$ rpki-client -vvf rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft File: 643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft (raw, json) Hash identifier: 2ZdSuRrNwJzGZZXNDGyclHfV0CBooawiKz5PytuG3MM= Subject key identifier: 91:49:68:14:FC:BA:EE:D7:F2:DA:F5:4F:BE:B4:8B:1F:41:65:82:C0 Authority key identifier: 64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC Certificate issuer: /CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC Certificate serial: 6F2DAACB2086CDCE043E6E76C13E58E9B364FEF9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer Subject info access: rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft Manifest number: 01C8 Signing time: Mon 20 Oct 2025 16:07:05 +0000 Manifest this update: Mon 20 Oct 2025 16:02:05 +0000 Manifest next update: Tue 21 Oct 2025 18:18:05 +0000 Files and hashes: 1: 643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl (hash: 0gAqO3AhoLXcFPVt45RDXykvddBDN8Nae+OQ8GlYGxk=) 2: 3136342e3136332e33322e302f32322d3234203d3e20323635393538.roa (hash: 0v/IQuZRt8fOahBYOamSIWRCnGJvUKoedCirRCLNEWE=) 3: 323830343a343036633a3a2f33322d3334203d3e20323635393538.roa (hash: nwZpfdiD9lmHVEfGr7y7ft3lumKfAxBvAzwQfB72Avg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 18:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2d:aa:cb:20:86:cd:ce:04:3e:6e:76:c1:3e:58:e9:b3:64:fe:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC Validity Not Before: Oct 20 16:02:05 2025 GMT Not After : Oct 21 18:18:05 2025 GMT Subject: CN=91496814FCBAEED7F2DAF54FBEB48B1F416582C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:43:65:86:98:d2:8a:c0:95:ef:fd:4b:0b:9b: b7:2e:e5:c9:f9:a8:1c:31:5b:8d:3d:f5:47:de:5d: 10:98:bc:a8:f2:ea:d5:6b:2b:20:b9:d4:92:1e:31: ae:d0:e6:3d:a3:df:2e:20:42:49:0b:04:c7:51:8d: 1e:ec:0f:d8:0b:7f:a9:50:a2:71:59:cb:50:62:3c: b8:cb:9b:f6:97:5e:17:e0:2b:74:f0:28:e3:c1:96: 90:72:c1:65:ab:9b:71:f1:a8:33:f2:d9:8b:e1:b7: 51:97:10:2e:f8:fe:d8:f9:05:45:6d:3a:a5:d3:e9: 29:bc:27:db:32:c5:eb:c2:7b:d9:40:9e:c4:9b:f1: 6b:ea:d5:94:9d:b4:82:e2:17:b2:06:2d:70:d3:4e: 8f:f8:97:b6:47:f4:8e:31:a1:7a:ae:32:c3:96:90: 2e:e0:96:32:58:b4:c5:14:46:9f:c1:af:eb:8b:17: ef:4f:e7:8a:ce:b6:78:a1:b5:a7:98:3a:97:eb:67: 08:ae:1f:c1:0b:34:6e:ee:30:95:e7:cd:ff:60:94: 0e:9a:a3:af:f8:95:98:46:b9:1e:da:60:d0:d5:76: 69:13:d6:db:e5:1b:25:fd:95:ab:97:d0:7f:45:09: ef:5c:f0:cb:bd:42:02:3c:ae:74:2e:b2:59:ae:aa: ab:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:49:68:14:FC:BA:EE:D7:F2:DA:F5:4F:BE:B4:8B:1F:41:65:82:C0 X509v3 Authority Key Identifier: keyid:64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:9a:b9:98:d6:36:06:d9:5f:83:f1:69:b3:6f:dd:95:fc:a6: 84:d2:62:4c:be:a9:50:71:48:83:a4:dd:51:7c:09:63:87:39: 8e:2c:60:04:d0:7a:55:51:b5:ed:5b:1b:bb:2d:fc:ba:ab:cc: 8f:71:09:5e:82:12:c0:15:19:08:bc:ad:a1:63:3c:68:06:b3: b7:f8:87:d7:e4:ca:9d:36:92:05:3a:65:09:00:d1:31:36:6d: 15:f6:b7:7b:0f:31:a9:ed:b1:0c:e9:da:e3:b7:44:51:9d:09: ea:15:0d:56:ed:8b:ef:5b:22:f5:92:a0:fb:bb:cc:89:0b:93: de:b6:8f:c2:6a:cb:34:6f:59:80:b0:ce:2e:52:4a:13:27:85: 3c:99:f3:b8:ff:17:9d:57:1d:04:4c:6b:28:dd:9e:5b:12:6b: 6b:76:c2:65:8f:a7:5d:50:26:b5:e8:1d:10:43:6b:29:12:a8: 89:40:a1:e0:e6:30:0e:f9:32:96:98:91:20:4c:e7:62:71:19: c1:b4:9b:67:95:cf:0c:df:51:f5:2b:f1:d5:a8:79:99:c9:06: 6b:76:10:9d:42:d8:4e:64:c7:bc:7a:98:92:7b:7d:18:08:aa: 5a:71:b1:85:60:a2:01:6a:3e:5c:8e:3c:e1:68:48:aa:03:02: e2:7e:63:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUby2qyyCGzc4EPm52wT5Y6bNk/vkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzRkI0RThFRkIyOUY3M0IwMTc3QTBEMUFENUM2MzY0 RjQ0QjJBQzAeFw0yNTEwMjAxNjAyMDVaFw0yNTEwMjExODE4MDVaMDMxMTAvBgNV BAMTKDkxNDk2ODE0RkNCQUVFRDdGMkRBRjU0RkJFQjQ4QjFGNDE2NTgyQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuQ2WGmNKKwJXv/UsLm7cu5cn5 qBwxW4099UfeXRCYvKjy6tVrKyC51JIeMa7Q5j2j3y4gQkkLBMdRjR7sD9gLf6lQ onFZy1BiPLjLm/aXXhfgK3TwKOPBlpBywWWrm3HxqDPy2Yvht1GXEC74/tj5BUVt OqXT6Sm8J9syxevCe9lAnsSb8Wvq1ZSdtILiF7IGLXDTTo/4l7ZH9I4xoXquMsOW kC7gljJYtMUURp/Br+uLF+9P54rOtnihtaeYOpfrZwiuH8ELNG7uMJXnzf9glA6a o6/4lZhGuR7aYNDVdmkT1tvlGyX9lauX0H9FCe9c8Mu9QgI8rnQuslmuqqv9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkUloFPy67tfy2vVPvrSLH0FlgsAwHwYDVR0j BBgwFoAUZD+06O+yn3OwF3oNGtXGNk9EsqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR21vVG5VUVV6SHJBTXh4M0ttQ1FBaEZacW9WSktlOFlGS1RFUnkxU0Nj dDcvMC82NDNGQjRFOEVGQjI5RjczQjAxNzdBMEQxQUQ1QzYzNjRGNDRCMkFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0M0ZCNEU4RUZCMjlGNzNC MDE3N0EwRDFBRDVDNjM2NEY0NEIyQUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R21vVG5VUVV6SHJBTXh4M0ttQ1FBaEZacW9WSktlOFlGS1RFUnkxU0NjdDcvMC82 NDNGQjRFOEVGQjI5RjczQjAxNzdBMEQxQUQ1QzYzNjRGNDRCMkFDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQpq5mNY2Btlfg/Fps2/dlfymhNJiTL6pUHFIg6TdUXwJY4c5jixgBNB6VVG1 7Vsbuy38uqvMj3EJXoISwBUZCLytoWM8aAazt/iH1+TKnTaSBTplCQDRMTZtFfa3 ew8xqe2xDOna47dEUZ0J6hUNVu2L71si9ZKg+7vMiQuT3raPwmrLNG9ZgLDOLlJK EyeFPJnzuP8XnVcdBExrKN2eWxJra3bCZY+nXVAmtegdEENrKRKoiUCh4OYwDvky lpiRIEznYnEZwbSbZ5XPDN9R9Svx1ah5mckGa3YQnULYTmTHvHqYknt9GAiqWnGx hWCiAWo+XI484WhIqgMC4n5j7w== -----END CERTIFICATE-----Generated at Mon Oct 20 18:27:26 2025 by rpki-client