39:a8:0e:be:41:b1: f2:8e:59:2e:1e:fb:e0:3d:d1:63:95:bb:10:f2:88:01:e3:ed: b8:23:74:7d:5d:32:c8:3c:de:79:4b:83:c0:62:68:30:3c:c6: 81:a1:38:5b:64:3e:b1:1c:db:4d:21:22:5e:5a:b1:0d:9e:a7: 46:91:a9:38:04:a6:21:ef:7f:a5:ec:cd:ad:41:2f:9a:0a:1c: ef:3b:e8:b8:a0:16:c2:f5:28:f3:05:5a:a7:90:0a:2f:ad:1a: 18:74:d0:81:03:ca:56:98:98:88:1f:24:ca:1b:dd:98:50:60: c0:07:08:13:5d:cd:8d:82:1f:c5:fa:ae:61:e1:71:de:39:97: 78:e5:97:8c:a9:5e:b6:ec:ee:d3:98:36:32:6c:ac:89:91:62: 2f:d8:91:40:ee:73:19:a0:27:62:9a:eb:8b:69:4c:03:36:77: f8:f0:26:ce:fa:05:c5:d7:36:63:04:b6:dc:eb:97:01:5d:d5: 2f:50:c4:2c:10:4a:98:d0:0c:3a:91:4d:db:40:9c:ae:ca:7a: 3e:1c:03:27:8c:35:22:3e:a9:cd:ff:33:0a:46:6a:4d:6d:96: ea:61:3a:1c:8f:17:26:aa:0b:4e:96:89:38:ab:02:d5:7b:48: 0f:b6:fc:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPM/WpBP5qgNJpdMO3wMY4S2oihYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFBMjBEMDE3NkE4RTA5OTNFQjYzQzdGNTEwNzE2M0JC RTVEQkE4RjAeFw0yNTEwMjAwNDM1MThaFw0yNTEwMjEwODE5MThaMDMxMTAvBgNV BAMTKDBFRDhGNDU2NDQzMkZFOTY2Nzk1MkRBOTVDQzM5RDU5NjJGODE1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzA3E8Ipw9yIRyKmNNpuVavwls 8GBbl79tMfKv9fW/m0Lkh97HRRGud2lnwxYXuSq0XBzPm+5pG90mbWRxDqKauB19 M7F8f4rFOsCbccM0o5tpER8vldmlbNgw+YXGcUO56LdDC1QelQe/qOp5zY52Kw3I UF0kaDTsfm23mlEq6Cs9uxO6OfPmxnZDIZCNDw+YR+IDagRn8H6hwKCtAK9fvXW8 kTmESyQtnNBm9dVUzWNIH8HqrAcyZmZvpDyGxnflP8E9kAma0KO5bMeb3vLH4Liv xlbc1LpBB57P7zA6bCF83tAx+C32KQfE41OSCigvDbiBa0CoWVTePNb5mUMlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDtj0VkQy/pZnlS2pXMOdWWL4Ff0wHwYDVR0j BBgwFoAU+qINAXao4Jk+tjx/UQcWO75duo8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2FKQW5ENVBOS3B4S3hxOWRRSkdmMm5RTko1TXBUbnF3NVA3YTFYWHhI ZkcvMC9GQUEyMEQwMTc2QThFMDk5M0VCNjNDN0Y1MTA3MTYzQkJFNURCQThGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBQTIwRDAxNzZBOEUwOTkz RUI2M0M3RjUxMDcxNjNCQkU1REJBOEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2FKQW5ENVBOS3B4S3hxOWRRSkdmMm5RTko1TXBUbnF3NVA3YTFYWHhIZkcvMC9G QUEyMEQwMTc2QThFMDk5M0VCNjNDN0Y1MTA3MTYzQkJFNURCQThGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiKZb0p35lt0UXW/4OagOvkGx8o5ZLh774D3RY5W7EPKIAePtuCN0fV0yyDze eUuDwGJoMDzGgaE4W2Q+sRzbTSEiXlqxDZ6nRpGpOASmIe9/pezNrUEvmgoc7zvo uKAWwvUo8wVap5AKL60aGHTQgQPKVpiYiB8kyhvdmFBgwAcIE13NjYIfxfquYeFx 3jmXeOWXjKletuzu05g2MmysiZFiL9iRQO5zGaAnYprri2lMAzZ3+PAmzvoFxdc2 YwS23OuXAV3VL1DELBBKmNAMOpFN20Ccrsp6PhwDJ4w1Ij6pzf8zCkZqTW2W6mE6 HI8XJqoLTpaJOKsC1XtID7b8dg== -----END CERTIFICATE-----Generated at Mon Oct 20 20:01:40 2025 by rpki-client